Repository Index

A modular Python application to pull intelligence about malicious files

• malware-analysis
• malware-research
• investigation
• cybersecurity

Kustomize generator plugin that generates Secrets from sops-encrypted files

Compute message digest for large files in Go

• go
• golang
• checksum
• message-digest

Run arbitrary code by patching OAT files

• android
• android-app
• kotlin
• kotlin-android

Tool to help guess a files 256 byte XOR key by using frequency analysis

• frequency-analysis
• python
• xor
• malware

Tool to find code cave in PE image (x86 / x64) - Find empty space to place code in PE files

• codecave
• cpp
• pe
• winapi

Upload files securely

• rack
• rails
• security
• upload

Mimicry is a dynamic deception tool that actively deceives an attacker during exploitation and post-exploitation.

• backdoor
• honeypot
• incident-response
• security

Jailer is an eBPF-based process jailing system that provides mandatory access control (MAC) for Linux. It tracks processes using BPF task_storage maps and enforces role-based policies on file access, network operations, and process execution.

• bpf
• ebpf
• kernel
• linux

Foremost is a console program to recover files based on their headers, footers, and internal data structures. c.f., http://foremost.sourceforge.net/

Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.

• bpf
• ebpf
• forensics
• golang

Analysis tool for estimating the likelihood that a binary contains compressed or encrypted bytes

• entropy
• pe-file
• pe-files
• pe-format

This script takes a file or directory as input, uses GPG AES256 symmetric encryption with the password you provide and adds it to IPFS and returns the IPFS hash.

• ipfs
• cli
• encryption
• ipfs-add

Parses Java Cache IDX files

Convert MacOS plist password file to hash file for password crackers

• hashcat
• plist
• osx
• mac

Encrypts 64-bit elf files that decrypt at runtime.

• elf64
• linux
• elf-binaries
• elf-parser

🕵️‍♀️ Find, locate, and query files for ops and security experts ⚡️⚡️⚡️

• devops
• devops-tools
• rust
• security

Core elements of the Modern Honey Network implemented in Docker

A malware dataset curation tool which helps identify packed samples.

• malware
• packer
• security
• peid

Client-side AES-256-GCM zero-knowledge encryption library. Browser-native Web Crypto API, no dependencies. Powers FileShot.io.

• aes-256
• aes-256-gcm
• browser-encryption
• client-side-encryption

Packing detection tool for PE files

• detector
• pe-file
• pe-format
• peid

A simple many-rules to many-files YARA scanner for incident response or malware zoos.

• yara
• yara-scanner
• incident-response
• dfir

Encrypt and decrypt IPFS files with a secret passphrase.

Express honeypot for remote file inclusion (RFI) and local file inclusion (LFI).

• nodejs
• honeypot
• express
• exploit