
ramnit_traffic_parser
Parsing Ramnit's traffic

Parsing Ramnit's traffic

Botnet monitoring is a crucial part in threat analysis and often neglected due to the lack of proper open source tools. Our tool will provide an open…

A framework for constructing self-spreading binaries

🐐 GoAT (Golang Advanced Trojan) is a trojan that uses Twitter as a C&C server

The Console Monitor Driver is a KMDF kernel-mode filter driver that captures certain Fast I/O operations (input and output) that is sent to or from…

Elkeid is an open source solution that can meet the security requirements of various workloads such as hosts, containers and K8s, and serverless. It…

IFL - Interactive Functions List (plugin for IDA Pro)

Interactive documentation and visual reference for binary formats and system memory layouts.