Maco - Malware config extractor framework
☆53Jul 7, 2026Updated 3 weeks ago
Alternatives and similar repositories for Maco
Users that are interested in Maco are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Python Library for ConfigExtractor☆16Jun 5, 2026Updated last month
- CAPE core and community parsers☆19Jun 5, 2026Updated last month
- Docker compose Assemblyline 4 deployment (appliance and development)☆17Jul 16, 2026Updated last week
- Community modules for CAPE Sandbox☆114Jul 7, 2026Updated 3 weeks ago
- This is a malware analyzer for Mac OS X that extends the Cuckoo Sandbox project (https://cuckoosandbox.org/)☆23Jul 8, 2016Updated 10 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- CLI interface to get Ransomware attacks data from ransomwhat.telemetry.ltd☆13Feb 8, 2023Updated 3 years ago
- JXA script for Mythic that prints the TCC.db☆15Apr 18, 2021Updated 5 years ago
- Base components for Assemblyline 4 (Datastore, ODM, Filestore, Remote Datatypes, utils function, etc...)☆72Updated this week
- Utilities for working with vivisect☆26Oct 1, 2025Updated 9 months ago
- Configuration Extractors for Malware☆126Apr 23, 2025Updated last year
- Generator of regular expressions☆15Apr 11, 2025Updated last year
- Basic SDK for Intezer Platform API 2.0☆33Jul 9, 2026Updated 2 weeks ago
- CyberSecurity Resources (Threat Intelligence, Malware Analysis, Pentesting, DFIR, etc)☆11Nov 30, 2023Updated 2 years ago
- MacOS forensic collector for Velociraptor. 70 artefacts covering browsers, communications, user activity, persistence, security, logs, fi…☆16May 26, 2026Updated 2 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Python implementation of the CaRT library for (un)inerting files.☆53Feb 10, 2025Updated last year
- ☆21May 10, 2023Updated 3 years ago
- ☆34Jan 13, 2026Updated 6 months ago
- Sigma Engine implementation in TypeScript☆28Mar 5, 2023Updated 3 years ago
- DC3 Malware Configuration Parser (DC3-MWCP) is a framework for parsing configuration information from malware. The information extracted …☆349Jul 17, 2026Updated last week
- ☆10Jul 15, 2026Updated 2 weeks ago
- Use SQL to instantly query file, domain, URL and IP scanning results from VirusTotal.☆23Updated this week
- A robust, multiprocessing-capable, multi-family RAT config parser/config extractor for AsyncRAT, DcRAT, VenomRAT, QuasarRAT, XWorm, Xeno …☆84May 23, 2026Updated 2 months ago
- A collection of tools and detections for the Sliver C2 Frameworj☆137Apr 24, 2023Updated 3 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A personalized COLLECTION of technical research papers focused on malware analysis. Covers static/dynamic analysis, sandboxing, behaviora…☆29Jun 9, 2026Updated last month
- Rulezet is an open-source web platform for sharing, evaluating, improving, and managing cybersecurity detection rules (YARA, Sigma, Suric…☆56Updated this week
- Rules Shared by the Community from 100 Days of YARA 2023 -☆19Apr 10, 2023Updated 3 years ago
- 7zip Static Build Dockerfile☆14May 23, 2026Updated 2 months ago
- A collection of Tools and Rules for decoding Brute Ratel C4 badgers☆67Jul 7, 2022Updated 4 years ago
- Client library for the mwdb service by CERT Polska.☆43Feb 10, 2026Updated 5 months ago
- A tool for studying JavaScript malware.☆15Updated this week
- All in one - Malware + Analysis by Cylance☆11Nov 23, 2018Updated 7 years ago
- Visually inspect and force decode YARA and regex matches found in both binary and text data with colors. Lots of colors.☆152Feb 1, 2026Updated 5 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Collection of private Yara rules.☆388Jan 28, 2026Updated 6 months ago
- Elastic Security Labs releases☆90Jul 15, 2026Updated last week
- Base service class from Assemblyline 4☆16Jul 20, 2026Updated last week
- Sabonis, a Digital Forensics and Incident Response pivoting tool☆20Mar 3, 2022Updated 4 years ago
- A tool for detecting VBA stomping.☆102Aug 4, 2022Updated 3 years ago
- AIL project training materials☆39Apr 21, 2026Updated 3 months ago
- MCP server for .NET reverse engineering automation☆23Apr 10, 2026Updated 3 months ago