xzwl233 Goto Github PK

1000php

1000个PHP代码审计案例(2016.7以前乌云公开漏洞)

antidbg

A bunch of Windows anti-debugging tricks for x86 and x64.

apkid

Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android

apklab

Android Reverse-Engineering Workbench for VS Code

awesome-malware-analysis

Defund the Police.

awesome-rat

RAT And C&C Resources. 250+ Open Source Projects, 1200+ RAT/C&C blog/video.

awesome-yara

A curated list of awesome YARA rules, tools, and people.

brim

Desktop application to efficiently search and analyze semi-structured/structured data and packet captures

burp_suite_doc_zh_cn

cahi

CAPE Auto-Hardened Installer

capa

The FLARE team's open-source tool to identify capabilities in executable files.

capa-rules

Standard collection of rules for capa: the tool for enumerating the capabilities of programs

capa-testfiles

Data to test capa's code and rules.

capev2

Malware Configuration And Payload Extraction

cs7038-malware-analysis

Course Repository for University of Cincinnati Malware Analysis Class (CS[567]038)

csagent

CobaltStrike 4.x通用白嫖及汉化加载器

deeptraffic

Deep Learning models for network traffic classification

detect-it-easy

Program for determining types of files for Windows, Linux and MacOS.

drakvuf

DRAKVUF Black-box Binary Analysis

fame

FAME Automates Malware Evaluation

fcl

FCL (Fileless Command Lines) - Known command lines of fileless malicious executions

flare-fakenet-ng

[Suspended] FakeNet-NG - Next Generation Dynamic Network Analysis Tool

gda-android-reversing-tool

GDA is a new fast and powerful decompiler in C++(working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python&java scripts, device memory extraction, data decryption, and encryption, etc.

gef

GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging features for exploit developers & reverse engineers ☢

habomalhunter

HaboMalHunter is a sub-project of Habo Malware Analysis System (https://habo.qq.com), which can be used for automated malware analysis and security assessment on the Linux system.

hidden

Windows driver with usermode interface which can hide processes, file-system and registry objects, protect processes and etc

hollows_hunter

Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).

httpreplay

Replay HTTP and HTTPS requests from a PCAP based on TLS Master Secrets.

intelowl

Intel Owl: analyze files, domains, IPs in multiple ways from a single API at scale

jadx

Dex to Java decompiler