Emanuel Durmaz's repositories
FilesystemMon
A Windows minifilter kernel driver for monitoring file system events, process starts and process terminations. This project is completely based on native C and the Windows kernel API
ClipboardHijackingDetection
A tool for Windows that can scan on demand for activity of a clipboard hijacker and determine its process ID.
SandboxedMalwareAnalysis
A framework for automated execution and analysis of malware samples in a Windows sandbox. C&C communication can also be simulated. HTTP/S traffic is recorded via mitmproxy.
SymmetricCryptanalysis-Studies
A mixed repo with code snippets (from my studies) for AES Integral Attack and MILP-Based Differential Cryptanalysis
WalletProtectionMiniFilter
A windows minifilter kernel driver for protecting files (in this case: wallet files) via access controls. This project is completely based on native C and the Windows Kernel API
ARM-Shellcodes
Some basic ARM shellcodes I wrote during my studies. Can be used for buffer overflow vulnerabilities.
BitcoinTransactionPlotter
A simple script from which all transactions and corresponding income from given Bitcoin addresses can be determined and plotted in graphs.
FlickrBulkDownloader
With this tool all media can be downloaded (via Flickr API) of multiple given Flickr users (e.g. for backup purposes). The downloads are logged in an internal database (HSQLDB), so the next time the program is run, they will not be repeated. OAuth is supported.
ParityDockerScripts
Scripts to run a parity ethereum node in a docker container, mount chaindata, configuration, wallet files from different drives.
ProgramAnalysis-Studies
A mixed repo with code snippets (from my studies) for dynamic reloading of DLL's, obfuscation of strings, prime test via x86 assembler, shellcode launcher, anti-debug methods, etc.
CVE-2016-3113
A proof of concept to exploit the reflected XSS vulnerability in the oVirt web interface (RedHat). In this PoC a VM in the oVirt IaaS environment is to be started via the victim's browser session. JS code has been kept simple due to the rush.
AsymmetricCryptanalysis-Studies
A mixed repo with code snippets (from my studies) for PollardRho Algorithm and Meet-in-the-Middle Attack on RSA
BitcoinDockerScripts
Scripts to run bitcoin-qt in a docker container with X11 forwarding, mount chaindata, configuration, wallet files from different drives.
MultiThreadedTextSearch
A tool to search (via Regex) text-based files in nested directory structures with multiple Threads
YaraSignatures
Yara hunting signatures (based on memory dumps) for some ClipboardHijacker and WalletFileStealer malware families