Tools: deobfuscation (28)

Analyze Cobalt Strike beacons.

Locate and decode strings encoded in Base64 and other common encodings.

Bruteforce XOR'ed strings to find those that are English words.

Decode and otherwise analyze data using this command-line tool and Python library.

Analyze Cobalt Strike beacons.

Analyze Cobalt Strike beacon process dumps to detect sleep mask encoding.

Decrypt Cobalt Strike metadata.

Extract AES and HMAC keys from Cobalt Strike beacon process memory.

Cut out a part of a data stream.

Decode and otherwise analyze data using this browser app.

Parsing configuration information from malware.

Search an XOR'ed file for indications of executable binaries.

Extract and deobfuscate strings from PE executables.

Decompose structured binary data with format strings.

Convert hexadecimal text dumps to binary data.

Perform static analysis of various aspects of malicious code.

Help guess a file's 256-byte XOR by using frequency analysis.

Translate number sequences into ASCII characters.

Perform set operations on lines or bytes in text files.

Locate and decode stack strings in executable files.

Translate bytes according to a Python expression.

Display Unicode character properties.

Deobfuscate XOR'ed files.

Implement a XOR known plaintext attack.

Bruteforce an XOR-encoded file.

Search for XOR, ROL, ROT, and SHIFT encoded strings with YARA and regex support.

Search for XOR encoded strings in a file.

Analyze XOR-encoded data.