kirk-sayre-work Goto Github PK

box-js

A tool for studying JavaScript malware.

box-ps

Powershell sandboxing utility

evilclippy

A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis tools. Runs on Linux, OSX and Windows.

fleep-py

File format determination library for Python

moloch

Moloch is an open source, large scale, full packet capturing, indexing, and database system.

office_dumper

Dump Excel sheets or Word document text and tables as text.

oletools

oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.

ostap

Analysis of the OSTap Malware Dropper

pcodedmp

A VBA p-code disassembler

pecli

CLI tool to analyze PE files

talks

uno

Python 3 version of what you get from "pip install uno" :(.

unoconv

Universal Office Converter - Convert between any document format supported by LibreOffice/OpenOffice.

vbaseismograph

A tool for detecting VBA stomping.

vipermonkey

A VBA parser and emulation engine to analyze malicious macros.

xlmmacrodeobfuscator

Extract and Deobfuscate XLM macros (a.k.a Excel 4.0 Macros)

xlmulator

Python emulator for Excel XLM macros.

yaya

Yet Another Yara Automaton - Automatically curate open source yara rules and run scans