ch0ic3/awesome-malware-analysis
1
0
Fork 0
mirror of https://github.com/rshipp/awesome-malware-analysis.git synced 2024-12-18 18:26:09 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
653 Commits 1 Branch 0 Tags 907 KiB
ca01a6985b
Commit Graph

507 Commits

Author SHA1 Message Date
Tomas Hertus
c9fa60136e Add Metadefender.com Threat Intelligence to resources for Threat Intel 2017-03-14 14:53:27 -07:00
Diogo Fernandes
5dde2b12d3 Added malsub 2017-03-06 14:11:35 +01:00
Diogo Fernandes
83638194ea Added malsub 2017-03-06 14:09:33 +01:00
Zach Chadwick
90fc5ab5a3 Add CloudShark to network tools section 2017-03-03 14:28:49 -05:00
Compsec Monkey
07c2c4efd8 Added boomerang to website analysis tools 2017-02-18 19:29:20 -06:00
mnakamura1337
e98914f21a Added Kaitai Struct 2017-02-16 17:06:17 +09:00
Ramadhan Amizudin
45e24cf8c1 Update README.md 2017-02-11 12:34:39 +08:00
Ramadhan Amizudin
cc08a45adf Update README.md 2017-02-07 00:46:11 +08:00
Ryan Shipp
ac3c25b0db Merge pull request #99 from Granet/patch-1 
Delete Dionaea honeypot
 2017-01-28 19:58:22 -06:00
Granet
1c7b21addb Added Dionaea project 2017-01-22 01:48:37 +01:00
Mike Worth
a21f65064c Adding Practical-Reverse-Engineering 
Adding Practical Reverse Engineering book
 2017-01-16 00:03:39 -05:00
Mike Worth
08af5f8498 Adding Regshot 
Adding regshot tool
 2017-01-15 23:48:32 -05:00
Mike Worth
8624a5caba Add Process-Hacker 
adding process hacker, a tool useful for dynamic analysis
 2017-01-15 23:38:31 -05:00
Mike Worth
f9508454dd Add binary-ninja 
Adding binary ninja, a cheaper alternative to IDA-PRO
 2017-01-15 23:17:31 -05:00
Aleksandre Vardanidze
7745e5a233 Update README.md 2016-12-28 01:00:40 +04:00
Granet
49fba03d4a Delete Dionaea honeypot 
It's closed
 2016-12-22 13:03:56 +01:00
Ryan Shipp
4ca11d07ba Merge pull request #94 from zbetcheckin/patch-1 
Add Malware museum
 2016-12-21 17:25:32 -06:00
Ryan Shipp
f366c71dcf Merge pull request #95 from zbetcheckin/patch-2 
Add Cybercrime tracker and Ransomware overview
 2016-12-21 17:25:26 -06:00
Ryan Shipp
f1d6497750 Merge pull request #97 from zbetcheckin/patch-4 
Add Sand droid and Malware config
 2016-12-21 17:25:17 -06:00
Ryan Shipp
a7b31660a4 Merge pull request #96 from zbetcheckin/patch-3 
Add VX Vault and Tracker h3x
 2016-12-21 17:25:01 -06:00
Ryan Shipp
3370f456e0 Merge pull request #98 from zbetcheckin/patch-5 
Add multi RBL lookup
 2016-12-21 17:24:52 -06:00
zbetcheckin
380a0667ec Add multi RBL lookup 2016-12-16 04:23:58 +04:00
zbetcheckin
75a02b9cf7 Add Malware config 2016-12-16 04:21:37 +04:00
zbetcheckin
bacd889cb4 Add Sand droid 2016-12-16 04:19:36 +04:00
zbetcheckin
40d0a3eec7 Add VX Vault 2016-12-16 04:11:21 +04:00
zbetcheckin
8ac173ad89 Add Tracker h3x 2016-12-16 04:09:18 +04:00
zbetcheckin
4c398d54cc Add Cybercrime tracker 2016-12-16 04:04:24 +04:00
zbetcheckin
7bcfd150e0 Add Ransomware overview 2016-12-16 03:58:20 +04:00
zbetcheckin
653860d4b5 Add Malware museum 2016-12-16 03:42:51 +04:00
Cugu
b4b60ffea9 Add awesome-forensics list 2016-12-07 13:33:20 +01:00
Ryan Shipp
90846aceca Add @EmersonElectricCo FSF 
Closes #90
 2016-11-24 22:55:28 -06:00
Marcus LaFerrera
8b9793e634
Add stoQ 2016-11-20 10:38:27 -05:00
Ryan Shipp
decc0b8309 Update @aptnotes link 2016-11-16 08:34:10 -06:00
CapacitorSet
a809385308 Add box-js 2016-11-14 12:25:41 +01:00
rshipp
4648aa5005
Fix fport category/description 2016-11-13 14:21:25 -06:00
baafuor
fe8c31e8b3
Update README.md 
Added FPort to the Tools section.
