mobileAudit

Mobile Audit MobileAudit - Android移动APK的SAST与恶意软件分析 一个Django Web应用程序，用于对Android APK进行静态分析并检测恶意内容。该项目提取应用元数据，扫描源代码中的弱点，并将结果（SAST发现、最佳实践、证书信息、字符串、数据库、文件、VirusTotal等）聚合到可浏览的仪表盘和API中。 DeepWiki文档：https://deepwiki.com/mpast/mobileAudit 组件 Docker基础镜像 主要功能 模式 模型 安装 API v1 使用 Swagger ReDoc 端点 TLS 前置要求...

SSMA

SSMA SSMA es un analizador de malware simple escrito en Python 3. Características: Analiza el encabezado y las secciones del archivo PE número de secciones, entropía de las secciones/archivo PE, nombres de secciones sospechosos, banderas sospechosas en las características del archivo PE, etc...

packetsifterTool

PacketSifter PacketSifter 是什么？ PacketSifter 是一个用于批量处理 PCAP 数据以发现潜在 IOC 的工具。 只需使用所需的集成（VirusTotal、AbuseIPDB）初始化 PacketSifter，然后将 pcap 文件和所需的开关传递给 PacketSifter，它就会筛选数据并生成多个输出文件。 注意 在使用对应开关前，请先运行 AbuseIPDBInitial.sh 和 VTInitial.sh，否则集成将无法工作 2021年5月27日 PacketSifter 已进行改进，以提供更流畅的用户交互体验。只需下载新的...

amcache-evilhunter

AmCache-EvilHunter AmCache-EvilHunter is a command-line tool to parse and analyze Windows Amcache.hve registry hives, identify evidence of execution, suspicious executables, and integrate VirusTotal/OpenTIP lookups for enhanced threat intelligence...

afot

Automation FOrensics Tool Automation FOrensics Tool AFOT es una herramienta de automatización construida en Python y utilizada para informática forense en Windows con el fin de combinar las siguientes herramientas: AnalyzePESig http://didierstevens.com/files/software/AnalyzePESigV0002.zip Nationa...

AlertResponder

AlertResponder 注意：此仓库已废弃。新仓库位于：https://github.com/m-mizutani/deepalert AlertResponder 是一个用于安全告警自动响应的无服务器框架。 概述 AlertResponder 接收从安全视角值得关注的事件即告警，并自动响应告警。AlertResponder 包含自动响应的 3 个部分。 1. 检查器 Inspector 调查告警中出现的实体，包括 IP 地址、域名，并存储结果：信誉度、恶意活动历史、关联的云实例等。以下组件已提供，可与您的 AlertResponder...

VTScanner - A Comprehensive Python-based Security Tool For File Scanning, Malware Detection, And Analysis In An Ever-Evolving Cyber Landscape

VTScanner is a versatile Python tool that empowers users to perform comprehensive file scans within a selected directory for malware detection and analysis. It seamlessly integrates with the VirusTotal API to deliver extensive insights into the safety of your files. VTScanner is compatible with...

packetsifterTool - A Tool To Aid Analysts In Sifting Through A Packet Capture (Pcap) To Find Noteworthy Traffic

PacketSifter is a tool to perform batch processing of PCAP data to uncover potential IOCs. Simply initializePacketSifter with your desired integrations VirusTotal, AbuseIPDB and pass PacketSifter a pcap and the desired switches and PacketSifter will sift through the data and generate several outp...

VirusTotal Adds Cynet's Artificial Intelligence-Based Malware Detection

VirusTotal, the famous multi-antivirus scanning service owned by Google, recently announced new threat detection capabilities it added with the help of an Israeli cybersecurity firm. VirusTotal provides a free online service that analyzes suspicious files and URLs to detect malware and...

SSMA - Simple Static Malware Analyzer

SSMA is a simple malware analyzer written in Python 3. Features: Searches for websites, e-mail addresses, IP addresses in the strings of the file. Looks for Windows functions commonly used by malware. Get results from VirusTotal and/or upload files. Malware detection based on Yara-rules -...