ch0ic3/awesome-malware-analysis
1
0
Fork 0
mirror of https://github.com/rshipp/awesome-malware-analysis.git synced 2024-12-22 12:16:10 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
495 Commits 1 Branch 0 Tags 907 KiB
604a93b220
Commit Graph

412 Commits

Author SHA1 Message Date
rshipp
e9cbab6c58
Add @R00ke PPEE 
Closes #63
 2016-05-26 08:38:19 -06:00
rshipp
90312f451b
Add @horsicq Detect-It-Easy 
Closes #58
 2016-05-26 08:35:52 -06:00
rshipp
ec8291d51c
Add @rabbitstack Fibratus 
Closes #62
 2016-05-26 08:33:56 -06:00
rshipp
3363512390
Fix more formatting issues 2016-05-18 13:56:33 -06:00
rshipp
003f34b1b0
Fix description from #61 2016-05-18 13:53:35 -06:00
Aleksandre Vardanidze
a0e31e9030 Update README.md 
squidmagic is a tool designed to analyze a web-based network traffic to detect central command and control (C&C) servers and Malicious site, 
using Squid proxy server,Virustotal and etc...
 2016-05-18 10:01:03 +04:00
Herman Slatman
4154abf5cb Practial Malware Analysis Starter Kit added 2016-05-16 10:03:17 +02:00
rshipp
2c9787b4f4 Fix misplaced line 2016-04-27 10:12:28 -06:00
Patrik Hudak
3e6e63dde1 Fix the enisa link 2016-04-17 22:21:19 +02:00
Patrik Hudak
8375efddf2 Build failure fixed 2016-04-17 22:16:33 +02:00
Patrik Hudak
67aef88228 Add tools 2016-04-16 13:37:35 +02:00
rshipp
156a194e1b
Clean up whitelist 2016-04-12 09:36:24 -06:00
rshipp
c713f3ebcf
Fix HTTPS redirects 2016-04-12 09:16:09 -06:00
rshipp
db1a90162b
Remove PREDICT 2016-04-12 09:14:58 -06:00
Herman Slatman
1128dd2034 Triton added 2016-04-12 11:23:42 +02:00
Gregory LeBlanc
1b8de9149e Updated Totalhash.py GIST to use new domain plus use BeautifulSoup and Requests. 2016-04-06 19:43:17 -04:00
Ryan Shipp
a10226a8f8 Merge pull request #51 from hslatman/hs_laika 
Laika BOSS added
 2016-04-02 10:25:50 -06:00
Herman Slatman
66655cfbc7 Laika BOSS added 2016-04-02 16:15:33 +02:00
Costa Tsaousis
393f2c5bba Update README.md 
fixed iplists.firehol.org
 2016-04-01 00:27:13 +03:00
rshipp
76f47d43e7 Fix extra picky kernelmode redirect 2016-03-31 15:09:30 -06:00
rshipp
db4e640b8d Fix kernelmode item 2016-03-31 15:03:05 -06:00
rshipp
6d2f7acd2e Add FireHOL IP Lists 2016-03-31 15:01:08 -06:00
Szilard Stange
e6506fbddc Add Metadefender.com 2016-03-31 13:42:09 +02:00
Ryan Shipp
8c7386847f Merge pull request #47 from ThomasThelen/master 
Add Kernelmode.info
 2016-03-22 23:03:36 -06:00
Thomas Thelen
77e8279aa5 Update README.md 2016-03-22 21:42:44 -07:00
Thomas Thelen
05c3b5216c Update README.md 2016-03-22 20:06:23 -07:00
Thomas Thelen
a368bc9230 Update README.md 2016-03-22 20:04:33 -07:00
Thomas Thelen
a74f742db3 Update README.md 2016-03-22 20:04:11 -07:00
ReadmeCritic
208a0d5bfe Remove Metascan Online 
https://live.metascan-online.com/ is dead