 2016-11-13 14:20:22 -06:00
rshipp
a7a9bd139b
Merge PR #86 2016-11-13 14:13:24 -06:00
rshipp
5cbeb5757d
Merge PR #4 2016-11-13 13:59:53 -06:00
rshipp
e1a32c4a93
Fix BAP line wrapping 2016-11-13 13:49:39 -06:00
rshipp
a804e4061d
Remove trailing whitespace 2016-11-13 13:49:18 -06:00
rshipp
3bd5f78692
Revert cuckoo and viper links 2016-11-13 13:48:51 -06:00
sigmaapex
1537256aab
Update README.md 
-Added BlackLight and Rootkit Arsenal. 
-Fixed Cuckoo and Viper links
 2016-11-13 13:47:13 -06:00
keith@keithjjones.com
8f20090fda Added cuckoo log to project description. 2016-11-12 11:45:14 -05:00
Andrew Garcia
ee155c794c Update README.md 2016-10-29 11:32:49 -06:00
Andrew Garcia
26ee545d7c Update README.md 
Edited the GitHub(Awesome Malware Analysis) and added the following
Virus Total(antivirus and other malware identification tools)
Process Explorer
Under books, we recommended Real Digital Forensics
PSTools placed this under Tools
Netcat (Tools)
 2016-10-28 16:33:03 -06:00
keith@keithjjones.com
c8fe753b58 Added more info about supported log types. 2016-10-23 14:41:58 -04:00
keith@keithjjones.com
4772153add Added Visualize_Logs. 2016-10-23 14:41:09 -04:00
rshipp
e8dfe08216
Add bokken mirror 2016-10-10 10:46:15 -05:00
rshipp
37b41c5e2d
Update proofpoint link 2016-10-10 10:46:08 -05:00
Keith J. Jones
278fdae096 Needed to change to http 2016-10-10 11:37:08 -04:00
Keith J. Jones
474d162d91 Added https 2016-10-10 11:36:18 -04:00
Keith J. Jones
379ee11152 Added ProcDot. 2016-10-10 08:49:04 -04:00
Ivan Gotovchits
40f7902f3a added bap framework 2016-10-05 11:27:58 -04:00
Keith J. Jones
76c07cd9b0 Added cuckoo-modified-api. 2016-10-04 16:12:19 -04:00
Kyle Maxwell
31a6325ca4 Replace maltrieve with Ragpicker 2016-09-28 23:47:04 -04:00
Herman Slatman
923f91e530 Add periods 2016-09-11 16:37:31 +02:00
Keith J. Jones
b2a6d0891d Alphabetized and capitalized. 2016-08-31 10:43:08 -04:00
Keith J. Jones
8fc75aee5c Added host and file intelligence tools by keithjjones. 2016-08-31 10:30:42 -04:00
rshipp
fd17f5b9c8
Fix links 2016-08-27 19:40:57 -05:00
rshipp
237e5d921c
Add @devttys0 Binwalk 
Closes #73.
