An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.
Repository Index
86,076 visible repositories in the index
1–24 of 41 · Most stars
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
- static-analysis
- dynamic-analysis
- mobsf
- android-security
Program for determining types of files for Windows, Linux and MacOS.
- debugger
- detect
- unpacker
- disassembler
ClamAV - Documentation is here: https://docs.clamav.net
- clamav
- gplv2
- antivirus
- open-source
The FLARE team's open-source tool to identify capabilities in executable files.
- malware-analysis
- reverse-engineering
- binary-analysis
- threat-intelligence
Security sensor for realtime threat detection and protection
Mobile Edge-Dynamic Unified Security Analysis
- malware
- dynamic-analysis
- frida-snippets
- android-malware
FakeNet-NG - Next Generation Dynamic Network Analysis Tool
- fakenet-ng
- traffic-redirection
- malware-analysis
- mandiant-flare
Mac Sai: the open-source Mac cleaner, optimizer, and malware scanner. A free, Apple-notarized alternative to CleanMyMac, built with Swift 6 and SwiftUI.
- appkit
- cleanmymac
- cleanmymac-alternative
- darwin
A collection of malware samples caught by several honeypots i manage
- malware
- honeypot
- botnet
- malware-analysis
A repository full of malware samples.
- malware
- malware-samples
- malware-sample
- virus
Multi-engine Linux malware scanner with five detection stages (MD5, HEX pattern, YARA, ClamAV, statistical), real-time inotify monitoring, quarantine, and multi-channel alerting
- bash
- clamav
- inotify
- intrusion-detection
Dynamic unpacker and import fixer for Themida/WinLicense 2.x and 3.x.
- unpacker
- themida
- winlicense
- windows
BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.
- security
- yara
- serverless
- terraform
Dynamic unpacker based on PE-sieve
- libpeconv
- pe-sieve
- memory-forensics
- malware-unpacker
DECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope dynamic Android malware analysis platform. DroidScope is now an extension to DECAF.
- binary-analysis
- taint-analysis
Dynamic analysis of Android apps
HaboMalHunter is a sub-project of Habo Malware Analysis System (https://habo.qq.com), which can be used for automated malware analysis and security assessment on the Linux system.
- malware-analysis
- dynamic-analysis
- security
- linux
PEframe is a open source tool to perform static analysis on Portable Executable malware and malicious MS Office documents.
Modular file scanning/analysis framework
- python
- analytic-machines
- analysis-framework
- python-script
Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.
- blue-team
- detection-engineering
- edr
- endpoint-detection
Sandbox for semi-automatic Javascript malware analysis, deobfuscation and payload extraction. Written for Node.js
- malware-samples
- wscript
- deobfuscation
- angler
Limon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators of Linux malware. It allows one to inspect Linux malware before execution, during execution, and after execution (post-mortem analysis) by performing static, dynamic and memory analysis using open source tools
A framework for automated extraction of static and dynamic features from Android applications
- android-malware-detection
- android-analysis