The FLARE team's open-source tool to identify capabilities in executable files.
- malware-analysis
- reverse-engineering
- binary-analysis
- threat-intelligence
47,133 repositories indexed
1–12 of 12 · Most stars
The FLARE team's open-source tool to identify capabilities in executable files.
Sandboxed Execution Environment
Limon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators of Linux malware. It allows one to inspect Linux malware before execution, during execution, and after execution (post-mortem analysis) by performing static, dynamic and memory analysis using open source tools
Python implementation of the Packed Executable iDentifier (PEiD)
Nosis is a lightweight personal agent runtime: per-session execution boundaries with OS-level sandboxing, computer use, a full built-in toolset, Skill / Plugin / MCP extensions, one runtime shared by GUI and TUI, and file-persisted sessions, plans, and memory.
Docker image gathering packers and tools for making datasets of packed executables and training machine learning models for packing detection
Analysis tool for estimating the likelihood that a binary contains compressed or encrypted bytes
Dataset of packed PE samples
WebLogic Honeypot is a low interaction honeypot to detect CVE-2017-10271 in the Oracle WebLogic Server component of Oracle Fusion Middleware. This is a Remote Code Execution vulnerability.
Packing detection tool for PE files
Implementation of the packing detection heuristic from the paper "Packed PE File Detection for Malware Forensics" of Han et al.
A Single Library Parser to extract meta information,static analysis and detect macros within the files.