What is the meaning of this? This page contains a list of predominantly malware analysis / reverse engineering related tools, training, podcasts, literature and anything else closely related to the topic. I suspect that this list may morph gradually over time to possibly include other infosec related tools/links that aren't directly related to malware or RE, but I will try my very best to stay on topic! =)

Who is this page aimed at? i) Myself. I wanted to create a central page that lists all of my links that I have used at some point in time. This makes my life that little bit easier, rather than storing them in my browser bookmarks/favourites or elsewhere! (Too many browser tabs is never a good thing!!) ii) Beginners. I often get asked "how does one get started in malware analysis / reverse engineering". I'm hoping this list will provide a starting point at least. Anyone who has been practicing malware analysis for even a small amount of time, knows that there really is no single resource or location that will simply teach the art of malware analysis. Plain and simple. That said, having a useful list of links is at least a starting point. However, one caveat is that this list should NOT replace your OWN time spent researching and learning by yourself. This is very much part of "the journey" towards becomming a better malware analyst, similar to that of becomming a l33t h4x0r! ;) iii) Anyone else. Regardless of skill/experience level, even the more experienced malware analyst may hopefully find one or two useful links on this page that they haven't yet stumbled across. This is where the name "malware-gems" originated from... Original, I know.. ;)

Why? As stated above, partly because I wanted to build a central page to list all the various links I have stumbled across. And also to help any GENUINE malware analyst wannabe who needs some direction, as well as more experienced analysts who may wish to cross-check this list with their own collection to find any "gems" that they don't already have in their collection! :D

Isn't this similar to other "awesome" lists that exist on Github? Perhaps. While the various awesome "awesome" lists (as awesome as they are) gave me inspiration, I wanted to centralise my own tools/links etc due to growing my own malware analysis skills, in the hope that once I have things in one page, things may hopefully become a bit clearer in my head! In some ways, as awesome as the other various "awesome" lists are, I hope that this list will in itself be just as awesome, due to the fact that the this reflects a true and current representation of a malware analyst such as myself, who is building up their own knowledge with active links to tools, reading material etc!

Anything else?

• The links contained in each section are currently in no particular order.
• I may clean up the order at some point e.g. alphabetize, or order by preference.
• Some tools/links may likely be in the wrong category, I will review this as time goes on.
• This is a work-in-progress so bare with me!
• Sharing is caring, so feel free to forward this link around.
• "Haters gonna hate"!
• And last but not least, enjoy! =)

0x4143

• APTSimulator - https://github.com/NextronSystems/APTSimulator
• Caldera - https://github.com/mitre/caldera
• Atomic Red Team - https://github.com/redcanaryco/atomic-red-team
• Red Team Automation - https://www.endgame.com/blog/technical-blog/introducing-endgame-red-team-automation

• Security Now - https://www.grc.com/securitynow.htm
• SANS Stormcast - https://isc.sans.edu/podcast.html
• Down the Security Rabbithole - https://podcast.wh1t3rabbit.net/
• Defensive Security - https://defensivesecurity.org/category/podcast/
• Teach Yourself Computer Science - https://teachyourselfcs.com/
• CS50 at Harvard - https://cs50.harvard.edu/
• Paul's Security Weekly - https://wiki.securityweekly.com/Show_Notes
• RunAs Radio - https://www.runasradio.com/
• J4vv4D - https://www.j4vv4d.com/videos/
• Movies for Hackers - https://github.com/k4m4/movies-for-hackers
• Can You Hack It - https://www.youtube.com/watch?v=GWr5kbHt_2E
• Chris Nickerson talk - https://www.irongeek.com/i.php?page=videos/derbycon5/teach-me14-started-from-the-bottom-now-im-here-how-to-ruin-your-life-by-getting-everything-you-ever-wanted-chris-nickerson
• Zoz - Don't Fuck it Up - https://www.youtube.com/watch?v=J1q4Ir2J8P8
• Rob Joyce (NSA) - Disrupting Nation State Hackers - https://www.youtube.com/watch?v=bDJb8WOJYdA

