Random-Scripts
star-sg/random-scriptsCollection of DFIR and OSINT Python scripts for parsing malicious LNK samples, extracting OLE objects from MHTML, and hashing favicons to hunt…
digital-forensicsforensicshash-analysis+5
2
star-sg/random-scriptsCollection of DFIR and OSINT Python scripts for parsing malicious LNK samples, extracting OLE objects from MHTML, and hashing favicons to hunt…
qsecure-labs/deadmatterOffset Independent Credential Extraction Tool
kaandemir993/malwareforge---advanced-static-malware-analyzerAdvanced Static malware analyzer that reveals 8 injection techniques, critical API calls, hidden strings, exports PE sections (.text, .rdata) as…
abusech/yaraifyOpen YARA scan- and search engine
oalabs/hashdbAssortment of hashing algorithms used in malware
nextronsystems/gimphashImphash-like calculation on Golang binaries
immersive-labs-sec/bruteratel-detectiontoolsA collection of Tools and Rules for decoding Brute Ratel C4 badgers
pan-unit42/dotnetfilePython library for parsing CLR/PE metadata in .NET assemblies, exposing streams and hash fingerprints to support malware analysis and threat hunting.
inquest/python-inquestlabsA Pythonic interface and command line tool for interacting with the InQuest Labs API.
c3rb3ru5d3d53c/binlexA Binary Genetic Traits Lexer Framework
squiblydoo/certreportA tool to support the reporting of Authenticode Certificates by reducing the effort on individuals to report.
embee-research/yara-detection-rulesYara Rules for Modern Malware
elevenpaths/diario-commandline-toolsCLI client for bulk DIARIO API consumption: upload PDF/Office documents, query file hashes, and automate malware analysis workflows via command-line…
iomoath/filewatchtowerFWT is a security analysis and file monitoring tool that utilizes Sysmon events.
dave_m/clamtkAn easy to use, light-weight, on-demand virus scanner for Linux systems. For additional help, see the <a…
neorai/vt-py-scannerRecursively scan folders with VirusTotal API to detect malware. Features hash lookup, CSV export, real-time progress, and rate-limit handling for…
xoreaxlmbdx/die-in-browserStatic binary analysis with Detect It Easy — 100% in your browser, no uploads.
ronf98/cve-2024-43451-pocCVE-2024-43451 is a Windows NTLM vulnerability that allows an attacker to force authentication and capture NTLM hashes by using malicious shortcuts.