Scripts and lists to help generate YARA friendly string mutations
☆23Apr 9, 2023Updated 3 years ago
Alternatives and similar repositories for Cerebro
Users that are interested in Cerebro are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- This is a little plugin to copy disassembly in a way that is usable in YARA rules!☆48Apr 14, 2025Updated last year
- 100 Days of YARA to be updated with rules & ideas as the year progresses☆60Jan 18, 2023Updated 3 years ago
- An experimental script to perform bulk parsing of arbitrary file features with YARA and console logging.☆21Nov 13, 2022Updated 3 years ago
- Steezy - Ghetto Yara Generation☆15Mar 27, 2023Updated 3 years ago
- ☆11Apr 25, 2021Updated 5 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Automatically spider the result set of a Censys/Shodan search and download all files where the file name or folder path matches a regex.☆29Apr 22, 2023Updated 3 years ago
- ☆20Apr 28, 2025Updated last year
- A Yara Lua output script for Suricata☆21Apr 7, 2019Updated 7 years ago
- A Python wrapper library for libyara and a local server for fully utilizing the CPUs of the system to scan with yara...with additional ca…☆19Dec 8, 2022Updated 3 years ago
- Conceptual Methods for Finding Commonalities in Macho Files☆13Mar 21, 2024Updated 2 years ago
- Python based CLI for MalwareBazaar☆39May 17, 2026Updated 2 months ago
- “Intelliroot Code Injection Hunter” is a tool that can to help you identify injected malicious code. The tool can identify and extract po…☆16Sep 21, 2022Updated 3 years ago
- Streaming Unexpected Network Byte Sequences with High Probability of Blue Screening or Otherwise Crashing Attacker Command-and-Control No…☆22Jul 14, 2019Updated 7 years ago
- ☆40Aug 22, 2025Updated 11 months ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Thor Artifacts for Velociraptor☆19Dec 2, 2025Updated 7 months ago
- Volatility plugin to search for all Autostart Extensibility Points (AESPs)☆10Jun 13, 2026Updated last month
- Emulates the VirusTotal "vt" YARA module for livehunt rule debugging/testing☆24May 29, 2023Updated 3 years ago
- Knowing which rule should trigger according to the redcannary test☆11Nov 23, 2024Updated last year
- Placeholder for my detection repo and misc detection engineering content☆43Oct 20, 2023Updated 2 years ago
- A collection of shellcode hashes☆17Aug 15, 2018Updated 7 years ago
- ☆13Feb 5, 2025Updated last year
- Your friendly neighbourhood image resizing API. Resize or aspect, you're cropping with me.☆12Apr 29, 2021Updated 5 years ago
- ☆21Apr 19, 2024Updated 2 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- CLI tool to compute the TypeRefHash for .NET binaries.☆19Nov 10, 2021Updated 4 years ago
- Yara rules written by me, for free use.☆20Nov 26, 2021Updated 4 years ago
- Generates YARA rules to detect malware using API hashing☆17Mar 16, 2021Updated 5 years ago
- [Moved to Codeberg] Tools for inspecting YARA bytecode☆22Jul 1, 2020Updated 6 years ago
- A guide on how to write fast and memory friendly YARA rules☆174Feb 11, 2025Updated last year
- Helping Incident Responders hunt for potential persistence mechanisms on UNIX-based systems.☆17Oct 28, 2023Updated 2 years ago
- ☆50Jan 13, 2020Updated 6 years ago
- Get started using Synapse Open-Source to start a Cortex and perform analysis within your area of expertise.☆51May 16, 2022Updated 4 years ago
- ☆17Oct 29, 2023Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Menu for Thor scanner lite☆20Oct 24, 2025Updated 9 months ago
- ☆33Jan 3, 2023Updated 3 years ago
- A PE Header-Based Antivirus Tool☆12Nov 14, 2014Updated 11 years ago
- Repository of tools, YARA rules, and code-snippets from Stairwell's research team.☆23Jan 31, 2024Updated 2 years ago
- Build: LNX.LA.3.5.2.2-01710-8x74.0-1☆13Dec 18, 2015Updated 10 years ago
- Signature-based detection of malware features based on Windows API call sequences. It's like YARA for sandbox API traces!☆85Jun 28, 2023Updated 3 years ago
- Parse nmap scan data with Perl (official repo)☆37Jan 26, 2019Updated 7 years ago