w3ndige Goto Github PK

aurora

Malware similarity platform with modularity in mind.

below-vm

Virtual machine written in Rust.

binjago

Set of tools aiding in analysis of stripped Golang binaries with Binary Ninja.

dc3-mwcp

DC3 Malware Configuration Parser (DC3-MWCP) is a framework for parsing configuration information from malware. The information extracted from malware includes items such as addresses, passwords, filenames, and mutex names.

gameboy-emulator

Gameboy emulator written in C++.

karton-classifier

File type classifier for the Karton framework.

karton-minhash

Aurora karton for calculating minhash from input dataset.

karton-r2disasm

Aurora karton for disassembling samples using r2pipe.

karton-similarity

Aurora karton for similiarity matching.

karton-strings-extractor

Aurora karton for extracting strings from samples.

karton-strings-scanner

Aurora karton for scanning strings for known heuristics matches.

linux-process-injection

Proof of concept for injecting simple shellcode via ptrace into a running process.

malduck

:duck: Malduck is your ducky companion in malware analysis journeys

memory-allocation-tracer

Proof of concept for hooking to memory allocation functions and detecting possible memory leaks.

nampa

Nampa - FLIRT for (binary) ninjas

qiling

Qiling Advanced Binary Emulation Framework

r2sim

Hacked script to show similarities between two samples using radare2 framework.

research

Malware research notes by @W3ndige

rootnetsec.github.io

Repository for my Jekyll based presonal blog, used to share knowledge about security.

w3ndige