Maff1t

Malware Analyst

Genoa, Italy

Pinned Repositories

al-khaser
Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.
Language:C++11
capemon
capemon: CAPE's monitor
Language:C00
HashToApi
Python script that retrieves the API name from his hash. Useful for malware analysis
Language:Python40
InjectionTracer
PINTool to help analyzing malware that uses process injection
Language:C++12 3 03
InjectNtdllPOC
Process Injection without R/W target memory and without creating a remote thread
Language:C++194
JuanLesPIN-Public
Research tool able to detect and mitigate evasion techniques used by malware in-the-wild
Language:C++111
Maff1t.github.io
My personal website
Language:HTML00
r2Attach
Spawn radare2 in another terminal during a pwntools session
Language:Python90
ShellcodeInjector
A simple tool to inject shellcode inside a process of your choice. Useful for shellcode debugging
Language:C++40
WindowsPermsPoC
A simple PoC to demonstrate that is possible to write Non writable memory and execute Non executable memory on Windows
Language:C++53 5 19

Maff1t/WindowsPermsPoC
A simple PoC to demonstrate that is possible to write Non writable memory and execute Non executable memory on Windows
Language:C++53 5 19
Maff1t/InjectNtdllPOC
Process Injection without R/W target memory and without creating a remote thread
Language:C++194
Maff1t/InjectionTracer
PINTool to help analyzing malware that uses process injection
Language:C++12 3 03
Maff1t/JuanLesPIN-Public
Research tool able to detect and mitigate evasion techniques used by malware in-the-wild
Language:C++111
Maff1t/r2Attach
Spawn radare2 in another terminal during a pwntools session
Language:Python90
Maff1t/HashToApi
Python script that retrieves the API name from his hash. Useful for malware analysis
Language:Python40
Maff1t/ShellcodeInjector
A simple tool to inject shellcode inside a process of your choice. Useful for shellcode debugging
Language:C++40
Maff1t/al-khaser
Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.
Language:C++11
Maff1t/capemon
capemon: CAPE's monitor
Language:C00
Maff1t/Maff1t.github.io
My personal website
Language:HTML00
Maff1t/Misc-PowerShell-Stuff
random powershell goodness
Maff1t/monitor
The new Cuckoo Monitor.
Maff1t/Powershell2Lnk
Simple C++ program that given a ps1 file, embed it inside a LNK file
Language:C++