ch0ic3/awesome-malware-analysis
1
0
Fork 0
mirror of https://github.com/rshipp/awesome-malware-analysis.git synced 2024-12-22 20:26:08 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
536 Commits 1 Branch 0 Tags 907 KiB
4d91897583
Commit Graph

440 Commits

Author SHA1 Message Date
Ryan Shipp
f366c71dcf Merge pull request #95 from zbetcheckin/patch-2 
Add Cybercrime tracker and Ransomware overview
 2016-12-21 17:25:26 -06:00
Ryan Shipp
f1d6497750 Merge pull request #97 from zbetcheckin/patch-4 
Add Sand droid and Malware config
 2016-12-21 17:25:17 -06:00
Ryan Shipp
a7b31660a4 Merge pull request #96 from zbetcheckin/patch-3 
Add VX Vault and Tracker h3x
 2016-12-21 17:25:01 -06:00
Ryan Shipp
3370f456e0 Merge pull request #98 from zbetcheckin/patch-5 
Add multi RBL lookup
 2016-12-21 17:24:52 -06:00
zbetcheckin
380a0667ec Add multi RBL lookup 2016-12-16 04:23:58 +04:00
zbetcheckin
75a02b9cf7 Add Malware config 2016-12-16 04:21:37 +04:00
zbetcheckin
bacd889cb4 Add Sand droid 2016-12-16 04:19:36 +04:00
zbetcheckin
40d0a3eec7 Add VX Vault 2016-12-16 04:11:21 +04:00
zbetcheckin
8ac173ad89 Add Tracker h3x 2016-12-16 04:09:18 +04:00
zbetcheckin
4c398d54cc Add Cybercrime tracker 2016-12-16 04:04:24 +04:00
zbetcheckin
7bcfd150e0 Add Ransomware overview 2016-12-16 03:58:20 +04:00
zbetcheckin
653860d4b5 Add Malware museum 2016-12-16 03:42:51 +04:00
Cugu
b4b60ffea9 Add awesome-forensics list 2016-12-07 13:33:20 +01:00
Ryan Shipp
90846aceca Add @EmersonElectricCo FSF 
Closes #90
 2016-11-24 22:55:28 -06:00
Marcus LaFerrera
8b9793e634
Add stoQ 2016-11-20 10:38:27 -05:00
Ryan Shipp
decc0b8309 Update @aptnotes link 2016-11-16 08:34:10 -06:00
CapacitorSet
a809385308 Add box-js 2016-11-14 12:25:41 +01:00
rshipp
4648aa5005
Fix fport category/description 2016-11-13 14:21:25 -06:00
baafuor
fe8c31e8b3
Update README.md 
Added FPort to the Tools section.
 2016-11-13 14:20:22 -06:00
rshipp
a7a9bd139b
Merge PR #86 2016-11-13 14:13:24 -06:00
rshipp
5cbeb5757d
Merge PR #4 2016-11-13 13:59:53 -06:00
rshipp
e1a32c4a93
Fix BAP line wrapping 2016-11-13 13:49:39 -06:00
rshipp
a804e4061d
Remove trailing whitespace 2016-11-13 13:49:18 -06:00
rshipp
3bd5f78692
Revert cuckoo and viper links 2016-11-13 13:48:51 -06:00
sigmaapex
1537256aab
Update README.md 
-Added BlackLight and Rootkit Arsenal. 
-Fixed Cuckoo and Viper links
 2016-11-13 13:47:13 -06:00
keith@keithjjones.com
8f20090fda Added cuckoo log to project description. 2016-11-12 11:45:14 -05:00
Andrew Garcia
ee155c794c Update README.md 2016-10-29 11:32:49 -06:00
Andrew Garcia
26ee545d7c Update README.md 
Edited the GitHub(Awesome Malware Analysis) and added the following
Virus Total(antivirus and other malware identification tools)
Process Explorer
Under books, we recommended Real Digital Forensics
PSTools placed this under Tools
Netcat (Tools)
 2016-10-28 16:33:03 -06:00
keith@keithjjones.com
c8fe753b58 Added more info about supported log types. 2016-10-23 14:41:58 -04:00
keith@keithjjones.com
4772153add Added Visualize_Logs. 2016-10-23 14:41:09 -04:00
rshipp
e8dfe08216
Add bokken mirror 2016-10-10 10:46:15 -05:00
rshipp
37b41c5e2d
Update proofpoint link 2016-10-10 10:46:08 -05:00
Keith J. Jones
278fdae096 Needed to change to http 2016-10-10 11:37:08 -04:00
Keith J. Jones
474d162d91 Added https 2016-10-10 11:36:18 -04:00
Keith J. Jones
379ee11152 Added ProcDot. 2016-10-10 08:49:04 -04:00
Ivan Gotovchits
40f7902f3a added bap framework 2016-10-05 11:27:58 -04:00
Keith J. Jones
76c07cd9b0 Added cuckoo-modified-api. 2016-10-04 16:12:19 -04:00
Kyle Maxwell
31a6325ca4 Replace maltrieve with Ragpicker 2016-09-28 23:47:04 -04:00
Herman Slatman
923f91e530 Add periods 2016-09-11 16:37:31 +02:00
Keith J. Jones
b2a6d0891d Alphabetized and capitalized. 2016-08-31 10:43:08 -04:00
Keith J. Jones
8fc75aee5c Added host and file intelligence tools by keithjjones. 2016-08-31 10:30:42 -04:00
rshipp
fd17f5b9c8
Fix links 2016-08-27 19:40:57 -05:00
rshipp
237e5d921c
Add @devttys0 Binwalk 
Closes #73.
