Security sensor for realtime threat detection and protection
Repository Index
47,133 repositories indexed
25–48 of 128 · Most stars
LKM rootkit for Linux Kernels 2.6.x-7.x (x86/x86_64 and ARM/ARM64)
- rootkit
- lkm-rootkit
- c
- kernel
FakeNet-NG - Next Generation Dynamic Network Analysis Tool
- fakenet-ng
- traffic-redirection
- malware-analysis
- mandiant-flare
Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte
- incident-response
- malware-detection
- persistence
- powershell
Indicators of Compromises (IOC) of our various investigations
- ioc
- malware
- yara
- misp
yarGen is a generator for YARA rules
- python
- yara
- malware
- malware-research
The repository host gives no description.
- defcon
- android
- blackhat
- blackbox
BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.
ThePhish: an automated phishing email analysis tool
Noriben - Portable, Simple, Malware Analysis Sandbox
DRAKVUF Black-box Binary Analysis
- malware-analysis
- virtualization
- xen
- introspection
Collection of android malware samples
A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis
- mobile-security
- android
- malware-analyzer
- penetration-testing
Malcom - Malware Communications Analyzer
- malware
- network-traffic
- pcap
- threat-intelligence
A static analyzer for PE executables.
- malware
- static
- analysis
- pe
IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.
- cybersecurity
- threat
- ioc
- malware
TranslatedDeepSeek Harness integrated armor-breaking security analysis plugin: aggregating all domains of Android · Web · Native · Protocol · Malware · AI-Security (9 bundles + 1 preset)
30 different honeypots in one package! (dhcp, dns, elastic, ftp, http proxy, https proxy, http, https, imap, ipp, irc, ldap, memcache, mssql, mysql, ntp, oracle, pjl, pop3, postgres, rdp, redis, sip, smb, smtp, snmp, socks5, ssh, telnet, vnc)
- pypi
- monitoring-tool
- network-analysis
- malware-analysis
Extract and aggregate threat intelligence.
- ioc
- indicators-of-compromise
- threatintel
- threat-intelligence
Dynamic unpacker based on PE-sieve
- libpeconv
- pe-sieve
- memory-forensics
- malware-unpacker
DECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope dynamic Android malware analysis platform. DroidScope is now an extension to DECAF.
- binary-analysis
- taint-analysis
Sandboxed Execution Environment
The PE file analysis toolkit
- binary-analysis
- reverse-engineering
- pe-file
- portable-executable
Script to create templates to use with VirtualBox to make vm detection harder
- virtualbox
- antivm
- sandbox
- malware-analysis