ch0ic3/awesome-malware-analysis
1
0
Fork 0
mirror of https://github.com/rshipp/awesome-malware-analysis.git synced 2024-12-19 02:36:09 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
588 Commits 1 Branch 0 Tags 907 KiB
1eb0583711
Commit Graph

469 Commits

Author SHA1 Message Date
rshipp
e1a32c4a93
Fix BAP line wrapping 2016-11-13 13:49:39 -06:00
rshipp
a804e4061d
Remove trailing whitespace 2016-11-13 13:49:18 -06:00
rshipp
3bd5f78692
Revert cuckoo and viper links 2016-11-13 13:48:51 -06:00
sigmaapex
1537256aab
Update README.md 
-Added BlackLight and Rootkit Arsenal. 
-Fixed Cuckoo and Viper links
 2016-11-13 13:47:13 -06:00
keith@keithjjones.com
8f20090fda Added cuckoo log to project description. 2016-11-12 11:45:14 -05:00
Andrew Garcia
ee155c794c Update README.md 2016-10-29 11:32:49 -06:00
Andrew Garcia
26ee545d7c Update README.md 
Edited the GitHub(Awesome Malware Analysis) and added the following
Virus Total(antivirus and other malware identification tools)
Process Explorer
Under books, we recommended Real Digital Forensics
PSTools placed this under Tools
Netcat (Tools)
 2016-10-28 16:33:03 -06:00
keith@keithjjones.com
c8fe753b58 Added more info about supported log types. 2016-10-23 14:41:58 -04:00
keith@keithjjones.com
4772153add Added Visualize_Logs. 2016-10-23 14:41:09 -04:00
rshipp
e8dfe08216
Add bokken mirror 2016-10-10 10:46:15 -05:00
rshipp
37b41c5e2d
Update proofpoint link 2016-10-10 10:46:08 -05:00
Keith J. Jones
278fdae096 Needed to change to http 2016-10-10 11:37:08 -04:00
Keith J. Jones
474d162d91 Added https 2016-10-10 11:36:18 -04:00
Keith J. Jones
379ee11152 Added ProcDot. 2016-10-10 08:49:04 -04:00
Ivan Gotovchits
40f7902f3a added bap framework 2016-10-05 11:27:58 -04:00
Keith J. Jones
76c07cd9b0 Added cuckoo-modified-api. 2016-10-04 16:12:19 -04:00
Kyle Maxwell
31a6325ca4 Replace maltrieve with Ragpicker 2016-09-28 23:47:04 -04:00
Herman Slatman
923f91e530 Add periods 2016-09-11 16:37:31 +02:00
Keith J. Jones
b2a6d0891d Alphabetized and capitalized. 2016-08-31 10:43:08 -04:00
Keith J. Jones
8fc75aee5c Added host and file intelligence tools by keithjjones. 2016-08-31 10:30:42 -04:00
rshipp
fd17f5b9c8
Fix links 2016-08-27 19:40:57 -05:00
rshipp
237e5d921c
Add @devttys0 Binwalk 
Closes #73.
