Skip to content

Instantly share code, notes, and snippets.

View IlluminatiFish's full-sized avatar
🔮
RE + CTI + IR + Malware Analysis + Phishing Detection

IlluminatiFish

🔮
RE + CTI + IR + Malware Analysis + Phishing Detection
View GitHub Profile
@IlluminatiFish
IlluminatiFish / YARAStringGeneartor.py
Last active June 4, 2021 00:49
A function that enables you to get the intersecting strings from the list of files defined in the function parameter along with an adjustable string size, could be used for YARA rule generation.
#
# This program is a utility used by myself that I have released
# to the public under the GPLv3 license
#
# Copyright (c) 2021 IlluminatiFish.
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, version 3.
#
@IlluminatiFish
IlluminatiFish / ContentDownloader.py
Last active June 4, 2021 00:49
A set of functions that allows python developers to download/retrieve content from a specified URL to their own computer.
#
# This program is a utility used by myself that I have released
# to the public under the GPLv3 license
#
# Copyright (c) 2021 IlluminatiFish.
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, version 3.
#
@IlluminatiFish
IlluminatiFish / 3D-CoordinateBrute.py
Last active June 4, 2021 00:48
A short script that bruteforces the coordinates of an unknown point, given the starting point coordinates and a distance to the unknown point which has only homogeneous coordinates in 3D
#
# This program is a utility used by myself that I have released
# to the public under the GPLv3 license
#
# Copyright (c) 2021 IlluminatiFish.
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, version 3.
#
@IlluminatiFish
IlluminatiFish / YAMLNodeLoader.py
Last active June 4, 2021 00:48
A short utility to use YAML configurations in Python and access their node data using the node1.node2.node3 format
#
# This program is a utility used by myself that I have released
# to the public under the GPLv3 license
#
# Copyright (c) 2021 IlluminatiFish.
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, version 3.
#
@IlluminatiFish
IlluminatiFish / EntropyAnalyzer.py
Last active June 4, 2021 00:48
A short python script that uses Shannon Entropy to analyse a file to find any readable text and/or code and extracts it out
#
# This program is a utility used by myself that I have released
# to the public under the GPLv3 license
#
# Copyright (c) 2021 IlluminatiFish.
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, version 3.
#
@IlluminatiFish
IlluminatiFish / YAMLNodePreloader.py
Last active June 4, 2021 00:47
A short utility to use YAML configurations in Python and access their node data using the node1.node2.node3 format
#
# This program is a utility used by myself that I have released
# to the public under the GPLv3 license
#
# Copyright (c) 2021 IlluminatiFish.
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, version 3.
#
@IlluminatiFish
IlluminatiFish / Centauri.py
Last active June 5, 2021 03:34
A quick python class, to find and identify a favicon for a given URL and calculating the favicon's murmur3 hash, which can be later used for favicon hash matching via services like Shodan
#
# This program is a utility used by myself that I have released
# to the public under the GPLv3 license
#
# Copyright (c) 2021 IlluminatiFish.
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, version 3.
#
@IlluminatiFish
IlluminatiFish / Terminator.py
Last active June 30, 2021 23:32
A little class to terminate those pesky token loggers that exist unfortunately in the discord community
import requests, pprint, json, base64, magic
class Nuker:
def __init__(self, webhook_url):
chunks = webhook_url.split("/")
self.webhook_id = chunks[5]
self.webhook_token = chunks[6]
@IlluminatiFish
IlluminatiFish / blacklist.txt
Last active February 26, 2022 01:46
A list of IP addresses that have been seen to have large amounts of domains hosting the very infamous steam/discord themed phishing that is spread via discord
[
"2.56.59.7",
"2.56.59.115",
"2.56.59.242",
"45.133.1.45",
"45.138.72.93",
"45.138.72.103",
"45.138.72.104",
"45.138.72.107",
"45.138.72.110",
@IlluminatiFish
IlluminatiFish / JNDIPayloadDeobfuscator.py
Last active April 26, 2023 10:24
A quick and short python script to deobfuscate JNDI payloads that are used in log4j exploitation which leverage on default value assignment, character manipulation syntaxes & other methods, licensed under GNU LGPLv3
import re
class DeobfuscatorException(Exception):
"""
DeobfuscatorException class to be raised
"""
pass
class JNDIPayloadDeobfuscator: