CERT-Polska / Ursadb
Licence: bsd-3-clause
Trigram database written in C++, suited for malware indexing
Stars: ✭ 72
Projects that are alternatives of or similar to Ursadb
Mquery
YARA malware query accelerator (web frontend)
Stars: ✭ 264 (+266.67%)
Mutual labels: database, security-tools, malware, security-automation, yara
Hardening
Hardening Ubuntu. Systemd edition.
Stars: ✭ 705 (+879.17%)
Mutual labels: security-tools, security-automation
Purify
All-in-one tool for managing vulnerability reports from AppSec pipelines
Stars: ✭ 72 (+0%)
Mutual labels: security-tools, security-automation
Mxtract
mXtract - Memory Extractor & Analyzer
Stars: ✭ 499 (+593.06%)
Mutual labels: security-tools, malware
Yasuo
A ruby script that scans for vulnerable & exploitable 3rd-party web applications on a network
Stars: ✭ 517 (+618.06%)
Mutual labels: security-tools, security-automation
Gosec
Golang security checker
Stars: ✭ 5,694 (+7808.33%)
Mutual labels: security-tools, security-automation
Malware Ioc
Indicators of Compromises (IOC) of our various investigations
Stars: ✭ 955 (+1226.39%)
Mutual labels: malware, yara
Spytrojan keylogger
[Solo para programadores] Troyano espía | Keylogger solo para Windows, se replica en el sistema y se inicia automaticamente al iniciar sesión. | Envío de registro mediante [Base de Datos], [Gmail] o [BotTelegram].
Stars: ✭ 32 (-55.56%)
Mutual labels: database, malware
Gitgraber
gitGraber: monitor GitHub to search and find sensitive data in real time for different online services such as: Google, Amazon, Paypal, Github, Mailgun, Facebook, Twitter, Heroku, Stripe...
Stars: ✭ 1,164 (+1516.67%)
Mutual labels: security-tools, security-automation
Multiscanner
Modular file scanning/analysis framework
Stars: ✭ 494 (+586.11%)
Mutual labels: malware, yara
Threatingestor
Extract and aggregate threat intelligence.
Stars: ✭ 439 (+509.72%)
Mutual labels: security-tools, yara
Monkey
Infection Monkey - An automated pentest tool
Stars: ✭ 5,572 (+7638.89%)
Mutual labels: security-tools, security-automation
Fireelf
fireELF - Fileless Linux Malware Framework
Stars: ✭ 435 (+504.17%)
Mutual labels: security-tools, malware
Diamorphine
LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x (x86/x86_64 and ARM64)
Stars: ✭ 725 (+906.94%)
Mutual labels: security-tools, malware
Linux Secureboot Kit
Tool for complete hardening of Linux boot chain with UEFI Secure Boot
Stars: ✭ 54 (-25%)
Mutual labels: security-tools, security-automation
Huskyci
Performing security tests inside your CI
Stars: ✭ 398 (+452.78%)
Mutual labels: security-tools, security-automation
Burpa
Burp-Automator: A Burp Suite Automation Tool with Slack Integration. It can be used with Jenkins and Selenium to automate Dynamic Application Security Testing (DAST).
Stars: ✭ 427 (+493.06%)
Mutual labels: security-tools, security-automation
Subdomainizer
A tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github.
Stars: ✭ 915 (+1170.83%)
Mutual labels: security-tools, security-automation
UrsaDB
A 3gram search engine for querying Terabytes of data in milliseconds. Optimized for working with binary files (for example, malware dumps).
Created in CERT.PL. Originally by Jarosław Jedynak (tailcall.net), extended and improved by Michał Leszczyński.
This repository is only for UrsaDB project (ngram database). See CERT-Polska/mquery for more user friendly UI.
Installation
Quickstart
- Create new database:
mkdir /opt/ursadb
ursadb_new /opt/ursadb/db.ursa
- Run UrsaDB server:
ursadb /opt/ursadb/db.ursa
- Connect with UrsaCLI:
$ ursacli
[2020-04-13 18:16:36.511] [info] Connected to UrsaDB v1.3.0 (connection id: 006B8B4571)
ursadb>
ursadb> index "/opt/samples" with [gram3, text4, wide8, hash4];
- Now you can perform queries. For example, match all files with three null bytes:
ursadb> select {00 00 00};
Read the syntax documentation to learn more about available commands.
Learn more
More documentation can be found in the docs directory.
You can also read the hosted version here: cert-polska.github.io/ursadb/docs.
Contact
If you have any problems, bugs or feature requests related to UrsaDB, you're encouraged to create a GitHub issue. If you have other questions or want to contact the developers directly, you can email:
- Jarosław Jedynak ([email protected])
- Michał Leszczyński ([email protected])
- CERT.PL ([email protected])
Funding acknowledgement
Note that the project description data, including the texts, logos, images, and/or trademarks,
for each open source project belongs to its rightful owner.
If you wish to add or remove any projects, please contact us at [email protected].