LW_Ghidra_Scripts_PUBLIC

Ghidra scripts developed by Lacework Labs to aid in research and malware analysis.

Scripts

PwnKatien: A script to extract configuration information from Katien, Tsunami, and Ziggystratux IRC bots.
PwnRig: A script to extract configuration information from "PwnRig" Cryptocurrency miners.
HCRootkit_Sutersu: Extract embedded IPs from HC Rootkit samples.
HC_Dropper_ID: Identify embedded ELFs in coreutil dropper binaries.

Name		Name	Last commit message	Last commit date
Latest commit History 9 Commits
ghidra_scripts		ghidra_scripts
LICENSE		LICENSE
README.md		README.md