Repository Index

The pattern matching swiss knife

Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).

• pe-format
• hooking
• pe-dumper
• pe-analyzer

Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).

• pe-sieve
• anti-malware
• malware-analysis
• malware-detection

The pattern matching swiss knife

Sample staging & detonation utility to be used in combination with Cuckoo Sandbox.

YALIH (Yet Another Low Interaction Honeyclient) is a low Interaction Client honeypot designed to detect malicious websites through signature, anomaly and pattern matching techniques

Yet another implementation of PEiD with yara

• binary-analysis
• yara
• yara-rules
• peid

Simple tool to find the yara matches on a file

• yara
• yara-rules
• malware
• malware-analysis