ultros/dfar

Digital Forensics Artifact Reference

Artificial Intelligence

• [Python] daenum - When run on a Debian system, this script will enumerate all daemons and provide an AI generated response of a description of each.

Encryption

• [Python] DotNetNuker - Decrypts DotNetNuke (DNN) Encrypted Passwords
• [C#] SimpleEncryptor - Encrypt and decrypt files using AES 256 CBC linux-x64 net6.0 Release

Digital Forensics

• [Python] get_notepad - Dump the Microsoft Notepad tab cache to json.
• PoC: [Python] pbrExtractor - Plugin-Based Registry Extractor

Anti-Forensics

• [Python] shkval - Shred a file remotely by sending a forged packet checking it against packets logged in dmesg (no socket binding).
• [Python] sprung - Reboot the operating system when a thumb drive is removed.
• [C#] SimpleWiper - Simple Data Wiping Applications in C# linux-x64 net6.0 Release

Cybersecurity

• [Python] wpnuker - Wordpress enumerator and brute forcer
• [Python] harbor - Concurrent port scanner
  • [Python] harbor screenshot - Concurrent webpage snapshot/screencapture tool
• [Python] simpleshell - A simple way to bypass Microsoft Defender with a powershell reverse shell and a simple interface to interact with the remote system.
• [Python] virustotal scripts - Various VirusTotal scripts.

Enumeration

• [Python] fuzzbuster - Concurrent directory buster, parameter and query fuzzer
  • [Python] subdomainfuzzbuster - Concurrent subdomain and virtual host enumerator
• [Python] simba - SMB tool to list service names (shares), upload file, and download file

Active Directory

• [C#] LDAP Tools - LDAP Tool GUI written in C#.
• [Python] ldaplister - Misc. common LDAP operations.

Honeypots, Lures, and Phishing

• [Python] sshoney - An SSH Honeypot for capturing logon credentials.
• [Python] ftpdhoney - An FTP Honeypot for capturing logon credentials.
• [Python] spider_trap - A web crawler trap that can set some spiders into an infinite loop.

Authentication Systems

• [Python] rascal - Concurrent Webpage Login Brute Forcer (POST and Basic Authentication)

Post Exploitation

• [Python] lingather - Linux Post-Exploitation Enumeration Tool

Miscellaneous Tools

• [C#] Lnkerator - Generate Malicious LNK files for SMB Relay Attack

CTF

• VulnLabs.com

Mobile Devices

• [Python] Huawei m615 messageMaster Carver
• [Python] Android Email Extractor
• [Python] iDevice exif Data Parser