A script that extracts embedded images from Office Open XML (OOXML) documents and generates image hash similarity graphs that cluster visually similar images together. The script computes the Average Hash of each extracted image, then graphs the images if they meet the similarity threshold. The script can be used as a technique for visually iden…
☆23Dec 12, 2021Updated 4 years ago
Alternatives and similar repositories for graph-maldoc-similar-images
Users that are interested in graph-maldoc-similar-images are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Tool to decrypt encrypted strings in AgentTesla☆16Jan 24, 2022Updated 4 years ago
- SubCrawl is a modular framework for discovering open directories, identifying unique content through signatures and organizing the data w…☆151Sep 22, 2023Updated 3 years ago
- Python-based cloud node for local use☆11Mar 7, 2018Updated 8 years ago
- YARI is an interactive debugger for YARA Language.☆91Sep 10, 2025Updated last year
- Automatically create YARA rules from malicious documents.☆210May 16, 2022Updated 4 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- A decryptor for systems infected by Avaddon ransomware.☆26Oct 29, 2024Updated 2 years ago
- Scripting together some of my favorite Python tools for doing initial triage of a suspected malicious document (e.g. PDF, DOC, DOCX, XSLM…☆17Mar 8, 2022Updated 4 years ago
- ☆17Apr 4, 2019Updated 7 years ago
- Remote Desktop Client Fingerprint script for Zeek. Based off of https://github.com/0x4D31/fatt☆40Jun 20, 2023Updated 3 years ago
- Just Another broken Registry Parser (JARP)☆16May 23, 2024Updated 2 years ago
- ☆12Jun 3, 2022Updated 4 years ago
- Easy way to create a MISP event related to a Phishing page☆17May 31, 2023Updated 3 years ago
- YARA Rule Strings Statistics Calculator and Malware Research Helper☆14Jul 24, 2021Updated 5 years ago
- This IDA Python plugin is intended to get you started creating IDA Plugins with Python, recognize the importance of deobfuscating strings…☆29Dec 16, 2020Updated 5 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Onsite Analysis Infrastructure☆16Jun 23, 2020Updated 6 years ago
- A simple Golang program to collect proxies☆14Aug 9, 2019Updated 7 years ago
- ☆12Nov 21, 2023Updated 2 years ago
- Threat Detection Rules (Snort/Sigma/Yara)☆14Jan 23, 2024Updated 2 years ago
- ☆21Jan 13, 2022Updated 4 years ago
- A collection of ready-to-use library code and symbols for the MinHash-based Code Relationship & Investigation Toolkit (MCRIT)☆15Sep 29, 2026Updated last month
- ☆25Jan 8, 2024Updated 2 years ago
- ☆19Sep 4, 2022Updated 4 years ago
- Defense from the 2020 Microsoft Evasion Competition☆17Apr 27, 2021Updated 5 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- These FLARE-VM configuration files are designed to be help setup a purpose-built installation, remove unnecessary packages to help stream…☆15Apr 10, 2024Updated 2 years ago
- ☆16Apr 8, 2023Updated 3 years ago
- ☆15Nov 25, 2021Updated 4 years ago
- Monitor Certificate Transparency Logs For Phishing Domains☆23Nov 19, 2018Updated 7 years ago
- Python bindings for the Zydis disassembler library☆17Jul 2, 2019Updated 7 years ago
- Collection of Malware Lures☆23Oct 8, 2021Updated 5 years ago
- Yara rules for quick reverse engineering of malware.☆18Dec 9, 2015Updated 10 years ago
- yet another sleep encryption thing. also used the default github repo name for this one.☆67May 11, 2023Updated 3 years ago
- A plugin to integrate an IPython kernel into Binary Ninja.☆30Jun 27, 2018Updated 8 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A Pythonic interface and command line tool for interacting with the InQuest Labs API.☆37Nov 18, 2025Updated 11 months ago
- Numerous fork bombs in popular programming langs ...☆11May 25, 2017Updated 9 years ago
- PHP generic 'eval' unpacker☆12Dec 5, 2018Updated 7 years ago
- Collection of scripts provided for public use☆46Aug 19, 2026Updated 2 months ago
- A map displaying threat actors from the misp-galaxy☆33Jan 16, 2023Updated 3 years ago
- Royal Road RTF Weaponizer object decoder☆24Sep 26, 2024Updated 2 years ago
- SharpASM is a C# project that aims to automate ASM (i.e. shellcode) execution in .NET programs by exploiting code caves in RWX sections a…☆62May 23, 2022Updated 4 years ago