• Intelligence Driven Incident Response - https://shop.oreilly.com/product/0636920043614.do
• Practical Malware Analysis - https://www.nostarch.com/malware
• Reversing: Secrets of Reverse Engineering - https://eu.wiley.com/WileyCDA/WileyTitle/productCd-0764574817.html
• Practical Reverse Engineering - https://eu.wiley.com/WileyCDA/WileyTitle/productCd-1118787315,subjectCd-CSJ0.html
• Malware Analyst Cookbook - https://eu.wiley.com/WileyCDA/WileyTitle/productCd-0470613033.html
• IDA Pro Book - https://www.nostarch.com/idapro2.htm
• Art of Assembly - https://www.plantation-productions.com/Webster/www.artofasm.com/index.html
• The Art of Memory Forensics - https://eu.wiley.com/WileyCDA/WileyTitle/productCd-1118825098.html
• Windows Internals Book 1 - https://www.microsoftpressstore.com/store/windows-internals-part-1-9780735648739
• Windows Internals Book 2 - https://www.microsoftpressstore.com/store/windows-internals-part-2-9780735665873
• Hacking. The Art of Exploitation - https://www.nostarch.com/hacking2.htm
• The Shellcoder's Handbook: Discovering and Exploiting Security Holes - https://eu.wiley.com/WileyCDA/WileyTitle/productCd-047008023X.html
• Rootkits: Subverting the Windows Kernel - https://dl.acm.org/citation.cfm?id=1076346
• Rootkits and Bootkits - https://www.nostarch.com/rootkits
• The Cuckoo's Egg: Tracking a Spy Through the Maze of Computer Espionage - https://www.simonandschuster.com/books/The-Cuckoos-Egg/Cliff-Stoll/9781416507789
• Rootkits: Subverting the Windows Kernel - https://dl.acm.org/citation.cfm?id=1076346
• The Rootkit Arsenal: Escape and Evasion in the Dark Corners of the System - https://www.safaribooksonline.com/library/view/the-rootkit-arsenal/9781449626365/
• Learning Malware Analysis - https://www.amazon.co.uk/Learning-Malware-Analysis-techniques-investigate/dp/1788392507/ref=sr_1_1?ie=UTF8&qid=1534162748&sr=8-1&keywords=malware+analysis

• IDA Cheat Sheet - https://securedorg.github.io/idacheatsheet.html
• Cheat Sheets - https://highon.coffee/blog/cheat-sheet/
• File Signatures - https://www.garykessler.net/library/file_sigs.html
• APT Groups and Operations - https://docs.google.com/spreadsheets/d/1H9_xaxQHpWaa4O_Son4Gx0YOIzlcBWMsdvePFX68EKU/pubhtml#
• Ransomware Overview - https://docs.google.com/spreadsheets/d/1TWS238xacAto-fLKh1n5uTsdijWdCEsGIM0Y0Hvmc5g/pubhtml#
• Intel Assembler code table - https://www.jegerlehner.ch/intel/
• ARM Assembly Cheatsheet - https://azeria-labs.com/assembly-basics-cheatsheet/
• APTnotes - https://github.com/kbandla/APTnotes
• PE 101 - https://github.com/corkami/pics/blob/master/binary/pe101/pe101.pdf
• PDF 101 - https://github.com/corkami/docs/blob/master/PDF/PDF.md

• Flare-On - https://flare-on.com/
• LabyREnth - https://labyrenth.com/mud/
• Facebook CTF - https://github.com/facebook/fbctf
• CTF Field Guide - https://trailofbits.github.io/ctf/
• RootMe - https://www.root-me.org
• RPISEC CSCI 4968 - https://security.cs.rpi.edu/courses/binexp-spring2015/

• OllyDbg - https://www.ollydbg.de/
• Immunity Debugger - https://www.immunityinc.com/products/debugger/
• X64dbg - https://x64dbg.com/#start
• Rvmi - https://github.com/fireeye/rvmi

• IDA Pro - https://www.hex-rays.com/products/ida/
• Binary Ninja - https://binary.ninja/
• Radare2 - https://github.com/radare/radare2
• BinNavi - https://github.com/google/binnavi
• Hopper - https://www.hopperapp.com/
• medusa - https://github.com/wisk/medusa
• Disassembler.io - https://www.onlinedisassembler.com/static/home/