 2016-08-27 19:34:47 -05:00
rshipp
5e17a91437
Fix spelling mistake 
Related: PR #72
 2016-08-21 16:13:14 -05:00
Petr Zemek
f5a5164ca7 Add RetDec 2016-08-09 15:25:38 +02:00
rshipp
06242043b4
Add @bambenek OSINT and Barncat 2016-07-29 22:54:24 -06:00
O . S . O
cd263f9fde No https 2016-07-22 12:30:58 +02:00
O . S . O
164a3dfa46 Added firmware.re 2016-07-22 12:21:56 +02:00
Chandrapal
59e6f838c6 Corrected Travis-CI error 2016-07-01 07:21:15 -06:00
Chandrapal
af58bd5aea Add monnappa to twitter list 2016-07-01 07:21:15 -06:00
Chandrapal
7edeb03635 Added Limon Sandbox 2016-07-01 07:21:15 -06:00
rshipp
fe57646480
Clean up whitespace and redirects 2016-06-30 20:05:30 -06:00
rshipp
e4046baa69
Add binitamshah to twitter list 2016-06-30 19:54:21 -06:00
Herman Slatman
2def03d0b7 Polichombr added 2016-06-28 12:32:45 +02:00
Herman Slatman
12e981c66f al-khaser added 2016-06-28 12:29:53 +02:00
Herman Slatman
6085d2cf2a MalSploitBase added 2016-06-28 12:20:28 +02:00
Herman Slatman
1c73c77423 detux added 2016-06-28 12:17:20 +02:00
Herman Slatman
8052b0269a NetworkTotal added 2016-06-28 12:14:35 +02:00
Herman Slatman
2ec762c17b Binar.ly added 2016-06-28 12:10:18 +02:00
Herman Slatman
d524a65843 QuickSand added 2016-06-28 12:06:18 +02:00
Herman Slatman
64545d0956 FLOSS by FireEye added 2016-06-28 11:59:00 +02:00
Herman Slatman
d685c10b29 unpacker added 2016-06-28 11:53:02 +02:00
Herman Slatman
ff00221d9e Bamfdetect added 2016-06-28 11:44:29 +02:00
Jossef Harush
e966d1c885 removing Anubis link 
they are discontinuing the Anubis and Wepawet services.
 2016-06-22 13:49:49 +03:00
rshipp
05234802f0
Add openmalware.org 2016-06-04 23:28:51 -06:00
rshipp
374bd271de
Add related awesome lists 2016-06-04 23:25:14 -06:00
Herman Slatman
6627eb22c2 ROPMEMU added 2016-06-04 23:47:58 +02:00
rshipp
13abebcdcc
Add AlienVault OTX 
Closes #52
 2016-05-26 13:46:13 -06:00
rshipp
ed12435616
Wrap a line 2016-05-26 13:44:51 -06:00
rshipp
ee3f68cc05
Capitalize the first word in descriptions 2016-05-26 13:35:48 -06:00
Ryan Shipp
5f4dfb2625 Merge pull request #64 from joesecurity/patch-1 
Update README.md
 2016-05-26 13:25:17 -06:00
Joe Security
78ef9a0d58 Update README.md 
Add tool: Joe Sandbox
 2016-05-26 19:56:40 +02:00
Joe Security
41aceefca6 Update README.md 
Add some tool name: File Analyzer
Add some tool name: APK Analyzer
Add some tool name: URL Analyzer
Add some tool name: Document Analyzer
 2016-05-26 19:54:38 +02:00
rshipp
56c4c508db
Add another link to contributing guidelines 2016-05-26 09:02:15 -06:00
rshipp
dbe021754f
Add Travis link 2016-05-26 08:58:51 -06:00
rshipp
87c12e6572
Update MaltegoVT and ThreatTracker links 2016-05-26 08:57:50 -06:00
rshipp
55e41debf5
Change Glastopf link 2016-05-26 08:55:36 -06:00
rshipp
b76fa3ea21
Remove PEiD, dead link 2016-05-26 08:45:57 -06:00
rshipp
e9cbab6c58
Add @R00ke PPEE 
Closes #63
 2016-05-26 08:38:19 -06:00
rshipp
90312f451b
Add @horsicq Detect-It-Easy 
Closes #58
 2016-05-26 08:35:52 -06:00
rshipp
ec8291d51c
Add @rabbitstack Fibratus 
Closes #62
 2016-05-26 08:33:56 -06:00
rshipp
3363512390
Fix more formatting issues 2016-05-18 13:56:33 -06:00
rshipp
003f34b1b0
Fix description from #61 2016-05-18 13:53:35 -06:00
Aleksandre Vardanidze
a0e31e9030 Update README.md 
squidmagic is a tool designed to analyze a web-based network traffic to detect central command and control (C&C) servers and Malicious site, 
using Squid proxy server,Virustotal and etc...
