Skip to main content

Your bag of handy codez for malware researchers

Content

  • crypto - couple of wrappers around pycrypto and other (stolen/borrowed) crypto things, so far:

    • rc2

    • rc4 + key derivation from m$

    • rc6

    • spritz

    • rsa + pkcs

    • rolling xor

    • xor

    • xtea

    • serpent

  • compression - same thing for compression algos so far:

    • lznt1

    • lzmat

    • gzip

    • aplib

  • disasm - wrapper around capstone and some additions ;]

  • malware - codez from malware so far,

    • isfb

  • winapi - various things related to windows api,

    • resolve api name from hash

    • port of CryptExportKey/CryptImportKey returning object from mlib.crypto

  • bits - various things that operates on bits

  • hash - some old school hashes used in api resolving

  • rnd - random wrappers

  • memory - useful class for operation on blobs of data, reading bytes,dwords etc

  • parse - parse all the things! especially m$ crypto keys

License

Do whatever you want with this, Just remember to credit the authors and buy them beers when you meet them;]

Documentation

I wish…

Contact

If you have any questions, hit me up - mak@malwarelab.pl

–

Enjoy and Happy hacking!

Metadata

Release files for mLib 1.2.4

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for mLib 1.2.4
File Size Uploaded Provenance
mLib-1.2.4.tar.gz 1.0 MB Without provenance Details

Release files / mLib-1.2.4.tar.gz

Download URL mLib-1.2.4.tar.gz
Size 1.0 MB
Tags Source
SHA-256 checksum
How to use checksums
15a38fa52dfd0c700871b8683a57fa7785316c6803cb659d7b02dcdb962b0b77
BLAKE2b-256 checksum
How to use checksums
d1c2d0fed7e4c7d847bf564c8abd89d7361b4b0d1f0a67f5eec3a56ebbcc7da9
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No

Security for mLib 1.2.4

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page