 2016-08-27 19:34:47 -05:00
rshipp
5e17a91437
Fix spelling mistake 
Related: PR #72
 2016-08-21 16:13:14 -05:00
Petr Zemek
f5a5164ca7 Add RetDec 2016-08-09 15:25:38 +02:00
rshipp
06242043b4
Add @bambenek OSINT and Barncat 2016-07-29 22:54:24 -06:00
O . S . O
cd263f9fde No https 2016-07-22 12:30:58 +02:00
O . S . O
164a3dfa46 Added firmware.re 2016-07-22 12:21:56 +02:00
Chandrapal
59e6f838c6 Corrected Travis-CI error 2016-07-01 07:21:15 -06:00
Chandrapal
af58bd5aea Add monnappa to twitter list 2016-07-01 07:21:15 -06:00
Chandrapal
7edeb03635 Added Limon Sandbox 2016-07-01 07:21:15 -06:00
rshipp
fe57646480
Clean up whitespace and redirects 2016-06-30 20:05:30 -06:00
rshipp
e4046baa69
Add binitamshah to twitter list 2016-06-30 19:54:21 -06:00
Herman Slatman
2def03d0b7 Polichombr added 2016-06-28 12:32:45 +02:00
Herman Slatman
12e981c66f al-khaser added 2016-06-28 12:29:53 +02:00
Herman Slatman
6085d2cf2a MalSploitBase added 2016-06-28 12:20:28 +02:00
Herman Slatman
1c73c77423 detux added 2016-06-28 12:17:20 +02:00
Herman Slatman
8052b0269a NetworkTotal added 2016-06-28 12:14:35 +02:00
Herman Slatman
2ec762c17b Binar.ly added 2016-06-28 12:10:18 +02:00
Herman Slatman
d524a65843 QuickSand added 2016-06-28 12:06:18 +02:00
Herman Slatman
64545d0956 FLOSS by FireEye added 2016-06-28 11:59:00 +02:00
Herman Slatman
d685c10b29 unpacker added 2016-06-28 11:53:02 +02:00
Herman Slatman
ff00221d9e Bamfdetect added 2016-06-28 11:44:29 +02:00
Jossef Harush
e966d1c885 removing Anubis link 
they are discontinuing the Anubis and Wepawet services.
 2016-06-22 13:49:49 +03:00
rshipp
05234802f0
Add openmalware.org 2016-06-04 23:28:51 -06:00
rshipp
374bd271de
Add related awesome lists 2016-06-04 23:25:14 -06:00
Herman Slatman
6627eb22c2 ROPMEMU added 2016-06-04 23:47:58 +02:00
rshipp
13abebcdcc
Add AlienVault OTX 
Closes #52
 2016-05-26 13:46:13 -06:00
rshipp
ed12435616
Wrap a line 2016-05-26 13:44:51 -06:00
rshipp
ee3f68cc05
Capitalize the first word in descriptions 2016-05-26 13:35:48 -06:00
Ryan Shipp
5f4dfb2625 Merge pull request #64 from joesecurity/patch-1 
Update README.md
 2016-05-26 13:25:17 -06:00
Joe Security
78ef9a0d58 Update README.md 
Add tool: Joe Sandbox
 2016-05-26 19:56:40 +02:00
Joe Security
41aceefca6 Update README.md 
Add some tool name: File Analyzer
Add some tool name: APK Analyzer
Add some tool name: URL Analyzer
Add some tool name: Document Analyzer
 2016-05-26 19:54:38 +02:00
rshipp
56c4c508db
Add another link to contributing guidelines 2016-05-26 09:02:15 -06:00
rshipp
dbe021754f
Add Travis link 2016-05-26 08:58:51 -06:00
rshipp
87c12e6572
Update MaltegoVT and ThreatTracker links 2016-05-26 08:57:50 -06:00
rshipp
55e41debf5
Change Glastopf link 2016-05-26 08:55:36 -06:00
rshipp
b76fa3ea21
Remove PEiD, dead link 2016-05-26 08:45:57 -06:00
rshipp
e9cbab6c58
Add @R00ke PPEE 
Closes #63
 2016-05-26 08:38:19 -06:00
rshipp
90312f451b
Add @horsicq Detect-It-Easy 
Closes #58
 2016-05-26 08:35:52 -06:00
rshipp
ec8291d51c
Add @rabbitstack Fibratus 
Closes #62
 2016-05-26 08:33:56 -06:00
rshipp
3363512390
Fix more formatting issues 2016-05-18 13:56:33 -06:00
rshipp
003f34b1b0
Fix description from #61 2016-05-18 13:53:35 -06:00
Aleksandre Vardanidze
a0e31e9030 Update README.md 
squidmagic is a tool designed to analyze a web-based network traffic to detect central command and control (C&C) servers and Malicious site, 
using Squid proxy server,Virustotal and etc...
