
MANTIS
Multi-Sources Analysis & Threat Intelligence Search

Multi-Sources Analysis & Threat Intelligence Search

LD_PRELOAD shared library that hides a Linux process from tools like ps and lsof by intercepting readdir and proc filesystem calls.

A Windows userland tool to enumerate and classify ALPC ports, including PPL-protected processes.

Scans websites for SocGholish JavaScript injections, deobfuscates malicious payloads, and reports shadowing domain URLs used in malvertising…

Cortex: a Powerful Observable Analysis and Active Response Engine

A command-line utility for Windows written in C that creates and configures persistent Event Tracing for Windows (ETW) AutoLogger sessions.

Suspicious DGA from PDNS and Sandbox.

Botnet monitoring is a crucial part in threat analysis and often neglected due to the lack of proper open source tools. Our tool will provide an open…

Botnet command & control monitor

Knowledge base workflow management for YARA rules and C2 artifacts (IP, DNS, SSL) (ALPHA STATE AT THE MOMENT)

CVE-2023-20052, information leak vulnerability in the DMG file parser of ClamAV

RTF de-obfuscator for CVE-2017-0199 documents to find URLs statically.

Extract payload URLs from Follina (CVE-2022-30190) docx and rtf files

Malware analysis from the domain goxlr.net

In the realm of cybersecurity, accurately identifying and characterizing web servers is crucial for threat detection, vulnerability assessment, and…

An information disclosure vulnerability occurs when LibreOffice 6.0.3 and Apache OpenOffice Writer 4.1.5 automatically process and initiate an SMB…

Extracts URLs from malicious RTF files exploiting CVE-2017-0199 and CVE-2017-8759 for malware analysis and threat intelligence.

CVE-2023-20052 information leak vulnerability in the DMG file parser of ClamAV