 2016-03-21 14:43:27 -07:00
ReadmeCritic
6d43d8f5af Update README URLs based on HTTP redirects 2016-03-21 14:36:59 -07:00
Steve McMaster
195d1fb3e5 Add Machinae to Domain Analysis section 2016-03-16 00:45:20 -04:00
Jaan Janesmae
afad8e7e0f Adding AbuseHelper, the open-source framework for receiving and redistributing abuse feeds and threat intel. 2016-03-07 03:53:03 +02:00
Ryan Shipp
590f269997 Merge pull request #40 from meirwah/master 
Add Awesome Incident response list
 2016-02-27 13:18:58 -07:00
Meir Wahnon
afe02b7718 Update README.md 2016-02-27 21:35:50 +02:00
Herman Slatman
135dcda204 Alphabetizing; including older entries 2016-01-22 15:26:02 +01:00
Herman Slatman
3c462a3e37 Fu's Malware Analysis Tutorials added 2016-01-22 10:55:04 +01:00
Francis T. O'Donovan
d70f580ef1 Add PREDICT repository 
Add link to the Protected Repository for the Defense of Infrastructure
Against Cyber Threats ([PREDICT](https://predict.org)), that can
quickly and easily provide qualified developers and evaluators with
regularly updated network operations data they can use in their cyber
security research.
 2016-01-21 15:18:22 -05:00
rshipp
93e39cb94d Change Kippo to Cowrie 
Fixes #36
 2016-01-20 17:34:18 -07:00
rshipp
c37235c30c Update EmergingTreats link 
Found in Travis build 23
 2016-01-20 09:36:29 -07:00
rshipp
1f9f9f5b4b Update Bokken link, fixes #35 2016-01-20 08:08:48 -07:00
rshipp
f9523e31b8 Fix redirect found in Travis build 20 2016-01-14 19:20:59 +01:00
Herman Slatman
fd3f2de35d slight typo 2016-01-14 15:13:42 +01:00
Herman Slatman
daf3ef383f RPISEC malware analysis coursed added 2016-01-14 15:12:32 +01:00
Herman Slatman
09bec9437c SEE by F-Secure added 2016-01-09 12:43:10 +01:00
Herman Slatman
da493c5fd6 PANDA added 2016-01-09 12:35:02 +01:00
Mateusz
1b00eeca84 preserving alphabetic order 2016-01-07 08:41:01 +01:00
Mateusz
ecadca2083 add PcapViz 2016-01-04 20:12:12 +01:00
rshipp
35d3350ed9 Add PyIOCe 2015-12-29 11:17:15 +01:00
rshipp
afe72d2fa7 Fix mandiant redirect 2015-12-29 11:00:59 +01:00
rshipp
a5fbf51725 Fix honeyd redirect 2015-12-29 10:58:43 +01:00
rshipp
0049484476 Fix ciarmy->cnsscore redirect 2015-12-29 10:56:08 +01:00
ReadmeCritic
bff4e76d08 Update README URLs based on HTTP redirects 2015-12-28 15:09:27 -08:00
rshipp
0fd1186601 Add Kahu JS Deobfuscator 
Closes #24
 2015-12-28 13:32:44 +01:00
rshipp
90b9c87a56 ThreatMinerVT -> MaltegoVT 2015-12-28 13:29:40 +01:00
rshipp
fa511a778a Fix duplicates 
Related: #27
 2015-12-28 13:16:56 +01:00
rshipp
f67c507668 Add @BromiumLabs PackerAttacker 2015-12-28 12:52:06 +01:00
rshipp
1521c9cfa9 Add @hempnall broyara 2015-12-28 12:52:06 +01:00
rshipp
280d640f88 Add @jiachongzhi ThreatMinerVT 2015-12-28 12:52:06 +01:00
rshipp
