<<

Thug mitmproxy Network Miner Free Edition curl Wget QuickJava UPX Websites Tamper Data Bytehist Unpacking Burp Proxy Free Edition Density Scout Automater PackerID pdnstool objdump Malzilla Udis86 Disassemble Tor Vivisect xxxswf Signsrch Statically examine PE files Examine browser malware SWF Tools pescanner Flash RABCDAsm ExeScan Find anomalies extract_swf pev Java Cache IDX Parser Peframe Java Java Decompiler Bokken Rhino Debugger RATDecoders Investigate JSDetox Pyew ExtractScripts Firebug ProcDOT JavaScript JavaScript Deobfuscator bashhacks Other tasks def.js Androwarn SpiderMonkey V8 Volatility Framework JS Beautifier TotalRecall findaes Examine memory snapshots AnalyzePDF AESKeyFinder JSDetox RSAKeyFinder Pdfobjflow pdfid SciTE Text PDF pdf-parser feh peepdf Images ImageMagick Origami wxHexEditor Edit and view files PDF X-RAY Lite Binary Examine document files VBinDiff PDFtk Xpdf officeparser Documents Microsoft Office XMind OfficeMalScanner sctest Sysdig unicode2hex-escaped System REMnux v5 Shellcode Unhide unicode2raw Vivisect Tools dism-this Udis86 Disassemble

objdump unXOR Evan's Debugger (EDB) XORStrings Debug Investigate Linux malware GNU Project Debugger (GDB) ex_pe_xor strace XORSearch Trace ltrace Deobfuscate brutexor/iheartxor Radare 2 xortool Pyew Investigate NoMoreXOR Bokken XORBruteForcer Extract and decode artifacts Balbuzard YaraGenerator strdeobj Yara Editor Extract strings pestr Define signatures IOCextractor strings Autorule Foremost Yara Scalpel Carving ClamAV bulk_extractor Scan TrID Examine file properties and contents Hachoir ExifTool

nsrllookup Wireshark Automater ngrep Sniffing Hash Identifier Hashes TCPDump totalhash tcpick ssdeep FakeDNS Tiny HTTPd Maltrieve fakeMail Ragpicker Services Honeyd Viper Handle network interactions INetSim Process multiple samples MASTIFF Inspire IRCd WIPSTER Installer OpenSSH Density Scout prettyping.sh set-static-ip renew-dhcp Miscellaneous network Netcat EPIC IRC Client stunnel