A script that extracts embedded images from Office Open XML (OOXML) documents and generates image hash similarity graphs that cluster visually similar images together. The script computes the Average Hash of each extracted image, then graphs the images if they meet the similarity threshold. The script can be used as a technique for visually iden…
☆23Dec 12, 2021Updated 4 years ago
Alternatives and similar repositories for graph-maldoc-similar-images
Users that are interested in graph-maldoc-similar-images are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Tool to decrypt encrypted strings in AgentTesla☆16Jan 24, 2022Updated 4 years ago
- SubCrawl is a modular framework for discovering open directories, identifying unique content through signatures and organizing the data w…☆150Sep 22, 2023Updated 2 years ago
- Automatically create YARA rules from malicious documents.☆210May 16, 2022Updated 4 years ago
- Python-based cloud node for local use☆11Mar 7, 2018Updated 8 years ago
- ☆13Oct 29, 2022Updated 3 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- YARI is an interactive debugger for YARA Language.☆90Sep 10, 2025Updated last year
- A decryptor for systems infected by Avaddon ransomware.☆26Oct 29, 2024Updated last year
- ☆17Apr 4, 2019Updated 7 years ago
- A collection of ready-to-use library code and symbols for the MinHash-based Code Relationship & Investigation Toolkit (MCRIT)☆15Dec 10, 2025Updated 9 months ago
- Remote Desktop Client Fingerprint script for Zeek. Based off of https://github.com/0x4D31/fatt☆40Jun 20, 2023Updated 3 years ago
- A simple Golang program to collect proxies☆14Aug 9, 2019Updated 7 years ago
- Threat Detection Rules (Snort/Sigma/Yara)☆14Jan 23, 2024Updated 2 years ago
- Onsite Analysis Infrastructure☆16Jun 23, 2020Updated 6 years ago
- Just Another broken Registry Parser (JARP)☆16May 23, 2024Updated 2 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Collection of DBI evasion techniques☆16Jan 25, 2022Updated 4 years ago
- An introduction to detection engineering☆14Jan 3, 2025Updated last year
- YARA Rule Strings Statistics Calculator and Malware Research Helper☆14Jul 24, 2021Updated 5 years ago
- ☆19Sep 4, 2022Updated 4 years ago
- The Damn Vulnerable Router Firmware Project☆30Feb 5, 2018Updated 8 years ago
- A repository to store community malware research notes and findings.☆17Sep 3, 2026Updated 2 weeks ago
- Easy way to create a MISP event related to a Phishing page☆17May 31, 2023Updated 3 years ago
- ☆25Jan 8, 2024Updated 2 years ago
- Defense from the 2020 Microsoft Evasion Competition☆17Apr 27, 2021Updated 5 years ago
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- automated-arancino is a lightweight analysis framework to automate malware experiments.☆16Apr 17, 2017Updated 9 years ago
- Python bindings for the Zydis disassembler library☆17Jul 2, 2019Updated 7 years ago
- RTAA-72, is CVCIO's real-time intelligence dashboard for Twitter☆22Sep 4, 2022Updated 4 years ago
- ☆12Jun 3, 2022Updated 4 years ago
- Generate bulk YARA rules from YAML input☆22Feb 3, 2020Updated 6 years ago
- A simple IDA Pro plugin to show all HexRays decompiler comments written by user☆23Sep 3, 2021Updated 5 years ago
- ☆15Nov 25, 2021Updated 4 years ago
- yet another sleep encryption thing. also used the default github repo name for this one.☆67May 11, 2023Updated 3 years ago
- List of tools to assist in analyzing samples of ISFB/Gozi/Ursnif☆15Jul 17, 2019Updated 7 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- A plugin to integrate an IPython kernel into Binary Ninja.☆30Jun 27, 2018Updated 8 years ago
- 阿里2015第二届安全挑战赛第三题题解☆24Jun 14, 2021Updated 5 years ago
- ☆38Jun 4, 2024Updated 2 years ago
- Monitor Certificate Transparency Logs For Phishing Domains☆23Nov 19, 2018Updated 7 years ago
- Automatically identify and highlight targets (Russian soldiers, right-wing extremists etc) in visualized social networks☆23Sep 4, 2022Updated 4 years ago
- Coordinates scrapers and interfaces with database☆20Aug 8, 2023Updated 3 years ago
- Tools that trigger False Positive AV alerts☆59Dec 24, 2024Updated last year