Malware Configuration And Payload Extraction
- configs
- debugging-tools
- malware
- malware-analysis
Repository Index
47,133 repositories indexed
1–15 of 15 · Most stars
Dynamic unpacker based on PE-sieve
- libpeconv
- pe-sieve
- memory-forensics
- malware-unpacker
PE-bear (builds only)
- pe-analyzer
- pe-format
- pe-editor
Modular file scanning/analysis framework
- python
- analytic-machines
- analysis-framework
- python-script
Sandbox for semi-automatic Javascript malware analysis, deobfuscation and payload extraction. Written for Node.js
- malware-samples
- wscript
- deobfuscation
- angler
DC3 Malware Configuration Parser (DC3-MWCP) is a framework for parsing configuration information from malware. The information extracted from malware includes items such as addresses, passwords, filenames, and mutex names.
- python
- malware-analysis
- automation
- config-dump
Modified edition of cuckoo
Android Loadable Kernel Modules - mostly used for reversing and debugging on controlled systems/emulators
- loadable-kernel-modules
- android-lkms
- emulators
- kernel
Android Mobile Device Hardening
- forensic
- security
- hardening
- android-security
Wraps around various tools and provides some additional checks/information to produce a centralized report of a PE file.
Scalable Binary Data Extraction in Hadoop
Advanced analysis software for APK payloads created by RATs.
- apk
- remoteaccesstrojan
- reverse-engineering
- aapt
An ICAP Server with yara scanner for URL and content.
- python
- icap-server
- yara
- malware-analysis
Based on the Volatility framework, this script will run various plugins as well as create a timeline, or use YARA/ClamAV/VirusTotal to find badness.
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.