box-js

box.js A utility to analyze malicious JavaScript. Installation Simply install box-js from npm: root@kitploit: npm install box-js --global box-js is also available: as a Cuckoo module see the integrations directory and Nwinternights/CuckooBoxjs; as a Dockerfile see integrations/README.md; as a...

ThreatPad

ThreatPad A collaborative, real-time note-taking platform built for Cyber Threat Intelligence CTI and security operations teams. ThreatPad combines the speed of modern productivity tools with CTI-specific capabilities: IOC auto-extraction, STIX 2.1 export, structured threat templates, and...

iocx

IOCX Deterministic, Zero‑Risk IOC Extraction for Modern Security Pipelines Static IOC extraction from a PE file using the IOCX CLI Official IOCX Project This is the original IOCX engine for deterministic static IOC extraction and PE analysis. Any other repositories using the name "iocx" are not...

detux

Detux: मल्टीप्लेटफ़ॉर्म लिनक्स सैंडबॉक्स परिचय: Detux एक सैंडबॉक्स है जिसे लिनक्स मैलवेयर के ट्रैफ़िक विश्लेषण और इस प्रकार IOC को कैप्चर करने के लिए विकसित किया गया है। QEMU हाइपरवाइज़र का उपयोग विभिन्न CPU आर्किटेक्चर के लिए लिनक्स Debian को एमुलेट करने के लिए किया जाता है। निम्नलिखित CPUs...

analyzer

यह प्रोजेक्ट थ्रेट इंटेलिजेंस विश्लेषक भूमिका के दैनिक कार्यों को आंतरिक रूप से बाहरी संसाधनों के इंटरैक्शन के बिना स्वचालित करता है। यह विभिन्न मॉड्यूल का उपयोग करके फीचर, आर्टिफैक्ट और IoC निकालकर संवेदनशील फ़ाइलों मैलवेयर या डेटा का विश्लेषण, विज़ुअलाइज़ेशन और संरचना करता है। उन मॉड्यूल के...

iocextract

iocextract Indicator of Compromise IOC extractor for some of the most commonly ingested artifacts. Table of contents Overview The Problem Our Solution Example Use Case Installation Usage Library Command Line Interface Helpful Information FAQ More Details Custom Regex Related Projects Contributing...

zettelforge

ZettelForge The only agentic memory system built for cyber threat intelligence. When a senior analyst leaves, two or three years of context walks out with them — customer environments, prior investigations, actor TTPs, false-positive patterns, every hard-won "wait, we've seen this before."...

cyberbro

Cyberbro A simple application that extracts your IoCs from garbage input and checks their reputation using multiple services. 🌐demo.cyberbro.net...

livewire-honeypot

Livewire Honeypot A high-interaction honeypot that masquerades as a vulnerable Laravel/Livewire application. It captures exploit attempts targeting known Livewire CVEs, stores uploaded malicious files webshells and remote code execution RCE payloads with SHA-256 deduplication, and optionally...

IOCScraper

IOC Scraper يستخدم أداة IOC Scraper خدمة IOCPARSER لجلب مؤشرات الاختراق IOCs من مدونات البائعين المختلفة، وملفات PDF، وملفات CSV. عملية تحليل IOCs هي عملية تستغرق وقتًا طويلاً، باستخدام هذا السكريبت يمكن استخراج وتجميع IOCs تلقائيًا بسهولة. الميزات IOCs معدلة الصياغة Defanged IOCs: يدعم استخراج...

mitaka

Mitaka Mitaka is a browser extension that makes your OSINT Open Source Intelligence search & scan easier. Key features: Auto IoC indicators of compromise selection with refanging. E.g. example.com to example.com, testatexample.com to [email protected], hxxp://example.com to http://example.co...

RansomCoinPublic

RansomCoin Extracting metadata and hardcoded Indicators of Compromise from ransomware, in a scalable, efficient, way with cuckoo integrations. Ideally, is it run during cuckoo dynamic analysis, but can also be used for static analysis on large collections of ransomware. Designed to be fast, with...

xioc

xioc Extract indicators of compromise from text, including "escaped" ones like hxxp://banana.com, 1.1.1.1 and phish at malicious dot com. Installation Download a precompiled binary from https://github.com/assafmo/xioc/releases Or... Use go get: root@kitploit: go get -u github.com/assafmo/xioc Or...

panrapidcheck

PAN Rapid Check Simpleyou should probably just do this in bash with grep PANOS support file checker that extracts some places to look for CVE-2024-3400 IoCs Generate the support file from Device - Support - Generate Tech Support file iocs.txt should include IPs/hosts from known bad for example...

windows-malware-behavioral-analysis

التحليل السلوكي للبرمجيات الخبيثة باستخدام REMnux و FLARE-VM تحقيق عملي للفريق الأزرق Blue Team في مجال البرمجيات الخبيثة يوضح كيفية تحليل ملفات ويندوز التنفيذية المشبوهة بأمان داخل مختبر معزول باستخدام تقنيات التحليل السلوكي. بدلاً من الهندسة العكسية للكود المصدري للبرمجيات الخبيثة، يركز هذا...

UPDATE: Cuckoo Sandbox 2.0.4

PenTestIT RSS Feed My previous post was about this open source, malware analysis automation framework - Cuckoo Sandbox 2.0.0. This post however, is about an update made to the framework. We now have Cuckoo Sandbox 2.0.4 which include a number of important improvements simplifying and improving yo...