nao_sec

ektotal

[BHUSA 2018 Arsenal] Integrated tool to analyze Drive-by Download attack

tknk_scanner

Community-based integrated malware identification system

RigEK

Analyzing Rig Exploit Kit

mal_getter

Tool for dropping malware from EK

rr_decoder

Royal Road RTF Weaponizer object decoder

starc

Simple high-interactive client honeypot

anyrun-api

ANY.RUN API Wrapper for PHP

dataset

nao dataset

yara_rules

For malware research

materials

Past presentation materials

ramnit_traffic_parser

Parsing Ramnit's traffic

binary_decoder

rr_decoder.cs

C# implementation of rr_decoder

screnc.php

Microsoft Script Encoder / Decoder in PHP

ioc

misp format Malware IOCs

jsac2018

Drive-by Download Must Die - Japan Security Analyst Conference 2018

aoba

Automatic Tools for Observe and Analyze EK and Identify Malware (a.k.a nao_sec tools)

docker-misp

Automated Docker MISP container - Malware Information Sharing Platform and Threat Sharing

misp-galaxy

Clusters and elements to attach to MISP events or attributes (like threat actors)

starc.php

StarC (PHP version)

starc2

Rewrite StarC in Python and Powershell