Scripting together some of my favorite Python tools for doing initial triage of a suspected malicious document (e.g. PDF, DOC, DOCX, XSLM, etc.)
☆17Mar 8, 2022Updated 4 years ago
Alternatives and similar repositories for Maldocs
Users that are interested in Maldocs are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- github pages repository☆12Nov 29, 2025Updated 8 months ago
- Frida plugin for Binary Ninja☆20Jan 12, 2025Updated last year
- WPF helper library☆15Apr 6, 2019Updated 7 years ago
- Walking the PEB in VBA☆24Apr 6, 2020Updated 6 years ago
- ACT documentation repo☆16May 22, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Dynamic binary analysis via platform emulation☆12Aug 10, 2018Updated 8 years ago
- IDA Pro plug-in to fix/extract/view RTTI information☆11Jan 23, 2018Updated 8 years ago
- A plugin for the commercial IDA Pro disassembler that warns users if they leave their instance idling for too long.☆30Jul 17, 2026Updated last month
- ☆13Dec 7, 2023Updated 2 years ago
- Quick analysis focusing on most important of a Malware or a Threat☆39Sep 4, 2023Updated 2 years ago
- Tool to retrieve Config from Redline C2 servers☆16Mar 14, 2023Updated 3 years ago
- MacOS 12.2.1 Monterey compatible version of dyld_shared_cache_util☆15Feb 28, 2022Updated 4 years ago
- Plugin to visualize Miasm IR graph in Binary Ninja.☆14Aug 7, 2019Updated 7 years ago
- ☆14Dec 24, 2023Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆11Jan 8, 2022Updated 4 years ago
- Extract HP printer ".bdl" firmware update files☆13Nov 15, 2017Updated 8 years ago
- Build your own complete XNU kernel header set, replaces Kernel.framework. Gain access to kernel private structures and symbols etc with I…☆14Jun 21, 2018Updated 8 years ago
- Discover similar functions structures in binaries using graph theory.☆25Oct 14, 2021Updated 4 years ago
- Plugin for x64dbg to generate Yara rules from function basic blocks.☆37Sep 2, 2017Updated 8 years ago
- Kobold: Evaluating Decentralized Access Control for Remote NSXPC Methods on iOS☆10Jun 6, 2020Updated 6 years ago
- ☆14Oct 14, 2016Updated 9 years ago
- Simple TPM utils in Python for generating random numbers & RSA keys☆19Jan 15, 2017Updated 9 years ago
- A low-level Rust wrapper around the MediaInfo C library.☆13Jan 21, 2020Updated 6 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Malware analysis tool based on taint analysis.☆14Jan 29, 2022Updated 4 years ago
- Ask ChatGPT directly from the Chrome address bar (omnibox)☆10Mar 23, 2023Updated 3 years ago
- Country IP Access list support to nginx proxy manager☆11Jul 9, 2023Updated 3 years ago
- Tools to measure an app's App Sandbox usage☆26May 20, 2020Updated 6 years ago
- Frida uses libunwind for generating backtraces on some platforms☆17Jun 22, 2024Updated 2 years ago
- A command-line tool for reconnaissance and targeted write operations on Confluence and Jira instances.☆14Jan 15, 2025Updated last year
- CIA UAC bypass implementation that utilizes elevated COM object to write to System32 and an auto-elevated process to execute as administr…☆14Dec 30, 2023Updated 2 years ago
- Direct UIKit backend for Bevy Engine☆16Jan 28, 2026Updated 6 months ago
- ☆64Oct 17, 2024Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- x86_64 LKM linux rootkit☆17Jul 1, 2023Updated 3 years ago
- Easy to install v2board with docker☆14Dec 23, 2025Updated 7 months ago
- Next.js PoC for CVE-2025-29927☆15Mar 24, 2025Updated last year
- A proof of concept AMSI & ETW bypass using trampolines for hooking and modifying execution flow☆19Jun 26, 2025Updated last year
- Exploit for HEVD☆10Sep 11, 2019Updated 6 years ago
- PoC for iOS, macOS, iPadOS (DoS)☆16Jan 14, 2022Updated 4 years ago
- PoC for detecting and evading ETW detection of .Net Assembly.Load☆22Aug 26, 2020Updated 5 years ago