Loading contributions...
Top Repositories
Python unbup script for McAfee .bup files (with some additional fun features). This script is fully implemented in python it's not just another wrapper around 7zip!
CmdDesktopSwitch is a small utility that lists all windows desktops and provides the option to switch between them. This can be used to identify and watch malware that has created a hidden desktop.
Use this library to automatically extract PE files compressed with aplib from a binary blob.
Script to parse first load time for Shell Extensions loaded by user. Also enumerates all loaded Shell Extensions that are only installed for the Current User.
IDA Pro plugin which improves work with HexRays decompiler and helps in process of reconstruction structures and classes
Local server for IDA Lumina feature
Repositories
23A Binary Ninja plugin that uses bruteforced XFG hashes to recover precise function prototypes
IDA Pro plugin which improves work with HexRays decompiler and helps in process of reconstruction structures and classes
Local server for IDA Lumina feature
Automatically exported from code.google.com/p/elfesteem
Script to parse first load time for Shell Extensions loaded by user. Also enumerates all loaded Shell Extensions that are only installed for the Current User.
CmdDesktopSwitch is a small utility that lists all windows desktops and provides the option to switch between them. This can be used to identify and watch malware that has created a hidden desktop.
Use this library to automatically extract PE files compressed with aplib from a binary blob.
Python Bing Search API
No description provided.
A beginner's guide to setting up a development environment on Mac OS X
Scripts for communication with Bunitu Trojan C&Cs
Web recon tool (find temporary files, parse robots.txt, search some folders, google dorks and search domains hosted on same server)
Python unbup script for McAfee .bup files (with some additional fun features). This script is fully implemented in python it's not just another wrapper around 7zip!
No description provided.
Small programs and scripts that do not require their own repositories
An easy-to-use library for emulating code in minidump files.
SMDA is a minimalist recursive disassembler library that is optimized for accurate Control Flow Graph (CFG) recovery from memory dumps.
No description provided.
No description provided.
No description provided.
No description provided.
No description provided.
Malware Configuration And Payload Extraction