 2016-08-27 19:34:47 -05:00
rshipp
5e17a91437
Fix spelling mistake 
Related: PR #72
 2016-08-21 16:13:14 -05:00
Petr Zemek
f5a5164ca7 Add RetDec 2016-08-09 15:25:38 +02:00
rshipp
06242043b4
Add @bambenek OSINT and Barncat 2016-07-29 22:54:24 -06:00
O . S . O
cd263f9fde No https 2016-07-22 12:30:58 +02:00
O . S . O
164a3dfa46 Added firmware.re 2016-07-22 12:21:56 +02:00
Chandrapal
59e6f838c6 Corrected Travis-CI error 2016-07-01 07:21:15 -06:00
Chandrapal
af58bd5aea Add monnappa to twitter list 2016-07-01 07:21:15 -06:00
Chandrapal
7edeb03635 Added Limon Sandbox 2016-07-01 07:21:15 -06:00
rshipp
fe57646480
Clean up whitespace and redirects 2016-06-30 20:05:30 -06:00
rshipp
e4046baa69
Add binitamshah to twitter list 2016-06-30 19:54:21 -06:00
Herman Slatman
2def03d0b7 Polichombr added 2016-06-28 12:32:45 +02:00
Herman Slatman
12e981c66f al-khaser added 2016-06-28 12:29:53 +02:00
Herman Slatman
6085d2cf2a MalSploitBase added 2016-06-28 12:20:28 +02:00
Herman Slatman
1c73c77423 detux added 2016-06-28 12:17:20 +02:00
Herman Slatman
8052b0269a NetworkTotal added 2016-06-28 12:14:35 +02:00
Herman Slatman
2ec762c17b Binar.ly added 2016-06-28 12:10:18 +02:00
Herman Slatman
d524a65843 QuickSand added 2016-06-28 12:06:18 +02:00
Herman Slatman
64545d0956 FLOSS by FireEye added 2016-06-28 11:59:00 +02:00
Herman Slatman
d685c10b29 unpacker added 2016-06-28 11:53:02 +02:00
Herman Slatman
ff00221d9e Bamfdetect added 2016-06-28 11:44:29 +02:00
Jossef Harush
e966d1c885 removing Anubis link 
they are discontinuing the Anubis and Wepawet services.
 2016-06-22 13:49:49 +03:00
rshipp
05234802f0
Add openmalware.org 2016-06-04 23:28:51 -06:00
rshipp
374bd271de
Add related awesome lists 2016-06-04 23:25:14 -06:00
Herman Slatman
6627eb22c2 ROPMEMU added 2016-06-04 23:47:58 +02:00
rshipp
13abebcdcc
Add AlienVault OTX 
Closes #52
 2016-05-26 13:46:13 -06:00
rshipp
ed12435616
Wrap a line 2016-05-26 13:44:51 -06:00
rshipp
ee3f68cc05
Capitalize the first word in descriptions 2016-05-26 13:35:48 -06:00
Ryan Shipp
5f4dfb2625 Merge pull request #64 from joesecurity/patch-1 
Update README.md
 2016-05-26 13:25:17 -06:00
Joe Security
78ef9a0d58 Update README.md 
Add tool: Joe Sandbox
 2016-05-26 19:56:40 +02:00
Joe Security
41aceefca6 Update README.md 
Add some tool name: File Analyzer
Add some tool name: APK Analyzer
Add some tool name: URL Analyzer
Add some tool name: Document Analyzer
 2016-05-26 19:54:38 +02:00
rshipp
56c4c508db
Add another link to contributing guidelines 2016-05-26 09:02:15 -06:00
rshipp
dbe021754f
Add Travis link 2016-05-26 08:58:51 -06:00
rshipp
87c12e6572
Update MaltegoVT and ThreatTracker links 2016-05-26 08:57:50 -06:00
rshipp
55e41debf5
Change Glastopf link 2016-05-26 08:55:36 -06:00
rshipp
b76fa3ea21
Remove PEiD, dead link 2016-05-26 08:45:57 -06:00
rshipp
e9cbab6c58
Add @R00ke PPEE 
Closes #63
 2016-05-26 08:38:19 -06:00
rshipp
90312f451b
Add @horsicq Detect-It-Easy 
Closes #58
 2016-05-26 08:35:52 -06:00
rshipp
ec8291d51c
Add @rabbitstack Fibratus 
Closes #62
 2016-05-26 08:33:56 -06:00
rshipp
3363512390
Fix more formatting issues 2016-05-18 13:56:33 -06:00
rshipp
003f34b1b0
Fix description from #61 2016-05-18 13:53:35 -06:00
Aleksandre Vardanidze
a0e31e9030 Update README.md 
squidmagic is a tool designed to analyze a web-based network traffic to detect central command and control (C&C) servers and Malicious site, 
using Squid proxy server,Virustotal and etc...
