Andrey Pautov

Unpacker. Packer detection and unpacking workflow for malware analysis: UPX, ASPack, Themida, VMProtect, PE and ELF.

adversarygraph. AI-powered MITRE ATT\&CK threat intelligence platform — D3.js navigator, APT comparison, Claude/GPT-4o/Gemini analysis, PDF reports

AI-PT-Lab. Intentionally vulnerable AI security training lab for LLM agents — demonstrates OWASP LLM Top 10 2025: RAG injection, tool abuse, memory poisoning, supply chain compromise, data exfiltration and more.

String-Analyzer. String extraction for CTI and malware analysis: URLs, IPs, registry keys, APIs, encoded data, and analyst-ready prompts.

AIDebug. AI-assisted malware reverse-engineering debugger with ATT&CK, YARA, IOC, JSON, and analyst report output

Basic-File-Information-Gathering-Script. File triage for CTI and malware analysis: hashes, strings, entropy, metadata, YARA context, JSON and CSV output.

Static-malware-Analysis-Orchestrator. Static malware triage orchestrator for strings, PE imports, unpacking notes, IOC context, and LLM-ready reports.

Android-Malware-Analysis. Android APK malware triage with YARA, VirusTotal context, MITRE ATT&CK output, Frida hooks, and multi-LLM analysis.

stratus-ai. AI-powered AWS and GCP cloud security scanner with attack-chain synthesis, deploy wizard, and test coverage.

CTI. Evidence-labeled cyber threat intelligence reports and templates for actor research, attribution, hunting, and detection engineering.

Passwords. Security testing toolkit: personalized password wordlists (PPG), phone number generators, and Base64 credential pairs for authorized pentesting.

RTSP-brute-force-tool. RTSP Brute Force Tool: A powerful utility for security testing of RTSP services through systematic credential brute forcing, designed for ethical hacking and educational purposes.

PE-Import-Analyzer. PE import-table analysis for malware triage, API capability review, suspicious function flags, and detection leads.

CTI_as_a_Code. Full CTI analyst lab and training package — Docker Compose stack (OpenCTI, TheHive, Elastic SIEM) + 8 structured assignments covering reactive, proactive, full-cycle, and adversary emulation methodology.

lpi. LPI 010-160 exam simulator & trainer. Bash, PyQt6, and Kivy with shared question bank.

cvss_4.0. CVSS v4.0 BTE enrichment CLI using NVD, CISA KEV, EPSS, and asset profiles for vulnerability prioritization.

AuditAI. Python