17 matches found
thematrix
TheMatrix This project was created to ease the malware analysis process. The goal is to create an activator binary whose purpose is to load a user defined binary and monitor the execution by using Win32 API hooks. Relevant data is then saved to disk. The code supports both x86 and x64 binaries. D...
ghost
Ghost Ghost is a process injection detection tool written in Rust. It watches running processes and tries to catch suspicious stuff like code injection, memory manipulation, and other tricks that malware uses to hide. What it does The main idea is simple: scan processes and look for weird memory...
SharpHook
SharpHook SharpHook is inspired by the SharpRDPThief project, It uses various API hooks in order to give us the desired credentials. In the background it uses the EasyHook project, Once the desired process is up and running SharpHook will automatically inject its dependencies into the target...
PyHook
PyHook PyHook is the python implementation of my SharpHook project, It uses various API hooks in order to give us the desired credentials. PyHook Uses frida to inject it's dependencies into the target process Supported Processes...
cuckoo-modified
This is a heavily modified version of Cuckoo Sandbox provided under the GPL. It offers a number of advantages over the upstream Cuckoo: Fully-normalized file and registry names 64-bit analysis Handling of WoW64 filesystem redirection Many additional API hooks Service monitoring Correlates API cal...
C2-Hunter
C2-Hunter C2-Hunter es un programa diseñado para analistas de malware para extraer tráfico de Comando y Control C2 de malwares en tiempo real. El programa utiliza un enfoque único al engancharse en las API de conexiones win32. Con C2-Hunter, los analistas de malware ahora pueden interceptar y...
Inspeckage
Inspeckage - Android Package Inspector Inspeckage is a tool developed to offer dynamic analysis of Android applications. By applying hooks to functions of the Android API, Inspeckage will help you understand what an Android application is doing at runtime. http://ac-pm.github.io/Inspeckage...
Cmulator
Cmulator - Emulador de Sandbox de Ingeniería Inversa x86 Programable v0.3 Beta Cmulator es x86 - x64 Emulador de Sandbox de Ingeniería Inversa Programable para shellcode y binarios PE Basado en Unicorn, Capstone Engine y JavaScript. 💬 Esta es la última versión compatible con Pascal y la nueva bas...
CVE-2019-17271
vBulletin 5.5.4 allows SQL Injection via the ajax/api/hook/getHookList or ajax/api/widget/getWidgetList where parameter...
Site-wide CSRF (Bypass Strict Cookie) leave to Website Takeover
I reported this vulnerability once a long time ago, but you still haven't fixed it. I report back to remind you need to fix it. Description At the api/hooks.unfurl, when sending a post request containing a param challenge, the server will return the value of that param, which inadvertently leave ...
Malicious code in @instant-api-hooks/assethub-campaigns (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3cd0ffbe2349da7aea9f042d99b1fc38ec727b62ded2bee52f82d613acfc9f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
SharpHook - Tool Tath Uses Various API Hooks In Order To Give Us The Desired Credentials
SharpHook is inspired by the SharpRDPThief project, It uses various API hooks in order to give us the desired credentials. In the background it uses the EasyHook project, Once the desired process is up and running SharpHook will automatically inject its dependencies into the target process and...
Using Speakeasy Emulation Framework Programmatically to Unpack Malware
Andrew Davis recently announced the public release of his new Windows emulation framework named Speakeasy. While the introductory blog post focused on using Speakeasy as an automated malware sandbox of sorts, this entry will highlight another powerful use of the framework: automated malware...
Inspeckage - (Android Package Inspector) Dynamic Analysis With Api Hooks, Start Unexported Activities And More
Inspeckage is a tool developed to offer dynamic analysis of Android applications. By applying hooks to functions of the Android API, Inspeckage will help you understand what an Android application is doing at runtime. http://ac-pm.github.io/Inspeckage https://twitter.com/inspeckage...
Android Package Inspector: Inspeckage
Inspeckage is a tool developed to offer dynamic analysis of Android applications. By applying hooks to functions of the Android API, Inspeckage will help you understand what an Android application is doing at runtime. Inspeckage will let you interact with some elements of the app, such as...
Using EMET to Disable EMET
UPDATE July 7: This post has been updated in advance of a Black Hat 2016 presentation. Microsoft’s Enhanced Mitigation Experience Toolkit EMET is a project that adds security mitigations to user mode programs beyond those built in to the operating system. It runs inside “protected” programs as a...
