The FLARE team's open-source tool to identify capabilities in executable files.
- malware-analysis
- reverse-engineering
- binary-analysis
- threat-intelligence
47,133 repositories indexed
1–24 of 26 · Most stars
The FLARE team's open-source tool to identify capabilities in executable files.
PyInstaller Extractor
A python script that finds endpoints in JavaScript files
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
Tool to scan for secret files on HTTP servers
pefile is a Python module to read and work with PE (Portable Executable) files
Security Tool to Look For Interesting Files in S3 Buckets
"Security Incidents In A Box!" A modular, menu-driven, cross-platform tool for building customized, time-delayed, distributed security events. Easily create custom event chains for Blue- & Red Team drills and sensor / alert mapping. Red Teams can create decoy incidents, distractions, and lures to support and scale their operations. Build event sequences ("narratives") to simulate realistic scenarios and generate corresponding network and filesystem artifacts.
Visualize network topologies and collect graph statistics based on pcap files
CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.
CLI utility and Python module for analyzing log files and other data.
Python implementation of the Packed Executable iDentifier (PEiD)
Randomly changes Win32/64 PE Files for 'safer' uploading to malware and sandbox sites.
Local-only browser fingerprint & identity rotation toolkit for authorized security testing. Tor/obfs4, coherent profiles, WebRTC/DNS leak protection.
A modular Python application to pull intelligence about malicious files
Tool to help guess a files 256 byte XOR key by using frequency analysis
A micro HTTP Web client for MicroPython (used on Pycom modules & ESP32)
Analysis tool for estimating the likelihood that a binary contains compressed or encrypted bytes
Dataset of packed PE samples
A micro JSON REST Web client based on MicroWebCli for MicroPython (used on Pycom modules & ESP32)
Packing detection tool for PE files
A simple many-rules to many-files YARA scanner for incident response or malware zoos.
Deterministic quality scorer for AI agent instruction files — 8-dimension scoring with security, multi-format (SKILL.md, CLAUDE.md, .cursorrules, AGENTS.md), anti-gaming detection, zero dependencies
Implementation of the packing detection heuristic from the paper "Packed PE File Detection for Malware Forensics" of Han et al.