• OfficeMalScanner/DisView - https://www.reconstructor.org/
• AnalyzePDF - https://github.com/hiddenillusion/AnalyzePDF
• BiffView - https://www.aldeid.com/wiki/BiffView
• oletools - https://www.decalage.info/python/oletools
• Origami Framework - https://github.com/cogent/origami-pdf
• PDF Stream Dumper - https://sandsprite.com/blogs/index.php?uid=7&pid=57
• CERMINE - https://github.com/CeON/CERMINE
• pdfid - https://blog.didierstevens.com/programs/pdf-tools/
• PDFwalker - https://www.aldeid.com/wiki/Origami/pdfwalker
• Peepdf - https://eternal-todo.com/tools/peepdf-pdf-analysis-tool
• pev - https://pev.sourceforge.net/
• FOCA - https://www.elevenpaths.com/labstools/foca/index.html
• LuckyStrike - https://github.com/curi0usJack/luckystrike
• RTF Cleaner - https://github.com/nicpenning/RTF-Cleaner
• RTFScan - https://www.reconstructer.org/

• CaptureBAT - https://www.honeynet.org/node/315
• Sysinternals Suite - https://docs.microsoft.com/en-us/sysinternals/downloads/sysinternals-suite
• ProcDOT - https://www.procdot.com/
• Process Hacker - https://processhacker.sourceforge.net/
• Sysmon - https://docs.microsoft.com/en-us/sysinternals/downloads/sysmon
• API Monitor - https://www.rohitab.com/apimonitor
• Regshot - https://sourceforge.net/projects/regshot/
• SwiftonSecurity Sysmon Config - https://github.com/SwiftOnSecurity/sysmon-config

• Win95 defrag - https://hultbergs.org/defrag/
• Little Bobby - https://www.littlebobbycomic.com/
• Dilbert - https://dilbert.com/
• XKCD - https://xkcd.com/

• Modern Honey Network - https://github.com/threatstream/mhn

• Graphical Realism Framework for Industrial Control Simulations - https://github.com/djformby/GRFICS

• Binwalk - https://github.com/devttys0/binwalk
• JTAG Explained - https://blog.senr.io/blog/jtag-explained
• Firmware Analysis Toolkit - https://github.com/attify/firmware-analysis-toolkit
• Saleae Logic Analyzer software - https://www.saleae.com/downloads/

• Detecting Lateral Movement through Tracking Event Logs - https://www.jpcert.or.jp/english/pub/sr/20170612ac-ir_research_en.pdf
• Incident Response Methodologies - https://github.com/certsocietegenerale/IRM
• MITRE ATT&CK Framework - https://attack.mitre.org/wiki/Main_Page

• SpiderMonkey (js) - https://blog.didierstevens.com/programs/spidermonkey/
• Malzilla - https://malzilla.sourceforge.net/
• Malware-Jail - https://github.com/HynekPetrak/malware-jail

• https://lifeinhex.com/analyzing-malicious-lnk-file/

• ThreatButt - https://threatbutt.com/map/
• BitDefender - https://threatmap.bitdefender.com/
• FireEye - https://www.fireeye.com/cyber-map/threat-map.html
• Global Incident Map - https://www.globalincidentmap.com/
• Tor Flow - https://torflow.uncharted.software/
• Kaspersky Cybermap - https://cybermap.kaspersky.com/
• Security Wizardry - https://www.securitywizardry.com/radar.htm
• Norse Attack Map - https://map.norsecorp.com/#/
• Digital Attack Map - https://www.digitalattackmap.com/#anim=1&color=0&country=ALL&list=0&time=16938&view=map
• Stats - https://breachlevelindex.com/
• Current Cyber Attacks - https://community.sicherheitstacho.eu/start/main
• FSecure - https://worldmap3.f-secure.com/
• Talos - https://talosintelligence.com/

• Volatility - https://www.volatilityfoundation.org/
• Memoryze - https://www.fireeye.com/services/freeware/memoryze.html
• DumpIt - https://blog.comae.io/your-favorite-memory-toolkit-is-back-f97072d33d5c
• Hibr2Bin - https://blog.comae.io/your-favorite-memory-toolkit-is-back-f97072d33d5c
• Rekall Memory Forensic Framework - https://github.com/google/rekall
• Clonezilla - https://clonezilla.org/
• dd - https://linux.die.net/man/1/dd
• Fog - https://fogproject.org/
• Forensic Toolkit (FTK) - https://www.accessdata.com/product-download
• Redline - https://www.fireeye.com/services/freeware/redline.html

