Interesting Git repos of the week:
Detection:
* https://github.com/MBCProject/mbc-markdown - a catalogue of misbehaviour
* https://github.com/ig-labs/velociraptor-skills - AI powered Velociraptor (npub1duz…6qna) DFIR skills 🤖
Bugs:
* https://github.com/watchtowrlabs/watchTowr-vs-Citrix-Netscaler-CVE-2026-88772 - [@index](https://labs.watchtowr.com/ ) publishes their traditional artefact generator
Exploitation:
* https://github.com/seb3773/zelf - pack your ELFs for xmas
* https://github.com/anthropics/oss-scanner - Anthropic's code scanner complete with 🤖
* https://github.com/AmbitSecurity/jshound - mapping single page JavaScript apps 🤖
* https://github.com/mlcsec/ResetSpy - enumerate MSFT's password reset portal
* https://github.com/Cloud-Architekt/EntraOps - map your EntraOps
* https://github.com/JusticeRage/freedomfighting - Ivan Kwiatkowski (npub1x3t…05rq) helps you clean up after you've made a mess
* https://github.com/infodox/tsh-sctp - TinySHell over SCTP
* https://github.com/infodox/Palioxis - a convenient little kill switch for Linux
* https://github.com/IncSTK/rathole - a well behaved RAT
* https://github.com/chokepoint/Jynx2 - an LD_PRELOAD rootkit PoC
Hard hacks:
* https://github.com/f0rw4rd/oida - [@f0rw4rd2](https://mastodon.social/@f0rw4rd2 ) helps you fuzz your processes
* https://github.com/yslxotwod/wifisting - the best kind of abusive radio show
* https://github.com/fullspectrumdev/RancidCrisco - panic at the disco
Data:
Hardening:
* https://codeberg.org/Sp1l/CertPortal - managing ACME with [@brnrd](https://bsd.network/@brnrd )
Data:
* https://github.com/johnsonjh/hexdump-zip - hexdump your zip files
#security, #research, #code
Tim (Wadhwa-)Brown :donor:
npub1fe…a8w07
2026-10-16 10:52:06 UTC
Author Public Key
npub1feda6kwfz0r3vxaferk7alqjpe00gce0gz8n9dfk2zd4kf8q2ngs6a8w07Seen on
wss://relay.momostr.pinkPublished at
2026-10-16 10:52:06 UTCEvent JSON
{
"id": "c0e0e5b2f1c2dccf4b795d8e47e9572ab02a6f4df72b02be9cc397febfbb29c9",
"pubkey": "4e5bdd59c913c7161ba9c8edeefc120e5ef4632f408f32b536509b5b24e054d1",
"created_at": 1792147926,
"kind": 1,
"tags": [
[
"proxy",
"https://infosec.exchange/@timb_machine/117450206479732011",
"web"
],
[
"p",
"6f04ca9b712a467b2e562f660f1f7f24812e0ef07530a99b511b0fe4d528443e"
],
[
"t",
"code"
],
[
"p",
"6d4d876e3aa3d6a00db0ed8a8e79724f9a90f422dab5a932d394293766a377ca"
],
[
"p",
"3457413e2edc314778a0fc5564bfe3bb41065c7f83861297c73b94169b3fe3a9"
],
[
"t",
"security"
],
[
"t",
"research"
],
[
"proxy",
"https://infosec.exchange/users/timb_machine/statuses/117450206479732011",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/timb_machine/statuses/117450206479732011",
"pink.momostr"
],
[
"-"
]
],
"content": "Interesting Git repos of the week:\n\nDetection:\n\n* https://github.com/MBCProject/mbc-markdown - a catalogue of misbehaviour\n* https://github.com/ig-labs/velociraptor-skills - AI powered nostr:npub1duzv4xm39fr8ktjk9anq78mlyjqjurhsw5c2nx63rv87f4fggslqem6qna DFIR skills 🤖\n\nBugs:\n\n* https://github.com/watchtowrlabs/watchTowr-vs-Citrix-Netscaler-CVE-2026-88772 - [@index](https://labs.watchtowr.com/ ) publishes their traditional artefact generator\n\nExploitation:\n\n* https://github.com/seb3773/zelf - pack your ELFs for xmas\n* https://github.com/anthropics/oss-scanner - Anthropic's code scanner complete with 🤖\n* https://github.com/AmbitSecurity/jshound - mapping single page JavaScript apps 🤖\n* https://github.com/mlcsec/ResetSpy - enumerate MSFT's password reset portal\n* https://github.com/Cloud-Architekt/EntraOps - map your EntraOps\n* https://github.com/JusticeRage/freedomfighting - nostr:npub1x3t5z03wmsc5w79ql32kf0lrhdqsvhrlswrp99788w2pdxeluw5sxu05rq helps you clean up after you've made a mess\n* https://github.com/infodox/tsh-sctp - TinySHell over SCTP\n* https://github.com/infodox/Palioxis - a convenient little kill switch for Linux\n* https://github.com/IncSTK/rathole - a well behaved RAT\n* https://github.com/chokepoint/Jynx2 - an LD_PRELOAD rootkit PoC\n\nHard hacks:\n\n* https://github.com/f0rw4rd/oida - [@f0rw4rd2](https://mastodon.social/@f0rw4rd2 ) helps you fuzz your processes\n* https://github.com/yslxotwod/wifisting - the best kind of abusive radio show\n* https://github.com/fullspectrumdev/RancidCrisco - panic at the disco\nData:\n\nHardening:\n\n* https://codeberg.org/Sp1l/CertPortal - managing ACME with [@brnrd](https://bsd.network/@brnrd )\n\nData:\n\n* https://github.com/johnsonjh/hexdump-zip - hexdump your zip files\n\n#security, #research, #code",
"sig": "1de5638b1ca858b67c0583d9607eda33c4ead37eb43cf7abf9716ad63443ba1afc5b4e517a15ec307b60a21015158c82c5afda002f6168580ee60f50300c4ab7"
}