 2016-05-18 10:01:03 +04:00
Herman Slatman
4154abf5cb Practial Malware Analysis Starter Kit added 2016-05-16 10:03:17 +02:00
rshipp
2c9787b4f4 Fix misplaced line 2016-04-27 10:12:28 -06:00
Patrik Hudak
3e6e63dde1 Fix the enisa link 2016-04-17 22:21:19 +02:00
Patrik Hudak
8375efddf2 Build failure fixed 2016-04-17 22:16:33 +02:00
Patrik Hudak
67aef88228 Add tools 2016-04-16 13:37:35 +02:00
rshipp
156a194e1b
Clean up whitelist 2016-04-12 09:36:24 -06:00
rshipp
c713f3ebcf
Fix HTTPS redirects 2016-04-12 09:16:09 -06:00
rshipp
db1a90162b
Remove PREDICT 2016-04-12 09:14:58 -06:00
Herman Slatman
1128dd2034 Triton added 2016-04-12 11:23:42 +02:00
Gregory LeBlanc
1b8de9149e Updated Totalhash.py GIST to use new domain plus use BeautifulSoup and Requests. 2016-04-06 19:43:17 -04:00
Ryan Shipp
a10226a8f8 Merge pull request #51 from hslatman/hs_laika 
Laika BOSS added
 2016-04-02 10:25:50 -06:00
Herman Slatman
66655cfbc7 Laika BOSS added 2016-04-02 16:15:33 +02:00
Costa Tsaousis
393f2c5bba Update README.md 
fixed iplists.firehol.org
 2016-04-01 00:27:13 +03:00
rshipp
76f47d43e7 Fix extra picky kernelmode redirect 2016-03-31 15:09:30 -06:00
rshipp
db4e640b8d Fix kernelmode item 2016-03-31 15:03:05 -06:00
rshipp
6d2f7acd2e Add FireHOL IP Lists 2016-03-31 15:01:08 -06:00
Szilard Stange
e6506fbddc Add Metadefender.com 2016-03-31 13:42:09 +02:00
Ryan Shipp
8c7386847f Merge pull request #47 from ThomasThelen/master 
Add Kernelmode.info
 2016-03-22 23:03:36 -06:00
Thomas Thelen
77e8279aa5 Update README.md 2016-03-22 21:42:44 -07:00
Thomas Thelen
05c3b5216c Update README.md 2016-03-22 20:06:23 -07:00
Thomas Thelen
a368bc9230 Update README.md 2016-03-22 20:04:33 -07:00
Thomas Thelen
a74f742db3 Update README.md 2016-03-22 20:04:11 -07:00
ReadmeCritic
208a0d5bfe Remove Metascan Online 
https://live.metascan-online.com/ is dead
 2016-03-21 14:43:27 -07:00
ReadmeCritic
6d43d8f5af Update README URLs based on HTTP redirects 2016-03-21 14:36:59 -07:00
Steve McMaster
195d1fb3e5 Add Machinae to Domain Analysis section 2016-03-16 00:45:20 -04:00
Jaan Janesmae
afad8e7e0f Adding AbuseHelper, the open-source framework for receiving and redistributing abuse feeds and threat intel. 2016-03-07 03:53:03 +02:00
Ryan Shipp
590f269997 Merge pull request #40 from meirwah/master 
Add Awesome Incident response list
 2016-02-27 13:18:58 -07:00
Meir Wahnon
afe02b7718 Update README.md 2016-02-27 21:35:50 +02:00
Herman Slatman
135dcda204 Alphabetizing; including older entries 2016-01-22 15:26:02 +01:00
Herman Slatman
3c462a3e37 Fu's Malware Analysis Tutorials added 2016-01-22 10:55:04 +01:00
Francis T. O'Donovan
d70f580ef1 Add PREDICT repository 
Add link to the Protected Repository for the Defense of Infrastructure
Against Cyber Threats ([PREDICT](https://predict.org)), that can
quickly and easily provide qualified developers and evaluators with
regularly updated network operations data they can use in their cyber
security research.
