2 repositorios
Running standalone binaries on endpoints to gather forensic information in air-gapped environments.
Distinct from Offline System Hosting: Focuses on the active collection of host state rather than the hosting of a tool suite.
Explore 2 awesome GitHub repositories matching operating systems & systems programming · Offline Host Collection. Refine with filters or upvote what's useful.
Velociraptor is a digital forensics and incident response platform, endpoint detection and response system, and visibility tool. It provides a query engine and remote forensic collector used to hunt for indicators of compromise and perform triage across a fleet of hosts. The system is distinguished by its specialized query language for interrogating host state and parsing binary files. It features a notebook environment that combines markdown documentation with executable query cells to standardize investigative workflows and enable collaborative reporting. The platform covers a wide range o
Runs a standalone binary on target endpoints to gather forensic information without a network connection.
WinPwn is a Windows penetration testing framework designed for conducting internal security assessments and privilege escalation. It functions as a suite for Active Directory security auditing, credential extraction, and the execution of privilege escalation scripts. The toolset enables the automation of SMB relay attacks to intercept and reuse authentication hashes. It provides specialized capabilities for retrieving passwords and hashes from system memory, registries, and browsers using obfuscated techniques to avoid detection. The framework covers broad capability areas including domain a
Runs standalone binaries on isolated endpoints to perform security operations in air-gapped environments.