a web application that allows you to upload malware samples and if they match specific malware families it will extract the configuration section (config file) for you.
https://malwareconfig.com/
https://malwareconfig.com/
malware sample dynamically generates the name of a mutex object by using Windows product ID, lessening its predictability and complicating detection.
https://threatpost.com/new-technique-complicates-mutex-malware-analysis/111517/
https://threatpost.com/new-technique-complicates-mutex-malware-analysis/111517/
Threat Post
New Technique Complicates Mutex Malware Analysis
A recent malware sample dynamically generates the name of a mutex object by using Windows product ID, lessening its predictability and complicating detection.
ConfuserEx 2 is a open-source protector for .NET applications. It is the successor of Confuser project and the ConfuserEx project.
https://github.com/mkaring/ConfuserEx
https://github.com/mkaring/ConfuserEx
GitHub
GitHub - mkaring/ConfuserEx: An open-source, free protector for .NET applications
An open-source, free protector for .NET applications - mkaring/ConfuserEx
Noisette
an open-source C# Obfuscator for .NET assembly
https://github.com/XenocodeRCE/Noisette-Obfuscator
an open-source C# Obfuscator for .NET assembly
https://github.com/XenocodeRCE/Noisette-Obfuscator
GitHub
GitHub - XenocodeRCE/Noisette-Obfuscator: An Obfuscator for .NET assembly
An Obfuscator for .NET assembly. Contribute to XenocodeRCE/Noisette-Obfuscator development by creating an account on GitHub.
Koodous is a collaborative platform that combines the power of online analysis tools with social interactions between the analysts over a vast APKs repository.
https://koodous.com/
https://koodous.com/
Nightmare
Nightmare is an intro to binary exploitation / reverse engineering course based around ctf challenges. I call it that because it's a lot of people's nightmare to get hit by weaponized 0 days, which these skills directly translate into doing that type of work (plus it's a really cool song).
https://guyinatuxedo.github.io/
Nightmare is an intro to binary exploitation / reverse engineering course based around ctf challenges. I call it that because it's a lot of people's nightmare to get hit by weaponized 0 days, which these skills directly translate into doing that type of work (plus it's a really cool song).
https://guyinatuxedo.github.io/
guyinatuxedo.github.io
Nightmare - Nightmare
Nightmare: an intro to binary exploitation / reverse engineering course based around CTF challenges.
PACK: Archivers, exe-compressors, archiver shells and other related utils
https://www.sac.sk/files.php?d=7&l=
https://www.sac.sk/files.php?d=7&l=
PinCTF
This tool is designed to use instruction counting as an avenue for Side Channel Analysis. By counting the number of instruction exeuted
https://github.com/ChrisTheCoolHut/PinCTF
This tool is designed to use instruction counting as an avenue for Side Channel Analysis. By counting the number of instruction exeuted
https://github.com/ChrisTheCoolHut/PinCTF
GitHub
GitHub - ChrisTheCoolHut/PinCTF: Using Intel's PIN tool to solve CTF problems
Using Intel's PIN tool to solve CTF problems. Contribute to ChrisTheCoolHut/PinCTF development by creating an account on GitHub.
Malformed PE Header Kernel Denial Of Service
http://waleedassar.blogspot.com/2020/01/malformed-pe-header-kernel-denial-of.html
http://waleedassar.blogspot.com/2020/01/malformed-pe-header-kernel-denial-of.html
LoaderWatch
Toolbox to assist debugging, tracing and memory inspection of Windows PE image loader (LDR) NTDLL component
https://github.com/andrew-boyarshin/LoaderWatch
Toolbox to assist debugging, tracing and memory inspection of Windows PE image loader (LDR) NTDLL component
https://github.com/andrew-boyarshin/LoaderWatch
GitHub
GitHub - andrew-boyarshin/LoaderWatch: Windows 10 PE image loader (LDR) NTDLL component toolbox
Windows 10 PE image loader (LDR) NTDLL component toolbox - andrew-boyarshin/LoaderWatch