> ## Documentation Index
> Fetch the complete documentation index at: https://witchking.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# TasoX Security Tools

> Open-source tools for offensive security research, DFIR, and malware analysis.

![TasoX Security Tools](https://mintcdn.com/witchking/hHySpVKTVogoRdcG/images/witch-king.jpg?fit=max\&auto=format\&n=hHySpVKTVogoRdcG\&q=85\&s=7ceb68a65930477cdcf417a7fa1c5041)

## Welcome

A collection of open-source tools for **offensive security research**, **digital forensics & incident response (DFIR)**, and **malware analysis** — built for red teamers, threat hunters, and SOC analysts.

> [!WARNING]
>
> These tools are intended for **authorized security research, penetration testing, and red team operations only**. Always obtain proper written authorization before using any of these tools in a target environment. Unauthorized use may violate local, national, or international laws.

***

## DFIR & Malware Analysis

Tools for incident response, forensic artifact extraction, and malware triage.

> [card] [dmpHunter](https://witchking.mintlify.site/tools/dmphunter/overview.md)
>
> Hunt indicators inside Windows **mini/full** process dumps — memory maps, handles, threads, modules, YARA, strings, and network heuristics.
>
> **Language:** Python · **Platform:** Windows / Linux / macOS

> [card] [accdu\_inspector](https://witchking.mintlify.site/tools/accdu-inspector/overview.md)
>
> Forensic analyzer for Microsoft Access databases — uncovers hidden VBA macros, OLE streams, and binary blobs with YARA scanning and suspicion scoring.
>
> **Language:** Python · **Platform:** Cross-platform

> [card] [rarADSExtractor](https://witchking.mintlify.site/tools/raradsextractor/overview.md)
>
> Safe Python-only RAR5 parser that carves **Alternate Data Streams** without invoking vulnerable binaries — built for CVE-2025-8088 / CVE-2025-6218 triage.
>
> **Language:** Python · **Platform:** Cross-platform

***

## AI-Powered Security

Tools that leverage AI for security research and intelligence workflows.

> [card] [triage-llm-lab](https://witchking.mintlify.site/tools/triage-llm-lab/overview.md)
>
> Three-VM isolated sandbox combining Claude Code with REMnux, Ghidra, and VirusTotal — orchestrated via custom MCP servers for fully AI-driven malware triage and DFIR workflows.
>
> **Language:** TypeScript / Python · **Platform:** VMware (macOS / Linux)

> [card] [TI Agent](https://witchking.mintlify.site/tools/ti-agent/overview.md)
>
> Full-stack local app that fetches **97 built-in security RSS/Atom feeds**, passes real article content to Claude, and generates structured threat intelligence briefings with inline citations, IOC highlights, CVE tables, MITRE ATT\&CK coverage, and 4 export formats.
>
> **Language:** Node.js / React · **Platform:** macOS / Linux

***

## Offensive Security

Tools for shellcode generation, payload delivery, and process injection research.

> [card] [Apophis](https://witchking.mintlify.site/tools/apophis/overview.md)
>
> Bash script leveraging DotNetToJScript, ConfuserEx, and Mono to generate shellcode runners in **10+ formats** — XOR, Caesar, 3DES, AES, MSI, HTA, JS, XSL, ASPX, and InstallUtil.
>
> **Language:** Bash / C# · **Platform:** Linux (Kali)

> [card] [Browser Extension for Code Exec](https://witchking.mintlify.site/tools/browser-extension/overview.md)
>
> Chrome/Edge extension that uses the **Native Messaging API** to bridge the browser and the host OS — demonstrated with Notepad but built for broader command execution scope.
>
> **Language:** Python / JS · **Platform:** Windows / macOS / Linux

***

## Tool Index

| Tool | Category | Language | Platform | Version |
| - | - | - | - | - |
| [triage-llm-lab](https://witchking.mintlify.site/tools/triage-llm-lab/overview.md) | AI / DFIR / Malware Analysis | TypeScript / Python | VMware | v1.0 |
| [TI Agent](https://witchking.mintlify.site/tools/ti-agent/overview.md) | AI / Threat Intelligence | Node.js / React | macOS / Linux | v1.0 |
| [dmpHunter](https://witchking.mintlify.site/tools/dmphunter/overview.md) | DFIR / Memory Forensics | Python | Cross-platform | v0.2.0 |
| [accdu\_inspector](https://witchking.mintlify.site/tools/accdu-inspector/overview.md) | DFIR / Malware Analysis | Python | Cross-platform | v1.1 |
| [rarADSExtractor](https://witchking.mintlify.site/tools/raradsextractor/overview.md) | DFIR / Threat Hunting | Python | Cross-platform | — |
| [Apophis](https://witchking.mintlify.site/tools/apophis/overview.md) | Offensive / Payload Gen | Bash / C# | Linux | — |
| [Browser Extension for Code Exec](https://witchking.mintlify.site/tools/browser-extension/overview.md) | Offensive / Research | Python / JS | Windows / macOS / Linux | — |

***

## Resources

> [card] [GitHub](https://github.com/tasox)
>
> Browse all source repositories, open issues, and contribute.

> [card] [Twitter / X](https://x.com/taso_x)
>
> Follow for new tool releases and security research updates.

> [card] [Exploit-DB](https://www.exploit-db.com)
>
> Referenced exploit database for vulnerability research context.

***

> [!NOTE]
>
> All tools are released under open-source licenses. Review each repository's LICENSE file before use in production or commercial environments. **Use responsibly.**


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.