Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
Program for determining types of files for Windows, Linux and MacOS.
The FLARE team's open-source tool to identify capabilities in executable files.
Security sensor for realtime threat detection and protection
BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.
DRAKVUF Black-box Binary Analysis
A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis
DECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope dynamic Android malware analysis platform. DroidScope is now an extension to DECAF.
- binary-analysis
- taint-analysis
Automatic and platform-independent unpacker for Windows binaries based on emulation
Drltrace is a library calls tracer for Windows and Linux applications.
Django application that performs SAST and Malware Analysis for Android APKs
Android Mobile Device Hardening
- forensic
- security
- hardening
- android-security
Python implementation of the Packed Executable iDentifier (PEiD)
- peid
- peid-signature
- pe-file
- pe-files
Scalable Binary Data Extraction in Hadoop
Sample staging & detonation utility to be used in combination with Cuckoo Sandbox.
Docker image gathering packers and tools for making datasets of packed executables and training machine learning models for packing detection
- docker-image
- executable-packing
- malware-packers
- research-platform
Analysis tool for estimating the likelihood that a binary contains compressed or encrypted bytes
- entropy
- pe-file
- pe-files
- pe-format
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.
Packing detection tool for PE files
- detector
- pe-file
- pe-format
- peid