Screenshots
Example Usage
from karton.core import Karton, Task, Resource
class GenericUnpacker(Karton):
"""
Performs sample unpacking
"""
identity = "karton.generic-unpacker"
filters = [
{
"type": "sample",
"kind": "runnable",
"platform": "win32"
}
]
def process(self, task: Task) -> None:
# Get sample object
packed_sample = task.get_resource('sample')
# Log with self.log
self.log.info(f"Hi {packed_sample.name}, let me analyze you!")
...
# Send our results for further processing or reporting
task = Task(
{
"type": "sample",
"kind": "raw"
}, payload = {
"parent": packed_sample,
"sample": Resource(filename, unpacked)
})
self.send_task(task)
if __name__ == "__main__":
GenericUnpacker.main()
See also
NetworkMiner
Freemium
Network forensics analysis tool (NFAT) that captures packets and parses them to reconstruct transmit…
TRACE-Forensic-Toolkit
Open Source
Digital forensic analysis tool that provides a user-friendly interface for investigating disk images…
pe-sieve
Open Source
Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/in…
soSaver
Open Source
A Frida-based utility for dynamically extracting native (.so) libraries from Android applications.…
SingleFileExtractor
Open Source
A tool for extracting contents (assemblies, configuration, etc.) from a single-file application to a…
The-Awesome-And-Dangerous-collection
Free
A high-risk archive of historical malware, exploit kits, crypters, and webshells for educational and…