 2016-05-18 10:01:03 +04:00
Herman Slatman
4154abf5cb Practial Malware Analysis Starter Kit added 2016-05-16 10:03:17 +02:00
rshipp
2c9787b4f4 Fix misplaced line 2016-04-27 10:12:28 -06:00
Patrik Hudak
3e6e63dde1 Fix the enisa link 2016-04-17 22:21:19 +02:00
Patrik Hudak
8375efddf2 Build failure fixed 2016-04-17 22:16:33 +02:00
Patrik Hudak
67aef88228 Add tools 2016-04-16 13:37:35 +02:00
rshipp
156a194e1b
Clean up whitelist 2016-04-12 09:36:24 -06:00
rshipp
c713f3ebcf
Fix HTTPS redirects 2016-04-12 09:16:09 -06:00
rshipp
db1a90162b
Remove PREDICT 2016-04-12 09:14:58 -06:00
Herman Slatman
1128dd2034 Triton added 2016-04-12 11:23:42 +02:00
Gregory LeBlanc
1b8de9149e Updated Totalhash.py GIST to use new domain plus use BeautifulSoup and Requests. 2016-04-06 19:43:17 -04:00
Ryan Shipp
a10226a8f8 Merge pull request #51 from hslatman/hs_laika 
Laika BOSS added
 2016-04-02 10:25:50 -06:00
Herman Slatman
66655cfbc7 Laika BOSS added 2016-04-02 16:15:33 +02:00
Costa Tsaousis
393f2c5bba Update README.md 
fixed iplists.firehol.org
 2016-04-01 00:27:13 +03:00
rshipp
76f47d43e7 Fix extra picky kernelmode redirect 2016-03-31 15:09:30 -06:00
rshipp
db4e640b8d Fix kernelmode item 2016-03-31 15:03:05 -06:00
rshipp
6d2f7acd2e Add FireHOL IP Lists 2016-03-31 15:01:08 -06:00
Szilard Stange
e6506fbddc Add Metadefender.com 2016-03-31 13:42:09 +02:00
Ryan Shipp
8c7386847f Merge pull request #47 from ThomasThelen/master 
Add Kernelmode.info
 2016-03-22 23:03:36 -06:00
Thomas Thelen
77e8279aa5 Update README.md 2016-03-22 21:42:44 -07:00
Thomas Thelen
05c3b5216c Update README.md 2016-03-22 20:06:23 -07:00
Thomas Thelen
a368bc9230 Update README.md 2016-03-22 20:04:33 -07:00
Thomas Thelen
a74f742db3 Update README.md 2016-03-22 20:04:11 -07:00
ReadmeCritic
208a0d5bfe Remove Metascan Online 
https://live.metascan-online.com/ is dead
 2016-03-21 14:43:27 -07:00
ReadmeCritic
6d43d8f5af Update README URLs based on HTTP redirects 2016-03-21 14:36:59 -07:00
Steve McMaster
195d1fb3e5 Add Machinae to Domain Analysis section 2016-03-16 00:45:20 -04:00
Jaan Janesmae
afad8e7e0f Adding AbuseHelper, the open-source framework for receiving and redistributing abuse feeds and threat intel. 2016-03-07 03:53:03 +02:00
Ryan Shipp
590f269997 Merge pull request #40 from meirwah/master 
Add Awesome Incident response list
 2016-02-27 13:18:58 -07:00
Meir Wahnon
afe02b7718 Update README.md 2016-02-27 21:35:50 +02:00
Herman Slatman
135dcda204 Alphabetizing; including older entries 2016-01-22 15:26:02 +01:00
Herman Slatman
3c462a3e37 Fu's Malware Analysis Tutorials added 2016-01-22 10:55:04 +01:00
Francis T. O'Donovan
d70f580ef1 Add PREDICT repository 
Add link to the Protected Repository for the Defense of Infrastructure
Against Cyber Threats ([PREDICT](https://predict.org)), that can
quickly and easily provide qualified developers and evaluators with
regularly updated network operations data they can use in their cyber
security research.
