nao-sec Goto Github PK

anyrun-api

ANY.RUN API Wrapper for PHP

aoba

Automatic Tools for Observe and Analyze EK and Identify Malware (a.k.a nao_sec tools)

binary_decoder

dataset

nao dataset

docker-misp

Automated Docker MISP container - Malware Information Sharing Platform and Threat Sharing

ektotal

[BHUSA 2018 Arsenal] Integrated tool to analyze Drive-by Download attack

ioc

misp format Malware IOCs

jsac2018

Drive-by Download Must Die - Japan Security Analyst Conference 2018

mal_getter

Tool for dropping malware from EK

materials

Past presentation materials

misp-galaxy

Clusters and elements to attach to MISP events or attributes (like threat actors)

ramnit_traffic_parser

Parsing Ramnit's traffic

rigek

Analyzing Rig Exploit Kit

rr_decoder

Decode Royal Road RTF Weaponizer 8.t object

rr_decoder.cs

C# implementation of rr_decoder

screnc.php

Microsoft Script Encoder / Decoder in PHP

starc

Simple high-interactive client honeypot

starc.php

StarC (PHP version)

starc2

Rewrite StarC in Python and Powershell

tknk_scanner

Community-based integrated malware identification system

yara_rules

For malware research