Repository Index

🔒 Consolidating and extending hosts files from several well-curated sources. Optionally pick extensions for porn, social media, and other categories.

• python
• unified-hosts
• malware
• ad-blocker

The Rogue Access Point Framework

• wifiphisher
• wifi
• rogue
• access-point

Exploit Development and Reverse Engineering with GDB & LLDB Made Easy

• python
• gdb
• pwndbg
• reverse-engineering

Malicious traffic detection system

• security
• malware
• intrusion-detection
• sensor

GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux

• python
• exploit
• gdb
• linux

LIEF - Library to Instrument Executable Formats (C++, Python, Rust)

• reverse-engineering
• malware-analysis
• binary-analysis
• parser

Volatility 3.0 development

• digital-investigation
• forensics
• incident-response
• malware

yarGen is a generator for YARA rules

• python
• yara
• malware
• malware-research

ThePhish: an automated phishing email analysis tool

• email
• detection
• malware
• phishing

IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.

• cybersecurity
• threat
• ioc
• malware

30 different honeypots in one package! (dhcp, dns, elastic, ftp, http proxy, https proxy, http, https, imap, ipp, irc, ldap, memcache, mssql, mysql, ntp, oracle, pjl, pop3, postgres, rdp, redis, sip, smb, smtp, snmp, socks5, ssh, telnet, vnc)

• pypi
• monitoring-tool
• network-analysis
• malware-analysis

Sandboxed Execution Environment

• python
• sandbox
• malware-analysis
• malware-research

Framework for Making Environmental Keyed Payloads (NO LONGER SUPPORTED)

• powershell
• golang
• python
• clueless-agents

Modular file scanning/analysis framework

• python
• analytic-machines
• analysis-framework
• python-script

Volatility plugin for extracts configuration data of known malware

• malware
• volatility
• forensics
• python

A Python RESTful API framework for online malware analysis and threat intelligence services.

• python
• cybersecurity
• malware
• malware-analysis

DC3 Malware Configuration Parser (DC3-MWCP) is a framework for parsing configuration information from malware. The information extracted from malware includes items such as addresses, passwords, filenames, and mutex names.

• python
• malware-analysis
• automation
• config-dump

Create adversarial attacks against machine learning Windows malware detectors

• adversarial-machine-learning
• infosec
• python
• attack

Tools for the Computer Incident Response Team :computer:

• dfir
• python
• carbonblack
• malware-analysis

Python implementation of the Packed Executable iDentifier (PEiD)

• peid
• peid-signature
• pe-file
• pe-files

Minimal, consistent Python API for building integrations with malware sandboxes.

• sandbox
• malware-analysis
• api-client
• library

Tool to help guess a files 256 byte XOR key by using frequency analysis

• frequency-analysis
• python
• xor
• malware

An ICAP Server with yara scanner for URL and content.

• python
• icap-server
• yara
• malware-analysis

HoneyHTTPD is a Python-based web server honeypot/service imitation builder. Great for honeypots or faking HTTP services.

• python
• honeypot
• honeypot-http
• python-web