78,351 visible repositories in the index
1–24 of 34 · Most stars
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
The FLARE team's open-source tool to identify capabilities in executable files.
the fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python&java scripts, device memory extraction, data decryption, and encryption, etc.
Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, IPInfo, Shodan, AbuseIPDB, GreyNoise, URLScan.io, Whois/RDAP, NIST, and VulnCheck. Supports LLM enrichment, IOC extraction, YARA scanning, and Android analysis.
Portable Executable reversing tool with a friendly GUI
YARA signature and IOC database for my scanners and tools
One of a few malware collections on the GitHub.
本程序旨在为安全应急响应人员对Linux主机排查时提供便利，实现主机侧Checklist的自动全面化检测，根据检测结果自动数据聚合，进行黑客攻击路径溯源。
Security sensor for realtime threat detection and protection
A collection of malware samples caught by several honeypots i manage
Noriben - Portable, Simple, Malware Analysis Sandbox
A static analyzer for PE executables.
DECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope dynamic Android malware analysis platform. DroidScope is now an extension to DECAF.
HaboMalHunter is a sub-project of Habo Malware Analysis System (https://habo.qq.com), which can be used for automated malware analysis and security assessment on the Linux system.
PEframe is a open source tool to perform static analysis on Portable Executable malware and malicious MS Office documents.
Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness
AVClass malware labeling tool
C++ application that uses memory and code hooks to detect packers
Automatic deployment of Cuckoo Sandbox malware lab using Packer and Vagrant
Android Loadable Kernel Modules - mostly used for reversing and debugging on controlled systems/emulators
Python implementation of the Packed Executable iDentifier (PEiD)
Reverse engineering tool for virtualization wrappers
Scalable Binary Data Extraction in Hadoop
BluePill: Neutralizing Anti-Analysis Behavior in Malware Dissection (Black Hat Europe 2019, IEEE TIFS 2020)