Popular repositories

1. sandfly-entropyscan sandfly-entropyscan Public

   Entropy scanner for Linux to detect packed or encrypted binaries related to malware. Finds malicious files and Linux processes and gives output with cryptographic hashes.

   Go 132 19

2. sandfly-processdecloak sandfly-processdecloak Public

   Sandfly Linux Stealth Rootkit Decloaking Utility

   Go 86 14

3. sandfly-setup sandfly-setup Public

   Sandfly Security Agentless Compromise and Intrusion Detection System For Linux

   Shell 64 10

4. sandfly-ssh-security-scanner sandfly-ssh-security-scanner Public

   Scripts to check for security issues with SSH keys and authorized_keys files on Linux and other Unix-like operating systems.

   Shell 18 1

5. sandfly-file-decloak sandfly-file-decloak Public

   Decloak Linux stealth rootkits hiding data with this simple memory mapped IO investigation tool.

   Python 17 2

6. sandflies-preview sandflies-preview Public

   Sandfly modules for emerging threats and beta testing.

   3