Karsten Hahn

PortEx. Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness

PortexAnalyzerGUI. Graphical interface for PortEx, a Portable Executable and Malware Analysis Library

hedgehog-tools. Python

HedgehogLab. Malware Analysis Exercise Samples and Resources

JWScan. Scanner for Jar to EXE wrapper like Launch4j, Exe4j, JSmooth, Jar2Exe

STOP-DJVU-Ransomware-Vaccine. Vaccine for STOP/DJVU ransomware, prevents encryption

Exe4jConfigExtractor. Configuration Extractor for EXE4J PE files

WisdomForHedgehogs. Knowledge base for reverse engineering and malware analysis

CleanPECollector. Collects clean PE samples from your machine

MozillaRecovery. Recovers the master password of key3.db files, i.e. Thunderbird, Firefox

SystemLookup. SystemLookup.com via command line

YARCAST. YARCAST - YARA Collection, Aggregation, Scanning, and Threat detection

NPP-Yara-Dark-UDL. Notepad++ Yara Syntax Highlight for Dark Themes

NetSlurper. Python toolkit for easy extraction of signature patterns from certain not so obvious parts of .NET assemblies

struppigel.

disinfector-trainer. Small Python tool to that applies Autostart Extensibility Points with calc.exe

Mandelbrot. Mandelbrot set viewer with zoom functionality

fenrishub. -