R3MRUM

PSDecode. PowerShell script for deobfuscating encoded PowerShell scripts

loki-parse. A python script that can detect and parse loki-bot (malware) related network traffic. This script can be helpful to DFIR analysts and security researchers who want to know what data is being exfiltrated to the C2, bot tracking, etc...

unpacme. Python interface for the unpac.me binary unpacking service

blog_REPreCalcHashes. Python

BindDeluge2PIA. A powershell script that updates the Deluge listen_interface and listen_ports to reflect Private Internet Access' TAP IP and ports that are forwarded.

sonyp_rs232c. A Python3 class used for controlling a SonyHWXXES projector via serial connection.

aplib. converted aplib decompression routine to work in Python 2.7

switch-net. A tool used for quickly switching between a static and dynamic ip on a linux host. useful if you have an isolated lab system that needs to connect to the internet every now and then to get tool updates.