threathive Goto Github PK

amira

AMIRA: Automated Malware Incident Response & Analysis

androguard

Reverse engineering, Malware and goodware analysis of Android applications ... and more (ninja !)

android-malware-sandbox

Android Malware Sandbox

aoba

Automatic Tools for Observe and Analyze EK and Identify Malware (a.k.a nao_sec tools)

artemis

ARTEMIS: Real-Time Detection and Automatic Mitigation for BGP Prefix Hijacking. This is the main ARTEMIS repository that composes artemis-frontend, artemis-backend, artemis-monitor and other needed containers.

aus-banking-trojan-deobfuscation

Program to de-obfuscate web injects being dropped by Gozi and Danabot that is impacting Australian Banks

autoit-ripper

Extract AutoIt scripts embedded in PE binaries

backscatter-go

backscatter.io golang client

binaryalert

BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.

binja-emotet

brieflz

Small fast Lempel-Ziv compression library

capa

The FLARE team's open-source tool to identify capabilities in executable files.

cape

Malware Configuration And Payload Extraction

capev2

Malware Configuration And Payload Extraction

certstream-playground

random fun with cert stream data

certstreammonitor

Monitor certificates generated for specific domain strings and associated, store data into sqlite3 database, alert you when sites come online.

cobaltstrikeforensic

Toolset for research malware and Cobalt Strike beacons

crl-monitor

CRL Monitor - X.509 Certificate Revocation List monitoring and X.509/Subject caching

cuckoo-droid

CuckooDroid - Automated Android Malware Analysis with Cuckoo Sandbox.

cuckoodroid-2.0

CuckooDroid - Automated Android Malware Analysis with Cuckoo Sandbox.

detectionlab

Vagrant & Packer scripts to build a lab environment complete with security tooling and logging best practices

dhp

Simple Docker Honeypot server emulating small snippets of the Docker HTTP API

ditto

A tool for IDN homograph attacks and detection.

dmon

A little app to monitor domains

dnsdb-python

A full-featured unofficial Python client and CLI for Farsight Security's DNSDB passive DNS service

dnstwist

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

docs

Malice Documentation

domain_generation_algorithms

Some results of my DGA reversing efforts

domainclassifier

DomainClassifier is a Python (2/3) library to extract and classify Internet domains/hostnames/IP addresses from raw unstructured text files following their DNS existence, localization or attributes.

drakvuf

DRAKVUF Black-box Binary Analysis