Scripts and rulesets for analysing the Winnti malware
☆24Jul 24, 2019Updated 7 years ago
Alternatives and similar repositories for 2019-winnti-analyse
Users that are interested in 2019-winnti-analyse are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A project in Golang that will create prefix-based magic MD5 hashes for type juggling.☆21Jul 29, 2018Updated 8 years ago
- Exploit Development and Reverse Engineering with GDB Made Easy☆18Jun 25, 2019Updated 7 years ago
- QEMU with rVMI extensions☆26Jul 25, 2017Updated 9 years ago
- a shared short domain for XSS and other hacks☆32Mar 3, 2022Updated 4 years ago
- Decodes PlugX traffic and encrypted/compressed artifacts☆38Apr 29, 2013Updated 13 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- pocket guide for core threat hunting concepts☆23May 6, 2020Updated 6 years ago
- Imphash-like calculation on Golang binaries☆50Jul 2, 2022Updated 4 years ago
- Elasticsearch/Kibana environment and log data for Sigma workshop☆27Dec 20, 2019Updated 6 years ago
- Attack Tool Timing and Reporting - Structured Attack Logging Format☆22Nov 4, 2022Updated 3 years ago
- Multicore EVTX to Elasticsearch ingestor for incident responders.☆14May 12, 2021Updated 5 years ago
- ☆15Oct 25, 2022Updated 3 years ago
- A boundle of useful scripts☆20Apr 21, 2026Updated 3 months ago
- Trace ScriptBlock execution for powershell v2☆40Jan 14, 2020Updated 6 years ago
- Synthesising graphs and simulating things☆10Oct 25, 2022Updated 3 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- ☆136Jan 24, 2019Updated 7 years ago
- Binary String Toolkit (BST). Quickly and easily convert binary strings for all your exploit development needs.☆22Jul 27, 2018Updated 8 years ago
- dawg the hallway monitor - monitor operating system changes and analyze introduced attack surface when installing software☆55Nov 14, 2019Updated 6 years ago
- Threat Alert Logic Repository☆93Feb 7, 2019Updated 7 years ago
- Encase Script to parse harddrive for MFT data☆16Jun 17, 2016Updated 10 years ago
- Various short scripts and tools used for Digital Forensics☆14Jul 9, 2026Updated last month
- Simple shellcode decoder using unicorn-engine☆101Oct 17, 2015Updated 10 years ago
- ☆12Sep 4, 2013Updated 12 years ago
- A simple guideline for MacOs Security.☆13Jun 15, 2022Updated 4 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- NSRL BloomFilter, Mandiant BloomFilter, Hyperloglog Malware Data Structure☆15Mar 14, 2014Updated 12 years ago
- Burp plugin that clusters responses to show an overview of received responses☆14Jun 7, 2019Updated 7 years ago
- Static unpacker for FinSpy VM☆103Jul 11, 2021Updated 5 years ago
- An advanced Twitter scraping & OSINT tool written in Python that doesn't use Twitter's API, allowing you to scrape a user's followers, fo…☆13Aug 19, 2022Updated 3 years ago
- Various public documents, whitepapers and articles about APT campaigns☆55Apr 1, 2016Updated 10 years ago
- Historical Observations of Actionable Reputation Data☆13Jun 26, 2018Updated 8 years ago
- Visual Basic GUI: A Tool to Inject Keystrokes on a SSH Client via an X11 Forwarded Session☆62Mar 13, 2018Updated 8 years ago
- Simple yara decompiler☆17Apr 8, 2017Updated 9 years ago
- A browser extension that seamlessly integrates your yara match notifications into VirusTotal Intelligence.☆17Feb 8, 2015Updated 11 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Splunk Technology Add-On (TA) for collecting ETW events from Windows systems☆15Dec 8, 2022Updated 3 years ago
- Code and Slides of my BSides London 2019 presentation about Attacker Emulation using CALDERA☆22Jun 9, 2019Updated 7 years ago
- bridge for Philips Hue to MQTT, written in Go☆11Jul 18, 2023Updated 3 years ago
- torcx is a boot-time addon manager for immutable systems☆17Apr 13, 2026Updated 4 months ago
- ☆16Jan 31, 2015Updated 11 years ago
- A hex/binary black box analysis tool☆13Aug 31, 2016Updated 9 years ago
- NTLM HTTP Authentication Session Tier Exploit☆15Jan 9, 2014Updated 12 years ago