 2016-01-21 15:18:22 -05:00
rshipp
93e39cb94d Change Kippo to Cowrie 
Fixes #36
 2016-01-20 17:34:18 -07:00
rshipp
c37235c30c Update EmergingTreats link 
Found in Travis build 23
 2016-01-20 09:36:29 -07:00
rshipp
1f9f9f5b4b Update Bokken link, fixes #35 2016-01-20 08:08:48 -07:00
rshipp
f9523e31b8 Fix redirect found in Travis build 20 2016-01-14 19:20:59 +01:00
Herman Slatman
fd3f2de35d slight typo 2016-01-14 15:13:42 +01:00
Herman Slatman
daf3ef383f RPISEC malware analysis coursed added 2016-01-14 15:12:32 +01:00
Herman Slatman
09bec9437c SEE by F-Secure added 2016-01-09 12:43:10 +01:00
Herman Slatman
da493c5fd6 PANDA added 2016-01-09 12:35:02 +01:00
Mateusz
1b00eeca84 preserving alphabetic order 2016-01-07 08:41:01 +01:00
Mateusz
ecadca2083 add PcapViz 2016-01-04 20:12:12 +01:00
rshipp
35d3350ed9 Add PyIOCe 2015-12-29 11:17:15 +01:00
rshipp
afe72d2fa7 Fix mandiant redirect 2015-12-29 11:00:59 +01:00
rshipp
a5fbf51725 Fix honeyd redirect 2015-12-29 10:58:43 +01:00
rshipp
0049484476 Fix ciarmy->cnsscore redirect 2015-12-29 10:56:08 +01:00
ReadmeCritic
bff4e76d08 Update README URLs based on HTTP redirects 2015-12-28 15:09:27 -08:00
rshipp
0fd1186601 Add Kahu JS Deobfuscator 
Closes #24
 2015-12-28 13:32:44 +01:00
rshipp
90b9c87a56 ThreatMinerVT -> MaltegoVT 2015-12-28 13:29:40 +01:00
rshipp
fa511a778a Fix duplicates 
Related: #27
 2015-12-28 13:16:56 +01:00
rshipp
f67c507668 Add @BromiumLabs PackerAttacker 2015-12-28 12:52:06 +01:00
rshipp
1521c9cfa9 Add @hempnall broyara 2015-12-28 12:52:06 +01:00
rshipp
280d640f88 Add @jiachongzhi ThreatMinerVT 2015-12-28 12:52:06 +01:00
rshipp
8cdcaf6030 Add @jiachongzhi ThreatTracker 2015-12-28 12:51:20 +01:00
rshipp
d575853eb9 Add @jnraber VirtualDeobfuscator 2015-12-28 12:51:20 +01:00
rshipp
b92c8f1d69 Add @longld PEDA 2015-12-28 12:51:20 +01:00
rshipp
8c3448700b Add @hugsy GEF 2015-12-28 12:51:20 +01:00
rshipp
ed08d2e83f Add @aquynh Capstone 2015-12-28 12:51:20 +01:00
rshipp
6da29eafed Add @programa-stic BARF 2015-12-28 12:51:20 +01:00
rshipp
8b6e1c5afb Add @angr 2015-12-28 12:51:19 +01:00
rshipp
b26a3c4a2e Add @hugsy codebro 2015-12-28 12:51:19 +01:00
rshipp
f0266011bc Add @pidydx SMRT 2015-12-28 12:51:19 +01:00
rshipp
8ccb742b3e Add @google binnavi 2015-12-28 12:50:37 +01:00
Jason Trost
303a1b75f8 Added Zulu and URLQuery 2015-12-21 06:26:38 -05:00
Herman Slatman
9fc1661344 Maltrail malicious communication analyzer added 2015-12-10 16:26:23 +01:00
rshipp
cac4f6af79 Fix formatting from PR #25 2015-12-05 18:57:35 +01:00
Amir.H Shahin
bbbb07df56 Update README.md 
A blog that analyzes Malware Samples and Traffic.
