SHOW:
|
|
- or go back to the newest paste.
| 1 | Packet capture screenshots: https://www.wireshark.org/ | |
| 2 | Traffic spider graphs: https://github.com/tomchop/malcom | |
| 3 | Link download screenshots: https://www.gnu.org/software/wget/ | |
| 4 | Web directory screenshots: http://lynx.browser.org/ | |
| 5 | Web POST/GET/HEAD tool: https://github.com/asciimoo/wuzz | |
| 6 | Process flow graphs: http://procdot.com/ | |
| 7 | Color file diff: https://github.com/FireyFly/pixd | |
| 8 | Exe section breakdown: https://github.com/DidierStevens/DidierStevensSuite/blob/master/pecheck.py | |
| 9 | ASCII histogram: https://github.com/wizzat/distribution | |
| 10 | Static Binary Analysis: https://github.com/guelfoweb/peframe | |
| 11 | C2 traffic screenshots and text search: https://github.com/silence-is-best/c2db | |
| 12 | Sporadically updated JA3 of malicious traffic: https://github.com/silence-is-best/ja3 | |
| 13 | Strings from files: Stringex+ https://pastebin.com/AQAA9gKx | |
| 14 | ||
| 15 | wireshark columns: https://pastebin.com/LsQzcrTD | |
| 16 | wireshark filters: https://pastebin.com/2SE6q5uh | |
| 17 | ||
| 18 | Online tools: | |
| 19 | Great decoder: https://gchq.github.io/CyberChef/ | |
| 20 | Office Doc Dropper Analysis: https://malware.sekoia.fr/new | |
| 21 | Office Doc Analysis: https://iris-h.malwageddon.com/submit | |
| 22 | ||
| 23 | Trackers: | |
| 24 | http://tracker.h3x.eu/families | |
| 25 | https://ransomwaretracker.abuse.ch/tracker/ | |
| 26 | http://benkow.cc/passwords.php | |
| 27 | http://cybercrime-tracker.net/ | |
| 28 | https://urlhaus.abuse.ch/ | |
| 29 | ||
| 30 | IOC feeds: | |
| 31 | https://www.hashdd.com/hashdd/twitter-hashddbot/ | |
| 32 | http://tweettioc.com/ | |
| 33 | ||
| 34 | Other | |
| 35 | Dumping from start to finish: https://twitter.com/James_inthe_box/status/1187784553940701184 | |
| 36 | Getting the ursnif goods: https://twitter.com/James_inthe_box/status/1153778075697631232 |
