This is a little plugin to copy disassembly in a way that is usable in YARA rules!
☆48Apr 14, 2025Updated last year
Alternatives and similar repositories for copy-as-yara
Users that are interested in copy-as-yara are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Scripts and lists to help generate YARA friendly string mutations☆23Apr 9, 2023Updated 3 years ago
- 100 Days of YARA to be updated with rules & ideas as the year progresses☆60Jan 18, 2023Updated 3 years ago
- Conceptual Methods for Finding Commonalities in Macho Files☆13Mar 21, 2024Updated 2 years ago
- The Multiplatform Linux Sandbox☆16Dec 19, 2023Updated 2 years ago
- Automatically spider the result set of a Censys/Shodan search and download all files where the file name or folder path matches a regex.☆29Apr 22, 2023Updated 3 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Repository of tools, YARA rules, and code-snippets from Stairwell's research team.☆23Jan 31, 2024Updated 2 years ago
- Generate YARA rules from Windows API hashes for malware detection and hunting.☆17Aug 11, 2026Updated 3 weeks ago
- BinjaryNinja plugin for a ShellStorm like assembly/disassembly experience☆17Jul 28, 2026Updated last month
- Yara rules written by me, for free use.☆20Nov 26, 2021Updated 4 years ago
- A ruleset to find potentially malicious code in macOS malware samples☆40Aug 29, 2023Updated 3 years ago
- powershell script i wrote that can suspend an arbitrary process (with limits)☆22Mar 26, 2023Updated 3 years ago
- Low budget VirusTotal Intelligence Cosplay☆20Jan 6, 2022Updated 4 years ago
- Steezy - Ghetto Yara Generation☆15Mar 27, 2023Updated 3 years ago
- Lists of unsafe words in multiple languages as YARA rules☆29Feb 2, 2026Updated 7 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆13Feb 5, 2025Updated last year
- Fix Go obfuscated binaries that were obfuscated using gobfuscator☆50Aug 17, 2021Updated 5 years ago
- USB HID driver emulation with PID/VID (0x3bca/0x27bb) of Plenom A/S Busylight Alpha, that is supported by Mimikatz. When mimikatz is exec…☆21Sep 6, 2022Updated 4 years ago
- Binary Ninja plugin for annotation of arguments for functions☆21Oct 20, 2024Updated last year
- List of legitimate macOS apps doing not great things☆35Feb 11, 2022Updated 4 years ago
- Streaming Unexpected Network Byte Sequences with High Probability of Blue Screening or Otherwise Crashing Attacker Command-and-Control No…☆22Jul 14, 2019Updated 7 years ago
- UI plugin integrating Kaitai Struct (kaitai.io) in Binja☆46Jul 28, 2026Updated last month
- Everything related to YARA☆16Apr 18, 2026Updated 4 months ago
- Freyja is a Golang, Purple Team agent that compiles into Windows, Linux and macOS x64 executables.☆41Oct 29, 2024Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Sandbox samples and monitor them with kunai☆29Jul 21, 2026Updated last month
- ☆15Sep 24, 2024Updated last year
- Lena's scripts/code/resources for malware analysis☆26Jun 13, 2024Updated 2 years ago
- ☆33Jan 3, 2023Updated 3 years ago
- My reversing tools. Some custom, some not.☆214Jan 3, 2024Updated 2 years ago
- A Binary Ninja plugin for analyzing Swift binaries☆27Oct 20, 2025Updated 10 months ago
- Python based CLI for MalwareBazaar☆39May 17, 2026Updated 3 months ago
- A practical DFIR cheatsheet for identifying, collecting, triaging, and reviewing macOS persistence mechanisms, with acquisition-aware gui…☆25Apr 26, 2026Updated 4 months ago
- The only thing better than completely headless!☆36Apr 1, 2019Updated 7 years ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- Binary Ninja plugin that can be used to apply Triton's dead store eliminitation pass on basic blocks or functions.☆66Jul 17, 2024Updated 2 years ago
- Mach-O file format reader, written entirely in Swift☆13May 10, 2020Updated 6 years ago
- machofile is a module to parse Mach-O binary files☆99Feb 10, 2026Updated 6 months ago
- ☆17Jun 17, 2022Updated 4 years ago
- Imphash-like calculation on Golang binaries☆50Jul 2, 2022Updated 4 years ago
- JPCERT/CC public YARA rules repository☆112Mar 9, 2026Updated 5 months ago
- A guide on how to write fast and memory friendly YARA rules☆174Feb 11, 2025Updated last year