Lucene search
+L

743 matches found

Kitploit
Kitploit
β€’added 2026/09/13 12:29 p.m.β€’10 views

Loki

I wrote a new Open Source YARA scanner called LOKI RS Rust. LOKI Python is now officially deprecated. Important Note This project is now in inactive maintenance mode. This means that while I merge pull requests for bug fixes and straightforward issues, I currently lack the time to add new feature...

6AI score
SaveExploits0References9
Kitploit
Kitploit
β€’added 2026/09/13 12:11 p.m.β€’6 views

AlphaGolang

AlphaGolang by Juan Andres Guerrero-Saade JAG-S @ SentinelLabs Description: AlphaGolang is a collection of IDAPython scripts to help malware reverse engineers master Go binaries. The idea is to break the scripts into concrete steps, thus avoiding brittle monolithic scripts, and mimicking the...

5.9AI score
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/13 12:08 p.m.β€’8 views

signature-base

Signature-Base Signature-Base is the YARA signature and IOC database for our scanners LOKI and THOR Lite Focus of Signature-Base 1. High quality YARA rules and IOCs with minimal false positives 2. Clear structure 3. Consistent rule format Directory Structure iocs - Simple IOC files CSV yara - YAR...

5.8AI score
SaveExploits0References5
Kitploit
Kitploit
β€’added 2026/09/13 12:05 p.m.β€’6 views

Kalim_Backdoor

Kalim Backdoor Malware Analysis Report This Report will talk about the functionality of Kalim Backdoor Malware. Table of Contents: - What is Backdoor? - Technical Analysis. - Summary. - Tactics & Technique MITRE ATT&CK. - IOCs. - Yara Rule. What does Backdoor mean? A backdoor is a hidden...

6AI score
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/13 11:57 a.m.β€’4 views

fixing-google-secops-detections

Google SecOps Chronicle Curated Detections: Flaw Analysis & Tuning This repository documents architectural design flaws, logic discrepancies, and tuning strategies for native Google SecOps Chronicle Curated Detections. While Google Threat Intelligence GTIG provides exceptional conceptual threat...

6AI score
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/13 11:52 a.m.β€’4 views

ThreatKB

NOTE: THIS REPO IS IN AN ALPHA STATE ThreatKB is a knowledge base workflow management dashboard for YARA rules and C2 artifacts. Rules are categorized and used to denote intent, severity, and confidence in accumulated artifacts. To start using ThreatKB, check out our wiki. Installing by Docker is...

5.8AI score
SaveExploits0References14
Kitploit
Kitploit
β€’added 2026/09/13 11:50 a.m.β€’138 views

spyre

Spyre ...a simple, self-contained modular host-based IOC scanner Spyre is a simple host-based IOC scanner built around the YARA pattern matching engine and other scan modules. The main goal of this project is easy operationalization of YARA rules and other indicators of compromise. Users need to...

5.8AI score
SaveExploits0References4
Kitploit
Kitploit
β€’added 2026/09/13 11:48 a.m.β€’9 views

Crawlector

Crawl e ctor Crawlector the name Crawlector is a combination of Crawl er & Detector is a threat-hunting framework designed for scanning websites for malicious objects. Note-1 : The framework was first presented at the No Hat conference in Bergamo, Italy on October 22nd, 2022 Slides, YouTube...

5.8AI score
SaveExploits0References7
Kitploit
Kitploit
β€’added 2026/09/13 11:44 a.m.β€’7 views

2026-100DaysofYARA

100 Days of YARA 2026 A personal challenge to write one YARA rule every day for 100 days as part of the 100DaysofYARA initiative. More info here: https://github.com/100DaysofYARA/2026...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
β€’added 2026/09/13 11:35 a.m.β€’34 views

subcrawl

SubCrawl SubCrawl is a framework developed by Patrick SchlΓ€pfer, Josh Stroschein and Alex Holland of HP Inc’s Threat Research team. SubCrawl is designed to find, scan and analyze open directories. The framework is modular, consisting of four components: input modules, processing modules, output...

