hidd3ncod3s Goto Github PK

avmplus

Source code for the Actionscript virtual machine

avmplus-diff

Diff needed to compile avmplus on windows using Visual Studio

awesome-soc-ir

Awesome Security Operation Center and Incident Response

awesome_kql

Microsoft Kusto Query Language

classd

Traffic classification daemon

cobaltstrike

CobaltStrike's source code

decryptekbinary

Decrypt the initial dropper of various exploit kits

dpdk-pcapreplay

Replay pcaps using DPDK stack

dumpoverlay

Dumps overlay part from the EXE file

eqllib

exploitkit

Dump of codes we see in the exploit packs.

fiddler2pcap

fiddler output to pcap

fuzzing

Few Fuzzing related files

helloworld-coreclr

HelloWorld using customized CoreCLR.dll (and mscorlib.dll)

hidejsinjpeg

Hide Javascript inside a JPEG file and execute JS in the browser

http2fileextractor

Extract files from HTTP2 (HTTP 2.0) pcaps

instumentoffice

Set of windbg breakpoints and notes for instrumenting Microsoft Office VBA engine.

iot-malware

Malware source code samples leaked online uploaded to GitHub for those who want to analyze the code

malware-analysis-training

Retired beginner/intermediate malware analysis training materials from @pedramamini and @erocarrera.

misc

Random stuff

network_based_mitre_attack_matrix

notes

Notes

nwjs

packerattacker

C++ application that uses memory and code hooks to detect packers

pcap2saz

Converts HTTP flows in pcap file into SAZ file

phanthomjs

Use PhanthomJS to deobfuscate Javascripts

reversing

Dump of scripts i have used/written while reversing binaries

runpedmp

RunPE dump - I wrote this to have better control over the analysis of malwares. I can stop and analysis malware when it uses some of the API's i hook and to dump the memory while it is using RunPE/PH techniques.

sniffpacker

sulo

Dynamic instrumentation tool for Adobe Flash Player built on Intel Pin