 2016-01-21 15:18:22 -05:00
rshipp
93e39cb94d Change Kippo to Cowrie 
Fixes #36
 2016-01-20 17:34:18 -07:00
rshipp
c37235c30c Update EmergingTreats link 
Found in Travis build 23
 2016-01-20 09:36:29 -07:00
rshipp
1f9f9f5b4b Update Bokken link, fixes #35 2016-01-20 08:08:48 -07:00
rshipp
f9523e31b8 Fix redirect found in Travis build 20 2016-01-14 19:20:59 +01:00
Herman Slatman
fd3f2de35d slight typo 2016-01-14 15:13:42 +01:00
Herman Slatman
daf3ef383f RPISEC malware analysis coursed added 2016-01-14 15:12:32 +01:00
Herman Slatman
09bec9437c SEE by F-Secure added 2016-01-09 12:43:10 +01:00
Herman Slatman
da493c5fd6 PANDA added 2016-01-09 12:35:02 +01:00
Mateusz
1b00eeca84 preserving alphabetic order 2016-01-07 08:41:01 +01:00
Mateusz
ecadca2083 add PcapViz 2016-01-04 20:12:12 +01:00
rshipp
35d3350ed9 Add PyIOCe 2015-12-29 11:17:15 +01:00
rshipp
afe72d2fa7 Fix mandiant redirect 2015-12-29 11:00:59 +01:00
rshipp
a5fbf51725 Fix honeyd redirect 2015-12-29 10:58:43 +01:00
rshipp
0049484476 Fix ciarmy->cnsscore redirect 2015-12-29 10:56:08 +01:00
ReadmeCritic
bff4e76d08 Update README URLs based on HTTP redirects 2015-12-28 15:09:27 -08:00
rshipp
0fd1186601 Add Kahu JS Deobfuscator 
Closes #24
 2015-12-28 13:32:44 +01:00
rshipp
90b9c87a56 ThreatMinerVT -> MaltegoVT 2015-12-28 13:29:40 +01:00
rshipp
fa511a778a Fix duplicates 
Related: #27
 2015-12-28 13:16:56 +01:00
rshipp
f67c507668 Add @BromiumLabs PackerAttacker 2015-12-28 12:52:06 +01:00
rshipp
1521c9cfa9 Add @hempnall broyara 2015-12-28 12:52:06 +01:00
rshipp
280d640f88 Add @jiachongzhi ThreatMinerVT 2015-12-28 12:52:06 +01:00
rshipp
8cdcaf6030 Add @jiachongzhi ThreatTracker 2015-12-28 12:51:20 +01:00
rshipp
d575853eb9 Add @jnraber VirtualDeobfuscator 2015-12-28 12:51:20 +01:00
rshipp
b92c8f1d69 Add @longld PEDA 2015-12-28 12:51:20 +01:00
rshipp
8c3448700b Add @hugsy GEF 2015-12-28 12:51:20 +01:00
rshipp
ed08d2e83f Add @aquynh Capstone 2015-12-28 12:51:20 +01:00
rshipp
6da29eafed Add @programa-stic BARF 2015-12-28 12:51:20 +01:00
rshipp
8b6e1c5afb Add @angr 2015-12-28 12:51:19 +01:00
rshipp
b26a3c4a2e Add @hugsy codebro 2015-12-28 12:51:19 +01:00
rshipp
f0266011bc Add @pidydx SMRT 2015-12-28 12:51:19 +01:00
rshipp
8ccb742b3e Add @google binnavi 2015-12-28 12:50:37 +01:00
Jason Trost
303a1b75f8 Added Zulu and URLQuery 2015-12-21 06:26:38 -05:00
Herman Slatman
9fc1661344 Maltrail malicious communication analyzer added 2015-12-10 16:26:23 +01:00
rshipp
cac4f6af79 Fix formatting from PR #25 2015-12-05 18:57:35 +01:00
Amir.H Shahin
bbbb07df56 Update README.md 
A blog that analyzes Malware Samples and Traffic.
