2023

Rules Shared by the Community from 100 Days of YARA 2023

alphagolang

IDApython Scripts for Analyzing Golang Binaries

archivepile

A read-only theme for publishing email archives using Mailpile

awesome-docker-malware-analysis

Repository of tools and resources for analyzing Docker containers

awesome-threat-intelligence

A curated list of Awesome Threat Intelligence resources

btcvendingmachine

cobaltstrikesamples

CobaCobaCobaCoba

coconut_hoover

Wireless Probe Requests Sniffer (Wifi Coconut fork)

com-code-helper

Two IDAPython Scripts help you to reconstruct Microsoft COM (Component Object Model) Code

conferencetalks

Collection of slides from my conference talks

connectors

OpenCTI connectors

cookiemonstervirus

Humble Shout out to the movie Hackers. For use in CCDC events.

crowdfms

CrowdStrike Feed Management System

csirt-collect

PowerShell script to collect memory and (triage) disk forensics

cuckoo

Cuckoo Sandbox is an automated dynamic malware analysis system

data

Misc data

deaddns

DNS hijacking via dead records automation tool

detuxng

The Multiplatform Linux Sandbox

dimorf

Dimorf is a ransomware using 256-bit AES with a self-destructing, randomly generated key for Linux OS´s

dns-monitor

DNSMonitor is a set of scripts to monitor malware and botnet domains for IP address changes by monitoring TTL values.

dockerfiles

Various Dockerfiles I use on the desktop and on servers.

doom95aimbot

Source code from https://0x00sec.org/t/doom95-making-an-aimbot/19862 && https://rstforums.com/forum/profile/3859-nytro/content/page/9/?type=forums_topic_post

ecrimech_client

command line client and python library for https://ecrime.ch/

electricsheep

infinite evolving crowdsourced artwork

electricsheepredux

Continuation of the epic ElectricSheep project

elftools

typosquatting on pypi before someone else

eqgrp_lost_in_translation

Decrypted content of odd.tar.xz.gpg, swift.tar.xz.gpg and windows.tar.xz.gpg

extracthosts

Extracts hosts (IP/Hostnames) from files

firewall-cafe

Server & client software for Firewall Cafe

flam3

the original fractal flame renderer and genetic language