mandiant/apooxml external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

mandiant/apooxml

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/mandiant/apooxml)

Close

mandiant / apooxmlView on GitHubMore

• External links
• Readme badge

Generate YARA rules for OOXML documents.

☆38Jun 1, 2023Updated 2 years ago

Alternatives and similar repositories for apooxml

Users that are interested in apooxml are comparing it to the libraries listed below

• blacklotuslabs / Research

  View on GitHub
  The mission of Black Lotus Labs is to leverage our network visibility to both help protect customers and keep the internet clean.
  ☆12Jun 18, 2021Updated 4 years ago
• Powershell-Offense / Post-Exploitation

  View on GitHub
  \ PowerAvails Powershell /
  ☆10Jun 30, 2018Updated 7 years ago
• BinaryDefense / IcedDecrypt

  View on GitHub
  IcedID Decryption Tool
  ☆28May 7, 2021Updated 4 years ago
• PwCUK-CTO / rtfsig

  View on GitHub
  A tool to help malware analysts signature unique parts of RTF documents
  ☆28Jan 5, 2026Updated last month
• hardwaterhacker / i_want_my_eip

  View on GitHub
  Resources for I Want My EIP, presented at Derbycon 2017
  ☆11Sep 23, 2017Updated 8 years ago
• bnbdr / swisscheese

  View on GitHub
  Exploits for YARA 3.7.1 & 3.8.1
  ☆32Dec 20, 2018Updated 7 years ago
• michaeljgoodman / Dumpulator-IDA

  View on GitHub
  Currently proof-of-concept
  ☆17Dec 17, 2021Updated 4 years ago
• colincowie / viper-plugins

  View on GitHub
  Plugins for the Viper Framework
  ☆14Sep 21, 2019Updated 6 years ago
• HacKanCuBa / shellcomm-php

  View on GitHub
  Communicate with a remote shell easily
  ☆12Dec 10, 2017Updated 8 years ago
• Den1al / CVE-2018-9206

  View on GitHub
  A Python PoC for CVE-2018-9206
  ☆13Oct 22, 2018Updated 7 years ago
• openwall / pwned-passwords-sampler

  View on GitHub
  Generate representative samples from Pwned Passwords (HIBP)
  ☆11Jan 6, 2022Updated 4 years ago
• c2links / NoWhere2Hide

  View on GitHub
  C2 Active Scanner
  ☆59Jun 19, 2024Updated last year
• Wenzel / osw-fs-windows

  View on GitHub
  A git history of Windows filesystems
  ☆77Aug 21, 2020Updated 5 years ago
• jschicht / SetRegTime

  View on GitHub
  Registry timestamp manipulation
  ☆17Feb 26, 2014Updated 12 years ago
• darkoperator / SysmonLinux.Util

  View on GitHub
  PowerShell Module for parsing logs generated by Sysinternals Sysmon for Linux
  ☆37Mar 20, 2022Updated 3 years ago
• mandiant / vocab_scraper

  View on GitHub
  Vocabulary Scraper script used in FLARE's analysis of Russian-language Carbanak source code
  ☆37Apr 22, 2019Updated 6 years ago
• i4ki / malelf

  View on GitHub
  Malware analysis tool
  ☆22Apr 27, 2025Updated 10 months ago
• embee-research / Yara-detection-rules

  View on GitHub
  Yara Rules for Modern Malware
  ☆78Mar 3, 2024Updated 2 years ago
• MishcondeReya / Covid-19-CTI

  View on GitHub
  A collection of Covid-19 related threat intelligence and resources.
  ☆19Jul 17, 2020Updated 5 years ago
• Apr4h / GetInjectedThreads

  View on GitHub
  C# Implementation of Jared Atkinson's Get-InjectedThread.ps1
  ☆54Jul 11, 2021Updated 4 years ago
• BinaryDefense / YaraMemoryScanner

  View on GitHub
  Simple PowerShell script to enable process scanning with Yara.
  ☆98Oct 4, 2022Updated 3 years ago
• kcyerrid / CTI

  View on GitHub
  Cyber Threat Intelligence
  ☆78Dec 7, 2025Updated 2 months ago
• kost / nanomet

  View on GitHub
  Nano meterpreter shell based on TinyMet
  ☆28Aug 27, 2016Updated 9 years ago
• compoterhacker / joomlol

  View on GitHub
  Joomla User-Agent/X-Forwarded-For RCE
  ☆17Feb 5, 2016Updated 10 years ago
• Arno0x / WebDavDelivery

  View on GitHub
  A WebDAV PROPFIND covert channel to deliver payloads
  ☆52Nov 14, 2017Updated 8 years ago
• TheHive-Project / TheHiveHooks

  View on GitHub
  This is a python tool aiming to make using TheHive webhooks easier.
  ☆28Oct 23, 2020Updated 5 years ago
• tanc7 / skidstorm

  View on GitHub
  ☆25Mar 19, 2025Updated 11 months ago
• AndrewRathbun / SANSGoldPaperResearch_FOR500_Rathbun

  View on GitHub
  A repository containing the research output from my GCFE Gold Paper which compared Windows 10 and Windows 11.
  ☆27Jul 27, 2022Updated 3 years ago
• dmchell / Sniper

  View on GitHub
  A simple proof of concept for detecting use of Cobalt Strike's execute-assembly
  ☆59Apr 1, 2022Updated 3 years ago
• mgreen27 / Invoke-LiveResponse

  View on GitHub
  Invoke-LiveResponse
  ☆150Feb 22, 2022Updated 4 years ago
• jivoi / dotfiles

  View on GitHub
  home! sweet home
  ☆25Aug 23, 2019Updated 6 years ago
• ahhh / YARA

  View on GitHub
  a collection of yara rules for binary analysis
  ☆24Aug 24, 2017Updated 8 years ago
• neonprimetime / PhishingKitTracker

  View on GitHub
  PROJECT PAUSED 1/11/22, Tracking Threat Actor Emails in Phishing Kits. CC @PhishKitTracker on twitter if you find a #threatactoremail in …
  ☆102Jan 11, 2022Updated 4 years ago
• ruppde / yara_rules

  View on GitHub
  Yara rules
  ☆22Mar 27, 2023Updated 2 years ago
• rmdavy / AmsiPEBWalkVBA

  View on GitHub
  Walking the PEB in VBA
  ☆24Apr 6, 2020Updated 5 years ago
• FarghlyMal / Config-Extractors

  View on GitHub
  ☆27Nov 26, 2024Updated last year
• sbousseaden / YaraHunts

  View on GitHub
  Random hunting ordiented yara rules
  ☆96Mar 27, 2023Updated 2 years ago
• naxonez / YaraRules

  View on GitHub
  Yaras Random
  ☆24Feb 21, 2019Updated 7 years ago
• T3KX / Crackmapexec-LAPS

  View on GitHub
  LAPS module for CrackMapExec
  ☆29Oct 20, 2021Updated 4 years ago