GelosSnake

followers

following

stars

https://malware-research.org

GelosSnake's starred repositories

ghidra

Ghidra is a software reverse engineering (SRE) framework

Language:JavaApache-2.049706 1028 4717

cleverhans

An adversarial example library for constructing attacks, building defenses, and benchmarking both

Language:Jupyter NotebookMIT6126 189 453

docker-lambda

Docker images and test runners that replicate the live AWS Lambda environment

Language:C#MIT5834 101 288

Telegram-iOS

Telegram-iOS

Language:Swift5583 220 1285

opencti

Open Cyber Threat Intelligence Platform

Language:JavaScriptNOASSERTION5275 132 4823

pacu

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

Language:PythonBSD-3-Clause4225 109 126

ThreatHunter-Playbook

A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.

Language:PythonMIT3943 369 32

velociraptor

Digging Deeper....

Language:GoNOASSERTION2826 75 1104

RE-iOS-Apps

A completely free, open source and online course about Reverse Engineering iOS Applications.

APT_REPORT

Interesting APT Report Collection And Some Special IOC

Language:Python2313 207 3

DeTTECT

Detect Tactics, Techniques & Combat Threats

Language:SCSSGPL-3.02020 92 96

canarytokens

Canarytokens helps track activity and actions on your network.

Language:HTMLNOASSERTION1710 45 116

Virtuailor

IDAPython tool for creating automatic C++ virtual tables in IDA Pro

Language:PythonGPL-3.01236 50 17

PowerHub

A post exploitation tool based on a web application, focusing on bypassing endpoint protection and application whitelisting

Language:PowerShellMIT707 18 51

Admin

Ghost's admin client

Language:JavaScriptMIT626 370

docker-windows-box

Various Vagrant envs with Windows 2019/10 and Docker, Swarm mode, LCOW, WSL2, ...

Language:PowerShellMIT590 26 22

deep-pwning

Metasploit for machine learning.

Language:PythonMIT553 63 6

misp-galaxy

Clusters and elements to attach to MISP events or attributes (like threat actors)

Language:PythonNOASSERTION509 48 104

MalConfScan

Volatility plugin for extracts configuration data of known malware

Language:PythonNOASSERTION478 36 17

osctrl

Fast and efficient osquery management

Language:GoMIT347 9 102

source

Daenerys: A framework for interoperability between IDA and Ghidra

Language:PythonMIT298 250

x_old_misp_docker

MISP Docker (XME edition)

Language:Shell284 27 108

Vba2Graph

Vba2Graph - Generate call graphs from VBA code, for easier analysis of malicious documents.

Language:PythonEPL-2.0274 19 4

aws-security-cert-service-notes

Security aspects of AWS products for the Security Specialist certification

Cuckoo-AWS

Extension to Cuckoo Sandbox open source projects, adds support to AWS cloud functionalities and enables running emulation on auto-scaling infrastructure

Language:JavaScriptNOASSERTION134 20 27

aws-lambda-blog

AWS Lambda serverless blogging platform

Language:JavaScriptMIT125 18 17

otx_misp

Imports Alienvault OTX pulses to a MISP instance

Language:Jupyter NotebookNOASSERTION53 15 31

dscan

D-Scan project for office document analysis and generating flow diagram of macro in documents. For demo visit

Language:Python29 4 1

Threat-Intelligence

A collection of threat intelligence data such as IOC, Yara and Snort/Suricata Rules etc.

Language:YARAApache-2.010 30

L33ter

Golang tool to manipulate a wordlist to "l33t" writing

Language:GoGPL-3.04 30