avk3 / analyst-scripts

Scripts to analyze stuff

analyst-scripts

Scripts for analyzing stuff.

Scripts :

• cloudcidrs.py : check if an IP is part of a Cloud provider range (for now, only Google Cloud and Amazon AWS)
• clamav_to_yara.py : Convert ClamAV signature to Yara (from the Malware Analyst's Cookbook)
• parsepng.py : Analyze a PNG file looking for weird things
• scrdec18.c : An old code still useful to decode .jse files (MS Jscript encoded), by MrBrownStone (website archive, source code)

Folders :

• bitly : bit.ly tools
• censys : scripts using the censys.io API
• certs : scripts to deal with certificates and CT dbs
• forensic : forensic related scripts
• format : convert files in different formats
• goo.gl : playing with the now deprecated goo.gl API
• http : HTTP stuff
• misp : some scripts for using MISP servers
• ooni : https://ooni.torproject.org/ API scripts
• osint : open source intelligence scripts
• pe : PE scripts
• resources : interesting infosec resources
• shodan : shodan.io scripts
• twitter : Twitter stuff
• visualization : nice graphs everywhere