michael-yip / APTMalwareNotes
A repository of open source reports on different malware families used in targeted cyber intrusions ("APT").
☆51Updated 9 years ago
Related projects ⓘ
Alternatives and complementary repositories for APTMalwareNotes
- ☆49Updated 9 years ago
- Royal APT - APT15 - Related Information from NCC Group Cyber Defense Operations Research☆53Updated 6 years ago
- ☆27Updated 6 years ago
- Script to extract malicious payload and decoy document from CVE-2015-1641 exploit documents☆23Updated 7 years ago
- Process HTTP Pcaps With YARA☆101Updated 11 years ago
- Malware/IOC ingestion and processing engine☆103Updated 6 years ago
- Python scripts to parse scans.io ssl data and ingest into elasticsearch for searching☆33Updated 8 years ago
- This is just my personal compilation of APT malware from whitepaper releases, documents and malware samples from my personal research.☆31Updated 4 years ago
- Ragpicker is a Plugin based malware crawler with pre-analysis and reporting functionalities. Use this tool if you are testing antivirus p…☆94Updated 9 years ago
- Malware samples observed in the wild from time to time☆12Updated 5 years ago
- Shows command lines used by latest instances analyzed on Hybrid-Analysis☆43Updated 6 years ago
- malware-traffic-analysis.net PCAPs repository.☆34Updated 8 years ago
- Python tool and library to help analyze files during malware triage and analysis.☆77Updated 4 years ago
- DockerFiles for Docker Containers☆16Updated 7 years ago
- ☆41Updated 2 years ago
- Scan web server for known webshell names and responses☆50Updated 8 years ago
- Telsy CTI Research Team☆57Updated 3 years ago
- Explore Indicators of Compromise Automatically☆94Updated 4 years ago
- Alienvault Labs Projects Random Stuff☆79Updated 11 years ago
- NCC Group's analysis and exploitation of CVE-2017-8759 along with further refinements☆94Updated 7 years ago
- Historical list of {Cobalt Strike,NanoHTTPD} servers☆122Updated 5 years ago
- A collection of infosec related scripts and information.☆53Updated last month
- Code, commands, and chatter about Threat Hunting.☆34Updated 4 years ago
- A collection of scripts to initialize a windows VM to run all the malwares!☆105Updated 4 years ago
- Struts Apache 2 based honeypot as well as a detection module for Apache 2 servers☆72Updated 7 years ago
- An ICAP Server with yara scanner for URL and content.☆57Updated 3 years ago
- Volatility Framework plugin to detect various types of hooks as performed by banking Trojans☆40Updated 5 years ago
- Command line tool for scanning streams within office documents plus xor db attack☆126Updated last year