 2015-12-05 18:09:50 +01:00
Ryan Shipp
c763427502 Merge pull request #23 from phretor/master 
Add DeepViz online sandbox
 2015-11-15 12:05:56 +01:00
Federico Maggi
636096fe6c Add DeepViz online sandbox 2015-11-13 21:13:24 -08:00
ReadmeCritic
507ee28bfe Update redirects in Readme 2015-11-13 19:37:29 -08:00
ocean1
f2e179c592 Add AndroTotal 2015-10-13 07:23:16 +02:00
Ryan Shipp
5eda1eabcf Merge pull request #20 from ThomasThelen/master 
ADD x64dbg
 2015-10-09 07:47:54 +02:00
Thomas Thelen
cffa432142 ADD x64dbg 2015-10-08 16:20:31 -07:00
rshipp
eece1b51c7 Add @Dynetics Malfunction 2015-10-02 18:28:37 +02:00
rshipp
cbccb3d6b0 Add @kbandla APTnotes 2015-10-02 18:25:51 +02:00
rshipp
2b65518019 Add @paragonie awesome-appsec 2015-10-01 16:14:43 +02:00
Thomas Thelen
5e76392839 ADD x64dbg 2015-09-25 18:16:59 -07:00
rshipp
bf04714ab0 Add @onlurking awesome-infosec 2015-09-25 20:44:44 +02:00
rshipp
e30c9d8871 Add OpenMalware to Twitter list 2015-09-22 18:57:17 +02:00
rshipp
757bbaa551 Add csirt_tools 2015-09-22 18:35:43 +02:00
rshipp
2a890fc18d Add missing period 2015-09-22 18:13:12 +02:00
rshipp
503a3dfd4d Add @a0rtega pafish 2015-09-22 18:10:22 +02:00
rshipp
ab36a82f4d Add @0xd4d dnSpy and de4dot 2015-09-22 18:07:01 +02:00
rshipp
9cc0619923 Add @OMENScan AChoir 2015-09-22 18:04:13 +02:00
rshipp
636fef2ff1 Add @codypierce hackers-grep 2015-09-22 18:02:36 +02:00
rshipp
ead1f87f4d Fix Loki ordering 2015-09-22 17:46:17 +02:00
rshipp
07da4ab57c Fix Radare/strace ordering 2015-09-22 17:44:27 +02:00
rshipp
0a9ba6cd41 Add MalwareDB, from #8 2015-09-22 17:41:56 +02:00
rshipp
b6b5064bbc Fix more corpora ordering 2015-09-22 17:41:10 +02:00
rshipp
9a2ccc7123 Fix order of corpora entries 2015-09-22 17:40:19 +02:00
rshipp
6ed06ab7b2 Add @quarkslab IRMA, from #8 2015-09-22 17:38:56 +02:00
rshipp
e5d526226d Add @passivetotal, from #8 2015-09-22 17:34:43 +02:00
rshipp
ee1637069d Add threatRECON, from #8 2015-09-22 17:30:15 +02:00
rshipp
36857a6e0c Add PDF Examiner, from #8 2015-09-22 17:27:27 +02:00
rshipp
8e4901ce15 Add Cryptam, from #8 2015-09-22 17:26:40 +02:00
rshipp
65947fde44 Add spamcop/spamhaus, from #8 2015-09-22 17:22:46 +02:00
rshipp
4ee8ce70c6 Fix senderbase wrapping and order 2015-09-22 17:15:03 +02:00
David André
b8612087e8 Add SenderBase 2015-09-22 17:14:34 +02:00
rshipp
c84058b917 Fix order for Yara/ZeuS 2015-09-22 17:12:37 +02:00
rshipp
36944e5d5a Fix formatting and order for STIX 2015-09-22 17:11:56 +02:00