Repository Index

VolatilityBot – An automated memory analyzer for malware samples and memory dumps

Create adversarial attacks against machine learning Windows malware detectors

• adversarial-machine-learning
• infosec
• python
• attack

A pintool in order to unpack malware

Automatic deployment of Cuckoo Sandbox malware lab using Packer and Vagrant

Demos of various (also non standard) persistence methods used by malware

Django application that performs SAST and Malware Analysis for Android APKs

• android-security
• sast
• malware-analysis
• code-security

ShowStopper is a tool for helping malware researchers explore and test anti-debug techniques or verify debugger plugins or other solutions that clash with standard anti-debug methods.

• research
• anti-debug
• malware

Android Mobile Device Hardening

• forensic
• security
• hardening
• android-security

BINNY: an open source agent harness for reverse engineering. Plug in any model, or a local one.

• ghidra
• llm-agent
• malware-analysis
• ollama

A SDK for the creation of analysis tools without obtaining app source code in order to profile runtime performance, examine code coverage, and track high-risk behaviors of a given app on Android 5.0 and above.

• binary-instrument
• android
• malware-research
• reverse-engineering

A malware/botnet analysis framework written in Ruby.

Malware Analysis Tool using Function Level Fuzzy Hashing

Collection of malware persistence and hunting information. Be a persistent persistence hunter!

• threat-hunting
• threat-intelligence
• persistence
• malware-persistence

Tools for the Computer Incident Response Team :computer:

• dfir
• python
• carbonblack
• malware-analysis

Python implementation of the Packed Executable iDentifier (PEiD)

• peid
• peid-signature
• pe-file
• pe-files

A Python library and command line tools to provide interactive log visualization.

• cybersecurity
• investigation
• malware-analysis
• malware-research

Minimal, consistent Python API for building integrations with malware sandboxes.

• sandbox
• malware-analysis
• api-client
• library

A warehouse for your malware

Randomly changes Win32/64 PE Files for 'safer' uploading to malware and sandbox sites.

BluePill: Neutralizing Anti-Analysis Behavior in Malware Dissection (Black Hat Europe 2019, IEEE TIFS 2020)

• malware-analysis
• reverse-engineering
• debugger
• malware

A modular Python application to pull intelligence about malicious files

• malware-analysis
• malware-research
• investigation
• cybersecurity

Automated malware unpacker

Detect and log CVE-2019-19781 scan and exploitation attempts.

Yet Another Linux Virtual Machine for Mobile Application Pentesting and Mobile Malware Analysis