pystemon インストール

sec

sudo apt-get install python-pip sudo pip install PyYAML sudo pip install BeautifulSoup git clone https://github.com/cvandeplas/pystemon

2014-12-12

[malware] Viper

sec

マルウェア管理、解析フレームワーク http://viper-framework.readthedocs.org/en/latest/index.html Viper is a binary analysis and management framework. sudo apt-get install gcc python-dev python-pip sudo pip install SQLAlchemy PrettyTable pyth…

2014-10-31

nginx,elasticsearch,kibanaインストール

============================================================== nginxのインストール #vi /etc/yum.repos.d/nginx.repo[nginx] name=nginx repo baseurl=http://nginx.org/packages/centos/5/$basearch/ gpgcheck=0 enabled=1# yum update # yum search n…

2014-05-27

[Mobile Forensics] [Android] Santoku-Linux

sec

https://santoku-linux.com/

2014-04-22

[Memory Forensics] メモリフォレンジック

sec

lsass.exeの正しい位置 winlogon.exe | --- lsass.exe --- services.exe | --- Process_A.exe --- Process_B.exe --- Process_B.exe --- Process_B.exe --- Process_B.exe --- Process_B.exe ※「lsass.exe」は一つのみ、複数ある場合はおかしい。 ※「lsass.e…

2014-04-04

[forensics] SuperTimeline

sec

【旧】 # mount -o loop,ro,show_files,streams_interface=windows,offset=32256 /mnt/hgfs/image.dd /mnt/windows_mount # log2timeline -z Japan -p -r -f winxp /mnt/windows_mount -w supertimeline.txt # l2t_process -b supertimeline.txt > supertime…

2014-02-14

Fluentd mongodb

conf

/etc/td-agent/td-agent.conf type tail path /var/log/httpd/access_log pos_file /var/log/td-agent/apache2.access_log.pos format apache2 tag mongo.apache.access type mongo database apache collection access host localhost port 27017

2014-01-07

INetSim: Internet Services Simulation Suite

sec

偽サーバ,DNS,HTTPなど INetSim: Internet Services Simulation Suite - Project Homepage # Available service names are: # dns, http, smtp, pop3, tftp, ftp, ntp, time_tcp, # time_udp, daytime_tcp, daytime_udp, echo_tcp, # echo_udp, discard_tcp,…

2013-12-24

FREE Security Training

sec

Home Page - www.SecurityXploded.com

2013-12-19

[forensics] Memory Forensics (Windows,Mac and Linux)

sec

2010 2013 sandro suffert memory forensics introdutory work shop - pub…

2013-11-25

[malware] Malware-Analyzer.com

sec

Malware-Analyzer.com is your solution to malware analysis tools, resources, and discounted malware reverse engineer training. Malware-Analyzer.com has a variety of tools from automated analysis to memory forensics. If you have a malware an…

2013-11-15

[decode] [malware] UnBup - McAfee BUP Extractor for Linux

sec

Open Security Research: UnBup - McAfee BUP Extractor for Linux

2013-10-26

PE-bear

sec

PE-bear | hasherezade's 1001 nights

2013-10-25

PeStudio

sec

winitor

2013-10-24

PyKd - Python extension to access Debug Engine

sec

Python extension for WinDbg Python extension for WinDbg - Home

2013-10-23

the PE analysis toolkit

sec

pev download | SourceForge.net]

2013-10-22

PEV PE ANALYSIS TOOLKIT

sec

Reversing PE executable files require a special tools because the payload that may contain the malware in PE files is packed inside another executable file that can be a legitimate. This makes a standard static analyses tool wont be able t…

2013-09-12

【要注意】玄関の「U字ロック」はひもで簡単に開けられるらしい　強姦目的で解錠し侵入した男「方法はネットで調べた」（動画あり）

sec

【要注意】玄関の「U字ロック」はひもで簡単に開けられるらしい強姦目的で解錠し侵入した男「方法はネットで調べた」（動画あり） | ニュース２ちゃんねる

2013-09-10

Penetration Test Report

sec

offensive-security http://www.offensive-security.com/reports/penetration-testing-sample-report-2013.pdf

2013-09-04

Malware Analysis: The State of Java Reversing Tools

sec

obfuscation Ghetto Forensics: Malware Analysis: The State of Java Reversing Tools

2013-09-03

Mount shadow volumes on disk images

sec

Mount shadow volumes on disk images - ForensicsWiki

2013-09-03

ShadowKit

tool

Volume Shadow Copy forensic RRTX Blog: ShadowKit - Working with Disk Images

2013-09-02

[malware] VirtualKD

tool

VirtualKD is a tool that improves your kernel debugging performance with VMWare and VirtualBox. VirtualKD - Windows Kernel Debugger Booster for Virtual Machines

2013-09-01

[forensics] Dropbox Forensics

tool

Dropbox Forensics | Forensic Focus - Articles

2013-08-06

metasploitable-linux-2.0.0

sec

Metasploitable is an intentionally vulnerable Linux virtual machine Metasploitable - Browse /Metasploitable2 at SourceForge.net

2013-08-06

tree-cbass

sec

Taint-enabled Reverse Engineering Environment on top of a Cross-platform Binary Symbolic execution System tree-cbass - Taint-enabled Reverse Engineering Environment on top of a Cross-platform Binary Symbolic execution System - Google Proje…