sec

impfuzzy

sec

Import APIとFuzzy Hashingでマルウエアを分類する ~impfuzzy~ https://www.jpcert.or.jp/magazine/acreport-impfuzzy.html ■インストール sudo apt-get install python-dev libfuzzy-dev sudo pip install pefile sudo apt-get install ssdeep git clone …

ioc-parser

Tool to extract indicators of compromise from security reports in PDF format https://github.com/armbues/ioc-parser $ ./ioc-parser.py -i pdf -o yara waterbug-attack-group.pdf rule waterbug_attack_group { strings: $Filename1 = "NDProxy.sys" …

AIL framework - Analysis Information Leak framework

sec

https://github.com/CIRCL/AIL-framework 別途「google snappy」をインストール https://code.google.com/p/snappy/

pystemon インストール

sec

sudo apt-get install python-pip sudo pip install PyYAML sudo pip install BeautifulSoup git clone https://github.com/cvandeplas/pystemon

[malware] Viper

sec

マルウェア管理、解析フレームワーク http://viper-framework.readthedocs.org/en/latest/index.html Viper is a binary analysis and management framework. sudo apt-get install gcc python-dev python-pip sudo pip install SQLAlchemy PrettyTable pyth…

[Mobile Forensics] [Android] Santoku-Linux

sec

https://santoku-linux.com/

[Memory Forensics] メモリフォレンジック

sec

lsass.exeの正しい位置 winlogon.exe | --- lsass.exe --- services.exe | --- Process_A.exe --- Process_B.exe --- Process_B.exe --- Process_B.exe --- Process_B.exe --- Process_B.exe ※「lsass.exe」は一つのみ、複数ある場合はおかしい。 ※「lsass.e…

[forensics] SuperTimeline

sec

【旧】 # mount -o loop,ro,show_files,streams_interface=windows,offset=32256 /mnt/hgfs/image.dd /mnt/windows_mount # log2timeline -z Japan -p -r -f winxp /mnt/windows_mount -w supertimeline.txt # l2t_process -b supertimeline.txt > supertime…

INetSim: Internet Services Simulation Suite

sec

偽サーバ,DNS,HTTPなど INetSim: Internet Services Simulation Suite - Project Homepage # Available service names are: # dns, http, smtp, pop3, tftp, ftp, ntp, time_tcp, # time_udp, daytime_tcp, daytime_udp, echo_tcp, # echo_udp, discard_tcp,…

FREE Security Training

sec

Home Page - www.SecurityXploded.com

[forensics] Memory Forensics (Windows,Mac and Linux)

sec

2010 2013 sandro suffert memory forensics introdutory work shop - pub…

[malware] Malware-Analyzer.com

sec

Malware-Analyzer.com is your solution to malware analysis tools, resources, and discounted malware reverse engineer training. Malware-Analyzer.com has a variety of tools from automated analysis to memory forensics. If you have a malware an…

[decode] [malware] UnBup - McAfee BUP Extractor for Linux

sec

Open Security Research: UnBup - McAfee BUP Extractor for Linux

PE-bear

sec

PE-bear | hasherezade's 1001 nights

PeStudio

sec

winitor

PyKd - Python extension to access Debug Engine

sec

Python extension for WinDbg Python extension for WinDbg - Home

the PE analysis toolkit

sec

pev download | SourceForge.net]

PEV PE ANALYSIS TOOLKIT

sec

Reversing PE executable files require a special tools because the payload that may contain the malware in PE files is packed inside another executable file that can be a legitimate. This makes a standard static analyses tool wont be able t…

【要注意】 玄関の「U字ロック」はひもで簡単に開けられるらしい  強姦目的で解錠し侵入した男「方法はネットで調べた」 (動画あり)

sec

【要注意】 玄関の「U字ロック」はひもで簡単に開けられるらしい 強姦目的で解錠し侵入した男「方法はネットで調べた」 (動画あり) | ニュース2ちゃんねる

Penetration Test Report

sec

offensive-security http://www.offensive-security.com/reports/penetration-testing-sample-report-2013.pdf

Malware Analysis: The State of Java Reversing Tools

sec

obfuscation Ghetto Forensics: Malware Analysis: The State of Java Reversing Tools

Mount shadow volumes on disk images

sec

Mount shadow volumes on disk images - ForensicsWiki

metasploitable-linux-2.0.0

sec

Metasploitable is an intentionally vulnerable Linux virtual machine Metasploitable - Browse /Metasploitable2 at SourceForge.net

tree-cbass

sec

Taint-enabled Reverse Engineering Environment on top of a Cross-platform Binary Symbolic execution System tree-cbass - Taint-enabled Reverse Engineering Environment on top of a Cross-platform Binary Symbolic execution System - Google Proje…

ostinato

sec

Packet/Traffic Generator and Analyzer Ostinato

CanSecWest slide

sec

CanSecWest Applied Security Conference: Vancouver, British Columbia, Canada

[malware] APT1: technical backstage

sec

http://www.malware.lu/Pro/RAP002_APT1_Technical_backstage.1.0.pdf

Getting Started with Linux Memory Forensics

sec

SANS Digital Forensics and Incident Response Blog | Getting Started with Linux Memory Forensics | SANS Institute

Using Google.com to find Usernames and Passwords

sec

http://backtrack-page.blogspot.com/2013/07/facebook-easy-using-googlecom-to-find.html

[md5] [crack]Best sites that crack MD5 hashes

sec

http://backtrack-page.blogspot.com/2013/07/best-sites-that-crack-md5-hashes.html http://www.tmto.org http://md5.noisette.ch http://md5decryption.com http://www.c0llision.net http://www.netmd5crack.com http://www.md5decrypter.com http://md5…