Discover @DissectMalware Open Source projects

Malwrologist (@DissectMalware)

DissectMalware

Stars
1,177
Global Rank 26,160 (Top 1.0 %)
Followers 365
Following 5
Registered about 10 years ago
Most used languages

Python
63.2 %

HTML
10.5 %

C#
10.5 %

JavaScript
5.3 %

C++
5.3 %

Dockerfile
5.3 %

XLMMacroDeobfuscator

Extract and Deobfuscate XLM macros (a.k.a Excel 4.0 Macros)

batch_deobfuscator

Deobfuscate batch scripts obfuscated using string substitution and escape character techniques.

pyOneNote

A python library to parse OneNote (.one) files

MalwareCMDMonitor

Shows command lines used by latest instances analyzed on Hybrid-Analysis

base64_substring

Generate a Yara rule to find base64-encoded files containg a specific keyword

yaradbg-frontend

ClipboardWatcher

Monitor the textual data pasted into Windows clipboard

OfficeForensicTools

A set of tools for collecting forensic information

PySameSame

This is a python version of samesame repo to generate homograph strings

xlrd2

xlrd2 is a variant of xlrd that is actively maintained

yaradbg-backend

WinNativeIO

Using Undocumented NTDLL Functions to Read/Write/Delete File

pyxlsb2

an Excel 2007+ Binary Workbook (xlsb) parser for Python

MDIExtractor

npp-langs-4-sec

Notepad++ Syntax Highlighting for Languages Used by Cyber Security Professionals

IoCMiner

A Framework to Automatically Extract Indicators of Compromise (IoCs) from Twitter

PhishCanary

Given a TLD zone file, PhishCanary extracts International Domain Names (IDNs) that are homoglyphs of specified target domain names.

yaradbg-issues

yaradbg-container

A docker config file to run yaradbg in a container

TLDExtractor

Accurately extract TLD, effective TLD, 2LD, 3LD, ... from a given domain name; by utilizing the Public Suffix List maintained by Mozilla Foundation

document-samples