Repository Index

Malware/IOC ingestion and processing engine

Code for our DLS'21 paper - BODMAS: An Open Dataset for Learning based Temporal Analysis of PE Malware. BODMAS is short for Blue Hexagon Open Dataset for Malware AnalysiS.

• malware
• pe-malware
• malware-dataset
• malware-research

Ragpicker is a Plugin based malware crawler with pre-analysis and reporting functionalities. Use this tool if you are testing antivirus products, collecting malware for another analyzer/zoo.

Effects of packers on machine-learning-based malware classifiers that use only static analysis

Tool to help guess a files 256 byte XOR key by using frequency analysis

• frequency-analysis
• python
• xor
• malware

Potiron - Normalize, Index and Visualize Network Capture

• tshark
• network-capture
• graph
• pcap

Configure and manage home/small business DNS and DHCP configurations

CTF in a box. Minimal setup required. (not production-ready yet)

A set of Maltego transforms for VirusTotal Public API v2.0. This set has the added functionality of caching queries on a daily basis to speed up resolutions.

A minimal OSC client and server library for MicroPython.

• micropython
• osc
• python
• open-sound-control

Py2neo is a comprehensive toolkit for working with Neo4j from within Python applications or from the command line.

YALIH (Yet Another Low Interaction Honeyclient) is a low Interaction Client honeypot designed to detect malicious websites through signature, anomaly and pattern matching techniques

Docker image gathering packers and tools for making datasets of packed executables and training machine learning models for packing detection

• docker-image
• executable-packing
• malware-packers
• research-platform

Sublime Malware Research Tool

An ICAP Server with yara scanner for URL and content.

• python
• icap-server
• yara
• malware-analysis

HoneyHTTPD is a Python-based web server honeypot/service imitation builder. Great for honeypots or faking HTTP services.

• python
• honeypot
• honeypot-http
• python-web

Builds json representation of PDF malware sample

A short and small memory forensics helper.

• python
• volatility
• memory-forensics

Analysis tool for estimating the likelihood that a binary contains compressed or encrypted bytes

• entropy
• pe-file
• pe-files
• pe-format

Dataset of packed PE samples

• dataset
• pe-files
• upx
• samples

🛡️ Free AI that blocks hackers while you sleep. Runs on cheap hardware. When someone in Tokyo gets attacked, you're protected in 30 seconds. No fees. No experts needed. Just protection. One node's detection → everyone's protection.

• ai-security
• cybersecurity
• ids
• iot-security

Some scripts to help construct small reproducing examples of bugs, implement [Proof using], etc.

The repository host gives no description.

Normalizer for honeypot data.