8cdcaf6030 Add @jiachongzhi ThreatTracker 2015-12-28 12:51:20 +01:00
rshipp
d575853eb9 Add @jnraber VirtualDeobfuscator 2015-12-28 12:51:20 +01:00
rshipp
b92c8f1d69 Add @longld PEDA 2015-12-28 12:51:20 +01:00
rshipp
8c3448700b Add @hugsy GEF 2015-12-28 12:51:20 +01:00
rshipp
ed08d2e83f Add @aquynh Capstone 2015-12-28 12:51:20 +01:00
rshipp
6da29eafed Add @programa-stic BARF 2015-12-28 12:51:20 +01:00
rshipp
8b6e1c5afb Add @angr 2015-12-28 12:51:19 +01:00
rshipp
b26a3c4a2e Add @hugsy codebro 2015-12-28 12:51:19 +01:00
rshipp
f0266011bc Add @pidydx SMRT 2015-12-28 12:51:19 +01:00
rshipp
8ccb742b3e Add @google binnavi 2015-12-28 12:50:37 +01:00
Jason Trost
303a1b75f8 Added Zulu and URLQuery 2015-12-21 06:26:38 -05:00
Herman Slatman
9fc1661344 Maltrail malicious communication analyzer added 2015-12-10 16:26:23 +01:00
rshipp
cac4f6af79 Fix formatting from PR #25 2015-12-05 18:57:35 +01:00
Amir.H Shahin
bbbb07df56 Update README.md 
A blog that analyzes Malware Samples and Traffic.
 2015-12-05 18:09:50 +01:00
Ryan Shipp
c763427502 Merge pull request #23 from phretor/master 
Add DeepViz online sandbox
 2015-11-15 12:05:56 +01:00
Federico Maggi
636096fe6c Add DeepViz online sandbox 2015-11-13 21:13:24 -08:00
ReadmeCritic
507ee28bfe Update redirects in Readme 2015-11-13 19:37:29 -08:00
ocean1
f2e179c592 Add AndroTotal 2015-10-13 07:23:16 +02:00
Ryan Shipp
5eda1eabcf Merge pull request #20 from ThomasThelen/master 
ADD x64dbg
 2015-10-09 07:47:54 +02:00
Thomas Thelen
cffa432142 ADD x64dbg 2015-10-08 16:20:31 -07:00
rshipp
eece1b51c7 Add @Dynetics Malfunction 2015-10-02 18:28:37 +02:00
rshipp
cbccb3d6b0 Add @kbandla APTnotes 2015-10-02 18:25:51 +02:00
rshipp
2b65518019 Add @paragonie awesome-appsec 2015-10-01 16:14:43 +02:00
Thomas Thelen
5e76392839 ADD x64dbg 2015-09-25 18:16:59 -07:00
rshipp
bf04714ab0 Add @onlurking awesome-infosec 2015-09-25 20:44:44 +02:00
rshipp
e30c9d8871 Add OpenMalware to Twitter list 2015-09-22 18:57:17 +02:00
rshipp
757bbaa551 Add csirt_tools 2015-09-22 18:35:43 +02:00
rshipp
2a890fc18d Add missing period 2015-09-22 18:13:12 +02:00
rshipp
503a3dfd4d Add @a0rtega pafish 2015-09-22 18:10:22 +02:00
rshipp
ab36a82f4d Add @0xd4d dnSpy and de4dot 2015-09-22 18:07:01 +02:00
rshipp
9cc0619923 Add @OMENScan AChoir 2015-09-22 18:04:13 +02:00
rshipp
636fef2ff1 Add @codypierce hackers-grep 2015-09-22 18:02:36 +02:00
rshipp
ead1f87f4d Fix Loki ordering 2015-09-22 17:46:17 +02:00
rshipp
07da4ab57c Fix Radare/strace ordering 2015-09-22 17:44:27 +02:00
rshipp
0a9ba6cd41 Add MalwareDB, from #8 2015-09-22 17:41:56 +02:00
rshipp
b6b5064bbc Fix more corpora ordering 2015-09-22 17:41:10 +02:00
rshipp
9a2ccc7123 Fix order of corpora entries 2015-09-22 17:40:19 +02:00
rshipp
6ed06ab7b2 Add @quarkslab IRMA, from #8 2015-09-22 17:38:56 +02:00
