disassembleblog Goto Github PK

ahmyth-android-rat

Android Remote Administration Tool

al-khaser

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

atom-bombing

Brand New Code Injection for Windows

cobaltstrike-detection

This repo will contain the core detection, only for Cobaltstrike's leaked versions. Non-leaked version detections wont be shared

dwmaxx

DWM Hacking for Windows Vista! => DEPRECATED, GO TO https://github.com/steeve/dwmaxx2

idaplugins-list

A list of IDA Plugins

idapython-scripts

malware-jail

Sandbox for semi-automatic Javascript malware analysis, deobfuscation and payload extraction. Written for Node.js

pafish

Pafish is a demonstration tool that employs several techniques to detect sandboxes and analysis environments in the same way as malware families do.

peheadererase

pftriage

Python tool and library to help analyze files during malware triage and analysis.

plugme-ollydbgv1.0

OllyDBG v1.0 Plugins

powertools

PowerTools is a collection of PowerShell projects with a focus on offensive operations.

reflectivedllinjection

Reflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process.

rules

Repository of yara rules

ssma

SSMA - Simple Static Malware Analyzer

vmprotect-3.5.1

vt-hunter

Automation for VirusTotal

websms

windows_x64_shellcode_template

An easily modifiable shellcode template for Windows x64 written in C

x64dbgida

Official x64dbg plugin for IDA Pro.

yargen

yarGen is a generator for YARA rules