 2016-05-18 10:01:03 +04:00
Herman Slatman
4154abf5cb Practial Malware Analysis Starter Kit added 2016-05-16 10:03:17 +02:00
rshipp
2c9787b4f4 Fix misplaced line 2016-04-27 10:12:28 -06:00
Patrik Hudak
3e6e63dde1 Fix the enisa link 2016-04-17 22:21:19 +02:00
Patrik Hudak
8375efddf2 Build failure fixed 2016-04-17 22:16:33 +02:00
Patrik Hudak
67aef88228 Add tools 2016-04-16 13:37:35 +02:00
rshipp
156a194e1b
Clean up whitelist 2016-04-12 09:36:24 -06:00
rshipp
c713f3ebcf
Fix HTTPS redirects 2016-04-12 09:16:09 -06:00
rshipp
db1a90162b
Remove PREDICT 2016-04-12 09:14:58 -06:00
Herman Slatman
1128dd2034 Triton added 2016-04-12 11:23:42 +02:00
Gregory LeBlanc
1b8de9149e Updated Totalhash.py GIST to use new domain plus use BeautifulSoup and Requests. 2016-04-06 19:43:17 -04:00
Ryan Shipp
a10226a8f8 Merge pull request #51 from hslatman/hs_laika 
Laika BOSS added
 2016-04-02 10:25:50 -06:00
Herman Slatman
66655cfbc7 Laika BOSS added 2016-04-02 16:15:33 +02:00
Costa Tsaousis
393f2c5bba Update README.md 
fixed iplists.firehol.org
 2016-04-01 00:27:13 +03:00
rshipp
76f47d43e7 Fix extra picky kernelmode redirect 2016-03-31 15:09:30 -06:00
rshipp
db4e640b8d Fix kernelmode item 2016-03-31 15:03:05 -06:00
rshipp
6d2f7acd2e Add FireHOL IP Lists 2016-03-31 15:01:08 -06:00
Szilard Stange
e6506fbddc Add Metadefender.com 2016-03-31 13:42:09 +02:00
Ryan Shipp
8c7386847f Merge pull request #47 from ThomasThelen/master 
Add Kernelmode.info
 2016-03-22 23:03:36 -06:00
Thomas Thelen
77e8279aa5 Update README.md 2016-03-22 21:42:44 -07:00
Thomas Thelen
05c3b5216c Update README.md 2016-03-22 20:06:23 -07:00
Thomas Thelen
a368bc9230 Update README.md 2016-03-22 20:04:33 -07:00
Thomas Thelen
a74f742db3 Update README.md 2016-03-22 20:04:11 -07:00
ReadmeCritic
208a0d5bfe Remove Metascan Online 
https://live.metascan-online.com/ is dead
 2016-03-21 14:43:27 -07:00
ReadmeCritic
6d43d8f5af Update README URLs based on HTTP redirects 2016-03-21 14:36:59 -07:00
Steve McMaster
195d1fb3e5 Add Machinae to Domain Analysis section 2016-03-16 00:45:20 -04:00
Jaan Janesmae
afad8e7e0f Adding AbuseHelper, the open-source framework for receiving and redistributing abuse feeds and threat intel. 2016-03-07 03:53:03 +02:00
Ryan Shipp
590f269997 Merge pull request #40 from meirwah/master 
Add Awesome Incident response list
 2016-02-27 13:18:58 -07:00
Meir Wahnon
afe02b7718 Update README.md 2016-02-27 21:35:50 +02:00
Herman Slatman
135dcda204 Alphabetizing; including older entries 2016-01-22 15:26:02 +01:00
Herman Slatman
3c462a3e37 Fu's Malware Analysis Tutorials added 2016-01-22 10:55:04 +01:00
Francis T. O'Donovan
d70f580ef1 Add PREDICT repository 
Add link to the Protected Repository for the Defense of Infrastructure
Against Cyber Threats ([PREDICT](https://predict.org)), that can
quickly and easily provide qualified developers and evaluators with
regularly updated network operations data they can use in their cyber
security research.
