A script that extracts embedded images from Office Open XML (OOXML) documents and generates image hash similarity graphs that cluster visually similar images together. The script computes the Average Hash of each extracted image, then graphs the images if they meet the similarity threshold. The script can be used as a technique for visually iden…
☆23Dec 12, 2021Updated 4 years ago
Alternatives and similar repositories for graph-maldoc-similar-images
Users that are interested in graph-maldoc-similar-images are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Tool to decrypt encrypted strings in AgentTesla☆16Jan 24, 2022Updated 4 years ago
- SubCrawl is a modular framework for discovering open directories, identifying unique content through signatures and organizing the data w…☆150Sep 22, 2023Updated 2 years ago
- Automatically create YARA rules from malicious documents.☆211May 16, 2022Updated 4 years ago
- Python-based cloud node for local use☆11Mar 7, 2018Updated 8 years ago
- ☆13Oct 29, 2022Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- YARI is an interactive debugger for YARA Language.☆90Sep 10, 2025Updated 11 months ago
- A decryptor for systems infected by Avaddon ransomware.☆26Oct 29, 2024Updated last year
- ☆15Apr 4, 2019Updated 7 years ago
- Scripting together some of my favorite Python tools for doing initial triage of a suspected malicious document (e.g. PDF, DOC, DOCX, XSLM…☆17Mar 8, 2022Updated 4 years ago
- A collection of ready-to-use library code and symbols for the MinHash-based Code Relationship & Investigation Toolkit (MCRIT)☆14Dec 10, 2025Updated 8 months ago
- Remote Desktop Client Fingerprint script for Zeek. Based off of https://github.com/0x4D31/fatt☆40Jun 20, 2023Updated 3 years ago
- A simple Golang program to collect proxies☆14Aug 9, 2019Updated 7 years ago
- Just Another broken Registry Parser (JARP)☆16May 23, 2024Updated 2 years ago
- Collection of DBI evasion techniques☆16Jan 25, 2022Updated 4 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- YARA Rule Strings Statistics Calculator and Malware Research Helper☆14Jul 24, 2021Updated 5 years ago
- ☆12Nov 21, 2023Updated 2 years ago
- A repository to store community malware research notes and findings.☆17Feb 13, 2026Updated 5 months ago
- ☆25Jan 8, 2024Updated 2 years ago
- ☆21Jan 13, 2022Updated 4 years ago
- ☆16Apr 8, 2023Updated 3 years ago
- This IDA Python plugin is intended to get you started creating IDA Plugins with Python, recognize the importance of deobfuscating strings…☆29Dec 16, 2020Updated 5 years ago
- Python bindings for the Zydis disassembler library☆17Jul 2, 2019Updated 7 years ago
- ☆12Jun 3, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Generate bulk YARA rules from YAML input☆22Feb 3, 2020Updated 6 years ago
- A simple IDA Pro plugin to show all HexRays decompiler comments written by user☆23Sep 3, 2021Updated 4 years ago
- Examples of the inner workings of the WinCrypto API☆15Jan 2, 2018Updated 8 years ago
- These FLARE-VM configuration files are designed to be help setup a purpose-built installation, remove unnecessary packages to help stream…☆16Apr 10, 2024Updated 2 years ago
- ☆15Nov 25, 2021Updated 4 years ago
- yet another sleep encryption thing. also used the default github repo name for this one.☆68May 11, 2023Updated 3 years ago
- List of tools to assist in analyzing samples of ISFB/Gozi/Ursnif☆15Jul 17, 2019Updated 7 years ago
- A plugin to integrate an IPython kernel into Binary Ninja.☆30Jun 27, 2018Updated 8 years ago
- 阿里2015第二届安全挑战赛第三题题解☆24Jun 14, 2021Updated 5 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Quick & Dirty DFIR scripts developed by Ebryx DFIR team to keep handy during field assignment☆14Jan 7, 2026Updated 7 months ago
- ☆37Jun 4, 2024Updated 2 years ago
- Monitor Certificate Transparency Logs For Phishing Domains☆23Nov 19, 2018Updated 7 years ago
- Coordinates scrapers and interfaces with database☆20Aug 8, 2023Updated 3 years ago
- Malwares are here☆26Jan 16, 2025Updated last year
- Automatically identify and highlight targets (Russian soldiers, right-wing extremists etc) in visualized social networks☆23Sep 4, 2022Updated 3 years ago
- Tools that trigger False Positive AV alerts☆59Dec 24, 2024Updated last year