malwareengineering Goto Github PK

analyzing-binaries-hands-on-tutorial

aptnotes

Various public documents, whitepapers and articles about APT campaigns

beeswarm

Honeypot deployment made easy

bgp-ranking

For an Internet Service Provider, AS numbers are a logical representation of the other ISP peering or communicating with his autonomous system. ISP customers are using the capacity of the Internet Service Provider to reach Internet services over other AS. Some of those communications can be malicious (e.g. due to malware activities on an end-user equipments) and hosted at specific AS location. In order to provide an improved security view on those AS numbers, a trust ranking scheme will be implemented based on existing dataset of compromised systems, malware C&C IP and existing datasets of the ISPs.

brobeat

Monitors Bro NSM logs and sends them to Elasticsearch

chef-yara

Chef Cookbook to Install the YARA Malware Research Tool

colaboratory

[deprecated] Jupyter CoLaboratory, goto google colab now

cowrie

Cowrie SSH/Telnet Honeypot

crits_services

CRITs Services Collection

cyber-defence

Information released publicly by NCC Group's Cyber Defence team

danderspritz-evtx

Parse evtx files and detect use of the DanderSpritz eventlogedit module

datashark

dataShark is a Security & Network Event Analytics Framework built on Apache Spark

egress-assess

Egress-Assess is a tool used to test egress data detection capabilities

elevate

elevate -- start elevated processes from the command line

exploit-database

The official Exploit Database repository

flare-vm

graylog_sysmon

Advanced Threat detection Configurations for Graylog

httpscreenshot

incubator-superset

Apache Superset (incubating) is a modern, enterprise-ready business intelligence web application

isowall

This is a mini-firewall that completely isolates a target device from the local network.

isthislegit

Dashboard to collect, analyze, and respond to reported phishing emails.

lazykatz

Lazykatz is an automation developed to extract credentials from remote targets protected with AV and/or application whitelisting software.

loki

Loki - Simple IOC and Incident Response Scanner

macos-security-and-privacy-guide

A practical guide to securing macOS.

mailoney

An SMTP Honeypot

malice

VirusTotal Wanna Be

maltrieve

A tool to retrieve malware directly from the source for security researchers.

malware_sources

malwareengineering.github.io

masscan

TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.