Skip to content
#

malware-analysis

Here are 917 public repositories matching this topic...

trufae
trufae commented Jul 1, 2022

[0x00000000]> woa 1
Invalid word size. Use 1, 2, 4 or 8
[0x00000000]>

also it will be good to use wo+ and wo- instead of woa and wos imho. not to say we can pass the blocksize as 2nd argument or handle it as its done with wo2 wo4... like woa2 1 instead of having to pass an hexpair string

Mobile-Security-Framework-MobSF

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

  • Updated Jul 5, 2022
  • JavaScript
Scanners-Box
zbyshak
zbyshak commented Nov 9, 2020

Problem in MISP/app/Lib/Export/NidsExport.php /
causes there are two rows in beggening of all rules regarding email. Bug is in row 161

case 'email':
$this->emailSrcRule($ruleFormat, $item['Attribute'], $sid);
$this->emailDstRule($ruleFormat, $item['Attribute'], $sid);
break;
this causes inserting both source and destinati

T: enhancement good first issue
fanquake
fanquake commented Jan 4, 2022

I'm currently using LIEF in a project that uses mypy for Python type-checking. We use an ignore directive on our import lief #type:ignore statements, as type stubs for lief are not currently available. I've been considering generating and contributing stubs to https://github.com/python/typeshed, so that we can remove the ignores, and maybe others will find them useful. H

enhancement API Good First Issue

GDA is a new fast and powerful decompiler in C++(working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python&java scripts, device memory extraction, data decryption, and encryption, etc.

  • Updated Jun 30, 2022
  • Java
capa
mr-tz
mr-tz commented Apr 12, 2022

when wanting to display different output modes, e.g. plain or verbose, the whole program needs to run again

with the results document saved by the user, we could also take that as an input and render per the specified arguments

alternatively/additionally, we could think about a "workspace option" combining the results and/or freeze output (underused, currently I think) to speed up subsequent

enhancement good first issue

Improve this page

Add a description, image, and links to the malware-analysis topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the malware-analysis topic, visit your repo's landing page and select "manage topics."

Learn more