volexity / hwp-extract
A library and cli tool to extract HWP files.
☆19Updated last week
Alternatives and similar repositories for hwp-extract:
Users that are interested in hwp-extract are comparing it to the libraries listed below
- This repository contains an IDA processor for loading and disassembling compiled yara rules.☆33Updated 3 weeks ago
- Extract data of TTD trace file to a minidump☆28Updated last year
- Generates YARA rules to detect malware using API hashing☆17Updated 3 years ago
- Malware Muncher is a proof-of-concept Python script that utilizes the Frida framework for binary instrumentation and API hooking, enablin…☆43Updated last year
- Scripts, Yara rules and other files developed during malware investigations☆25Updated 2 years ago
- ☆14Updated 2 years ago
- WIP Emotet Control Flow Unflattening using miasm and radare2☆23Updated 2 years ago
- ☆32Updated 2 years ago
- Maltego transforms to pivot between PE files based on their VirusTotal codeblocks☆18Updated 3 years ago
- ☆13Updated 4 years ago
- Winbindex bot to pull in binaries for specific releases☆46Updated last year
- Go Lang Portable Executable Parser☆39Updated 3 years ago
- Specialized tool to dump Position Independent Code.☆21Updated 4 years ago
- A collection of shellcode hashes☆17Updated 6 years ago
- ☆23Updated 4 years ago
- Tools for inspecting YARA bytecode☆15Updated 4 years ago
- Windows Event Log Knowledge Base☆22Updated 3 months ago
- Radare2 Metadata Extraction to Elasticsearch☆22Updated 8 months ago
- The Multiplatform Linux Sandbox☆15Updated last year
- A tool that automates regex generation for the x86 and x86-64 instruction sets☆67Updated 9 months ago
- Emulates the VirusTotal "vt" YARA module for livehunt rule debugging/testing☆21Updated last year
- Rekall Memory Forensic Framework☆30Updated 5 years ago
- Utilities for working with vivisect☆25Updated 2 weeks ago
- ☆26Updated 3 months ago
- ☆28Updated 4 years ago
- FLARE floss applied to all unpacked+dumped samples in Malpedia, pre-processed for further use.☆50Updated 10 months ago
- ☆13Updated 2 years ago
- Imphash-like calculation on Golang binaries☆49Updated 2 years ago
- RenameLocalVars is an IDA plugin that renames local variables to something easier to read.☆15Updated last year
- A small tool to unmap PE memory dumps.☆11Updated last year