ANSSI-FR / bootcode_parserLinks
A boot record parser that identifies known good signatures for MBR, VBR and IPL.
☆98Updated 3 months ago
Alternatives and similar repositories for bootcode_parser
Users that are interested in bootcode_parser are comparing it to the libraries listed below
Sorting:
- ☆68Updated 7 years ago
- Creating function call graphs based on radare2 framwork, plot fancy graphs and extract behavior indicators☆86Updated 7 years ago
- zer0m0n driver for cuckoo sandbox☆87Updated 8 years ago
- ☆109Updated 7 years ago
- A Yara rule generator for finding related samples and hunting☆158Updated 2 years ago
- Lazy Office Analyzer☆122Updated 8 years ago
- ☆43Updated 6 years ago
- Public documents about bachelor thesis "Reverse Engineering Analysis of the NDIS 6.* stack"☆41Updated 8 years ago
- An automated collection and analysis of malware from my honeypots.☆25Updated 7 years ago
- openioc_scan Volatility Framework plugin☆43Updated 9 years ago
- Membrane: A Posteriori Detection of Malicious Code Loading by Memory Paging Analysis☆41Updated 8 years ago
- PE Import Hash Generator☆80Updated 7 years ago
- ☆134Updated 6 years ago
- A collection of scripts to initialize a windows VM to run all the malwares!☆106Updated 5 years ago
- Various Yara signatures (possibly to be included in a release later).☆85Updated 6 years ago
- ☆51Updated 6 years ago
- Transfer EIP control to shellcode during malware analysis investigation☆75Updated 10 years ago
- VolDiff: Malware Memory Footprint Analysis based on Volatility☆194Updated 7 years ago
- A python application designed to remotely dump RAM of a Linux client and create a volatility profile for later analysis on your local hos…☆161Updated 4 years ago
- Your bag of handy codes for malware researchers☆121Updated 5 years ago
- Automatically exported from code.google.com/p/malware-lu☆55Updated 6 years ago
- Tool to make in memory man in the middle☆124Updated 6 years ago
- Scripts for dealing with various ek's☆69Updated 8 years ago
- Emulating Virtual Environment to stay protected against advanced malware☆100Updated 6 years ago
- Sample staging & detonation utility to be used in combination with Cuckoo Sandbox.☆82Updated last year
- Automated memory forensics analysis☆33Updated 5 years ago
- Simple shellcode decoder using unicorn-engine☆98Updated 9 years ago
- Parse Windows Prefetch files: Supports XP - Windows 10 Prefetch files☆118Updated last year
- Simple NTFS crawler.☆56Updated 7 years ago
- Differential Analysis of Malware in Memory☆211Updated 8 years ago