 2015-12-05 18:09:50 +01:00
Ryan Shipp
c763427502 Merge pull request #23 from phretor/master 
Add DeepViz online sandbox
 2015-11-15 12:05:56 +01:00
Federico Maggi
636096fe6c Add DeepViz online sandbox 2015-11-13 21:13:24 -08:00
ReadmeCritic
507ee28bfe Update redirects in Readme 2015-11-13 19:37:29 -08:00
ocean1
f2e179c592 Add AndroTotal 2015-10-13 07:23:16 +02:00
Ryan Shipp
5eda1eabcf Merge pull request #20 from ThomasThelen/master 
ADD x64dbg
 2015-10-09 07:47:54 +02:00
Thomas Thelen
cffa432142 ADD x64dbg 2015-10-08 16:20:31 -07:00
rshipp
eece1b51c7 Add @Dynetics Malfunction 2015-10-02 18:28:37 +02:00
rshipp
cbccb3d6b0 Add @kbandla APTnotes 2015-10-02 18:25:51 +02:00
rshipp
2b65518019 Add @paragonie awesome-appsec 2015-10-01 16:14:43 +02:00
Thomas Thelen
5e76392839 ADD x64dbg 2015-09-25 18:16:59 -07:00
rshipp
bf04714ab0 Add @onlurking awesome-infosec 2015-09-25 20:44:44 +02:00
rshipp
e30c9d8871 Add OpenMalware to Twitter list 2015-09-22 18:57:17 +02:00
rshipp
757bbaa551 Add csirt_tools 2015-09-22 18:35:43 +02:00
rshipp
2a890fc18d Add missing period 2015-09-22 18:13:12 +02:00
rshipp
503a3dfd4d Add @a0rtega pafish 2015-09-22 18:10:22 +02:00
rshipp
ab36a82f4d Add @0xd4d dnSpy and de4dot 2015-09-22 18:07:01 +02:00
rshipp
9cc0619923 Add @OMENScan AChoir 2015-09-22 18:04:13 +02:00
rshipp
636fef2ff1 Add @codypierce hackers-grep 2015-09-22 18:02:36 +02:00
rshipp
ead1f87f4d Fix Loki ordering 2015-09-22 17:46:17 +02:00
rshipp
07da4ab57c Fix Radare/strace ordering 2015-09-22 17:44:27 +02:00
rshipp
0a9ba6cd41 Add MalwareDB, from #8 2015-09-22 17:41:56 +02:00
rshipp
b6b5064bbc Fix more corpora ordering 2015-09-22 17:41:10 +02:00
rshipp
9a2ccc7123 Fix order of corpora entries 2015-09-22 17:40:19 +02:00
rshipp
6ed06ab7b2 Add @quarkslab IRMA, from #8 2015-09-22 17:38:56 +02:00
rshipp
e5d526226d Add @passivetotal, from #8 2015-09-22 17:34:43 +02:00
rshipp
ee1637069d Add threatRECON, from #8 2015-09-22 17:30:15 +02:00
rshipp
36857a6e0c Add PDF Examiner, from #8 2015-09-22 17:27:27 +02:00
rshipp
8e4901ce15 Add Cryptam, from #8 2015-09-22 17:26:40 +02:00
rshipp
65947fde44 Add spamcop/spamhaus, from #8 2015-09-22 17:22:46 +02:00
rshipp
4ee8ce70c6 Fix senderbase wrapping and order 2015-09-22 17:15:03 +02:00
David André
b8612087e8 Add SenderBase 2015-09-22 17:14:34 +02:00
rshipp
c84058b917 Fix order for Yara/ZeuS 2015-09-22 17:12:37 +02:00
rshipp
36944e5d5a Fix formatting and order for STIX 2015-09-22 17:11:56 +02:00
David André
9317c4d99b Added STIX - Structured Threat Information eXpression and related standards 2015-09-22 17:10:06 +02:00
rshipp
c2e6011caa Fix wrapping/order for @csirtgadgets massive-octo-spice 2015-09-22 17:09:38 +02:00
David André
16fbe3e87b Added Massive Octo Spice, previously known as CIF - Collective Intelligence Framework 2015-09-22 17:05:49 +02:00
