Balbuzard is a package of malware analysis tools in python to extract patterns of interest from suspicious files (IP addresses, domain names, known file headers, interesting strings, etc). It can also crack malware obfuscation such as XOR, ROL, etc by bruteforcing and checking for those patterns.
☆143Jan 10, 2020Updated 6 years ago
Alternatives and similar repositories for balbuzard
Users that are interested in balbuzard are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ExeFilter is an open-source tool and framework to filter file formats in e-mails, web pages or files. It detects many common file formats…☆73Dec 13, 2021Updated 4 years ago
- Tool to help guess a files 256 byte XOR key by using frequency analysis☆90Jun 11, 2018Updated 8 years ago
- unXOR will search a XORed file and try to guess the key using known-plaintext attacks.☆145Apr 23, 2020Updated 6 years ago
- A Simple CLI App to mark all EXCEL sheets visible (i.e. sets "Very Hidden" and "Hidden" to "Visible")☆11Apr 16, 2020Updated 6 years ago
- A GC link parser for both linkfiles and jumplists.☆18Oct 28, 2016Updated 10 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- A collection of awesome software, libraries, documents, books, resources and cools stuffs about security.☆13Apr 1, 2019Updated 7 years ago
- A VBA parser and emulation engine to analyze malicious macros.☆1,132Jul 10, 2024Updated 2 years ago
- FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.☆4,204Updated this week
- PEframe is a open source tool to perform static analysis on Portable Executable malware and malicious MS Office documents.☆628Aug 8, 2022Updated 4 years ago
- oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware a…☆3,441Feb 14, 2026Updated 8 months ago
- A configurable OS shell command injection vulnerability testbed☆15Jul 19, 2013Updated 13 years ago
- Parses the WMI object database....looking for persistence☆36Dec 12, 2019Updated 6 years ago
- Noriben - Portable, Simple, Malware Analysis Sandbox☆1,309Sep 18, 2026Updated last month
- Tools for parsing Forensic images☆41Dec 14, 2018Updated 7 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A taxonomy and dictionary of malware behaviors.☆43Aug 20, 2019Updated 7 years ago
- Abuses Powershell Profiles☆13Oct 6, 2015Updated 11 years ago
- A machine learning tool that ranks strings based on their relevance for malware analysis.☆767Jul 24, 2026Updated 3 months ago
- Windows Live Artifacts Acquisition Script☆195Jun 20, 2022Updated 4 years ago
- FileInsight-plugins: decoding toolbox of McAfee FileInsight hex editor for malware analysis☆164Dec 15, 2024Updated last year
- Yara rules for quick reverse engineering of malware.☆18Dec 9, 2015Updated 10 years ago
- MAEC Schemas and Schema Development☆89Jan 29, 2020Updated 6 years ago
- Yara rules for detecting malware☆22Sep 9, 2025Updated last year
- hopefully a source-to-source deobfuscator, aiming at deobfuscating common scripts languages such as Powershell, VBA and Javascript. Curre…☆41Aug 17, 2019Updated 7 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A collection of YARA rules for public use. Built from information in intelligence profiles, dossiers and file work.☆18Sep 10, 2023Updated 3 years ago
- Carve Windows Prefetch files from arbitrary binary data☆16Jun 11, 2017Updated 9 years ago
- Sources code extracted from malwares for analysis☆41Mar 10, 2023Updated 3 years ago
- Yara rules for malware families seen as part of targeted threats project☆147Nov 17, 2016Updated 9 years ago
- This repository hosts community contributed Kestrel huntflows (.hf) and huntbooks (.ipynb)☆37Jan 2, 2024Updated 2 years ago
- A collection of YARA rules we wish to share with the world, most probably referenced from http://blog.inquest.net.☆389May 11, 2022Updated 4 years ago
- The Cold Disk Quick Response (CDQR) tool is a fast and easy to use forensic artifact parsing tool that works on disk images, mounted driv…☆347Jun 25, 2022Updated 4 years ago
- Track previous changes on specific AD accounts (users, computers) and Groups (online DC), even if event logs were wiped/not collected (e.…☆16Feb 25, 2025Updated last year
- Malware.lu configuration extractor☆26Mar 27, 2014Updated 12 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Plugins to add funtionality to ProcDOT. http://www.procdot.com☆25Sep 26, 2023Updated 3 years ago
- Yara Ruleset for scanning Linux servers for shells, spamming, phishing and other webserver baddies☆109Mar 4, 2021Updated 5 years ago
- Tool to parse SRU database☆26Mar 1, 2018Updated 8 years ago
- Generic data DEcoding/ENcoding application built with PyQt5.☆48Mar 29, 2025Updated last year
- Collect, Process, and Hunt with host based data from MacOS, Windows, and Linux☆519Oct 21, 2022Updated 4 years ago
- Volatility plugin for extracts configuration data of known malware☆498Dec 22, 2023Updated 2 years ago
- APIInfo Plugin (x86) - A Plugin For x64dbg☆52Jul 17, 2018Updated 8 years ago