mandiant / flare-floss
FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
☆3,412Updated this week
Alternatives and similar repositories for flare-floss:
Users that are interested in flare-floss are comparing it to the libraries listed below
- FakeNet-NG - Next Generation Dynamic Network Analysis Tool☆1,854Updated last month
- Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-mem…☆3,225Updated last week
- A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering env…☆6,922Updated this week
- Repository of yara rules☆4,287Updated 10 months ago
- yarGen is a generator for YARA rules☆1,602Updated 8 months ago
- A curated list of awesome YARA rules, tools, and people.☆3,684Updated last week
- YARA signature and IOC database for my scanners and tools☆2,554Updated this week
- Noriben - Portable, Simple, Malware Analysis Sandbox☆1,139Updated last year
- Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks,…☆2,106Updated this week
- HackSys Extreme Vulnerable Driver (HEVD) - Windows & Linux☆2,574Updated last month
- A static analyzer for PE executables.☆1,043Updated last year
- IDA Pro utilities from FLARE team☆2,276Updated 3 months ago
- Malware Configuration And Payload Extraction☆2,193Updated this week
- Loki - Simple IOC and YARA Scanner☆3,467Updated 2 months ago
- Please no pull requests for this repository. Thanks!☆2,130Updated last week
- The pattern matching swiss knife☆8,542Updated last week
- oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware a…☆2,988Updated last month
- Malwoverview is a first response tool used for threat hunting and offers intel information from Virus Total, Hybrid Analysis, URLHaus, Po…☆3,090Updated 3 weeks ago
- Wiki to collect Red Team infrastructure hardening resources☆4,222Updated 10 months ago
- A toolset to make a system look as if it was the victim of an APT attack☆2,520Updated last year
- An advanced memory forensics framework☆7,528Updated last year
- The FLARE team's open-source tool to identify capabilities in executable files.☆5,131Updated this week
- Rekall Memory Forensic Framework☆1,940Updated 4 years ago
- Binaries for the book Practical Malware Analysis☆1,213Updated 2 years ago
- Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv…☆5,663Updated 3 weeks ago
- A collaborative, multi-platform, red teaming framework☆3,436Updated this week
- pefile is a Python module to read and work with PE (Portable Executable) files☆1,910Updated 5 months ago
- Defeating Windows User Account Control☆6,576Updated last week
- Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts)☆7,282Updated this week
- A list of cyber-chef recipes and curated links☆2,060Updated 8 months ago