xabiugarte Goto Github PK

arancino

Arancino is a dynamic protection framework that defends Intel Pin against anti-instrumentation attacks.

atomic-red-team

Small and highly portable detection tests based on MITRE's ATT&CK.

awesome-honeypots

an awesome list of honeypot resources

cape

Malware Configuration And Payload Extraction

capstone2llvmir

Library for Capstone instruction to LLVM IR translation

cy2neo

Cy2Neo - Tiny Neo4j Cypher Workbench with D3 Visualization

ddisasm

A fast and accurate disassembler

deeptoad

Automatically exported from code.google.com/p/deeptoad

detours

Detours is a software package for monitoring and instrumenting API calls on Windows. It is distributed in source code form.

deviare2

Deviare API Hook

dridex-config-extraction

Static extraction of dridex malware configuration

faiss

A library for efficient similarity search and clustering of dense vectors.

first

first-plugin-ida

first-radare2-plugin

first-server

functionsimsearch

Some C++ example code to demonstrate how to perform code similarity searches using SimHashing.

guanciale

:bacon: Grab info needed by Carbonara from executables and disassemblers databases

ida_ipython

An IDA Pro Plugin for embedding an IPython Kernel

idarling

Collaborative Reverse Engineering plugin for IDA Pro & Hex-Rays

macroinspector

A tool to dynamically inspect macro execution in Office documents

malware_decoders

Static based decoders for malware samples

memscan

A memory scanning tool which uses mach_vm* to either dump memory or look for a specific sequence of bytes.

memscrimper

Code for the DIMVA 2018 paper: "MemScrimper: Time- and Space-Efficient Storage of Malware Sandbox Memory Dumps"

msdn-crawler

Parses MSDN documentation into an XML file

pyretic

pyREtic is an extensible framework for in-memory Python bytecode reverse engineering

pyvmidbg

LibVMI-based debug server, implemented in Python. Building a guest aware, stealth and agentless full-system debugger

r2vmi

Hypervisor-Level Debugger based on Radare2 / LibVMI, using VMI IO and debug plugins

ratdecoders

Python Decoders for Common Remote Access Trojans

retdec

RetDec is a retargetable machine-code decompiler based on LLVM