r1n9w0rm

qakbot_build_401_parser

Route-VirtualBox-Through-Tor

This is a simple bash script to automatically route all traffic from Virtual Machines through Tor.

CAPEv2

Malware Configuration And Payload Extraction

Edison

Tool to decrypt encrypted strings in AgentTesla

idapython_comment_call_dword_ptr

A IDAPython script to comment instructions resembling call dword ptr [eax+??h]

BetterTiming

PoC RDTSC offsetting in KVM

Escape-Unescape-Non-Printables-PHP

A couple functions to help escaping non-printable characters in PHP.

Etw_Providers_JSON

A json formatted list of ETW providers.

EscapeNonPrintablesPython

Escape non-printables to \x escape sequence with python.

fame

FAME Automates Malware Evaluation

minerchk

Bash script to Check for malicious Cryptomining

Tools

Combination of different utilities, have fun!

yara-rules

A collection of yara rules for prevalent malware.