cosa-nostra

Cosa Nostra Cosa Nostra is an open source software clustering toolkit with a focus on malware analysis. It can create phylogenetic trees of binary malware samples that are structurally similar. It was initially released during SyScan360 Shanghai 2016. I basically maintain it since 2016 for my one...

pe-bear-old

PE-bear releases PE-bear es una herramienta gratuita de reversión para archivos PE. Su objetivo es ofrecer una «primera vista» rápida y flexible para los analistas de malware, estable y capaz de manejar archivos PE malformados. Firmas para PE-bear: SIG.txt actualizado: 22.01.2014 - contiene firma...

malduck

🦆 Malduck Installation ⚙️ | Docs 📚 Malduck is your ducky companion in malware analysis journeys. It is mostly based on Roach project, which derives many concepts from mlib library created by Maciej Kotowicz. The purpose of fork was to make Roach independent from Cuckoo Sandbox project, but still...

PsyloDbg

PsyloDbg PsyloDbg es un depurador de Windows de código abierto, de rápido crecimiento y fácil de usar, programado íntegramente en Delphi. El objetivo principal de este proyecto es ofrecer a los analistas de malware otra herramienta para reducir su tiempo de respuesta durante su proceso de análisi...

oletools

python-oletools oletools es un paquete de herramientas Python para analizar archivos Microsoft OLE2 también llamados Almacenamiento Estructurado, Formato Binario de Archivos Compuestos o Formato de Documento Compuesto, como documentos de Microsoft Office 97-2003, archivos MSI o mensajes de Outloo...

bytesrevealer

https://bytesrevealer.online/ VULNEX https://www.vulnex.com/ Bytes Revealer Version: 0.4 Bytes Revealer is a powerful reverse engineering and binary analysis tool designed for security researchers, forensic analysts, and developers. With features like hex view, visual representation, string...

IATelligence

IATelligence IATelligence es un script de Python que extrae la Tabla de Direcciones de Importación IAT de un archivo PE y utiliza el modelo GPT-3 de OpenAI para proporcionar detalles sobre cada API de Windows importada por el archivo. El script también busca técnicas relacionadas de MITRE ATT&CK ...

de4dot

Description de4dot is an open source GPLv3 .NET deobfuscator and unpacker written in C. It will try its best to restore a packed and obfuscated assembly to almost the original assembly. Most of the obfuscation can be completely restored eg. string encryption, but symbol renaming is impossible to...

ThreatResearch

Extractores de Configuración Algunos scripts utilizados por nuestro equipo para extraer configuraciones de algunas muestras analizadas. PlugX Remcos templateX RedLine Stealer...

CyberThreatIntel

CyberThreatIntel Análisis de malware e inteligencia de amenazas cibernéticas de grupos APT y ciberdelincuentes Resumen 2020-01-20 - Transparent Tribe APT 2020-01-03 - MAAS Terraloader 2019-12-28 - SideWinder: mismos objetivos, mismos TTP, ¡hora de contraatacar! 2019-11-18 - APT33 continúa atacand...

Qu1cksc0pe

Qu1cksc0pe All-in-One malware analysis tool for analyze many file types, from Windows binaries to E-Mail files. You can get : What DLL files are used. Functions and APIs. Sections and segments. URLs, IP addresses and emails. Android permissions Dangerous/Special/Info. MITRE ATT&CK mappings Window...

malware_analysis

Análisis de malware...

x64dbg

x64dbg An open-source binary debugger for Windows, aimed at malware analysis and reverse engineering of executables you do not have the source code for. There are many features available and a comprehensive plugin system to add your own. You can find more information on the blog! Screenshots |...

httptoolkit

HTTP Toolkit !HTTP Toolkit has received funding from NLnet as part of NGI Zero...

diario-commandline-tools

diario-commandline-client What is this? Assumptions Installation Setup project Usage What is this? A utiliy repository created to ease bulk diario API consumption. Currently these functions are fully implemented: Upload a file PDF or Microsoft Office document Upload a complete directory of files...

norimaci

Norimaci "Norimaci" is a simple and lightweight malware analysis sandbox for macOS. This tool was inspired by "Noriben". Norimaci uses the features of OpenBSM or Monitor.app to monitor macOS system activity instead of Sysinternals Process Monitor procmon. Norimaci consists of 3 Python scripts...

quark-engine

Malware Family Analysis Report Showcase | | ---|---|--- | !https://assets.ki...

cuckoo3

Cuckoo3 - Herramienta de análisis de malware Acerca de Cuckoo3 es una herramienta de código abierto para probar archivos o enlaces sospechosos en un entorno controlado. Los probará en emuladores de plataforma en sandbox y generará un informe, mostrando qué hicieron los archivos o sitios web duran...

android-security-awesome

android-security-awesome A collection of Android security-related resources. 1. Tools 2. Academic/Research/Publications/Books 3. Exploits/Vulnerabilities/Bugs Tools Online Analyzers 1. Appknox - not free 2. Virustotal 3. NowSecure Lab Automated - Enterprise tool for mobile app security testing...

refinery

Binary Refinery docs tests codecov pypi High Octane Triage Analysis || || || || || | / / / \ || ==||=====|| | / |/ \ /==| / \ ===| '======|| | \ | | \ | \ /| | || || /||/ / | | | || =========''====/=========/ /==||=====||======' \ / / The Binary Refinery™ is a collection of Python scripts...