Scripts to aid analysis of files obfuscated with ScatterBee.
☆24Jan 6, 2023Updated 3 years ago
Alternatives and similar repositories for ScatterBee_Analysis
Users that are interested in ScatterBee_Analysis are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Steezy - Ghetto Yara Generation☆15Mar 27, 2023Updated 3 years ago
- IDA Pro plugin to aid with the analysis of native IIS modules☆23Aug 1, 2024Updated last year
- Analyses in IDA/Hex-Rays☆87Apr 6, 2023Updated 3 years ago
- C2 Active Scanner☆59Jun 19, 2024Updated 2 years ago
- Deobfuscation library for PoisionPlug.SHADOW's ScatterBrain obfuscator☆82Mar 14, 2025Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Unpacker for donut shellcode☆22Jun 20, 2020Updated 6 years ago
- Quick test for CVE-2023-26025 behaviours☆13Nov 29, 2023Updated 2 years ago
- Miscellanous scripts used for malware analysis☆22Oct 4, 2018Updated 7 years ago
- Example of an ELF parser to learn about the ELF format☆11Oct 6, 2024Updated last year
- Web access logs analyzer - provides an insight on how remote hosts behave☆15Sep 13, 2021Updated 4 years ago
- Royal Road RTF Weaponizer object decoder☆24Sep 26, 2024Updated last year
- Indicators of compromise, YARA rules, and Python scripts to supplement the SANS CTI Summit 2021 talk: "xStart when you're ready".☆14Jul 12, 2021Updated 5 years ago
- Plugin for ida pro that copies RVA under cursor to clipboard.☆18Jul 28, 2023Updated 2 years ago
- Repository of tools, YARA rules, and code-snippets from Stairwell's research team.☆23Jan 31, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- This repository contains various files linked to Operation Shadowhammer as it was originally discovered by Kaspersky Team.☆12Mar 27, 2019Updated 7 years ago
- ☆47Nov 10, 2025Updated 8 months ago
- A list of JARM fingerprints from malicious IPs, matched against known C2 fingerprints.☆13Jun 9, 2025Updated last year
- A collection of shellcode hashes☆17Aug 15, 2018Updated 7 years ago
- Emulates the VirusTotal "vt" YARA module for livehunt rule debugging/testing☆24May 29, 2023Updated 3 years ago
- CVE-2021-22005批量验证python脚本☆13Sep 25, 2021Updated 4 years ago
- An npm package to defang and refang IoC☆13Updated this week
- ☆10Jan 30, 2022Updated 4 years ago
- Finds all first occurring string references near another reference☆19Dec 16, 2021Updated 4 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- ☆32Apr 24, 2022Updated 4 years ago
- ☆24Oct 30, 2024Updated last year
- IDA Pro plugin for recognizing known hashes of API function names☆84May 12, 2022Updated 4 years ago
- ☆43Nov 5, 2018Updated 7 years ago
- ☆36Jan 11, 2023Updated 3 years ago
- Pure Go bindings for Zydis.☆17May 22, 2026Updated 2 months ago
- The Multiplatform Linux Sandbox☆16Dec 19, 2023Updated 2 years ago
- Yara Based Detection Engine for web browsers☆50Sep 5, 2021Updated 4 years ago
- Unpacking and decryption tools for the Emotet malware☆44Dec 5, 2021Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Some IR notes☆17Jul 2, 2016Updated 10 years ago
- Python 3 library to build YARA rules.☆13Oct 24, 2021Updated 4 years ago
- A simple C# executable that invokes an arbitrary method of an arbitrary C# DLL☆143Mar 24, 2024Updated 2 years ago
- Help fuzz various protocols and waits for ping backs Integrates LDAP server and JNDI payload☆12Dec 27, 2021Updated 4 years ago
- CmdDesktopSwitch is a small utility that lists all windows desktops and provides the option to switch between them. This can be used to i…☆35May 27, 2016Updated 10 years ago
- A tool to help malware analysts signature unique parts of RTF documents☆28Jan 5, 2026Updated 6 months ago
- My collection of scripts for Ghidra (https://github.com/NationalSecurityAgency/ghidra)☆11Sep 13, 2020Updated 5 years ago