A Python RESTful API framework for online malware analysis and threat intelligence services.
Repository Index
47,133 repositories indexed
73–96 of 128 · Most stars
Astral-PE is a low-level mutator (Headers/EP obfuscator) for native Windows PE files (x32/x64)
- cybersecurity
- hacktoberfest
- low-level
- mutator
DC3 Malware Configuration Parser (DC3-MWCP) is a framework for parsing configuration information from malware. The information extracted from malware includes items such as addresses, passwords, filenames, and mutex names.
- python
- malware-analysis
- automation
- config-dump
Android Malware Sandbox
Python telnet honeypot for catching botnet binaries
🚀AutoRuns is a PowerShell module that will help do live incident response and enumerate autoruns artifacts that may be used by legitimate programs as well as malware to achieve persistence.
VolatilityBot – An automated memory analyzer for malware samples and memory dumps
Create adversarial attacks against machine learning Windows malware detectors
- adversarial-machine-learning
- infosec
- python
- attack
A pintool in order to unpack malware
Automatic deployment of Cuckoo Sandbox malware lab using Packer and Vagrant
Django application that performs SAST and Malware Analysis for Android APKs
- android-security
- sast
- malware-analysis
- code-security
ShowStopper is a tool for helping malware researchers explore and test anti-debug techniques or verify debugger plugins or other solutions that clash with standard anti-debug methods.
Android Mobile Device Hardening
- forensic
- security
- hardening
- android-security
BINNY: an open source agent harness for reverse engineering. Plug in any model, or a local one.
- ghidra
- llm-agent
- malware-analysis
- ollama
A SDK for the creation of analysis tools without obtaining app source code in order to profile runtime performance, examine code coverage, and track high-risk behaviors of a given app on Android 5.0 and above.
- binary-instrument
- android
- malware-research
- reverse-engineering
A malware/botnet analysis framework written in Ruby.
Malware Analysis Tool using Function Level Fuzzy Hashing
Tools for the Computer Incident Response Team :computer:
- dfir
- python
- carbonblack
- malware-analysis
Python implementation of the Packed Executable iDentifier (PEiD)
- peid
- peid-signature
- pe-file
- pe-files
A Python library and command line tools to provide interactive log visualization.
- cybersecurity
- investigation
- malware-analysis
- malware-research
Minimal, consistent Python API for building integrations with malware sandboxes.
A warehouse for your malware
Randomly changes Win32/64 PE Files for 'safer' uploading to malware and sandbox sites.
BluePill: Neutralizing Anti-Analysis Behavior in Malware Dissection (Black Hat Europe 2019, IEEE TIFS 2020)