a collection of yara rules for binary analysis
☆24Aug 24, 2017Updated 8 years ago
Alternatives and similar repositories for YARA
Users that are interested in YARA are comparing it to the libraries listed below
Sorting:
- Multiple rules for yara-project for detect compiler/packer/protector☆33Dec 24, 2019Updated 6 years ago
- IoC's, PCRE's, YARA's etc☆23Mar 25, 2025Updated 11 months ago
- Generate bulk YARA rules from YAML input☆22Feb 3, 2020Updated 6 years ago
- The mission of Black Lotus Labs is to leverage our network visibility to both help protect customers and keep the internet clean.☆12Jun 18, 2021Updated 4 years ago
- 🌦️ Domain Ranker☆16Sep 7, 2019Updated 6 years ago
- slide☆13Oct 26, 2017Updated 8 years ago
- Yaras Random☆24Feb 21, 2019Updated 7 years ago
- A plugin to integrate an IPython kernel into Binary Ninja.☆30Jun 27, 2018Updated 7 years ago
- Crack your macros like the math pros.☆33Feb 14, 2017Updated 9 years ago
- Scripts targeting specific families☆13Jul 3, 2017Updated 8 years ago
- Openssh backdoor found with a ssh honeypot☆27Jul 22, 2016Updated 9 years ago
- A collection of YARA rules for public use. Built from information in intelligence profiles, dossiers and file work.☆18Sep 10, 2023Updated 2 years ago
- 收集的各大公司发布的物联网安全年度报告☆13Jul 31, 2017Updated 8 years ago
- Python scripts for gdb, reverse engineering oriented☆16Sep 20, 2016Updated 9 years ago
- A taint tracing plugin for Valgrind, unofficial mirror for https://code.google.com/p/flayer/☆16Aug 5, 2015Updated 10 years ago
- VB Exe Parser is an IDA script written in Python. This script will help you to parse VB program internal structures. It can find: Event, …☆18Oct 7, 2016Updated 9 years ago
- Registry timestamp manipulation☆17Feb 26, 2014Updated 12 years ago
- Improved version of pintool☆17Jul 24, 2016Updated 9 years ago
- Efficient Multi-threaded Binary Code Control Flow Profiling Pintool☆22Jul 30, 2016Updated 9 years ago
- PoC ActiveX SVG Document Execution☆21Nov 8, 2018Updated 7 years ago
- VMware Snapshot Forensic Comparison Scripts☆25Mar 19, 2013Updated 12 years ago
- A simple, quick, and dirty websocket shell for PowerShell.☆20Jun 5, 2017Updated 8 years ago
- Git for me to put all my forensics stuff☆23Sep 2, 2025Updated 6 months ago
- SQL scripts for querying event logs☆21Jul 12, 2017Updated 8 years ago
- tiny embedded MIPS virtualization platform - a very small and lean hypervisor using MIPS R5 hardware VZ option for embedded systems (IoT …☆20Sep 26, 2023Updated 2 years ago
- metasploit loader with antivirus bypass module☆18Jun 26, 2016Updated 9 years ago
- Materials for a course based on the Practical Malware Analysis text by Andrew Honig and Michael Sikorski☆19Jan 4, 2019Updated 7 years ago
- Fuzzy Hash calculated from import API of PE files☆90Aug 26, 2022Updated 3 years ago
- Shared yara rules☆30Mar 17, 2014Updated 11 years ago
- runtime code injector for Linux☆26May 29, 2011Updated 14 years ago
- Set of Yara rules for finding files using magics headers☆142Sep 8, 2020Updated 5 years ago
- T00ls.Net 2017第一期线下沙龙（北京）PPT合集☆20May 24, 2017Updated 8 years ago
- ☆27Mar 1, 2022Updated 4 years ago
- Tools to reverse the Toshiba FlashAir SD cards☆28Jul 23, 2019Updated 6 years ago
- Yara rules for quick reverse engineering of malware.☆19Dec 9, 2015Updated 10 years ago
- Converts the Clamav Virus Database definitions to YARA rules [GOLANG]☆52Feb 22, 2021Updated 5 years ago
- A modified pycparser to parse 010 templates☆54Jan 5, 2020Updated 6 years ago
- A PyQt5 frontend to the binjatron plugin for Binary Ninja that includes highlighting features aimed at making it easier for beginners to …☆25Aug 22, 2017Updated 8 years ago
- rune - radare2 based symbolic emulator☆27Aug 29, 2017Updated 8 years ago