BinaryDefense/goatrider

Stars
137
Rank 266,121 (Top 6 %)
Language
Python
License
Other
Created almost 9 years ago
Updated almost 6 years ago

BinaryDefense/goatrider

BinaryDefense

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

GoatRider is a simple tool that will dynamically pull down Artillery Threat Intelligence Feeds, TOR, AlienVaults OTX, and the Alexa top 1 million websites and do a comparison to a hostname file or IP file.

GoatRider is a simple tool for doing a comparison of IP addresses or hostnames to BDS Artillery Feeds, OTX, Alexa Top 1M, and TOR.

INSTRUCTIONS: Pass a file that has a list of hostnames or IP addresses and wait for the output to see if there are any matches Written by: Dave Kennedy (@HackingDave) from Binary Defense (@BinaryDefense)

Usage: python goatrider.py <hostnames_or_ips.txt>

log4j-honeypot-flask

Internal network honeypot for detecting if an attacker or insider threat scans your network for log4j CVE-2021-44228

auto-ossec

YaraMemoryScanner

Simple PowerShell script to enable process scanning with Yara.

beacon-fronting

A simple command line program to help defender test their detections for network beacon patterns and domain fronting

ThreatHuntingJupyterNotebooks

Jupyter Notebook

BinaryDefense.FSharp.Analyzers

Security analyzers for the FSharp (F#) language

IcedDecrypt

IcedID Decryption Tool

GhidraRustDependenciesExtractor

Ghidra script for extracting embedded Rust crate dependency strings from a compiled Rust binary

JsonWrapper

A Myriad plugin for generating statically typed lossless wrappers around JToken given a schema.

ARC-Labs-ML-Starter-Kit

Jupyter Notebook

glyph-hunter

Python Flask web app that checks names for potential homoglyph characteristics and reports results in json format

HiddenTaskHunter

ARC-Labs-Hunting-Queries

decloaker

A script that attempts to decloak symbiote activity, and some other LD_PRELOAD activity

mining-pools

List of mining pool domain names for use in detection logic

OTX-Microsoft-Logic-App

Microsoft Logic App for consuming Open Threat Exchange (OTX) data in Microsoft Sentinel / Log Analytics Workspace

borat-rat-plugin-emulators

.Net Libraries (DLLs) re-written from scratch that emulate the functionality of Borat RAT for defese testing purposes

RPCFirewall-LogParsers