阻止中国流氓软件的管理员授权. / Prevent UAC authorization of Chinese malware.

An obfuscation tool for Windows which instruments the Windows Loader into acting as an unpacking engine.

Personal research and publication on malware families

ioc2rpz is a place where threat intelligence meets DNS.

Pi-Hole blocklist.

Collection of YARA signatures from individual research

EmoKill is an Emotet process detection and killing tool for Windows OS. It avoids wasting time after detection of Emotet. Any process that matches the pattern of Emotet based on the logic of EmoCheck by JPCERT/CC will be detected by EmoKill and killed as soon as possible.

CoreDNS server with blacklist to block ads, tracking and malware

Handcrafted and completely self managed DNS Firewall through Response Policy Zones (RPZ)

Bukkit/Spigot/Bungee server plugins inspector, runtime connectivity and file access control and more.

Crowdsourced Realtime Malware Protection

CoreDNS server with blacklist to block ads, tracking and malware

A small script to automate toggling read-only mode independently of partiton letter or disk 'rank'.

HackeyBlock will get a reboot. But I need help!

A guide to installing Cuckoo sandbox with a Web Interface, HTTPS and Basic Auth

A utility to manage advertising blacklist files on linux.

Removeo - The tool for blocking ADs, trackers and unwanted content system-wide.

Analyze PDF files and determine if they are suspicious or not.

Proxy encrypting web pages and decrypting these in JS to protect against malware hooking browser or OS libs.

Wordpress Spam Attack Removal Script, Javascript Injection Remover

Bind9 RPZ blacklist

Repository containing my research work in the field of Malware Analysis and reverse engineering with demonstration of practical performed during the course.

suspecious files detector

Bash script which parse ads and malware domain from StevenBlack hosts file in order to be added to an Unbound DNS Server

The home of the HackeyBlock project. NOTE: HackeyBlock support will stop mid/end-2020.