This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
package main | |
import ( | |
"fmt" | |
"image" | |
"image/color" | |
"image/png" | |
"log" | |
"os" | |
"syscall" |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
package main | |
import ( | |
"bytes" | |
"encoding/hex" | |
"log" | |
"github.com/Eyevinn/mp4ff/mp4" | |
) |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
/* | |
Invoke | |
frida -U -p $(frida-ps -Uai | grep -i "1.1.1" | awk '{print $1}') -l warp_hook.js --debug | |
Based on https://github.com/monkeywave/frida-scripts-collection/blob/main/warp_hook.js | |
*/ | |
function hookBoringSSLByPattern(module) { |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
import hashlib | |
import sys | |
import os | |
def compute_plex_hash(file_path): | |
file_size = os.path.getsize(file_path) | |
with open(file_path, "rb") as f: | |
first_chunk = f.read(65536) |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Name | Source | License | Format | IOCs | Refresh interval | Components | | |
| :--- | :----: | :-----: | :----: | :--: | :--------------: | :- | | |
| Phishing-Filter | https://gitlab.com/malware-filter/phishing-filter | MIT | Raw List | Urls/Domains/IPs | 2/day | PhishTank, OpenPhish, phishunt.io | | |
| Botnet-Filter | https://gitlab.com/malware-filter/botnet-filter | MIT | Raw List | IP | 1/day | Abuse.ch Feodo Tracker | | |
| Domain blacklist | https://oisd.nl/ | |
| Botvrij Domain Blacklist | https://botvrij.eu/data/ | | |
| Botvrij Domain Blacklist | https://botvrij.eu/data/ioclist.domain | | |
| Botvrij IP Blacklist | https://botvrij.eu/data/ioclist.ip-dst | | |
| Botvrij URL Blacklist | https://botvrij.eu/data/ioclist.url | |
| CINS Score IP Blacklist | http://cinsscore.com/list/ci-badguys.txt | |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
package main | |
import ( | |
"bytes" | |
"encoding/base64" | |
"encoding/hex" | |
"log" | |
"os" | |
"regexp" | |
"unicode/utf16" |