GitHub topics: malware-automation
dod-cyber-crime-center/DC3-MWCP
DC3 Malware Configuration Parser (DC3-MWCP) is a framework for parsing configuration information from malware. The information extracted from malware includes items such as addresses, passwords, filenames, and mutex names.
Language: Python - Size: 860 KB - Last synced at: 2 days ago - Pushed at: 4 months ago - Stars: 322 - Forks: 59
dod-cyber-crime-center/Dragodis
Dragodis is a Python framework which allows for the creation of universal disassembler scripts.
Language: Python - Size: 461 KB - Last synced at: 25 days ago - Pushed at: about 1 year ago - Stars: 50 - Forks: 8
dod-cyber-crime-center/rugosa
The next generation of kordesii. This is a library (not a framework) for managing emulation and provides utilities for interfacing with decompiled malware samples using dragodis.
Language: Python - Size: 4.35 MB - Last synced at: 14 days ago - Pushed at: about 1 year ago - Stars: 9 - Forks: 2