VolExp

VolExp Volatility Explorer 该程序允许用户访问内存转储。它也可以作为 Volatility 框架（https://github.com/volatilityfoundation/volatility）的插件运行。 该程序的功能类似于 Process Explorer/Hacker，但此外它还允许用户访问内存转储（或使用 Memtriage 访问计算机的实时内存）。 该程序可在 Windows、Linux 和 MacOS 机器上运行，但只能使用 Windows 内存映像。 注意：针对 volatility3 的 volatility...

volatility

此项目已归档。如需现代调查，请参阅Volatility 3：https://github.com/volatilityfoundation/volatility3 ============================================================================ Volatility Framework - 易失性内存提取工具框架 Volatility Framework 是一个完全开放的工具集合，采用 Python 实现，遵循 GNU...

VolExp - Volatility Explorer

This program allows the user to access a Memory Dump. It can also function as a plugin to the Volatility Framework https://github.com/volatilityfoundation/volatility. This program functions similarly to Process Explorer/Hacker, but additionally it allows the user access to a Memory Dump or access...

Analyzing Linux Malware Sandbox: Limon

Limon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators of Linux malware. It allows one to inspect the Linux malware before execution, during execution, and after execution post-mortem analysis by...

Android Pentesting Portable Integrated Environment: Appie

Appie is a software package that has been pre-configured to function as an Android Pentesting Environment on any windows based machine without the need of a Virtual MachineVM or dualboot. It is completely portable and can be carried on USB stick or your smartphone. It is one of its kind Android...

YaVol - GUI for Volatility Framework and Yara

This is just another GUI for volatility and yara which could make someone's life easier. It is inteded for Incident responders for quick examination of a memory image. Results are stored in sqlite db for reuse. 1. Installation Clone repo git clone https://[email protected]/Ft44k/yavol.git...

[Zeus] Registry Analysis Using Volatility Framework

How to analysis a registry from the memory using Volatility Framework. In this video I’m using Zeus Memory for registry analysis, and l will show F-secure top10 malware registry launchpoints. Not all but some of them Download Zeus Memory :...