Repository Index

Malware Configuration And Payload Extraction

• configs
• debugging-tools
• malware
• malware-analysis

Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android

• android
• antivirus
• machine-learning
• malware-detection

Security sensor for realtime threat detection and protection

• windows
• windows-kernel
• instrumentation
• security

FakeNet-NG - Next Generation Dynamic Network Analysis Tool

• fakenet-ng
• traffic-redirection
• malware-analysis
• mandiant-flare

The repository host gives no description.

• defcon
• android
• blackhat
• blackbox

Elastic Security detection content for Endpoint

BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.

• security
• yara
• serverless
• terraform

DRAKVUF Black-box Binary Analysis

• malware-analysis
• virtualization
• xen
• introspection

Android Unpacker presented at Defcon 22: Android Hacker Protection Level 0

• android-unpacker
• gdb
• qemu
• reverse-engineering

Interactive Delphi Reconstructor

Script to create templates to use with VirtualBox to make vm detection harder

• virtualbox
• antivm
• sandbox
• malware-analysis

WinDBG Anti-RootKit Extension

• kernel-mode
• c-plus-plus
• malware
• malware-analysis

Sandbox for semi-automatic Javascript malware analysis, deobfuscation and payload extraction. Written for Node.js

• malware-samples
• wscript
• deobfuscation
• angler

Drltrace is a library calls tracer for Windows and Linux applications.

• dbi
• malware-analysis
• malware-detection
• api-trace

A framework for automated extraction of static and dynamic features from Android applications

• android-malware-detection
• android-analysis

Android Mobile Device Hardening

• forensic
• security
• hardening
• android-security

Malware Analysis Tool using Function Level Fuzzy Hashing

x86 emulation and shellcode detection

Python implementation of the Packed Executable iDentifier (PEiD)

• peid
• peid-signature
• pe-file
• pe-files

A Python library and command line tools to provide interactive log visualization.

• cybersecurity
• investigation
• malware-analysis
• malware-research

Scalable Binary Data Extraction in Hadoop

BluePill: Neutralizing Anti-Analysis Behavior in Malware Dissection (Black Hat Europe 2019, IEEE TIFS 2020)

• malware-analysis
• reverse-engineering
• debugger
• malware

Simple framework to extract "actionable" data from Android malware (C&Cs, phone numbers etc.)

Ragpicker is a Plugin based malware crawler with pre-analysis and reporting functionalities. Use this tool if you are testing antivirus products, collecting malware for another analyzer/zoo.