• File Signature Analysis - https://filesignatures.net/index.php?page=all
• EKFiddle - https://github.com/malwareinfosec/EKFiddle
• XMind - https://www.xmind.net/
• ExamDiff - https://www.prestosoft.com/edp_examdiff.asp
• 7zip - https://www.7-zip.org/download.html
• Visual Studio - https://www.visualstudio.com/
• WinSCP - https://winscp.net/eng/download.php
• Putty - https://www.chiark.greenend.org.uk/~sgtatham/putty/latest.html
• TreeSizeFree - https://www.jam-software.com/treesize_free/
• OneNote - https://www.onenote.com/
• KeePass - https://keepass.info/
• ExifTool - https://www.sno.phy.queensu.ca/~phil/exiftool/
• RegEx 101 - https://regex101.com/
• Byte Counter - https://mothereff.in/byte-counter
• Utilu IE Collection - https://utilu.com/IECollection/
• UserAgentString - https://www.useragentstring.com/
• Maltego - https://www.paterva.com/web7/buy/maltego-clients/maltego-ce.php
• Cmder - https://cmder.net/

• ILSpy - https://ilspy.net/
• dnSpy - https://github.com/0xd4d/dnSpy
• dotPeek - https://www.jetbrains.com/decompiler/
• de4dot - https://github.com/0xd4d/de4dot
• Reflector - https://www.red-gate.com/products/dotnet-development/reflector/index

• Wireshark - https://www.wireshark.org/
• Network Miner - https://www.netresec.com/?page=NetworkMiner
• LogRhythm Network Monitor Freemium - https://logrhythm.com/network-monitor-freemium/
• dig - https://linux.die.net/man/1/dig
• curl - https://curl.haxx.se/docs/manpage.html
• ApateDNS - https://www.fireeye.com/services/freeware/apatedns.html
• NetCat - https://netcat.sourceforge.net/
• Nslookup - https://linux.die.net/man/1/nslookup
• PDF Stream Dumper - https://sandsprite.com/blogs/index.php?uid=7&pid=57
• Robtex - https://www.robtex.com/
• Belati - https://github.com/aancw/Belati
• Ostinato - https://ostinato.org/
• Burp Suite - https://portswigger.net/burp/
• Hak5 - https://hakshop.com/
• Fiddler - https://www.telerik.com/fiddler
• Shodan - https://www.shodan.io/
• FakeNet-NG - https://github.com/fireeye/flare-fakenet-ng
• Netzob - https://github.com/netzob/netzob
• DShell - https://github.com/USArmyResearchLab/Dshell
• SecurityOnion - https://securityonion.net/

• Remnux - https://remnux.org/
• SIFT - https://digital-forensics.sans.org/community/downloads
• Kali - https://www.kali.org/
• CAINE - https://www.caine-live.net/
• Metasploitable 3 - https://github.com/rapid7/metasploitable3
• DVWA - https://www.dvwa.co.uk/
• Security Onion - https://securityonion.net/
• FLARE VM - https://www.fireeye.com/blog/threat-research/2017/07/flare-vm-the-windows-malware.html
• OWASP WebGoat - https://www.owasp.org/index.php/WebGoat_Installation#Installing_to_Windows
• OWASP Bricks - https://www.owasp.org/index.php/OWASP_Bricks
• OWASP Mantra - https://www.getmantra.com/
• Tails - https://tails.boum.org/
• Whonix - https://www.whonix.org/
• Santoku - https://santoku-linux.com/about-santoku/

• Yara - https://virustotal.github.io/yara/

• Hashcat - https://github.com/hashcat/hashcat
• Crack.sh - https://crack.sh/
• Mimikatz - https://github.com/gentilkiwi/mimikatz
• Ophcrack - https://ophcrack.sourceforge.net/

• PSDecode - https://github.com/R3MRUM/PSDecode
• PyPowerShellXray - https://github.com/JohnLaTwC/PyPowerShellXray

