ripVT Maltego Canari transforms for Virus Total private API. Provided AS-IS, no warranties, no guarantees. Installation Requires Canari, specifically this branch/version Install Malformity git clone https://github.com/matonis/ripVT.git sudo python setup.py install canari create-profile...
Flerken – Open-Source Obfuscated Command Detection Tool Command line obfuscation has been proved to be a non-negligible factor in fileless malware or malicious actors that are “living off the land”....
Tyton Kernel-Mode Rootkit Hunter Detected Attacks Hidden Modules Syscall Table Hooking Network Protocol Hooking Netfilter Hooking Zeroed Process Inodes Process Fops Hooking Interrupt Descriptor Table Hooking Additional Features Notifications: Users...
YARA is a tool aimed at (but not limited to) helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malware families (or whatever...
Machine Learning / Malware Analysis
by do son · Published May 1, 2019 · Last modified October 10, 2021
VT Hunting Virus Total Hunting is a tiny tool based on the VT api version 3 to run daily, weekly or monthly report about malware hunting. The report can be...
iocextract This library extracts URLs, IP addresses, MD5/SHA hashes, email addresses, and YARA rules from text corpora. It includes some encoded and “defanged” IOCs in the output, and optionally decodes/refangs...
YaraGuardian A Django web interface for managing Yara rules. The manager enables users to: * Search for specific rules based on rule characteristics * Categorize and organize rules easily and...
Linux Malware Detect (LMD) is a malware scanner for Linux released under the GNU GPLv2 license, that is designed around the threats faced in shared hosted environments. It uses threat...
FakeNet-NG is a next-generation dynamic network analysis tool for malware analysts and penetration testers. It is open source and designed for the latest versions of Windows (and Linux, for certain...
mXtract An open source Linux based tool that analyzes and dumps memory. It is developed as an offensive penetration testing tool, which is used to scan memory for private keys,...
Noriben Malware Analysis Sandbox Noriben is a Python-based script that works in conjunction with Sysinternals Procmon to automatically collect, analyze, and report on runtime indicators of malware. In a nutshell,...
Sniffles Sniffles is a tool for creating packet captures that will test IDS that use fixed patterns or regular expressions for detecting suspicious behavior. Sniffles works very simply. It takes...
Malware Analysis / Reverse Engineering
by do son · Published March 19, 2019 · Last modified November 4, 2024
RetDec is a retargetable machine-code decompiler based on LLVM. The decompiler is not limited to any particular target architecture, operating system, or executable file format: Supported file formats: ELF, PE, Mach-O, COFF,...
BlobRunner is a simple tool to quickly debug shellcode extracted during malware analysis. It allocates memory for the target file and jumps to the base (or offset) of the allocated...
Pafish Pafish is a demonstration tool that employs several techniques to detect sandboxes and analysis environments in the same way as malware families do. The project is open-source, you can...
Support Securityonline.info site. Thanks!
