idiom Goto Github PK

hansel

hollows_hunter

A process scanner detecting and dumping hollowed PE modules.

idapython6to7

iocs

Machine-digestible malware indicators.

iocs-1

irscripts

Incident Response Scripts

libbtbb

A Bluetooth baseband decoding library

libewf

Libewf is a library to access the Expert Witness Compression Format (EWF)

libpeconv

A small library for mapping and unmapping PE files.

lief

LIEF - Library to Instrument Executable Formats

llvm-deobfuscator

macroshop

Collection of scripts to aid in delivering payloads via Office Macros. Most are python. See http://khr0x40sh.wordpress.com for details.

malshare-toolkit

Set of tools for interacting with Malshare

malware_analysis

Various snippets created during malware analysis

metasploit-framework

Metasploit Framework

misp

MISP (core software) - Open Source Threat Intelligence Platform (formely known as Malware Information Sharing Platform)

mlib

Your bag of handy codes for malware researchers

msgreader

This is a python library for the parsing of Outlook .msg files(Composite Document File V2 Documents) into useful formats

nucleus

Clone of Nucleus function detector.

officeparser

Extract embedded files and macros from office documents.

olepackagerformat

OLE Package Format Documentation

oletools

oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.

ollydbg-script

收集一些ollydbg的脱壳脚本 collect some ollydbg scripts.

open-source-yara-rules

YARA Rules I come across on the internet

outlookbase

Hello World C++ Outlook Plugin

pafish

Pafish is a demo tool that performs some anti(debugger/VM/sandbox) tricks

pefile

pefile is a Python module to read and work with PE (Portable Executable) files

pftriage

Python tool and library to help analyze files during malware triage and analysis.

phoenix

Cuckoo Sandbox is an automated dynamic malware analysis system

punbup

Python unbup script for McAfee .bup files (with some additional fun features). This script is fully implemented in python it's not just another wrapper around 7zip!