Category Archives: Software/Tools

تصنيف يخص جميع برامج جنو/لينوكس

Malware Tools, Tips and Tricks

In the past, I used to maintain a Google Doc with all the tools I use or recommend for my students to use for Malware Analysis. A couple of days ago, while doing a Malware Analysis workshop for NW3C, I … Continue reading

Posted in Academia, AntiX, DFIR, Investigations, Malware, Research, Software/Tools | Tagged , , , | Leave a comment

Windows Sandbox Scripts

Windows Sandbox is an amazing Windows feature that could be used for Malware Analysis. In order to install it you’ll need to follow this blog post here by Microsoft.

Posted in DFIR, Investigations, Malware, Research, Security, Software/Tools, ThreatHunting, Virtualization, Windows | Tagged , , | Leave a comment

Acquiring Linux Memory using AVML and Using it with Volatility

This is another quick post going over the process to acquire memory from a Linux system, but instead of using LiME, I’m going to use AVML which stands for Acquire Volatile Memory for Linux, and could be found here. The … Continue reading

Posted in DFIR, Forensics, Memory, Software/Tools | Tagged , , , , , , , | Comments Off on Acquiring Linux Memory using AVML and Using it with Volatility

سكربت بسيط لعمل ARP Spoofing

سكربت بسيط لعمل ARP Spoofing … قم بنسخ الكود وتشغيله او تحميله من صفحة المشاريع (هنا) … #!/usr/bin/env python import sys, time from scapy.all import sendp, ARP, Ether if len (sys.argv) < 4: print "Usage\n:" print sys.argv[0] + " " … Continue reading

Posted in Development, PenTest, Software/Tools | Tagged , , , , , , , | Comments Off on سكربت بسيط لعمل ARP Spoofing

ما بعد تنصيب Debian 6 Squeeze

بالنسبة لي بعد أن قمت بتنصيب التوزيعة قمت بإضافة المستودعات التي أحتاجها … وبالنسبة لي هذه هي المستودعات التي أفضلها بصراحة … غيري لربما يفضل مستودعات آخرى لكن أنا أستعمل المستودعات التالية: قم بتحميلها من هنا … بعد ذلك كل … Continue reading

Posted in GNU/Linux, Software/Tools | Tagged , , , , , , , , , , | Comments Off on ما بعد تنصيب Debian 6 Squeeze