Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
Program for determining types of files for Windows, Linux and MacOS.
The pattern matching swiss knife
The FLARE team's open-source tool to identify capabilities in executable files.
Free, open-source check for traces of mercenary spyware (Pegasus, Predator, Graphite, Candiru and more) on computers, Android phones and iPhone backups. Double-click apps for Windows, Mac and Linux, in 27 languages.
FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
Loki - Simple IOC and YARA Scanner
- python
- yara
- signature
- scanner
Malware Configuration And Payload Extraction
Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android
Security sensor for realtime threat detection and protection
FakeNet-NG - Next Generation Dynamic Network Analysis Tool
yarGen is a generator for YARA rules
The repository host gives no description.
DRAKVUF Black-box Binary Analysis
Android Unpacker presented at Defcon 22: Android Hacker Protection Level 0
A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis
Malcom - Malware Communications Analyzer
A static analyzer for PE executables.
Scan files or process memory for CobaltStrike beacons and parse their configuration
DECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope dynamic Android malware analysis platform. DroidScope is now an extension to DECAF.
- binary-analysis
- taint-analysis
Sandboxed Execution Environment
Automatic and platform-independent unpacker for Windows binaries based on emulation
Script to create templates to use with VirtualBox to make vm detection harder
PE-bear (builds only)
- pe-analyzer
- pe-format
- pe-editor