blueteamingtools

A VirusTotal CLI tool made using VirusTotal v3 API and python

A Python script that automates static analysis, yara analysis and reverse-engineering on Windows (exe, sys, dll) binaries!

This is a python tool to scan active connections locally in Windows and provide some information about the IPs you are connected to and let you know if there is any malicious connections, according to AbuseIPDB

🐇 The Artillery Honeypot is an advanced active deception framework, high-interaction honeypot suite and open-source blue team tool designed to protect operating systems or networks through multiple methods.

Mirage generates realistic synthetic PCAP captures alongside a complete set of detection artifacts — Sigma rules, Suricata rules, Zeek logs, and correlated Windows event logs. Every packet is labeled with MITRE ATT&CK metadata, every attack event has a corresponding endpoint log entry, and every rule file references the real IPs and TTPs.