As leaders in information security we continue to train ourselves so that the services you receive are the best they can be.

Download Windows API Ghidra Data Type Archives (the .gdt files): https://github.com/0x6d696368/ghidra-data/tree/master/typeinfo

Obviously you can also right click on a Data Type Archive and select "new" or hit "T" in the Listing View to define a new data…

If i have a large set of files and I'd like to run Hex-rays over them to produce output as C - can I do so in python?
I see there is IDA Python
And I see Hex-rays has a C++ SDK
Is there a python He...

Malware source code samples leaked online uploaded to GitHub for those who want to analyze the code. - m0n0ph1/malware-1

It was discovered in the Middle East, but the hackers behind it are now targeting companies in North America and other parts of the world

Cybersecurity solutions for the whole lifecycle of IoT and embedded systems.

Blog and website of Anas Aboureada, blogging mainly about cyber security. Opinions expressed are mine.

Simple windows API logger. Contribute to d35ha/xLogger development by creating an account on GitHub.

This post explores how to use the new OOAnalyzer Ghidra Plugin to import C++ class information into the NSA's Ghidra tool and interpret results in the Ghidra SRE framework.

Learn how to detect and prevent metamorphic and polymorphic malware, two types of malicious software that change their code as they propagate through a system.

Concepts and terminology of encrypted viruses and self-mutating viruses.

My malware analysis course for beginners: https://www.udemy.com/course/windows-malware-analysis-for-hedgehogs-beginner-training/?referralCode=EE0E2DC9FA7388FF25B7
Buy me a coffee: https://ko…

Amro Abdelgawad Founder, Immuneye

As a matter of fact, it is all about time to reverse engineer the most complex piece of code. Code complicity techniques are usually used just to increase the time and effort needed for reverse engineering. The desired effect…

Summary

Several examples of Snort rule creation and triggered alerts.

4:22 - Adding custom rules to Snort configuration
4:47 - Create custom rules file
5:40 - FTP alert rule
14:57 - Manually running Snort
17:53 -…

:earth_africa: `/usr/bin/qemu-*-static`. Contribute to multiarch/qemu-user-static development by creating an account on GitHub.

Export dwarf debug information from IDA Pro. Contribute to ALSchwalm/dwarfexport development by creating an account on GitHub.