56,139 visible repositories in the index
1–24 of 45 · Most stars
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
Program for determining types of files for Windows, Linux and MacOS.
The FLARE team's open-source tool to identify capabilities in executable files.
Free, open-source check for traces of mercenary spyware (Pegasus, Predator, Graphite, Candiru and more) on computers, Android phones and iPhone backups. Double-click apps for Windows, Mac and Linux, in 27 languages.
Free Windows, Mac and Linux cleaner, scanner, and more.
FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
Loki - Simple IOC and YARA Scanner
Malware Configuration And Payload Extraction
Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android
A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis
Malcom - Malware Communications Analyzer
Scan files or process memory for CobaltStrike beacons and parse their configuration
DECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope dynamic Android malware analysis platform. DroidScope is now an extension to DECAF.
Simple Bash IOC Scanner
HaboMalHunter is a sub-project of Habo Malware Analysis System (https://habo.qq.com), which can be used for automated malware analysis and security assessment on the Linux system.
Malicious HTTP traffic explorer
A tool for studying JavaScript malware.
Modular file scanning/analysis framework
Yet another static code analyzer for malicious Android applications
Volatility plugin for extracts configuration data of known malware
Sandbox for semi-automatic Javascript malware analysis, deobfuscation and payload extraction. Written for Node.js
Drltrace is a library calls tracer for Windows and Linux applications.
Limon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators of Linux malware. It allows one to inspect Linux malware before execution, during execution, and after execution (post-mortem analysis) by performing static, dynamic and memory analysis using open source tools
A framework for automated extraction of static and dynamic features from Android applications