Repository Index

An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.

• debugger
• windows
• x64
• disassembler

Program for determining types of files for Windows, Linux and MacOS.

• debugger
• detect
• unpacker
• disassembler

The FLARE team's open-source tool to identify capabilities in executable files.

• malware-analysis
• reverse-engineering
• binary-analysis
• threat-intelligence

Reverse Engineer's Toolkit

• reverse-engineering
• malware-analysis
• windows
• inno-setup

BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.

• security
• yara
• serverless
• terraform

DRAKVUF Black-box Binary Analysis

• malware-analysis
• virtualization
• xen
• introspection

DECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope dynamic Android malware analysis platform. DroidScope is now an extension to DECAF.

• binary-analysis
• taint-analysis

Automatic and platform-independent unpacker for Windows binaries based on emulation

• reverse-engineering
• unpacker
• pefile
• windows

BINNY: an open source agent harness for reverse engineering. Plug in any model, or a local one.

• ghidra
• llm-agent
• malware-analysis
• ollama

Python implementation of the Packed Executable iDentifier (PEiD)

• peid
• peid-signature
• pe-file
• pe-files

Scalable Binary Data Extraction in Hadoop

Sample staging & detonation utility to be used in combination with Cuckoo Sandbox.

Docker image gathering packers and tools for making datasets of packed executables and training machine learning models for packing detection

• docker-image
• executable-packing
• malware-packers
• research-platform

Analysis tool for estimating the likelihood that a binary contains compressed or encrypted bytes

• entropy
• pe-file
• pe-files
• pe-format

Packing detection tool for PE files

• detector
• pe-file
• pe-format
• peid

Yet another implementation of PEiD with yara

• binary-analysis
• yara
• yara-rules
• peid

Implementation of the packing detection heuristic from the paper "Packed PE File Detection for Malware Forensics" of Han et al.

• binary-analysis
• entropy
• entrypoint
• executable-packing