silascutler

LnkParse

Windows Shortcut file (LNK) parser

awesome-docker-malware-analysis

Repository of tools and resources for analyzing Docker containers

DetuxNG

The Multiplatform Linux Sandbox

coconut_hoover

Wireless Probe Requests Sniffer (Wifi Coconut fork)

stalkerware-urls

RapidSig

Yara + Drinking == Magic

RATDecoders

Python Decoders for Common Remote Access Trojans

Rosetta

A Chrome Extension that automatically resolves names of various threat groups

2023

Rules Shared by the Community from 100 Days of YARA 2023

flipperzero-firmware

Flipper Zero Firmware

passivedns-client

passivedns-client provides a library and a query tool for querying several passive DNS providers

public-apis

A collective list of free APIs

searxng

SearXNG is a free internet metasearch engine which aggregates results from various search services and databases. Users are neither tracked nor profiled.

xz-vulnerable-honeypot

An ssh honeypot with the XZ backdoor. CVE-2024-3094

AlphaGolang

IDApython Scripts for Analyzing Golang Binaries

CobaltStrikeSamples

CobaCobaCobaCoba

connectors

OpenCTI connectors

Data

Misc data

Dimorf

Dimorf is a ransomware using 256-bit AES with a self-destructing, randomly generated key for Linux OS´s

ecrimech_client

command line client and python library for https://ecrime.ch/

elftools

typosquatting on pypi before someone else

ExtractHosts

Extracts hosts (IP/Hostnames) from files

hotline

modern analog of the classic Moscow - Washington hotline

MicroBackdoor

Small and convenient C2 tool for Windows targets [Путин хуйло, Лукашенко тоже: шо один шо другой -- на говно похожи]

project25499

project25499

python-yara

Not the correct yara-python pip library

ransomwarelegality

Can you pay the ransom in your country?

siglearn

Code for BH21 talk: "Generating YARA Rules by Classifying Malicious Byte Sequences"

silascutler

silascutler.github.io