 2016-01-21 15:18:22 -05:00
rshipp
93e39cb94d Change Kippo to Cowrie 
Fixes #36
 2016-01-20 17:34:18 -07:00
rshipp
c37235c30c Update EmergingTreats link 
Found in Travis build 23
 2016-01-20 09:36:29 -07:00
rshipp
1f9f9f5b4b Update Bokken link, fixes #35 2016-01-20 08:08:48 -07:00
rshipp
f9523e31b8 Fix redirect found in Travis build 20 2016-01-14 19:20:59 +01:00
Herman Slatman
fd3f2de35d slight typo 2016-01-14 15:13:42 +01:00
Herman Slatman
daf3ef383f RPISEC malware analysis coursed added 2016-01-14 15:12:32 +01:00
Herman Slatman
09bec9437c SEE by F-Secure added 2016-01-09 12:43:10 +01:00
Herman Slatman
da493c5fd6 PANDA added 2016-01-09 12:35:02 +01:00
Mateusz
1b00eeca84 preserving alphabetic order 2016-01-07 08:41:01 +01:00
Mateusz
ecadca2083 add PcapViz 2016-01-04 20:12:12 +01:00
rshipp
35d3350ed9 Add PyIOCe 2015-12-29 11:17:15 +01:00
rshipp
afe72d2fa7 Fix mandiant redirect 2015-12-29 11:00:59 +01:00
rshipp
a5fbf51725 Fix honeyd redirect 2015-12-29 10:58:43 +01:00
rshipp
0049484476 Fix ciarmy->cnsscore redirect 2015-12-29 10:56:08 +01:00
ReadmeCritic
bff4e76d08 Update README URLs based on HTTP redirects 2015-12-28 15:09:27 -08:00
rshipp
0fd1186601 Add Kahu JS Deobfuscator 
Closes #24
 2015-12-28 13:32:44 +01:00
rshipp
90b9c87a56 ThreatMinerVT -> MaltegoVT 2015-12-28 13:29:40 +01:00
rshipp
fa511a778a Fix duplicates 
Related: #27
 2015-12-28 13:16:56 +01:00
rshipp
f67c507668 Add @BromiumLabs PackerAttacker 2015-12-28 12:52:06 +01:00
rshipp
1521c9cfa9 Add @hempnall broyara 2015-12-28 12:52:06 +01:00
rshipp
280d640f88 Add @jiachongzhi ThreatMinerVT 2015-12-28 12:52:06 +01:00
rshipp
8cdcaf6030 Add @jiachongzhi ThreatTracker 2015-12-28 12:51:20 +01:00
rshipp
d575853eb9 Add @jnraber VirtualDeobfuscator 2015-12-28 12:51:20 +01:00
rshipp
b92c8f1d69 Add @longld PEDA 2015-12-28 12:51:20 +01:00
rshipp
8c3448700b Add @hugsy GEF 2015-12-28 12:51:20 +01:00
rshipp
ed08d2e83f Add @aquynh Capstone 2015-12-28 12:51:20 +01:00
rshipp
6da29eafed Add @programa-stic BARF 2015-12-28 12:51:20 +01:00
rshipp
8b6e1c5afb Add @angr 2015-12-28 12:51:19 +01:00
rshipp
b26a3c4a2e Add @hugsy codebro 2015-12-28 12:51:19 +01:00
rshipp
f0266011bc Add @pidydx SMRT 2015-12-28 12:51:19 +01:00
rshipp
8ccb742b3e Add @google binnavi 2015-12-28 12:50:37 +01:00
Jason Trost
303a1b75f8 Added Zulu and URLQuery 2015-12-21 06:26:38 -05:00
Herman Slatman
9fc1661344 Maltrail malicious communication analyzer added 2015-12-10 16:26:23 +01:00
rshipp
cac4f6af79 Fix formatting from PR #25 2015-12-05 18:57:35 +01:00
Amir.H Shahin
bbbb07df56 Update README.md 
A blog that analyzes Malware Samples and Traffic.
 2015-12-05 18:09:50 +01:00