Ecosyste.ms sponsors
An open API service aggregating public data about GitHub Sponsors.
An open API service aggregating public data about GitHub Sponsors.
Funding Links: https://github.com/sponsors/botherder
My name is Claudio Guarnieri, otherwise known online as Nex. I'm a security researcher, free software developer, human rights advocate and spare time artist. You can find a more comprehensive bio here.
I have founded and led Amnesty International's Security Lab. Over the last decade I primarily worked on researching threats to human rights defenders and helping them stay safe online. Additionally, I develop free software and maintain free services, for individuals at risk as well as fellow security researchers. I also write a personal newsletter where I reflect about security, technology and society.
With your support I will be able to invest more time in producing free and open source content.
Following are some of the projects I have created:
Cuckoo Sandbox
The most popular open source malware analysis sandbox, used by thousands of researchers and organizations around the world.
MVT
MVT is a collection of utilities to simplify the process of gathering forensic evidence from mobile devices, useful to identify potential traces of compromise. Released along with the Pegasus Project.
pcqf
pcqf (PC Quick Forensics) is a little utility to automate the collection of useful forensic artifacts from a Windows computer. It is intended for human rights researchers and technical support working with activists and journalists in order to quickly collect potential evidence of compromise.
androidqf
androidqf (Android Quick Forensics) is a cross-platform utility to automate the process of extracting forensic evidence from Android device. It is intended to be simply used by non-tech savvy users as well to facilitate conducting remote forensics.
Viper Framework
Viper is a framework for binary analysis, clustering, and management. It allows you to quickly triage malicious samples, and extract static information from supported file formats.
PhishDetect
PhishDetect is a project I started and I am currently developing. It's a collection of tools and services to help activists and journalists at risk identify, report and block malicious attacks.
Hardentools
Hardentools is a tool I created to simplify the process of hardening certain settings in Windows to reduce attack surface for at-risk users.
Kraken
Kraken is an advanced Yara scanner. It allows to scan the filesystem, running processes, and autorun entries on Windows, Linux and Mac computers. It is provided with a backend the Kraken agent can report results to.
MVT (Mobile Verification Toolkit) helps with conducting forensics of mobile devices in order to find signs of a potential compromise.
Language: Python - Stars: 10453pcqf (PC Quick Forensics) helps quickly gathering forensic evidence from Windows, Mac, and Linux systems, in order to identify potential traces of compromise.
Language: Go - Stars: 133androidqf (Android Quick Forensics) helps quickly gathering forensic evidence from Android devices, in order to identify potential traces of compromise.
Language: Go - Stars: 252Cuckoo Sandbox is an automated dynamic malware analysis system
Language: JavaScript - Stars: 5564Binary analysis and management framework
Language: Python - Stars: 1540