Zscaler ThreatLabz Tools

Tools developed by the Zscaler ThreatLabz Threat Intelligence team

Follow us on Twitter: @Threatlabz

Name	Name	Last commit message	Last commit date
Latest commit ThreatLabz added mustang panda tools Apr 16, 2025 734fbb1 · Apr 16, 2025 History 53 Commits
OneNoteAnalyzer	OneNoteAnalyzer	updated author info	Mar 1, 2023
apt36	apt36	added apt-36 readme	Nov 3, 2022
ares	ares	small fixes	Sep 6, 2022
blackbasta	blackbasta	Update README.md	Jan 11, 2023
blackbyte	blackbyte	Update README.md	Jan 11, 2023
cryptnet	cryptnet	added cryptnet ransomware string decryption tool	May 12, 2023
danabot	danabot	add danabot deobfuscation tools	Dec 6, 2022
evilnum	evilnum	add header and references	Aug 9, 2022
hijackloader	hijackloader	added lznt1 lib	May 6, 2024
industrialspy	industrialspy	cleanup	Aug 25, 2022
madmxshell	madmxshell	added network traffic decoder for madmxshell	Apr 17, 2024
mustang_panda	mustang_panda	added mustang panda tools	Apr 16, 2025
mystic_stealer	mystic_stealer	added mystic stealer tools	Jun 15, 2023
nokoyawa	nokoyawa	add nokoyawa ransomware 2.0 proof-of-concept decryption tool	Dec 20, 2022
partyticket	partyticket	add header and references	Aug 9, 2022
pikabot	pikabot	add pikabot bot id generation script	May 24, 2023
raspberry_robin	raspberry_robin	added raspberry code snippets	Nov 14, 2024
revc2	revc2	added revc2 tools	Nov 27, 2024
toitoin	toitoin	added decryption tools for TOITOIN	Jul 11, 2023
trigona	trigona	added trigona ransomware configuration decryption tool	Apr 14, 2023
xloader	xloader	Update README.md	Mar 30, 2023
zloader	zloader	added zloader tools	Jan 19, 2024
LICENSE	LICENSE	Initial commit	Jul 29, 2022
README.md	README.md	Update README.md	Aug 8, 2022

Provide feedback