Repository Index

Program for determining types of files for Windows, Linux and MacOS.

• debugger
• detect
• unpacker
• disassembler

the fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python&java scripts, device memory extraction, data decryption, and encryption, etc.

• decompiler
• vulnerability-scanners
• malware-analysis
• security-audit

Free Windows, Mac and Linux cleaner, scanner, and more.

• cleaner
• free
• kudu
• scanner

Mobile Edge-Dynamic Unified Security Analysis

• malware
• dynamic-analysis
• frida-snippets
• android-malware

Mac Sai: the open-source Mac cleaner, optimizer, and malware scanner. A free, Apple-notarized alternative to CleanMyMac, built with Swift 6 and SwiftUI.

• appkit
• cleanmymac
• cleanmymac-alternative
• darwin

A repository full of malware samples.

• malware
• malware-samples
• malware-sample
• virus

Script to create templates to use with VirtualBox to make vm detection harder

• virtualbox
• antivm
• sandbox
• malware-analysis

A tool for studying JavaScript malware.

• malware
• malwareanalysis
• nodejs
• es6

Modular file scanning/analysis framework

• python
• analytic-machines
• analysis-framework
• python-script

Sandbox for semi-automatic Javascript malware analysis, deobfuscation and payload extraction. Written for Node.js

• malware-samples
• wscript
• deobfuscation
• angler

DC3 Malware Configuration Parser (DC3-MWCP) is a framework for parsing configuration information from malware. The information extracted from malware includes items such as addresses, passwords, filenames, and mutex names.

• python
• malware-analysis
• automation
• config-dump

Android Malware Sandbox

Scalable Binary Data Extraction in Hadoop

The current repository contains all the scripts needed to build kernel-mode mac-a-mal malicious activity hooking on macOS.

• macos

Based on the Volatility framework, this script will run various plugins as well as create a timeline, or use YARA/ClamAV/VirusTotal to find badness.