pygrum / siphon
A feed of malware samples curated from threat intelligence sources.
☆25Updated last year
Alternatives and similar repositories for siphon:
Users that are interested in siphon are comparing it to the libraries listed below
- This x64dbg plugin allows you to upload your sample to Malcore and view the results.☆33Updated last year
- Malware Muncher is a proof-of-concept Python script that utilizes the Frida framework for binary instrumentation and API hooking, enablin…☆44Updated 2 years ago
- IDA Python scripts☆30Updated last year
- 🚧 Currently transfering TLP:CLEAR rules from TLP:AMBER repository...☆22Updated 11 months ago
- General malware analysis stuff☆36Updated 6 months ago
- ☆38Updated last year
- ☆25Updated 3 months ago
- ☆25Updated 4 months ago
- Collection of my own detection rules☆15Updated last year
- Golang bindings for PE-sieve☆42Updated last year
- Repo containing my public talks☆23Updated last year
- Tool that can be used to trim useless things from a PE file such as the things a file pumper would add.☆25Updated 8 months ago
- This repository contains an IDA processor for loading and disassembling compiled yara rules.☆37Updated 2 months ago
- ☆36Updated 2 years ago
- ☆25Updated last year
- Custom Binary Ninja Themes☆12Updated last year
- Configuration Extractor for BlackCat Ransomware☆30Updated 2 years ago
- SRE - Dissecting Malware for Static Analysis & the Complete Command-line Tool☆52Updated 2 months ago
- A tool that automates regex generation for the x86 and x86-64 instruction sets☆68Updated 10 months ago
- Defeating Anti-Debugging Techniques for Malware Analysis☆13Updated 2 years ago
- rpv-web is a browser based frontend for the rpv library☆24Updated 7 months ago
- Unpacker and Config Extractor for managed Redline Stealer payloads☆40Updated 2 years ago
- ☆25Updated 3 months ago
- Invoke-DetectItEasy is a wrapper for excelent tool called Detect-It-Easy. This PS module is very useful for Threat Hunting and Forensics.☆25Updated 3 years ago
- Ghidra plugin for HashDB☆19Updated last year
- Analysis tool for estimating the likelihood that a binary contains compressed or encrypted bytes☆46Updated 3 months ago
- An injector that use PT_LOAD technique☆12Updated 2 years ago
- ☆12Updated 2 years ago