Exploit Development and Reverse Engineering with GDB & LLDB Made Easy
Repository Index
47,133 repositories indexed
1–17 of 17 · Most stars
GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux
yarGen is a generator for YARA rules
30 different honeypots in one package! (dhcp, dns, elastic, ftp, http proxy, https proxy, http, https, imap, ipp, irc, ldap, memcache, mssql, mysql, ntp, oracle, pjl, pop3, postgres, rdp, redis, sip, smb, smtp, snmp, socks5, ssh, telnet, vnc)
Sandboxed Execution Environment
Modular file scanning/analysis framework
A Python RESTful API framework for online malware analysis and threat intelligence services.
DC3 Malware Configuration Parser (DC3-MWCP) is a framework for parsing configuration information from malware. The information extracted from malware includes items such as addresses, passwords, filenames, and mutex names.
Tools for the Computer Incident Response Team :computer:
Python implementation of the Packed Executable iDentifier (PEiD)
Minimal, consistent Python API for building integrations with malware sandboxes.
An ICAP Server with yara scanner for URL and content.
HoneyHTTPD is a Python-based web server honeypot/service imitation builder. Great for honeypots or faking HTTP services.
Analysis tool for estimating the likelihood that a binary contains compressed or encrypted bytes
Packing detection tool for PE files
Implementation of the packing detection heuristic from the paper "Packed PE File Detection for Malware Forensics" of Han et al.
A Single Library Parser to extract meta information,static analysis and detect macros within the files.