A modular Karton Framework service that unpacks common packers like UPX and others using the Qiling Framework.

Last update: Jan 05, 2023

Related tags

Text Data & NLP karton-unpacker

Overview

Unpacker Karton Service

A modular Karton Framework service that unpacks common packers like UPX and others using the Qiling Framework.

This project is FREE as in FREE 🍺 , use it commercially, privately or however you see fit.

If you like this project and wish to donate 💰 to support the fight against malware...

Buy me a 🍵 , as I don't drink 🍺 , by sending me some ₿ to 16oXesi7uv3jdPZxxwarHSD2f3cNMpaih9

Figure 1: Example of UPX Unpacked Children

Figure 2: Qiling Framework Unpacking calc.exe shellcode from tests/shellcode.exe

Consumes:

{
    "type": "sample",
    "stage": "recognized",
    "kind": "runnable",
    "platform": "win32"
},
{
    "type": "sample", 
    "stage": "recognized",
    "kind": "runnable",
    "platform": "win64" 
},
{ 
    "type": "sample",
    "stage": "recognized",
    "kind": "runnable",
    "platform": "linux"
}

{
    "type": "sample",
    "kind": "runnable",
    "stage": "recognized",
    "platform": <win32|win64|linux> (If PE File in Dump),
    "payload": {
        "sample": <Resource>,
        "parent": <Resource>,
    }
}

Usage

Make sure you have setup the core system: https://github.com/CERT-Polska/karton

Install from PyPi:

$ sudo apt install -y python3-virtualenv python-is-python3
$ virtualenv venv/
$ source venv/bin/activate
$ pip install karton-unpacker
$ git clone https://github.com/c3rb3ru5d3d53c/karton-unpacker-modules.git modules/
$ find modules/ -name "requirements.txt" | while read i; do pip install -r $i; done
$ git clone --recursive https://github.com/qilingframework/qiling.git
# Due to distribution restriction, Qiling Framework will not bundle Microsoft Windows DLL files and registry.
# Please use the script qiling/examples/scripts/dllscollector.bat on your Windows machine to collect the required DLLS for the rootfs
# Once the required DLLs have been collected copy them in the rootfs
$ karton-unpacker --config-file karton.ini --modules modules/ --rootfs qiling/examples/rootfs/ --timeout 30 --debug

Install from Source:

$ sudo apt install -y python3-virtualenv python-is-python3
$ git clone --recursive https://github.com/c3rb3ru5d3d53c/karton-unpacker.git
$ cd karton-unpacker/
$ virtualenv venv/
$ source venv/bin/activate
$ pip install .
$ git clone --recursive https://github.com/qilingframework/qiling.git
# Due to distribution restriction, Qiling Framework will not bundle Microsoft Windows DLL files and registry.
# Please use the script qiling/examples/scripts/dllscollector.bat on your Windows machine to collect the required DLLS for the rootfs
# Once the required DLLs have been collected copy them in the rootfs
$ karton-unpacker --config-file karton.ini --modules modules/ --rootfs qiling/examples/rootfs/ --timeout 30 --debug

Testing Your Installation

Once you have completed installing karton-unpacker, try uploading the file tests/shellcode.exe to mwdb.

If successful, you will see a file in relations with the name unpacked, this is the extracted shellcode to spawn cmd.exe.

Contributing

If you wish to contribute your own modules to automatically unpack malware, please refer to CONTRIBUTING.md

Common Voice Dataset explorer

Common Voice Dataset Explorer Common Voice Dataset is by Mozilla Made during huggingface finetuning week Usage pip install -r requirements.txt streaml

22 Nov 16, 2022

code for modular summarization work published in ACL2021 by Krishna et al

This repository contains the code for running modular summarization pipelines as described in the publication Krishna K, Khosla K, Bigham J, Lipton ZC

Approximately Correct Machine Intelligence (ACMI) Lab

21 Nov 24, 2022

code for modular summarization work published in ACL2021 by Krishna et al

This repository contains the code for running modular summarization pipelines as described in the publication Krishna K, Khosla K, Bigham J, Lipton ZC

6 Jun 4, 2021

A Neural Language Style Transfer framework to transfer natural language text smoothly between fine-grained language styles like formal/casual, active/passive, and many more. Created by Prithiviraj Damodaran. Open to pull requests and other forms of collaboration.

Styleformer A Neural Language Style Transfer framework to transfer natural language text smoothly between fine-grained language styles like formal/cas

431 Dec 19, 2022

Text to speech is a process to convert any text into voice. Text to speech project takes words on digital devices and convert them into audio. Here I have used Google-text-to-speech library popularly known as gTTS library to convert text file to .mp3 file. Hope you like my project!

