Automatic and platform-independent unpacker for Windows binaries based on emulation
- reverse-engineering
- unpacker
- pefile
- windows
Repository Index
47,133 repositories indexed
97–120 of 188 · Most stars
PE-bear (builds only)
- pe-analyzer
- pe-format
- pe-editor
HaboMalHunter is a sub-project of Habo Malware Analysis System (https://habo.qq.com), which can be used for automated malware analysis and security assessment on the Linux system.
- malware-analysis
- dynamic-analysis
- security
- linux
CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.
An opinionated production-ready SQL-/Swagger-first RESTful JSON API written in Go, highly integrated with VSCode DevContainers by allaboutapps.
- golang-development
- vscode-devcontainers
- golang
- go
Automated Attack Simulation in the Cloud, complete with detection use cases.
Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.
- security-tools
- security
- attestation
- verification
Go-Guardian is a golang library that provides a simple, clean, and idiomatic way to create powerful modern API and web authentication.
CuckooDroid - Automated Android Malware Analysis with Cuckoo Sandbox.
🔐 An SSL library for configuring http client or server. Rich with features such as hot reloading ssl and trusting additional certificates during runtime, combining multiple keystores, loading pem files and os/jdk certificates, logging certificate information during ssl handshake, bypassing ssl configuration from other libraries and more
The Ultimate Boilerplate for Products.
- boilerplate
- meteor
- meteorjs
- nodejs
Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness
honeyλ - a simple, serverless application designed to create and monitor fake HTTP endpoints (i.e. URL honeytokens) automatically, on top of AWS Lambda and Amazon API Gateway
OWASP Honeypot, Automated Deception Framework.
- owasp
- honeypot
- honeynet
- deception
Tool to export Juice Shop challenges and hints in data format compatible with CTFd, RootTheBox or FBCTF
- owasp
- ctf
- ctfd
- application-security
Sandbox for semi-automatic Javascript malware analysis, deobfuscation and payload extraction. Written for Node.js
- malware-samples
- wscript
- deobfuscation
- angler
Limon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators of Linux malware. It allows one to inspect Linux malware before execution, during execution, and after execution (post-mortem analysis) by performing static, dynamic and memory analysis using open source tools
An automated Themida / Code Virtualizer / WinLicense (v3.0-v4) unpacker and dump fixer tool
A framework for automated extraction of static and dynamic features from Android applications
- android-malware-detection
- android-analysis
CrackerJack / Hashcat Web Interface / Context Information Security
A Tool for Automatic Analysis of Malware Behavior
- machine-learning
- clustering
- classification
- malware-analysis
Operational information regarding the 2026 php2shell vulnerabilities
DC3 Malware Configuration Parser (DC3-MWCP) is a framework for parsing configuration information from malware. The information extracted from malware includes items such as addresses, passwords, filenames, and mutex names.
- python
- malware-analysis
- automation
- config-dump
Cryptography Educational Foundations