Rurik

DC3 Malware Configuration Parser (DC3-MWCP) is a framework for parsing configuration information from malware. The information extracted from malware includes items such as addresses, passwords, filenames, and mutex names.

Language:PythonNOASSERTION290 43 19

evolve

Web interface for the Volatility Memory Forensics Framework

Language:JavaScript259 38 12

VirusTotal_API_Tool

A Tool To Leverage Virus Total's Private API Key

Language:Python234 31 5

LoadDll

Better version of RunDll with GUI. This program allows you to load DLLs on Windows. You can select how to load the DLL. By direct Entry Point call (DllMain) or if you want to call directly an exported function of the DLL.

Language:Assembly230 30 5

chrome-export

Python scripts to convert Google Chrome’s bookmarks and history to the standard HTML-ish bookmarks file format.

Language:PythonISC197 15 8

hexrays-python

Python bindings for the Hexrays Decompiler

Language:PythonNOASSERTION88 13 6

ntfs-linker

An NTFS journal parser

Language:C++LGPL-3.080 19 1

guess-language

Attempts to determine the natural language of a selection of Unicode (utf-8) text (a clone of http://code.google.com/p/guess-language with package metadata)

Language:PythonLGPL-2.147 3 1

xnippet

A little tool to execute functions without debugging an entire executable. Originally written by Gonzalo J. Carracedo (BatchDrake).

28 680

DeleteThatTweet

Monitors a Twitter stream and saves off any tweet that is deleted.

Language:RubyBSD-3-Clause27 7 2

capstone

capstone project

Language:Python1000