Repository Index

IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.

• cybersecurity
• threat
• ioc
• malware

A collection of OSX and iOS security resources

• mac-osx
• osx-security
• malware
• osx-incident-response

ClamAV antivirus scanning for Node.js — scan file uploads with a single function call. Zero dependencies. Typed Symbol verdicts. Local or Docker/clamd.

• clamscan
• file-scanner
• virus-scan
• docker-compose

A tool for studying JavaScript malware.

• malware
• malwareanalysis
• nodejs
• es6

WinDBG Anti-RootKit Extension

• kernel-mode
• c-plus-plus
• malware
• malware-analysis

Modular file scanning/analysis framework

• python
• analytic-machines
• analysis-framework
• python-script

Catch risky npm dependency changes before they merge.

• dependency-analysis
• devsecops
• github-actions
• malware

Volatility plugin for extracts configuration data of known malware

• malware
• volatility
• forensics
• python

A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.

• cybersecurity
• incident-response
• sysinternals
• nirsoft

A Python RESTful API framework for online malware analysis and threat intelligence services.

• python
• cybersecurity
• malware
• malware-analysis

Python telnet honeypot for catching botnet binaries

• honeypot
• telnet-server
• malware
• botnet

Django application that performs SAST and Malware Analysis for Android APKs

• android-security
• sast
• malware-analysis
• code-security

ShowStopper is a tool for helping malware researchers explore and test anti-debug techniques or verify debugger plugins or other solutions that clash with standard anti-debug methods.

• research
• anti-debug
• malware

Collection of malware persistence and hunting information. Be a persistent persistence hunter!

• threat-hunting
• threat-intelligence
• persistence
• malware-persistence

BluePill: Neutralizing Anti-Analysis Behavior in Malware Dissection (Black Hat Europe 2019, IEEE TIFS 2020)

• malware-analysis
• reverse-engineering
• debugger
• malware

Code for our DLS'21 paper - BODMAS: An Open Dataset for Learning based Temporal Analysis of PE Malware. BODMAS is short for Blue Hexagon Open Dataset for Malware AnalysiS.

• malware
• pe-malware
• malware-dataset
• malware-research

Tool to help guess a files 256 byte XOR key by using frequency analysis

• frequency-analysis
• python
• xor
• malware

Android Malware Behavior Deleter

• android
• malware
• antivirus
• editor

A malware dataset curation tool which helps identify packed samples.

• malware
• packer
• security
• peid

Go library MalShare API

• malware
• hash
• threat-intelligence
• threat

A simple tool to organise large malicious/benign files into a organised Structure.

• malware
• malware-analysis
• malware-research
• clean-file

Simple tool to find the yara matches on a file

• yara
• yara-rules
• malware
• malware-analysis