jstrosch
Follow
-
subcrawl Public
Forked from hpthreatresearch/subcrawlSubCrawl is a modular framework for discovering open directories, identifying unique content through signatures and organizing the data with optional output modules, such as Elastic.
-
sclauncher Public
A small program written in C that is designed to load 32/64-bit shellcode and allow for execution or debugging. Can also output PE files from shellcode.
-
learning-malware-analysis Public
This repository contains sample programs that mimick behavior found in real-world malware. The goal is to provide source code that can be compiled and used for learning purposes, without having to …
-
subparse Public
Modular malware analysis artifact collection and correlation framework
-
FLARE-VM-configs Public
These FLARE-VM configuration files are designed to be help setup a purpose-built installation, remove unnecessary packages to help streamline the installation.
-
-
malware-samples Public
Malware samples, analysis exercises and other interesting resources.
-
learning-reverse-engineering Public
This repository contains sample programs written primarily in C and C++ for learning native code reverse engineering.
-
-
graph-maldoc-similar-images Public
A script that extracts embedded images from Office Open XML (OOXML) documents and generates image hash similarity graphs that cluster visually similar images together. The script computes the Avera…
-
suricata Public
Forked from OISF/suricataSuricata git repository maintained by the OISF
-
This IDA Python plugin is intended to get you started creating IDA Plugins with Python, recognize the importance of deobfuscating strings and work on translating assembly to a higher-level language…
-
search-abuse.ch Public
Python3 script that can download samples directly from Abuse.CH or via submitted URLs
-
malware-signatures Public
A collection of various signatures that I have either found or created, useful for malware analysis.
-
emotet-droppers-fall2019 Public
Python3 script that deobfuscates and then decodes base64 string that contains PowerShell script and extracts the URLs used to download Emotet binaries
-
shodan-scan-wrapper Public
Python3 script that wraps Shodan CLI - it resolves a domain to an IP and then performs a scan
-
hybrid-analysis-api Public
This is a small Python3 script that allows you to search and download samples from Hybrid Analysis' v2 API
-
This repository contains sample code, projects and lab walk-throughs to help learn software exploitation.
-
Username_Generator Public
A Burp Extension that parses emails from HTTP content and can optionally generate usernames.
-
derbycon-binary_ninja Public
Forked from VDA-Labs/derbycon-binary_ninjaRepo contains code for our DerbyCon 2016 talk comparing Binary Ninja and IDA Pro.
-
-
Rapid-Tool-Development Public archive
This repository contains programs for CSC 842.
-
-