4 रिपॉजिटरी
Awesome GitHub RepositoriesCapability Analyzers
Scans binaries to catalog functional capabilities such as code execution, data exfiltration, and anti-analysis techniques.
Distinct from Malware Analysis: Distinct from Malware Analysis: focuses on cataloging what a binary can do (capabilities) rather than general reverse engineering or behavioral analysis.
Explore 4 awesome GitHub repositories matching security & cryptography · Capability Analyzers. Refine with filters or upvote what's useful.
Awesome Capability Analyzers GitHub Repositories
AI के साथ बेहतरीन रिपॉजिटरी खोजें।हम AI का उपयोग करके सबसे सटीक रिपॉजिटरी खोजेंगे।
- mandiant/capa
mandiant/capa
6,062GitHub पर देखेंcapa is a binary capability scanner that identifies high-level behaviors and actions an executable can perform, such as network communication or file manipulation. It functions as a malware behavior analysis tool and a MITRE ATT&CK mapping framework, scanning PE, ELF, .NET, and shellcode files through both static analysis and dynamic sandbox report processing. The tool distinguishes itself through a YAML-based detection rule engine that defines detection logic in human-readable files, with conditions expressed as feature combinations and logical operators. It integrates with IDA Pro, Ghidra,
Scans binaries to catalog functional capabilities such as code execution, data exfiltration, and anti-analysis techniques.
Python - fireeye/capa
fireeye/capa
6,062GitHub पर देखेंcapa is a static analysis tool that scans executable files to identify what a program can do, detecting capabilities such as API calls, byte sequences, and structural patterns without executing the code. It supports multiple file formats including PE, ELF, .NET, and shellcode, and can also process runtime behavior traces from sandbox reports generated by CAPE, DRAKVUF, or VMRay. The tool integrates directly with reverse engineering environments through plugins for IDA Pro and Ghidra, allowing analysts to view capability matches and author detection rules within their disassembler of choice. C
Scans PE, ELF, .NET, and shellcode files to identify what a program can do using static analysis rules.
Python - mantvydasb/redteaming-tactics-and-techniques
mantvydasb/RedTeaming-Tactics-and-Techniques
4,620GitHub पर देखेंयह प्रोजेक्ट एक रेड टीमिंग नॉलेज बेस और ऑफेंसिव सिक्योरिटी प्लेबुक है जिसे एडवर्सरी व्यवहार का अनुकरण (simulate) करने के लिए डिज़ाइन किया गया है। यह रेड टीम ऑपरेशंस को निष्पादित करने के लिए तकनीकी गाइड और टैक्टिक्स का एक व्यापक संग्रह है। यह रिपॉजिटरी Active Directory एक्सप्लॉइटेशन के लिए विस्तृत निर्देश प्रदान करती है, जिसमें Kerberos दुरुपयोग और डोमेन प्रिविलेज एस्केलेशन शामिल है। यह API अनहुकिंग और पेलोड ऑब्फस्केशन के माध्यम से डिफेंस इवेजन, और कर्नल ऑब्जेक्ट्स व सिस्टम मेमोरी के हेरफेर से जुड़े Windows इंटरनल्स रिसर्च को कवर करती है। इसकी क्षमताएं नेटवर्क पेनेट्रेशन टेस्टिंग, मैलवेयर विश्लेषण और इंजीनियरिंग, और ऑफेंसिव सिक्योरिटी इंफ्रास्ट्रक्चर की तैनाती तक फैली हुई हैं। इसमें एंटरप्राइज एनवायरनमेंट में लेटरल मूवमेंट, पर्सिस्टेंस, और डेटा एक्सफिल्ट्रेशन के तरीके भी शामिल हैं।
Provides tools to analyze malware binaries and catalog capabilities such as data exfiltration and anti-analysis techniques.
PowerShelloffensive-securityoscppentesting - rpisec/malware
RPISEC/Malware
4,028GitHub पर देखेंThis project is a cybersecurity educational resource and courseware designed for malware analysis and reverse engineering. It provides a structured curriculum of lessons, labs, and guided projects focused on detecting and understanding the behavior of malicious software. The resource includes a lab guide for building isolated virtual machine environments to safely execute and study malware. It covers the setup of a specialized toolchain consisting of disassemblers and debuggers used to analyze compiled machine code. The training material covers both static analysis, which examines binary cod
Offers guided projects for detecting and understanding the behavior of real-world encrypted malware samples.
