youngjun-chang

Youngjun's starred repositories

flare-vm

A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.

Language:PowerShellApache-2.0616500

suricata-update

The tool for updating your Suricata rules.

Language:PythonGPL-2.024300

IOCs

Repository containing IOCs, CSV and MISP JSON from our blogs

Language:HTML7900

elasticintel

Serverless, low cost, threat intel aggregation for enterprise or personal use, backed by ElasticSearch.

Language:PythonGPL-3.013800

FOCA

Tool to find metadata and hidden information in the documents.

Language:C#GPL-3.0284300

TRISIS-TRITON-HATMAN

Repository containting original and decompiled files of TRISIS/TRITON/HATMAN malware

Language:Python22600

awesome-threat-intelligence

A curated list of Awesome Threat Intelligence resources

Apache-2.0764600

retdec-python

A Python library and tools providing easy access to the retdec.com decompilation service through their REST API.

Language:PythonMIT9400

Invoke-PSImage

Encodes a PowerShell script in the pixels of a PNG file and generates a oneliner to execute

Language:PowerShellMIT215300

MISP

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

Language:PHPAGPL-3.0512500

bearded-avenger-deploymentkit

CIFv3 DeploymentKit

Language:ShellMPL-2.06200

HybridAPI

Quick tool for using Hybrid Analysis API on command line..

Language:Python1700

crits

CRITs - Collaborative Research Into Threats

Language:JavaScriptNOASSERTION88400

x64dbgpy

Automating x64dbg using Python, Snapshots:

Language:CMIT146400

x64dbg

An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.

Language:C++NOASSERTION4382000

nsrllookup

Checks with NSRL RDS servers looking for for hash matches

Language:C++ISC11000

retdec

RetDec is a retargetable machine-code decompiler based on LLVM.

Language:C++MIT788400

Icewater

16,432 Free Yara rules created by

Language:YARANOASSERTION38100

impacket

Impacket is a collection of Python classes for working with network protocols.

Language:PythonNOASSERTION800

metasploit-framework

Metasploit Framework

Language:RubyNOASSERTION200

arkime

Arkime is an open source, large scale, full packet capturing, indexing, and database system.

Language:JavaScriptApache-2.0620700

LogonTracer

Investigate malicious Windows logon by visualizing and analyzing Windows event log

Language:PythonNOASSERTION267100

openvisualtraceroute

Open source cross-platform (Windows/Linux/Mac) Java Visual Traceroute, packet sniffer and Whois.

Language:JavaLGPL-3.015400

flare-ida

IDA Pro utilities from FLARE team

Language:PythonApache-2.0215400

proxychains - a tool that forces any TCP connection made by any given application to follow through proxy like TOR or any other SOCKS4, SOCKS5 or HTTP(S) proxy. Supported auth-types: "user/pass" for SOCKS4/5, "basic" for HTTP.

Language:CGPL-2.0633000

reverse-engineering

List of awesome reverse engineering resources

867400