Malware Configuration And Payload Extraction
- configs
- debugging-tools
- malware
- malware-analysis
Repository Index
47,133 repositories indexed
1–24 of 28 · Most stars
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
The repository host gives no description.
- defcon
- android
- blackhat
- blackbox
🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 300+ other hashes ☄ Comes with a neat web app 🔥
Noriben - Portable, Simple, Malware Analysis Sandbox
An information security preparedness tool to do adversarial simulation.
- uber
- vagrant
- yaml
- celery
A Game of Hackers (CTF Scoreboard & Game Manager)
"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
30 different honeypots in one package! (dhcp, dns, elastic, ftp, http proxy, https proxy, http, https, imap, ipp, irc, ldap, memcache, mssql, mysql, ntp, oracle, pjl, pop3, postgres, rdp, redis, sip, smb, smtp, snmp, socks5, ssh, telnet, vnc)
- pypi
- monitoring-tool
- network-analysis
- malware-analysis
Sandboxed Execution Environment
Script to create templates to use with VirtualBox to make vm detection harder
- virtualbox
- antivm
- sandbox
- malware-analysis
CuckooDroid - Automated Android Malware Analysis with Cuckoo Sandbox.
Limon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators of Linux malware. It allows one to inspect Linux malware before execution, during execution, and after execution (post-mortem analysis) by performing static, dynamic and memory analysis using open source tools
Automated client-side template injection (sandbox escape/bypass) detection for AngularJS v1.x.
Python implementation of the Packed Executable iDentifier (PEiD)
- peid
- peid-signature
- pe-file
- pe-files
Minimal, consistent Python API for building integrations with malware sandboxes.
Randomly changes Win32/64 PE Files for 'safer' uploading to malware and sandbox sites.
CTF in a box. Minimal setup required. (not production-ready yet)
AI-powered platform for OSINT intelligence analysis. Features archive discovery with hypothesis-driven investigation, GLiNER entity extraction, Mapbox geospatial visualization, network analysis, and document processing. Built with FastAPI, Next.js, Weaviate, and DSPy.
- ai-agents
- document-processing
- dspy
- entity-extraction
Docker image gathering packers and tools for making datasets of packed executables and training machine learning models for packing detection
- docker-image
- executable-packing
- malware-packers
- research-platform
Towards Reverse-Engineering Black-Box Neural Networks, ICLR'18
- neural-network
- blackbox
- iclr
- reverse-engineering
Analysis tool for estimating the likelihood that a binary contains compressed or encrypted bytes
- entropy
- pe-file
- pe-files
- pe-format
Dataset of packed PE samples
- dataset
- pe-files
- upx
- samples
Packing detection tool for PE files
- detector
- pe-file
- pe-format
- peid