Repository Index

Free Windows, Mac and Linux cleaner, scanner, and more.

• cleaner
• free
• kudu
• scanner

Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).

• pe-format
• hooking
• pe-dumper
• pe-analyzer

Automatic and platform-independent unpacker for Windows binaries based on emulation

• reverse-engineering
• unpacker
• pefile
• windows

WinDBG Anti-RootKit Extension

• kernel-mode
• c-plus-plus
• malware
• malware-analysis

Modular file scanning/analysis framework

• python
• analytic-machines
• analysis-framework
• python-script

Limon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators of Linux malware. It allows one to inspect Linux malware before execution, during execution, and after execution (post-mortem analysis) by performing static, dynamic and memory analysis using open source tools

DC3 Malware Configuration Parser (DC3-MWCP) is a framework for parsing configuration information from malware. The information extracted from malware includes items such as addresses, passwords, filenames, and mutex names.

• python
• malware-analysis
• automation
• config-dump

VolatilityBot – An automated memory analyzer for malware samples and memory dumps

Android Loadable Kernel Modules - mostly used for reversing and debugging on controlled systems/emulators

• loadable-kernel-modules
• android-lkms
• emulators
• kernel

Wraps around various tools and provides some additional checks/information to produce a centralized report of a PE file.

A modular Python application to pull intelligence about malicious files

• malware-analysis
• malware-research
• investigation
• cybersecurity

Ragpicker is a Plugin based malware crawler with pre-analysis and reporting functionalities. Use this tool if you are testing antivirus products, collecting malware for another analyzer/zoo.