Repository Index

Volatility plugin for extracts configuration data of known malware

• malware
• volatility
• forensics
• python

AVClass malware labeling tool

A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.

• cybersecurity
• incident-response
• sysinternals
• nirsoft

Sandbox for semi-automatic Javascript malware analysis, deobfuscation and payload extraction. Written for Node.js

• malware-samples
• wscript
• deobfuscation
• angler

Open PS5 firmware 14.10 research: Lua userland experiments, syscall and attack-surface analysis. Kernel read/write and a complete exploit are not demonstrated.

• ps5
• ps5-homebrew
• ps5-jailbreak
• ps5-tools

🔥 A fully open source audit logs service and embeddable UI easily deployed to your own Kubernetes cluster. Brought to you by replicated.com and boxyhq.com 🚀

• enterprise-software
• kubernetes
• audit-logs
• enterprise-ready

Software licensing and registration using digital signatures and public cryptography 🪪

• licensing
• software-licensing
• software-license
• security

Roles & Permissions for Laravel

• php
• defender
• middleware
• laravel

Drltrace is a library calls tracer for Windows and Linux applications.

• dbi
• malware-analysis
• malware-detection
• api-trace

teler-waf is a Go HTTP middleware that protects local web services from OWASP Top 10 threats, known vulnerabilities, malicious actors, botnets, unwanted crawlers, and brute force attacks.

• ids
• teler
• waf
• teler-ids

Limon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators of Linux malware. It allows one to inspect Linux malware before execution, during execution, and after execution (post-mortem analysis) by performing static, dynamic and memory analysis using open source tools

A framework for automated extraction of static and dynamic features from Android applications

• android-malware-detection
• android-analysis

A Tool for Automatic Analysis of Malware Behavior

• machine-learning
• clustering
• classification
• malware-analysis

A Python RESTful API framework for online malware analysis and threat intelligence services.

• python
• cybersecurity
• malware
• malware-analysis

Simple promise-based session middleware for Next.js, micro, Express, and more

• javascript
• middleware
• session
• promise

Astral-PE is a low-level mutator (Headers/EP obfuscator) for native Windows PE files (x32/x64)

• cybersecurity
• hacktoberfest
• low-level
• mutator

DC3 Malware Configuration Parser (DC3-MWCP) is a framework for parsing configuration information from malware. The information extracted from malware includes items such as addresses, passwords, filenames, and mutex names.

• python
• malware-analysis
• automation
• config-dump

Evidence-based DSM ransomware recovery: preservation, RAM key recovery, copy decryption, and GitLab validation.

Inject OWASP recommended HTTP Headers for increased security in a single line

• aspnetcore
• middleware
• owasp
• security

Compilation of autoexec scripts and mods for Xiaomi Yi camera after reverse engineering of firmware.

• reverse-engineering
• xiaomi
• xiaomi-firmware
• xiaomi-camera

Android Malware Sandbox

Python telnet honeypot for catching botnet binaries

• honeypot
• telnet-server
• malware
• botnet

🚀AutoRuns is a PowerShell module that will help do live incident response and enumerate autoruns artifacts that may be used by legitimate programs as well as malware to achieve persistence.

Inspektor is a protocol-aware proxy that is used to enforce access policies👮

• security
• openpolicyagent
• acl
• rust