malware-samples
how-to-setup-a-honeypot
Our great sponsors
| malware-samples | how-to-setup-a-honeypot | |
|---|---|---|
| 3 | 6 | |
| 1,501 | 139 | |
| - | - | |
| 0.0 | 0.0 | |
| over 2 years ago | almost 2 years ago | |
| - | - |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
malware-samples
-
TIL that in 2019, a Windows XP computer infected with six types of malware was sold at an art auction for 1.3 million dollars.
Because it's so hard to get samples of famous widespread malware. https://github.com/fabrimagic72/malware-samples/tree/master/Ransomware/Wannacry
- Any ideas on a good Malware Archives
-
Cylance not detecting EICAR ... RLY BB?
This is the sample I used, https://github.com/fabrimagic72/malware-samples/tree/master/Ransomware/Petya again keep it mind it failed under a VirtualBox VM running on OSX. The Windows ISO used was W10_20H2_v2_International_32bit from https://tb.rg-adguard.net/public.php I have thus far been unable to replicate this on W10 machine, but I stay away from VirtualBox as I like VMWare much more.
how-to-setup-a-honeypot
-
How do I ensure safety when making a honeypot?
To start off, I intend to follow this really detailed rundown of how to create and secure my own honeypot https://github.com/Nirusu/how-to-setup-a-honeypot. Something I continue to worry about is how do I guarantee the threat actors I catch snooping aren't able to pivot or move laterally? Another concern I have is making sure whatever malicious actors go through my router, aren't able to infect anything. Is that just the extra risk you take in doing this?
- How to setup a honeypot with an IDS, ELK and TLS traffic inspection
What are some alternatives?
awesome-malware-analysis - Defund the Police.
elk-pi - Elk Audio OS binary images for Raspberry Pi
theZoo - A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.
elkpi-sdk - Yocto cross-compiling toolchains for Elk on Raspberry Pi 3 32 bit
DDOS-RootSec - DDOS Archive by RootSec (Scanners, BotNets (Mirai and QBot Premium & Normal and more), Exploits, Methods, Sniffers)
tpotce - 🍯 T-Pot - The All In One Honeypot Platform 🐝 [Moved to: https://github.com/telekom-security/tpotce]
Malware-Sample-Sources - Malware Sample Sources
SplunkDashboards - Collection of Dashboards for Threat Hunting and more!
MalwareDatabase - This repository is one of a few malware collections on the GitHub.
tpotce - 🍯 T-Pot - The All In One Honeypot Platform 🐝
MalwareSourceCode - Collection of malware source code for a variety of platforms in an array of different programming languages.
malware-samples - Malware samples, analysis exercises and other interesting resources.