phage-nz / ph0neutria
ph0neutria is a malware zoo builder that sources samples straight from the wild. Everything is stored in Viper for ease of access and manageability.
☆299Updated 4 years ago
Related projects: ⓘ
- ☆237Updated this week
- (extensible) Data Exfiltration Toolkit (DET)☆158Updated 4 years ago
- VolatilityBot – An automated memory analyzer for malware samples and memory dumps☆263Updated 3 years ago
- Python script to decode common encoded PowerShell scripts☆214Updated 6 years ago
- Query and report user logons relations from MS Windows Security Events☆240Updated 6 years ago
- Differential Analysis of Malware in Memory☆209Updated 7 years ago
- ☆133Updated this week
- Codex Gigas malware DNA profiling search engine discovers malware patterns and characteristics assisting individuals who are attracted in…☆154Updated 4 years ago
- Command line tool for scanning streams within office documents plus xor db attack☆125Updated 11 months ago
- 16,432 Free Yara rules created by☆378Updated 5 years ago
- Decept Network Protocol Proxy☆274Updated last year
- ☆192Updated this week
- Auto Installer Script for Cuckoo Sandbox☆166Updated 6 years ago
- The Seeker of IOC☆129Updated 3 years ago
- Web interface for the Volatility Memory Forensics Framework☆259Updated 6 years ago
- snake - a malware storage zoo☆217Updated last year
- A repository of tools and scripts related to malware analysis☆242Updated 8 years ago
- VolDiff: Malware Memory Footprint Analysis based on Volatility☆192Updated 7 years ago
- Deception based detection techniques mapped to the MITRE’s ATT&CK framework☆280Updated 6 years ago
- Allows you to quickly query a Windows machine for RAM artifacts☆218Updated 4 years ago
- Automated Tactics Techniques & Procedures☆251Updated last year
- ☆152Updated this week
- Next Generation Firewall Audit and Bypass Tool☆259Updated 7 years ago
- Mystique may be used to discover infection markers that can be used to vaccinate endpoints against malware. It receives as input a malici…☆80Updated 6 years ago
- Malware Repository Framework☆99Updated 6 years ago
- Tool written in python3 to determine where the AV signature is located in a binary/payload☆311Updated 6 years ago
- Oriana is a threat hunting tool that leverages a subset of Windows events to build relationships, calculate totals and run analytics. The…☆175Updated 3 years ago
- Script lets you gather malicious software and c&c servers from open source platforms like Malshare, Malcode, Google, Cymon - vxvault, cyb…☆33Updated 4 years ago
- ☆150Updated 5 years ago
- A collection of scripts to initialize a windows VM to run all the malwares!☆105Updated 4 years ago