Text to speech (using Python) Text to speech is a process to convert any text into voice. Text to speech project takes words on digital devices and co

19 Jun 30, 2022

Releases(v1.1.1)

v1.1.1(Apr 28, 2021)
Release Notes:

Tasks now timeout correctly (bug where queue got quite large)

General code cleanup

Other various bug fixes

Source code(tar.gz)
Source code(zip)
karton-unpacker-1.1.1.tar.gz(4.43 KB)
karton_unpacker-1.1.1-py3-none-any.whl(6.26 KB)
v1.1.0(Apr 26, 2021)
Release Notes:

Configs can now be passed to Karton Unpacker Modules

Documentation for Contributing your own Unpacker Modules

Qiling Framework Generic Unpacker Module for Windows

Support for multiple unpacked children tasks

Readme updated with Qiling rootfs installation instructions

Source code(tar.gz)
Source code(zip)
karton-unpacker-1.1.0.tar.gz(4.19 KB)
karton_unpacker-1.1.0-py3-none-any.whl(6.06 KB)
v1.0.0(Apr 25, 2021)
Initial Release

UPX Unpacking Support

Source code(tar.gz)
Source code(zip)
karton-unpacker-1.0.0.tar.gz(2.86 KB)
karton_unpacker-1.0.0-py3-none-any.whl(3.93 KB)

A modular Karton Framework service that unpacks common packers like UPX and others using the Qiling Framework.

Related tags

Overview

Unpacker Karton Service

Usage

Testing Your Installation

Contributing

You might also like...

Common Voice Dataset explorer

code for modular summarization work published in ACL2021 by Krishna et al

code for modular summarization work published in ACL2021 by Krishna et al

A Neural Language Style Transfer framework to transfer natural language text smoothly between fine-grained language styles like formal/casual, active/passive, and many more. Created by Prithiviraj Damodaran. Open to pull requests and other forms of collaboration.

Minimal GUI for accessing the Watson Text to Speech service.

Azure Text-to-speech service for Home Assistant

🛸 Use pretrained transformers like BERT, XLNet and GPT-2 in spaCy

🛸 Use pretrained transformers like BERT, XLNet and GPT-2 in spaCy

Text to speech is a process to convert any text into voice. Text to speech project takes words on digital devices and convert them into audio. Here I have used Google-text-to-speech library popularly known as gTTS library to convert text file to .mp3 file. Hope you like my project!

Releases(v1.1.1)

v1.1.1(Apr 28, 2021)

v1.1.0(Apr 26, 2021)

v1.0.0(Apr 25, 2021)

Owner

c3rb3ru5

Sentello is python script that simulates the anti-evasion and anti-analysis techniques used by malware.

This is the main repository of open-sourced speech technology by Huawei Noah's Ark Lab.

Grover is a model for Neural Fake News -- both generation and detectio

Trankit is a Light-Weight Transformer-based Python Toolkit for Multilingual Natural Language Processing

Pangu-Alpha for Transformers

American Sign Language (ASL) to Text Converter

Python library for Serbian Natural language processing (NLP)

Code-autocomplete, a code completion plugin for Python

Code Implementation of "Learning Span-Level Interactions for Aspect Sentiment Triplet Extraction".

This repository contains Python scripts for extracting linguistic features from Filipino texts.

Implementaion of our ACL 2022 paper Bridging the Data Gap between Training and Inference for Unsupervised Neural Machine Translation

Ptorch NLU, a Chinese text classification and sequence annotation toolkit, supports multi class and multi label classification tasks of Chinese long text and short text, and supports sequence annotation tasks such as Chinese named entity recognition, part of speech tagging and word segmentation.

Test finetuning of XLSR (multilingual wav2vec 2.0) for other speech classification tasks

Code to reproduce the results of the paper 'Towards Realistic Few-Shot Relation Extraction' (EMNLP 2021)

Synthetic data for the people.

使用Mask LM预训练任务来预训练Bert模型。训练垂直领域语料的模型表征，提升下游任务的表现。

BiNE: Bipartite Network Embedding

Let Xiao Ai speakers control third-party devices

Différents programmes créant une interface graphique a l'aide de Tkinter pour simplifier la vie des étudiants.

DeepSpeech - Easy-to-use Speech Toolkit including SOTA ASR pipeline, influential TTS with text frontend and End-to-End Speech Simultaneous Translation.