rshipp
e5d526226d Add @passivetotal, from #8 2015-09-22 17:34:43 +02:00
rshipp
ee1637069d Add threatRECON, from #8 2015-09-22 17:30:15 +02:00
rshipp
36857a6e0c Add PDF Examiner, from #8 2015-09-22 17:27:27 +02:00
rshipp
8e4901ce15 Add Cryptam, from #8 2015-09-22 17:26:40 +02:00
rshipp
65947fde44 Add spamcop/spamhaus, from #8 2015-09-22 17:22:46 +02:00
rshipp
4ee8ce70c6 Fix senderbase wrapping and order 2015-09-22 17:15:03 +02:00
David André
b8612087e8 Add SenderBase 2015-09-22 17:14:34 +02:00
rshipp
c84058b917 Fix order for Yara/ZeuS 2015-09-22 17:12:37 +02:00
rshipp
36944e5d5a Fix formatting and order for STIX 2015-09-22 17:11:56 +02:00
David André
9317c4d99b Added STIX - Structured Threat Information eXpression and related standards 2015-09-22 17:10:06 +02:00
rshipp
c2e6011caa Fix wrapping/order for @csirtgadgets massive-octo-spice 2015-09-22 17:09:38 +02:00
David André
16fbe3e87b Added Massive Octo Spice, previously known as CIF - Collective Intelligence Framework 2015-09-22 17:05:49 +02:00
David André
79c0890d9a Added details for MISP 2015-09-22 17:04:39 +02:00
rshipp
34bb94a49a Fix wrapping, grammar, formatting 
Also removed extra Anubis entry
 2015-09-22 16:56:40 +02:00
rshipp
477d1a7a59 Fix whitespace 2015-09-22 16:51:16 +02:00
rshipp
e8c10d0f9c Add @certtools IntelMQ, suggested by #19 2015-09-22 16:51:16 +02:00
rshipp
7cce7965fa Add @brad-accuvant cuckoo-modified, suggested by #18 2015-09-22 16:51:16 +02:00
rshipp
8c3e10f861 Add @apsdehal CTF awesome list 2015-09-22 16:51:16 +02:00
rshipp
fc89770523 Add @chrisddom ThreatCrowd, closes #16 2015-09-22 16:51:15 +02:00
rshipp
20f3f1c55d Add @omriher CapTipper 2015-09-22 16:51:15 +02:00
rshipp
94312587f5 Add @caesar0301 and @carpedm20 awesome lists 2015-09-22 16:51:15 +02:00
rshipp
5695e2ffb5 Move awesome-honeypots link 2015-09-22 16:51:15 +02:00
rshipp
bde41603d3 Add awesome badge 2015-09-22 16:51:15 +02:00
Emilio Casbas
9cb1d51257 Alphabetized fix 2015-09-22 16:51:15 +02:00
Emilio Casbas
7387bf8225 Add desenmascarame 2015-09-22 16:51:15 +02:00
pe3zx
3651c20185 Update README.md 
Edited to be alphabetical order and added some links
 2015-09-22 16:51:15 +02:00
pe3zx
0c84829f2f Update README.md 
Added links to online scanners and malware corpora categories
 2015-09-22 16:51:15 +02:00
sjas
c584580869 awesome-honeypots list added 2015-09-22 16:51:15 +02:00
Drew Bonasera
3b53096963 Add MultiScanner Link 2015-09-22 16:51:15 +02:00
David André
abd161fbc5 Added Yara rules repository 2015-05-20 11:53:45 +02:00
David André
7880857b4a Added MISP under workflow & storage category 2015-05-20 11:50:05 +02:00
David André
5be91b3d46 Add CRDF ThreatCenter 2015-05-20 11:44:56 +02:00
David André
4220e1099f Add YarGen 2015-05-20 11:41:29 +02:00
