Scripts to aid analysis of files obfuscated with ScatterBee.
☆25Jan 6, 2023Updated 3 years ago
Alternatives and similar repositories for ScatterBee_Analysis
Users that are interested in ScatterBee_Analysis are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Steezy - Ghetto Yara Generation☆15Mar 27, 2023Updated 3 years ago
- IDA Pro plugin to aid with the analysis of native IIS modules☆21Aug 1, 2024Updated 2 years ago
- Analyses in IDA/Hex-Rays☆88Apr 6, 2023Updated 3 years ago
- C2 Active Scanner☆59Jun 19, 2024Updated 2 years ago
- Deobfuscation library for PoisionPlug.SHADOW's ScatterBrain obfuscator☆82Mar 14, 2025Updated last year
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- A collection of modules and scripts to help with analyzing Nim binaries☆85Oct 7, 2024Updated last year
- Unpacker for donut shellcode☆22Jun 20, 2020Updated 6 years ago
- Nim-IDA-FLIRT-Generator☆20Dec 5, 2023Updated 2 years ago
- Quick test for CVE-2023-26025 behaviours☆13Nov 29, 2023Updated 2 years ago
- Example of an ELF parser to learn about the ELF format☆11Oct 6, 2024Updated last year
- Binary Ninja plugin for interacting with the OALabs HashDB service☆22Nov 1, 2024Updated last year
- Royal Road RTF Weaponizer object decoder☆24Sep 26, 2024Updated last year
- Indicators of compromise, YARA rules, and Python scripts to supplement the SANS CTI Summit 2021 talk: "xStart when you're ready".☆14Jul 12, 2021Updated 5 years ago
- Plugin for ida pro that copies RVA under cursor to clipboard.☆18Jul 28, 2023Updated 3 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- This repository contains various files linked to Operation Shadowhammer as it was originally discovered by Kaspersky Team.☆12Mar 27, 2019Updated 7 years ago
- Repository of tools, YARA rules, and code-snippets from Stairwell's research team.☆23Jan 31, 2024Updated 2 years ago
- A list of JARM fingerprints from malicious IPs, matched against known C2 fingerprints.☆13Jun 9, 2025Updated last year
- A collection of shellcode hashes☆17Aug 15, 2018Updated 8 years ago
- Emulates the VirusTotal "vt" YARA module for livehunt rule debugging/testing☆23May 29, 2023Updated 3 years ago
- Low budget VirusTotal Intelligence Cosplay☆20Jan 6, 2022Updated 4 years ago
- An npm package to defang and refang IoC☆13Sep 5, 2026Updated 2 weeks ago
- ☆10Jan 30, 2022Updated 4 years ago
- Finds all first occurring string references near another reference☆20Dec 16, 2021Updated 4 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- ☆24Oct 30, 2024Updated last year
- IDA Pro plugin for recognizing known hashes of API function names☆87May 12, 2022Updated 4 years ago
- ☆36Jan 11, 2023Updated 3 years ago
- Pure Go bindings for Zydis.☆18May 22, 2026Updated 4 months ago
- The Multiplatform Linux Sandbox☆16Dec 19, 2023Updated 2 years ago
- Unpacking and decryption tools for the Emotet malware☆44Dec 5, 2021Updated 4 years ago
- Some IR notes☆17Jul 2, 2016Updated 10 years ago
- An automation plugin for Tiny-Tracer framework to trace and watch functions directly out of the executable's import table or trace logs (…☆128Jul 12, 2024Updated 2 years ago
- Write-ups of All types Bugs☆24Apr 13, 2022Updated 4 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Base service class from Assemblyline 4☆16Updated this week
- A simple C# executable that invokes an arbitrary method of an arbitrary C# DLL☆144Mar 24, 2024Updated 2 years ago
- Help fuzz various protocols and waits for ping backs Integrates LDAP server and JNDI payload☆12Dec 27, 2021Updated 4 years ago
- ☆15Jun 5, 2019Updated 7 years ago
- CmdDesktopSwitch is a small utility that lists all windows desktops and provides the option to switch between them. This can be used to i…☆35May 27, 2016Updated 10 years ago
- Symbolic execution for RISC-V machine code based on the formal LibRISCV ISA model☆56May 26, 2025Updated last year
- A tool to help malware analysts signature unique parts of RTF documents☆29Jan 5, 2026Updated 8 months ago