Macmod / malkom
Malkom is an extensible and simple similarity graph generator for malware analysis aimed at helping analysts visualize and cluster sets of PE and ELF malware samples.
☆15Updated last year
Related projects ⓘ
Alternatives and complementary repositories for malkom
- My nim learning experiments☆11Updated 2 years ago
- ☆12Updated 2 years ago
- A collection of tools adversaries commonly use in an attack.☆14Updated 2 months ago
- Automated Persistence and Lateral Movement using GCP Patch Management☆14Updated 2 years ago
- Hash collisions and their exploitations☆9Updated 2 years ago
- Help deobfuscate VBScript☆15Updated 2 years ago
- 3gsocks - a reverse connection socks5 based network pivot☆9Updated 3 years ago
- A Docker container used to easily compile Nim binaries generated by my tools (NimPackt and NimPlant)☆14Updated last year
- Slides from my talk at the Adversary Village, Defcon 30☆29Updated 2 years ago
- Machine Learning basics with phishing dataset☆10Updated 3 years ago
- Autopsy Module to analyze Registry Hives☆13Updated 2 years ago
- Drakus allows you to monitor the artifacts and domains used in a Red Team exercise to see if they have been uploaded to certain online ma…☆13Updated 3 years ago
- OMIGOD! OM I GOOD? A free scanner to detect VMs vulnerable to one of the "OMIGOD" vulnerabilities discovered by Wiz's threat research tea…☆18Updated 3 years ago
- ☆18Updated last year
- Malware campaigns and APTs research by BlackArrow☆18Updated 4 years ago
- Tricard - Malware Sandbox Fingerprinting☆19Updated 11 months ago
- ☆17Updated last year
- Extension functionality for the NightHawk operator client☆26Updated last year
- An adaptation of timwhitez's proxycall that uses kernelbase.dll!Beep.☆11Updated last year
- The Catherine Framework is a general-purpose cybersecurity framework built to provide extended support for defense operations.☆16Updated 7 months ago
- Cisco CallManager User Enumeration☆15Updated 2 years ago
- TL;DR: Mutate a binary to identify potential exploit candidates☆12Updated last year
- Registry hive parsing the async way☆19Updated 2 months ago
- Sources Codes of many Office Malwares☆16Updated 2 years ago
- powershell script i wrote that can suspend an arbitrary process (with limits)☆20Updated last year
- x64 Windows package of the shellcode2exe tool☆14Updated 3 years ago
- A cap/pcap packet parser to make life easier when performing stealth/passive reconnaissance.☆21Updated 4 months ago