Back at the tail end of April I had posted about data mining PDF data in order to classify whether or not a document were malicious. In the post I had talked about data and an API, but never released the tool out to the public. It has been a few m...
Read more →In my last post I detailed a whole bunch of ways to make encoders better and that I had authored my own to see how difficult it was. Last night I released the encoder with some extra little bells and whistles to make it a bit more interesting. Bef...
Read more →A couple days ago malc0de released a PERL script to search PasteBin and update the user in near-realtime. The script wasn't beautiful, but it got the job done, so being the Python fan I am, I ported it and threw it up on GitHub. At the time I didn...
Read more →JavaScript is a wonderful language full of tricks, power and the element of confusion. In this day and age it is likely that most people handling PDF, JAVA, Flash or browser-based exploits has either seen, reversed or been owned due to JavaScript....
Read more →Hashes and malware go together. When you get a new piece of malware the first thing you should do is create a hash and search for any information available on it. In some cases you may turn up nothing at all, but other times you may end up with a ...
Read more →No, seriously, it is. Think about all the time wasted reformatting someone else’s data or dealing with management requesting some magical composite report built from five of your primary tools, all of which produce no structure for consumption. La...
Read more →