cube0x8 / ChromeRagamuffin
Google Chrome internals analysis using Volatility
☆41Updated 2 years ago
Related projects ⓘ
Alternatives and complementary repositories for ChromeRagamuffin
- Volatility Framework plugin to detect various types of hooks as performed by banking Trojans☆40Updated 5 years ago
- A Volatility plugin for finding sqlite database rows☆22Updated 5 years ago
- Tool for analysis of Windows Prefetch files☆26Updated 6 years ago
- Handy scripts to speed up malware analysis☆35Updated last year
- A summary about different projects/presentations/tools to test how to evade malware sandbox systems☆48Updated 5 years ago
- All TMF files that I extracted from Microsoft PDBs.☆12Updated 5 years ago
- ☆48Updated 4 years ago
- ☆36Updated 5 years ago
- Royal APT - APT15 - Related Information from NCC Group Cyber Defense Operations Research☆53Updated 6 years ago
- ☆26Updated last year
- a collection of yara rules for binary analysis☆24Updated 7 years ago
- Scans through registry hives outputting entropy values for key/values, dumps binary contents to files...we are looking for those "fileles…☆11Updated 5 years ago
- Go Lang Portable Executable Parser☆37Updated 3 years ago
- QEMU with rVMI extensions☆25Updated 7 years ago
- Resolves DLL API entrypoints for a process w/ remote query capabilities.☆55Updated 7 years ago
- SuperPeHasher is a wrapper for several hash algorithms dedicated to PE file.☆27Updated 3 years ago
- TA505 unpacker Python 2.7☆46Updated 4 years ago
- Steezy - Ghetto Yara Generation☆15Updated last year
- Training material for the Shellcode-Lab, including Slides and Codes☆17Updated 5 years ago
- ☆13Updated 8 years ago
- Psinfo is a Volatility plugin which collects the process related information from the VAD (Virtual Address Descriptor) and PEB (Process E…☆36Updated 8 years ago
- Binary Ninja plugin that syncs WinDbg to Binary Ninja☆47Updated 6 years ago
- Use this library to automatically extract PE files compressed with aplib from a binary blob.☆32Updated 5 years ago
- Radare2 Metadata Extraction to Elasticsearch☆21Updated 6 months ago
- Parsing MITRE EDR Evaluation results☆12Updated 5 years ago
- A python script that can be used to scan data within in an IDB using Yara.☆22Updated 6 years ago
- Emu-strings project - JScript/VBScript automated dropper analysis system☆17Updated 3 years ago
- ☆51Updated 6 years ago
- ☆66Updated last year