wit0k Goto Github PK

abd

Course materials for Advanced Binary Deobfuscation by NTT Secure Platform Laboratories

adb

Adaptive Document Builder

amsipebwalkvba

Walking the PEB in VBA

apt34

APT34/OILRIG leak

at-ps

Adversary Tactics - PowerShell Training

code_runner

Run this python code for me

defcon_27_windbg_workshop

DEFCON 27 workshop - Modern Debugging with WinDbg Preview

deobfuscar-static

Static Obfuscar Deobfuscator

didierstevenssuite

Please no pull requests for this repository. Thanks!

dw

dw speeds up manual malware hunting tasks like href crawling, automatic file download and vendor submission.

forensic_artifacts

Place for chosen forensic artifacts

hyperion

Soon...

invisiblepersistence

Persisting in the Windows registry "invisibly"

kamerka

Build interactive map of cameras from Shodan

malware-analysis

memory-carving-scripts

Scripts for extracting useful information from infected memory dumps

memory_forensics

Stuff about memory forensics

msgdump

Script under construction ... For now is supposed to parse the submission closure e-mails coming from different AV vendors and pulling the URLs from e-mail body ... it's badly coded i know, but i wrote it in 5 min ;-)

regf

Windows registry file format specification

regf-samples

Windows registry samples

regmagnet

RegMagnet - A tool to work with Microsoft Offline Registry Hives

regparser

Development continued in https://github.com/wit0k/regmagnet

soranostealer

Sorano

tarrask

Tarrask: Hafnium's persistence via hidden scheduled task

the-art-of-subdomain-enumeration

This repository contains all the supplement material for the book "The art of sub-domain enumeration"

yara_rules

Place for some of my public Yara rules