malboxes

= Malboxes :toc: preamble :toclevels: 2 :twob: https://twitter.com/obilodeau :twhg: https://twitter.com/hugospns // github stuff ifdef::env-github:github: ifndef::github // local logo image::docs/logos/main.svgMalboxes Logo endif:: ifdef::github // logo on github...

Ponce

Ponce Ponce pronunciado 'poN θe pon-they es un plugin de IDA Pro que brinda a los usuarios la capacidad de realizar análisis de contaminación taint analysis y ejecución simbólica sobre binarios de forma fácil e intuitiva. Con Ponce estás a un clic de obtener todo el poder de la ejecución simbólic...

lupo

For instructions on how to use Lupo, visit https://github.com/malienist/lupo/wiki/Lupo-Wiki Lupo — Malware IOC Extractor Debugging module for Malware Analysis Automation For a step by step post on how to use Lupo, with images and instructions, please see this post:...

stringsifter

StringSifter is a machine learning tool that automatically ranks strings based on their relevance for malware analysis. Quick Links Technical Blogpost - Learning to Rank Strings Output for Speedier Malware Analysis Announcement Blogpost - Open Sourcing StringSifter DerbyCon Talk - StringSifter:...

AlphaGolang

AlphaGolang por Juan Andres Guerrero-Saade JAG-S @ SentinelLabs Descripción: AlphaGolang es una colección de scripts IDAPython para ayudar a los ingenieros inversos de malware a dominar los binarios de Go. La idea es dividir los scripts en pasos concretos, evitando así scripts monolíticos frágile...

analyzer

Este proyecto automatiza las tareas diarias del rol de Analista de Inteligencia de Amenazas internamente sin interacción con recursos externos. Analiza, visualiza y estructura archivos sensibles Malware o datos extrayendo características, artefactos e IoC usando diferentes módulos. La salida de...

cosa-nostra

Cosa Nostra Cosa Nostra is an open source software clustering toolkit with a focus on malware analysis. It can create phylogenetic trees of binary malware samples that are structurally similar. It was initially released during SyScan360 Shanghai 2016. I basically maintain it since 2016 for my one...

OSINT-SPY

OSINT-SPY Search using OSINTOpen Source Intelligence Performs OSINT scan on email/domain/ipaddress/organization using OSINT-SPY. It can be used by Data Miners, Infosec Researchers, Penetration Testers and cyber crime investigator in order to find deep information about their target. Release 2.0...

Santoku-Linux

Mobile Forensics, Malware Analysis, and App Security Testing SLICE AND DICE Boot into Santoku and get to work, with the latest security tools and utilities focused on mobile platforms such as Android and iOS. Santoku Linux is a bootable Linux ISO which you can run as Live CD or install on a PC/VM...

diario-commandline-tools

diario-commandline-client What is this? Assumptions Installation Setup project Usage What is this? A utiliy repository created to ease bulk diario API consumption. Currently these functions are fully implemented: Upload a file PDF or Microsoft Office document Upload a complete directory of files...

Bypass-Sandbox-Evasion

Bypass-Sandbox-Evasion Sandboxes are commonly used to analyze malware. They provide a temporary, isolated, and secure environment in which to observe whether a suspicious file exhibits any malicious behavior. However, malware developers have also developed methods to evade sandboxes and analysis...

malduck

🦆 Malduck Installation ⚙️ | Docs 📚 Malduck is your ducky companion in malware analysis journeys. It is mostly based on Roach project, which derives many concepts from mlib library created by Maciej Kotowicz. The purpose of fork was to make Roach independent from Cuckoo Sandbox project, but still...

incarcero

Incarcero: La navaja suiza para el análisis de malware El análisis de malware es como desactivar bombas. El objetivo es desmontar y comprender un programa que fue creado para causar daño, el cual a menudo está ofuscado ej: empaquetado para complicar el análisis. Incarcero es una herramienta que...

malware_training_vol1

malwaretrainingvol1 Materiales para el entrenamiento de análisis de malware en Windows volumen 1 🚧 ADVERTENCIA: ¡trabajo en progreso! Se añadirá más material gradualmente. Contenido El objetivo de este entrenamiento es desarrollar la comprensión de diversas técnicas comunes utilizadas por el...

makin

I create makin to make initial malware assessment little bit easier for me, I think it's useful for others as well, It helps to reveal a debugger detection techniques used by a sample. Cualquier comentario es muy apreciado: @qazqaz ¿Cómo funciona? makin abre una muestra como depurado e inyecta...

multiscanner

MultiScanner 简介 MultiScanner 是一个文件分析框架，通过自动运行一组工具并聚合输出结果，帮助用户评估一组文件。这些工具可以是自定义的 Python 脚本、Web API、其他机器上运行的软件等。工具通过创建在 MultiScanner 框架中运行的模块来集成。 模块的设计目标是快速编写并易于集成到框架中。当前编写和维护的模块主要与恶意软件分析相关，但框架并不限于此范围。模块列表可查看 modules/ 目录。相关描述和配置选项可在 分析模块 页面找到。 MultiScanner 还支持用于样本存储、分析和报告查看的分布式工作流。该功能包括 Web 界面、REST...

idenLib

idenLib - Library Function Identification When analyzing malware or 3rd party software, it's challenging to identify statically linked libraries and to understand what a function from the library is doing. idenLib.exe is a tool for generating library signatures from .lib/.obj/.exe files...

dnschef

root@kitploit: | | versión 0.4 | | / | | | | | | | / | ' / |/| ' \ / \ | | | | | | \ | | | | / | ,|| | |/ || ||| | root@kitploit: D O C U M E N T A C I Ó N DNSChef es un proxy DNS altamente configurable para evaluadores de penetración y analistas de malware. Un proxy DNS también conocido como "Fa...

Dragonfish-s-Malware-Cyber-Analysis

This repository does not have a README...

malcom

Malcom - 恶意软件通信分析器 Malcom 是一款旨在通过图形化表示网络流量，并与已知恶意软件源进行交叉引用，从而分析系统网络通信的工具。这在分析特定恶意软件种类如何尝试与外界通信时非常有用。 什么是 Malcom？ 快速上手 安装 配置选项 Docker 实例 关于 TLS 拦截的简要说明 环境 数据源 技术规格 路线图 免责声明 许可证 什么是 Malcom？ Malcom 可以帮助你： 检测中央命令与控制（C&C）服务器 理解点对点网络 观察 DNS 快速通量基础设施 快速判断某个网络工件是否为"已知恶意" Malcom...