6.4AI score
SaveExploits0References5
Kitploit
Kitploit
β€’added 2026/09/13 11:31 a.m.β€’9 views

NoMoreXOR

NoMoreXOR.py Tool to help guess a files 256 byte XOR key by using frequency analysis. Usage root@kitploit: usage: NoMoreXOR.py -h -a -c -xor key -g -o outfile -y YARARULES Path Tool to help guess a files 256 byte XOR key by using frequency analysis. positional arguments: Path Path to file to be...

5.9AI score
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/13 11:24 a.m.β€’5 views

certgraveyard_yara

CertGraveyard YARA Rules Generator Automated YARA rule generation from the CertGraveyard compromised certificate database. Features πŸ”„ Daily Updates : Automatically checks CertGraveyard for new compromised certificates πŸ“ YARA Rule Generation : Creates individual YARA rules for each certificate βœ…...

6.1AI score
SaveExploits0References3
Kitploit
Kitploit
β€’added 2026/09/13 11:19 a.m.β€’4 views

CVE-2021-1675-Yara

This repository does not have a README...

9.3CVSS7.8AI score0.86132EPSS
SaveExploits63
Kitploit
Kitploit
β€’added 2026/09/13 10:56 a.m.β€’6 views

PasteHunter

PasteHunter PasteHunter is a python3 application that is designed to query a collection of sites that host publicly pasted data. For all the pastes it finds it scans the raw contents against a series of Yara rules looking for information that can be used by an organisation or a researcher. Setup...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
β€’added 2026/09/13 10:51 a.m.β€’5 views

rustinel

Rustinel Open-source endpoint detection. Three platforms. Your rules. Run Sigma, YARA, and IOC detections on native Windows, Linux, and macOS telemetry. Written in Rust, with local alerts and no cloud account required. Bring your detection content, monitor your endpoints, and send alerts to the...

6AI score
SaveExploits0References10
Kitploit
Kitploit
β€’added 2026/09/13 10:12 a.m.β€’9 views

100-Days-of-YARA-2026

This repository does not have a README...

5.8AI score
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/13 9:51 a.m.β€’8 views

mquery

mquery: Blazingly fast Yara queries for malware analysts Ever had trouble searching for malware samples? Mquery is an analyst-friendly web GUI to look through your digital warehouse. It can be used to search through terabytes of malware in a blink of an eye: Under the hood we use our UrsaDB, to...

6AI score
SaveExploits0References7
Kitploit
Kitploit
β€’added 2026/09/13 9:48 a.m.β€’6 views

statiStrings

statiStrings root@kitploit: | | | | || | / | / | | \ | | '| | ' \ / / | \ \ || | | || | | || | | | | | | | \ \ |/\,|||/ || ||| ||, |/ |/ YARA Rule Strings Statistics Calculator Shelly Raban Sh3llyR, February 2021, Version 0.1 Table of Contents 1. About The Project Built With 2. Getting Started...

6AI score
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/13 9:31 a.m.β€’8 views

FileInsight-plugins

FileInsight-plugins: decoding toolbox of McAfee FileInsight hex editor for malware analysis FileInsight-plugins is a large set of plugins for McAfee FileInsight hex editor. It adds many capabilities such as decryption, decompression, searching XOR-ed text strings, scanning with a YARA rule, code...

5.8AI score
SaveExploits0
Kitploit
Kitploit
β€’added 2026/09/13 9:13 a.m.β€’9 views

yara-x

YARA-X YARA-X is a re-incarnation of YARA, a pattern matching tool designed with malware researchers in mind. This new incarnation intends to be faster, safer and more user-friendly than its predecessor. The ultimate goal of YARA-X is replacing YARA as the default pattern matching tool for malwar...

5.9AI score
SaveExploits0References7
Rows per page
Query Builder