evandowning Goto Github PK

adobe-malware-classifier

al-khaser

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

amsi-bypass-powershell

This repo contains some Amsi Bypass methods i found on different Blog Posts.

amsi-exec

Powershell code to attempt to beat the signature based checking for AMSI Bypass

amsi.fail

C# Azure Function with an HTTP trigger that generates obfuscated PowerShell snippets that break or disable AMSI for the current process.

amsiscanbufferbypass

Bypass AMSI by patching AmsiScanBuffer

amsitrigger

The Hunt for Malicious Strings

autocombo

avclass

AVClass malware labeling tool

bearparser

Portable Executable parsing library (from PE-bear)

cade

Code for our USENIX Security 2021 paper -- CADE: Detecting and Explaining Concept Drift Samples for Security Applications

capa

The FLARE team's open-source tool to identify capabilities in executable files.

capa-rules

Standard collection of rules for capa: the tool for enumerating the capabilities of programs

capa-testfiles

Data to test capa's code and rules.

cape

Malware Configuration And Payload Extraction

capemon

capemon: CAPE's monitor

capev2

Malware Configuration And Payload Extraction

community

Repository of modules and signatures contributed by the community

community-1

Community modules for CAPE Sandbox

cuckoo

Cuckoo Sandbox is an automated dynamic malware analysis system

cuckoo-diff

Determines similarities between malware runs (making sure malware is still malware after modification)

cuckoo-headless

All the functionality of Cuckoo without all of the overhead

deepreflect

Discovering Malicious Functionality through Binary Reconstruction

diaphora

Diaphora, the most advanced Free and Open Source program diffing tool.

dnn-binary-code-similarity

domainhunter

Checks expired domains for categorization/reputation and Archive.org history to determine good candidates for phishing and C2 domain names

dvdrip

Rip DVDs quickly and easily from the command line.

ember

evademl

An evolutionary framework for evading machine learning-based malware classifiers.

evademl-zoo

Benchmarking and Visualization Tool for Adversarial Machine Learning