QuickSand
QuickSand is a compact C framework designed to analyze suspected malware documents, with the ability to identify exploits in streams of different encodings and extract embedded executables, supporting file formats like doc, docx, ppt, pptx, xls, xlsx, and more, including PDF. It can detect documents containing zero-day or unknown obfuscated exploits, with features like XOR Bitwise, math ciphers, executable extraction for Windows, Mac, Linux, VBA, exploit search, Yara signatures, and more.
FEATURES
EXPLORE BY TAGS
SIMILAR TOOLS
Management portal for LoKi scanner with centralized database for scanning activities.
Repository of YARA rules for Trellix ATR blogposts and investigations
A semi-automatic tool to generate YARA rules from virus samples.
Bindings for the Yara library from VirusTotal with support for Yara v4.2 and various features like rule compilation and scanning.
A de-obfuscator for M/o/Vfuscator, a notorious obfuscator, designed to reverse the effects of M/o/Vfuscator's obfuscation.
PINNED
Mandos
Fractional CISO service that helps B2B companies implement security leadership to win enterprise deals, achieve compliance, and develop strategic security programs.
Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.