Maff1t / JuanLesPIN-Public
Research tool able to detect and mitigate evasion techniques used by malware in-the-wild
☆11Updated last year
Related projects ⓘ
Alternatives and complementary repositories for JuanLesPIN-Public
- Effects of packers on machine-learning-based malware classifiers that use only static analysis☆83Updated 5 months ago
- Robust Automated Malware Unpacker☆84Updated last year
- IDA python plugin to scan binary with Yara rules☆171Updated 9 months ago
- Automated Yara Rule generation using Biclustering☆60Updated 3 years ago
- WhiteRabbitTracker: Analyzing malware evasions with information flow tracking☆16Updated 3 years ago
- ☆57Updated 3 years ago
- Forecasting Malware Capabilities From Cyber Attack Memory Images☆30Updated last year
- Arancino is a dynamic protection framework that defends Intel Pin against anti-instrumentation attacks.☆71Updated 2 years ago
- Discovering Malicious Functionality through Binary Reconstruction☆51Updated 3 years ago
- SAFE embeddings to match functions in yara☆100Updated 4 years ago
- automated-arancino is a lightweight analysis framework to automate malware experiments.☆15Updated 7 years ago
- ☆75Updated 4 years ago
- The MinHash-based Code Relationship & Investigation Toolkit (MCRIT) is a framework created to simplify the application of the MinHash alg…☆86Updated 5 months ago
- Robust API monitoring system presented in the paper "Designing Robust API Monitoring Solutions" (IEEE TDSC)☆23Updated 2 years ago
- ☆14Updated 2 years ago
- MAB-Malware an open-source reinforcement learning framework to generate AEs for PE malware. We model this problem as a classic multi-arme…☆40Updated last year
- Gadget displacement on top of IPR (In-Place Randomization) against Code Reuse Attack☆25Updated 8 years ago
- AVCLASS++: Yet Another Massive Malware Labeling Tool☆14Updated 4 years ago
- A curated resource list of adversarial attacks and defenses for Windows PE malware detection.☆68Updated 2 years ago
- Resources for the workshop titled "Repacking the unpacker: Applying Time Travel Debugging to malware analysis", given at HackLu 2019☆39Updated 5 years ago
- The Tangled Genealogy of IoT Malware☆11Updated 3 years ago
- ☆30Updated 8 months ago
- BluePill: Neutralizing Anti-Analysis Behavior in Malware Dissection (Black Hat Europe 2019, IEEE TIFS 2020)☆122Updated 2 years ago
- capemon: CAPE's monitor☆102Updated last week
- Port of the binary diffing library, diaphora, for radare2 and mariadb☆49Updated last year
- Dataset containing thousands of malware and goodware collected in the Brazilian cyberspace over years.☆18Updated 3 years ago
- Generating YARA rules based on binary code☆204Updated 3 years ago
- ☆20Updated 3 years ago
- SMDA is a minimalist recursive disassembler library that is optimized for accurate Control Flow Graph (CFG) recovery from memory dumps.☆226Updated 3 months ago
- SEMA is based on angr, a symbolic execution engine used to extract API calls. Especially, we extend ANGR with strategies to create repr…☆95Updated this week