APKiD

APKiD APKiD gives you information about how an APK was made. It identifies many compilers, packers, obfuscators, and other weird stuff. It's PEiD for Android. For more information on what this tool can be used for, check out: Android Compiler Fingerprinting Detecting Pirated and Malicious Android...

obfuscation_detection

混淆检测 v2.4 作者：Tim Blazytko 自动检测混淆代码及其他有趣的代码结构 描述： Obfuscation Detection 是一个 Binary Ninja 插件，用于检测二进制文件中的混淆代码和有趣的代码结构（例如状态机）。给定一个二进制文件，该插件通过识别在逆向工程中可能值得仔细查看的代码位置来简化分析。 基于各种启发式规则，该插件定位包含复杂或罕见代码结构的函数。此类代码结构可能实现： 混淆代码 状态机和协议 C&C 服务器通信 字符串解密例程 加密算法 以下博客文章提供了有关底层启发式规则的更多信息并展示了它们的用例： 自动化检测控制流平坦化 自动化检测混淆代码...

obfuscation_detection

Obfuscation Detection v2.4 Author: Tim Blazytko Automatically detect obfuscated code and other interesting code constructs Description: Obfuscation Detection is a Binary Ninja plugin to detect obfuscated code and interesting code constructs e.g., state machines in binaries. Given a binary, the...

php-malware-finder

PHP Malware Finder | || || || | | | | || || | | || || || | Webshell finder, | || || | kiddies hunter, | | | |||| || | website cleaner. || || |||| Detecta archivos PHP potencialmente maliciosos. ¿Qué detecta? PHP-malware-finder hace todo lo posible para detectar código ofuscado/engañoso, así como...

obfDetect

Obfuscation Detection Authored by: mcdulltii Automatically detect obfuscated code and other state machines Description: Scripts to automatically detect obfuscated code and state machines in binaries. Implementation is based on IDA 7.4+ Python3. Check out the following blog posts for more...

aco-prompt-shield

aco-prompt-shield 🛡️ Stop prompt injection attacks before they reach your LLM — zero API costs, runs entirely locally, integrates in 2 minutes. Prompt injection is the 1 security risk for LLM applications. aco-prompt-shield catches known jailbreak patterns, understands semantic intent via ML, and...

Obfuscated Command Line Detection Using Machine Learning

This blog post presents a machine learning ML approach to solving an emerging security problem: detecting obfuscated Windows command line invocations on endpoints. We start out with an introduction to this relatively new threat capability, and then discuss how such problems have traditionally bee...

Revoke-Obfuscation - PowerShell Obfuscation Detection Framework

Revoke-Obfuscation is a PowerShell v3.0+ compatible PowerShell obfuscation detection framework. Authors Daniel Bohannon @danielhbohannon Lee Holmes @LeeHomes Research Blog Post: https://www.fireeye.com/blog/threat-research/2017/07/revoke-obfuscation-powershell.html White Paper:...