• Reverse Engineering for Beginners - https://beginners.re/
• Phrack - https://phrack.org/
• Crypto 101 - https://www.crypto101.io/
• Hacker Manifesto - https://phrack.org/issues/7/3.html
• How to Become a Hacker - https://www.catb.org/esr/faqs/hacker-howto.html
• Zines - https://github.com/fdiskyou/Zines
• Hackaday - https://hackaday.com/blog/
• Hacktress - https://www.hacktress.com/
• Reddit - https://www.reddit.com/r/ReverseEngineering/
• Windows API Index - https://msdn.microsoft.com/en-gb/library/windows/desktop/hh920508(v=vs.85).aspx
• Raw Hex - https://rawhex.com/
• DigiNinja - https://digi.ninja/
• Team Cymru - https://www.team-cymru.org/index.html
• Lenny Zeltser - https://zeltser.com/malicious-software/
• OverAPI - https://overapi.com/
• HackBack - https://pastebin.com/0SNSvyjJ
• FlexiDie - https://pastebin.com/raw/Y1yf8kq0
• DefCon archive - https://media.defcon.org/
• Malwology - https://malwology.com/
• Stuxnet's Footprint in memory with Volatility - https://mnin.blogspot.co.uk/2011/06/examining-stuxnets-footprint-in-memory.html
• AtomBombing - https://breakingmalware.com/injection-techniques/atombombing-brand-new-code-injection-for-windows/
• Malware Archaeology - https://www.malwarearchaeology.com/cheat-sheets
• ShinoLocker - https://shinolocker.com/
• A crash course in x86 assembly for reverse engineers - https://sensepost.com/blogstatic/2014/01/SensePost_crash_course_in_x86_assembly-.pdf
• Zero Days, Thousands of Nights - https://www.rand.org/pubs/research_reports/RR1751.html
• Shadow Brokers Exploit Reference Table - https://docs.google.com/spreadsheets/d/1sD4rebofrkO9Rectt5S3Bzw6RnPpbJrMV-L1mS10HQc/edit#gid=1602324093
• GracefulSecurity - https://www.gracefulsecurity.com/infrastructure-security-articles/
• Cybersecurity ain't easy. Let's talk about it - https://itspmagazine.com/itsp-chronicles/cybersecurity-ain-t-easy-lets-talk-about-it
• How to become the best malware analyst e-v-e-r - https://www.hexacorn.com/blog/2018/04/14/how-to-become-the-best-malware-analyst-e-v-e-r/

• VirusTotal - https://www.virustotal.com
• Malwr - https://malwr.com/
• Reverse.it - https://www.reverse.it/
• Open Analysis - https://www.openanalysis.net/

• Noriben - https://github.com/Rurik/Noriben
• Cuckoo - https://www.cuckoosandbox.org/
• PyREBox - https://github.com/Cisco-Talos/pyrebox
• Viper - https://viper.li/
• MISP - https://www.misp-project.org/
• Sandboxie - https://www.sandboxie.com/
• Ph0neutria - https://github.com/phage-nz/ph0neutria

• JMP2IT - https://github.com/adamkramer/jmp2it
• Shellcode2exe.py - https://github.com/MarioVilas/shellcode_tools
• ConvertShellCode - https://le-tools.com/ConvertShellcode.html

• PEiD -https://www.aldeid.com/wiki/PEiD
• McAfee FileInsight - https://www.mcafee.com/uk/downloads/free-tools/fileinsight.aspx
• HashMyFiles - https://www.nirsoft.net/utils/hash_my_files.html
• CFF Explorer - https://www.ntcore.com/exsuite.php
• AnalyzePESig - https://blog.didierstevens.com/2012/10/01/searching-for-that-adobe-cert/
• ByteHist - https://www.cert.at/downloads/software/bytehist_en.html
• Exeinfo - https://exeinfo.pe.hu/
• Scylla - https://github.com/NtQuery/Scylla
• MASTIFF - https://git.korelogic.com/mastiff.git/
• PEframe - https://github.com/guelfoweb/peframe
• PEscan - https://tzworks.net/prototype_page.php?proto_id=15
• PEstudio - https://www.winitor.com/
• PE-Bear - https://hshrzd.wordpress.com/2013/07/09/introducing-new-pe-files-reversing-tool/
• PE-sieve - https://github.com/hasherezade/pe-sieve
• Flare-Floss - https://github.com/fireeye/flare-floss
• PatchDiff2 - https://github.com/filcab/patchdiff2
• PE Insider - https://cerbero.io/peinsider/
• Resource Hacker - https://www.angusj.com/resourcehacker/
• DarunGrim - https://github.com/ohjeongwook/DarunGrim
• Mal Tindex - https://github.com/joxeankoret/maltindex

• Notepad++ - https://notepad-plus-plus.org/
• 010 Editor - https://www.sweetscape.com/010editor/
• HxD - https://mh-nexus.de/en/hxd/
• BinText - https://www.aldeid.com/wiki/BinText
• Hexinator - https://hexinator.com/

