dissectmalware Goto Github PK

base64_substring

Generate a Yara rule to find base64-encoded files containg a specific keyword

batch_deobfuscator

Deobfuscate batch scripts obfuscated using string substitution and escape character techniques.

blackarch

BlackArch Linux is an Arch Linux-based distribution for penetration testers and security researchers.

clipboardwatcher

Monitor the textual data pasted into Windows clipboard

css-exchange

Exchange Server support tools and scripts

document-samples

dotnet-computevirtualization

Sample class library for interfacing with Windows host compute service.

getting-started-terraform

Exercise files for my Pluralsight course

iocminer

A Framework to Automatically Extract Indicators of Compromise (IoCs) from Twitter

malwarecmdmonitor

Shows command lines used by latest instances analyzed on Hybrid-Analysis

mdiextractor

ms-identity-b2c-javascript-spa

Vanilla JavaScript single-page application calling a web API protected by Azure AD B2C

msoffcrypto-tool

Python tool and library for decrypting MS Office files with passwords or other keys

npp-langs-4-sec

Notepad++ Syntax Highlighting for Languages Used by Cyber Security Professionals

officeforensictools

A set of tools for collecting forensic information

oletools

oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.

phishcanary

Given a TLD zone file, PhishCanary extracts International Domain Names (IDNs) that are homoglyphs of specified target domain names.

pyonenote

A python library to parse OneNote (.one) files

pyrh

Python Framework to make trades with the unofficial Robinhood API

pysamesame

This is a python version of samesame repo to generate homograph strings

pyxlsb

Excel 2007+ Binary Workbook (xlsb) reader for Python

pyxlsb2

an Excel 2007+ Binary Workbook (xlsb) parser for Python

sublime-platform

Open, adaptable email security platform.

tldextractor

Accurately extract TLD, effective TLD, 2LD, 3LD, ... from a given domain name; by utilizing the Public Suffix List maintained by Mozilla Foundation

winnativeio

Using Undocumented NTDLL Functions to Read/Write/Delete File

winsmsd

Windows (ShadowMove) Socket Duplication

xlmmacrodeobfuscator

Extract and Deobfuscate XLM macros (a.k.a Excel 4.0 Macros)

xlrd

Please use openpyxl where you can...

xlrd2

xlrd2 is a variant of xlrd that is actively maintained

yaradbg-backend