
Umay
IoT Malware Similarity Analysis Platform

IoT Malware Similarity Analysis Platform

Lightweight telnet honeypot for capturing IoT malware samples and identifying active command-and-control infrastructure, designed for educational…

Ring -4 to Ring 0: offense-defense firmware research platform. We build the bootkits, then we catch them. Closed-loop. Zero trust in silicon.

Post CVE-2024-7344 analysis of Howyar SysReturn NetCopy - reverse engineering notes, vulnerable binaries, vendor correspondence, and proof-of-concept…

idahunt is a framework to analyze binaries with IDA Pro and hunt for things in IDA Pro

Python telnet honeypot for catching botnet binaries

Toolkit for implant attack of IoT devices

IoT firmware identification and extraction

Universal Windows extraction tool that detects unknown files and routes them to the right bundled extractor.

A tool for malicious behavior detection in IoT devices

A session-unique RISC-V ISA — every boot speaks a different dialect. Old binaries become invalid. Malware cannot persist.

The OWASP SecureTea Project provides a one-stop security solution for various devices (personal computers / servers / IoT devices)

Python config extractors for malware families including PlugX, Remcos, templateX, and RedLine Stealer, supporting C2 configuration extraction for…

Curated collection of P/Invoke definitions from pinvoke.net with Microsoft documentation links, enabling quick Windows API prototyping for security…

backdoor.mirai.helloworld cve2018-20561, cve-2018-10562 해킹