DissectMalware/XLMMacroDeobfuscator
Extract and Deobfuscate XLM macros (a.k.a Excel 4.0 Macros)
A senior security engineer who loves contributing to the cybersecurity community by developing open source tools to help security analysts to achieve more
Repositories
DissectMalware/batch_deobfuscator
Deobfuscate batch scripts obfuscated using string substitution and escape character techniques.
DissectMalware/pyOneNote
A python library to parse OneNote (.one) files
DissectMalware/OfficeForensicTools
A set of tools for collecting forensic information
DissectMalware/IoCMiner
A Framework to Automatically Extract Indicators of Compromise (IoCs) from Twitter
DissectMalware/yaradbg-frontend
DissectMalware/msoffcrypto-tool
Python tool and library for decrypting MS Office files with passwords or other keys
DissectMalware/yaradbg-backend
DissectMalware/xlrd2
xlrd2 is a variant of xlrd that is actively maintained
DissectMalware/MalwareCMDMonitor
Shows command lines used by latest instances analyzed on Hybrid-Analysis
DissectMalware/PySameSame
This is a python version of samesame repo to generate homograph strings
DissectMalware/base64_substring
Generate a Yara rule to find base64-encoded files containg a specific keyword
DissectMalware/pyxlsb2
an Excel 2007+ Binary Workbook (xlsb) parser for Python
DissectMalware/PhishCanary
Given a TLD zone file, PhishCanary extracts International Domain Names (IDNs) that are homoglyphs of specified target domain names.
DissectMalware/ClipboardWatcher
Monitor the textual data pasted into Windows clipboard
DissectMalware/npp-langs-4-sec
Notepad++ Syntax Highlighting for Languages Used by Cyber Security Professionals
DissectMalware/llm_ctf_automation
DissectMalware/WinNativeIO
Using Undocumented NTDLL Functions to Read/Write/Delete File
DissectMalware/yaradbg-container
A docker config file to run yaradbg in a container
DissectMalware/Getting-Started-Terraform
Exercise files for my Pluralsight course
DissectMalware/dotnet-computevirtualization
Sample class library for interfacing with Windows host compute service.
DissectMalware/yaradbg-issues
DissectMalware/MDIExtractor
DissectMalware/sublime-platform
Open, adaptable email security platform.
DissectMalware/ms-identity-b2c-javascript-spa
Vanilla JavaScript single-page application calling a web API protected by Azure AD B2C
DissectMalware/winsmsd
Windows (ShadowMove) Socket Duplication
DissectMalware/document-samples
DissectMalware/CSS-Exchange
Exchange Server support tools and scripts
DissectMalware/pyrh
Python Framework to make trades with the unofficial Robinhood API
DissectMalware/TLDExtractor
Accurately extract TLD, effective TLD, 2LD, 3LD, ... from a given domain name; by utilizing the Public Suffix List maintained by Mozilla Foundation