David André
23caba0247 Add Loki 2015-05-20 11:38:06 +02:00
rshipp
36ed33286e Add Hexacorn to Twitter list 2015-05-18 11:59:18 -06:00
rshipp
9c64070a4c Add winitor pestudio 2015-05-18 10:20:28 -06:00
rshipp
e5ee601e1d Add @aim4r VolDiff 2015-05-18 10:19:02 -06:00
rshipp
fe4b5b4b83 Add @MalwareLu website 2015-05-18 08:47:05 -06:00
rshipp
39cf7edc55 Add @MISP 2015-05-18 08:30:45 -06:00
rshipp
e870f00491 Fix formatting 2015-05-18 08:29:13 -06:00
Blevene
5fd0d4e296 Added malshare.com 2015-05-18 10:24:29 -04:00
nop0x0f
3e09da350e Liam Randall is @hectaman 
link was correct
@hectman is attached to the name hectormanuel
 2015-05-17 23:57:03 -04:00
rshipp
eba1c16f54 Add @crits 2015-05-17 14:08:50 -06:00
rshipp
fd468cd7f4 Add @MITRECND chopshop 2015-05-17 14:06:29 -06:00
rshipp
fe9b1481ea Add @aol Moloch 
Suggested by https://twitter.com/diocyde/status/600008336029962240
 2015-05-17 14:05:31 -06:00
rshipp
8e0a7181c7 Clean up whitespace 2015-05-17 13:25:47 -06:00
rshipp
106a6cbaf5 Add @Defense-Cyber-Crime-Center MWCP 2015-05-17 13:25:23 -06:00
rshipp
356c963e52 Fix formatting/wording 2015-05-17 13:00:43 -06:00
Pr0teus
cbd6679e85 Add Aleph 
Aleph is an open source malware analysis tool with several very useful features like:
Grab samples from e-mail accounts & file system path and run some basic analysis.
 2015-05-17 13:51:17 -03:00
Pr0teus
d3359c9265 Add PEV 
PEV contains several tools to analyze PE binaries.
 2015-05-17 13:46:52 -03:00
rshipp
6907623e6b Add @PayloadSecurity Hybrid Analysis 
Closes issue #4
 2015-05-17 09:05:09 -06:00
rshipp
8d9544fb4e Remove disclaimer 2015-05-17 09:00:29 -06:00
rshipp
177c10f755 Add @santoku linux 2015-05-15 14:20:11 -06:00
rshipp
28ab32326e Add @rieck Malheur 2015-05-15 14:17:03 -06:00
Ryan Shipp
b73792a9ca Merge pull request #3 from LiamRandall/master 
Add Bro, Intel Agg, and twitters
 2015-05-15 14:15:06 -06:00
Liam Randall
2ac4dc0258 Update README.md 2015-05-15 16:11:06 -04:00
Liam Randall
d110bffbda Update README.md 2015-05-15 16:05:16 -04:00
rshipp
c723cdf815 Add @Rurik Noriben 2015-05-15 13:57:58 -06:00
rshipp
e16166a424 Add @KoreLogicSecurity MASTIFF 2015-05-15 13:55:38 -06:00
rshipp
f0d1836236 Add @tklengyel DRAKVUF 2015-05-15 13:51:46 -06:00
rshipp
98bde3ae86 Add missing jotti and malwr URLs 2015-05-15 13:50:47 -06:00
rshipp
cf98190d0e Change link to @invisig0th @vivisect 2015-05-15 13:32:32 -06:00
rshipp
494e62002a Add IOC tools from @mandiant and @williamgibb 2015-05-15 09:35:08 -06:00
rshipp
4149ab6f43 Add @fireeye IOCs 2015-05-15 09:30:26 -06:00
rshipp
3189053681 Add Fiddler 2015-05-15 09:23:29 -06:00
rshipp
a39721a5db Add @pjlantz Hale 2015-05-15 09:21:53 -06:00
rshipp
3e6ae8444d Add @Visgean Zeus repo 2015-05-15 07:31:44 -06:00
rshipp
