Category: Malware Analysis

Maltrail

maltrail v0.25 releases: Malicious traffic detection system

Maltrail is a malicious traffic detection system, utilizing publicly available (black)lists containing malicious and/or generally suspicious trails, along with static trails compiled from various AV reports and custom user-defined lists, where trail can be anything...

Hfinger

Hfinger: fingerprinting HTTP requests

Hfinger – fingerprinting HTTP requests Tool for fingerprinting HTTP requests of malware. Based on Tshark and written in Python3. Working prototype stage ūüôā Its main objective is to provide a representation of malware requests...

replica

replica: Ghidra Analysis Enhancer

replica Ghidra Analysis Enhancer ‚ú®Features ‚ö°¬†Disassemble missed instructions – Define code that Ghidra’s auto analysis missed ‚ö°¬†Detect and fix missed functions – Define functions that Ghidra’s auto analysis missed ‚ö°¬†Fix ‘undefinedN’ datatypes – Enhance...