• Cybrary - https://www.cybrary.it/
• Corelan Team - https://www.corelan.be/
• Open Security Training - https://opensecuritytraining.info/Training.html
• Offensive Computer Security - https://www.cs.fsu.edu/~redwood/OffensiveComputerSecurity/lectures.html
• PentesterLab - https://pentesterlab.com/
• Malware Traffic Analysis - https://www.malware-traffic-analysis.net/training-exercises.html
• MIT Open Courseware - https://ocw.mit.edu/courses/electrical-engineering-and-computer-science/6-858-computer-systems-security-fall-2014/video-lectures/
• OALabs - https://vimeo.com/oalabs
• OALabs - https://www.youtube.com/channel/UC--DwaiMV-jtO-6EvmKOnqg/videos
• MalwareAnalysisForHedgeHogs - https://www.youtube.com/channel/UCVFXrUwuWxNlm6UNZtBLJ-A
• Malware Unicorn - https://securedorg.github.io/
• Tuts4You - https://tuts4you.com/
• Lenas Reversing for Newbies - https://tuts4you.com/download.php?list.17
• Introduction to WinDBG - https://www.youtube.com/watch?list=PLhx7-txsG6t6n_E2LgDGqgvJtCHPL7UFu&time_continue=1&v=8zBpqc3HkSE
• Colin Hardy - https://www.youtube.com/channel/UCND1KVdVt8A580SjdaS4cZg/videos
• OWASP AppSec Tutorials - https://owasp-academy.teachable.com/p/owasp-appsec-tutorials
• Modern Binary Exploitation - https://github.com/RPISEC/MBE
• FuzzySecurity - https://www.fuzzysecurity.com/tutorials.html
• Linux Journey - https://linuxjourney.com/
• Pivot Project - https://pivotproject.org/
• Security Tube - https://www.securitytube-training.com/index.html
• Packet Life Cheat Sheets - https://packetlife.net/library/cheat-sheets/?_escaped_fragment_=#!
• SecurityXploded - https://securityxploded.com/
• MalwareMustDie - https://www.youtube.com/playlist?list=PLSe6fLFf1YDX-2sog70220BchQmhVqQ75
• Win32Assembly - https://win32assembly.programminghorizon.com/tutorials.html
• RPISEC - https://github.com/RPISEC/Malware/blob/master/README.md
• RPISEC - https://github.com/RPISEC/MBE
• Reverse Engineering Challenges - https://challenges.re/
• HackerOne - https://www.hackerone.com/
• Google Python Class - https://developers.google.com/edu/python/
• Guide to x86 Assembly - https://www.cs.virginia.edu/~evans/cs216/guides/x86.html
• Code Blocks - https://www.codeblocks.org/
• Wireshark Course - https://www.youtube.com/watch?v=XTSc2mPF4II&t=25s
• Maltrak Malware Analyst webinar - https://maltrak.com/webinar-registration
• Intro to ARM assembly basics - https://azeria-labs.com/writing-arm-assembly-part-1/
• Life in Hex - https://lifeinhex.com/category/reversing/
• The Cuckoo's Egg Decompiled Online Course - https://chrissanders.org/cuckoosegg/
• Creating Yara Rules for Malware Detection - https://www.real0day.com/hacking-tutorials/yara
• Windows Privilege Escalation Guide - https://www.sploitspren.com/2018-01-26-Windows-Privilege-Escalation-Guide/
• Amr Thabet shellcode training - https://www.youtube.com/channel/UCkY_8Hz8ojyQQ9S6bPnHa7g
• Hexacorn Converting Shellcode to Portable Executable (32- and 64- bit) - https://www.hexacorn.com/blog/2015/12/10/converting-shellcode-to-portable-executable-32-and-64-bit/
• Learn Forensics with David Cowen - https://www.youtube.com/user/LearnForensics/featured
• Raphael Mudge (various, In-memory evasion/detection) - https://www.youtube.com/user/DashnineMedia/videos
• Assembly programming tutorial - https://www.tutorialspoint.com/assembly_programming/index.htm

• pcodedmp - https://github.com/bontchev/pcodedmp
• vba-dynamic-hook - https://github.com/eset/vba-dynamic-hook

• bbcrack - https://www.decalage.info/python/balbuzard
• Brutexor - https://www.aldeid.com/wiki/Brutexor-iheartxor
• ConverterNET - https://www.kahusecurity.com/2017/converternet-v0-1-released/
• NoMoreXOR - https://github.com/hiddenillusion/NoMoreXOR