f2ebac918d Fix alphabetization 2015-05-14 20:21:35 -06:00
rshipp
3c949b3c57 Add Thanks section 2015-05-14 20:01:44 -06:00
rshipp
586f7b6815 Add Balbuzard to the deobfuscation section 2015-05-14 19:55:57 -06:00
rshipp
754e397a95 Add XORBruteForcer 2015-05-14 19:54:50 -06:00
rshipp
99e5cc56ac Add more XOR tools 2015-05-14 19:53:06 -06:00
rshipp
592fdd5e5b Add @tomchop unxor 2015-05-14 19:47:34 -06:00
rshipp
404ccbce95 Add @hellman xortool 2015-05-14 19:46:08 -06:00
rshipp
4e2e341ea7 Add one more @hiddenillusion tool, and Twitter handle 2015-05-14 19:44:56 -06:00
rshipp
e38819e8fb Keep formatting consistent, add a period 2015-05-14 19:37:48 -06:00
rshipp
6ac0131d98 Reformat OSTI section, add threataggregator 2015-05-14 19:33:30 -06:00
Alex Pinto
b17fc0c2ef Spelling is really hard 2015-05-11 20:08:25 -07:00
Alex Pinto
4e2c77ce5b Spelling is hard 2015-05-11 20:05:01 -07:00
Alex Pinto
107bf36e01 Add tiq-test to threat intelligence section 2015-05-11 20:03:58 -07:00
Alex Pinto
f278f3625c Adding Combine to the Threat Intelligence section 2015-05-11 20:01:53 -07:00
Ion
ec1df057f6 Shamelessly adding HoneyDrive to the list 2015-05-11 18:22:26 +01:00
rshipp
6b7bce2feb Rearrange sandbox section 2015-05-09 16:46:02 -06:00
rshipp
bce5ea7566 Add @williballenthin EVTXtract and python libs 2015-05-09 16:35:00 -06:00
rshipp
14f842b591 Add @keydet89 regripper and blog page 2015-05-09 16:30:52 -06:00
rshipp
fc698610e8 Add Corey Harrell's Malware Analysis Search 2015-05-09 16:25:17 -06:00
rshipp
8cd2a50389 Add Zeltser to the Twitter list 2015-05-09 16:20:41 -06:00
rshipp
e1cfac1fd0 Add Volatility to the Twitter section 2015-05-09 16:15:26 -06:00
rshipp
ea0467b1b4 Add description to Twitter section 2015-05-09 16:13:49 -06:00
rshipp
f035c2982a Add some relevant Twitter users 2015-05-09 16:11:27 -06:00
rshipp
3fec3c3447 Add @botherder viper 2015-05-09 16:02:53 -06:00
rshipp
44fc63a2c3 Add @sroberts malwarehouse in new storage/workflow section 2015-05-09 16:01:22 -06:00
rshipp
0d38a0c70e Add @krmaxwell maltrieve 2015-05-09 15:59:14 -06:00
rshipp
edb872ff8a Add @ytisf theZoo 2015-05-09 15:58:14 -06:00
rshipp
7b3e6b5d1c Add @johnnykv mnemosyne 2015-05-09 15:57:21 -06:00
rshipp
69a6c41bfc Add @secretsquirrel recomposer 2015-05-09 15:55:44 -06:00
rshipp
f76af6d621 Add @ytisf Muninn 2015-05-09 15:53:25 -06:00
rshipp
7d6a41f2d5 Add @504ensicsLabs DAMM 2015-05-09 15:51:31 -06:00
rshipp
ce0e92efa1 Add @tomchop malcom 2015-05-09 15:50:03 -06:00
rshipp
ed71259373 Remove officeparser 2015-05-09 15:42:17 -06:00
rshipp
73bb5673ea Add olevba 2015-05-09 15:03:36 -06:00
rshipp
6e6db3ec1a Add process monitor 2015-05-09 14:04:20 -06:00
rshipp
77cf9ac720 Change CI list formatting 2015-05-09 13:53:55 -06:00
rshipp
05c404b30f Add WIP note 2015-05-09 13:51:27 -06:00