Discover CERT-Polska/hsn2-yara Open Source project

A modular vulnerability scanner with automatic report generation capabilities.

1,043

Artemis

YARA malware query accelerator (web frontend)

548

mquery

Distributed malware processing framework based on Python, Redis and S3.

413

karton

Malware repository component for samples & static configuration with REST API interface.

389

mwdb-core

🦆 Malduck is your ducky companion in malware analysis journeys

323

malduck

A web application that allows the users to check whether their SPF, DMARC and DKIM configuration is set up correctly.

315

mailgoose

Hfinger - fingerprinting HTTP requests

132

hfinger

Trigram database written in C++, suited for malware indexing

131

ursadb

Automated handling of data feeds for security teams

123

121

phobos-cuda-decryptor-poc

Client library for the mwdb service by CERT Polska.

training-materials

PHP

mwdblib

hsn2-bundle

Shell

nymaim-tools

Artemis-modules-extra

Server-side SDK to provide a simple REST API for distribution of security information.

dbglib

training-mwdb

phishing-api

karton-misp-pusher

n6sdk

karton-playground

anti-modlishka

mtracker

HSN-Capture-HPC-NG

HoneySpider Network version of Capture-HPC

Convert Windows PDB into JSON profile supported by DRAKVUF/LibVMI

drakpdb

mwdb_iocextract

Static configuration extractor for the Karton framework

karton-config-extractor

Lightweight Python client for ursadb

ursadb-cli

karton-pcap-miner

Reference material for the proactive detection of incidents survey

proactive-detection-survey

warning-list-tools

A scripts, utilities, and documentation intended to help with integrating CERT.PL's Dangerous websites Warning List.

PowerShell

karton-classifier

File type classifier for the Karton framework.

DRAKVUF Sandbox simple integration plugin for mwdb-core.

mwdb-plugin-drakvuf

A small Flask application that allows for Karton task and queue introspection.

karton-dashboard

HTML

karton-autoit-ripper

AutoIt script ripper for Karton framework

swf-tools

File and analysis artifacts yara matcher for Karton framework

karton-yaramatcher

Snort3 x509 reputation plugin

snort3-x509-reputation-plugin

Extractor of various archive formats for Karton framework

karton-archive-extractor

hsn2-cuckoo

hsn2-pcap-extract

hsn2-shell-scdbg

karton-asciimagic

Various decoders for ascii-encoded executables for Karton framework

Karton service that uploads analyzed artifacts and metadata to MWDB Core

malduck-modules

YARA

karton-mwdb-reporter

hsn2-pcap-analyze

hsn2-malicious-domains

hsn2-unicorn

hsn2-razorback

hsn2-framework

hsn2-commons-python-lib

Build, push and deploy k8s services with single deploy.json file to provide common convention for multiple production services.

python-deploy

hsn2-js-sta

hsn2-dnsinfo

hsn2-object-store-mongodb

hsn2-swf-cve

hsn2-url-feeder