David André
79c0890d9a Added details for MISP 2015-09-22 17:04:39 +02:00
rshipp
34bb94a49a Fix wrapping, grammar, formatting 
Also removed extra Anubis entry
 2015-09-22 16:56:40 +02:00
rshipp
477d1a7a59 Fix whitespace 2015-09-22 16:51:16 +02:00
rshipp
e8c10d0f9c Add @certtools IntelMQ, suggested by #19 2015-09-22 16:51:16 +02:00
rshipp
7cce7965fa Add @brad-accuvant cuckoo-modified, suggested by #18 2015-09-22 16:51:16 +02:00
rshipp
8c3e10f861 Add @apsdehal CTF awesome list 2015-09-22 16:51:16 +02:00
rshipp
fc89770523 Add @chrisddom ThreatCrowd, closes #16 2015-09-22 16:51:15 +02:00
rshipp
20f3f1c55d Add @omriher CapTipper 2015-09-22 16:51:15 +02:00
rshipp
94312587f5 Add @caesar0301 and @carpedm20 awesome lists 2015-09-22 16:51:15 +02:00
rshipp
5695e2ffb5 Move awesome-honeypots link 2015-09-22 16:51:15 +02:00
rshipp
bde41603d3 Add awesome badge 2015-09-22 16:51:15 +02:00
Emilio Casbas
9cb1d51257 Alphabetized fix 2015-09-22 16:51:15 +02:00
Emilio Casbas
7387bf8225 Add desenmascarame 2015-09-22 16:51:15 +02:00
pe3zx
3651c20185 Update README.md 
Edited to be alphabetical order and added some links
 2015-09-22 16:51:15 +02:00
pe3zx
0c84829f2f Update README.md 
Added links to online scanners and malware corpora categories
 2015-09-22 16:51:15 +02:00
sjas
c584580869 awesome-honeypots list added 2015-09-22 16:51:15 +02:00
Drew Bonasera
3b53096963 Add MultiScanner Link 2015-09-22 16:51:15 +02:00
David André
abd161fbc5 Added Yara rules repository 2015-05-20 11:53:45 +02:00
David André
7880857b4a Added MISP under workflow & storage category 2015-05-20 11:50:05 +02:00
David André
5be91b3d46 Add CRDF ThreatCenter 2015-05-20 11:44:56 +02:00
David André
4220e1099f Add YarGen 2015-05-20 11:41:29 +02:00
David André
23caba0247 Add Loki 2015-05-20 11:38:06 +02:00
rshipp
36ed33286e Add Hexacorn to Twitter list 2015-05-18 11:59:18 -06:00
rshipp
9c64070a4c Add winitor pestudio 2015-05-18 10:20:28 -06:00
rshipp
e5ee601e1d Add @aim4r VolDiff 2015-05-18 10:19:02 -06:00
rshipp
fe4b5b4b83 Add @MalwareLu website 2015-05-18 08:47:05 -06:00
rshipp
39cf7edc55 Add @MISP 2015-05-18 08:30:45 -06:00
rshipp
e870f00491 Fix formatting 2015-05-18 08:29:13 -06:00
Blevene
5fd0d4e296 Added malshare.com 2015-05-18 10:24:29 -04:00
nop0x0f
3e09da350e Liam Randall is @hectaman 
link was correct
@hectman is attached to the name hectormanuel
 2015-05-17 23:57:03 -04:00
rshipp
eba1c16f54 Add @crits 2015-05-17 14:08:50 -06:00
rshipp
fd468cd7f4 Add @MITRECND chopshop 2015-05-17 14:06:29 -06:00
rshipp
fe9b1481ea Add @aol Moloch 
Suggested by https://twitter.com/diocyde/status/600008336029962240
 2015-05-17 14:05:31 -06:00
rshipp
8e0a7181c7 Clean up whitespace 2015-05-17 13:25:47 -06:00
rshipp
106a6cbaf5 Add @Defense-Cyber-Crime-Center MWCP 2015-05-17 13:25:23 -06:00