An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.
Repository Index
73,362 visible repositories in the index
1–24 of 44 · Most stars
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
- static-analysis
- dynamic-analysis
- mobsf
- android-security
Program for determining types of files for Windows, Linux and MacOS.
- debugger
- detect
- unpacker
- disassembler
ClamAV - Documentation is here: https://docs.clamav.net
- clamav
- gplv2
- antivirus
- open-source
The FLARE team's open-source tool to identify capabilities in executable files.
- malware-analysis
- reverse-engineering
- binary-analysis
- threat-intelligence
Reverse Engineer's Toolkit
- reverse-engineering
- malware-analysis
- windows
- inno-setup
the fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python&java scripts, device memory extraction, data decryption, and encryption, etc.
- decompiler
- vulnerability-scanners
- malware-analysis
- security-audit
IntelOwl: manage your Threat Intelligence at scale
- security-tools
- python
- threat-intelligence
- ioc
Free Windows, Mac and Linux cleaner, scanner, and more.
- cleaner
- free
- kudu
- scanner
Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, IPInfo, Shodan, AbuseIPDB, GreyNoise, URLScan.io, Whois/RDAP, NIST, and VulnCheck. Supports LLM enrichment, IOC extraction, YARA scanning, and Android analysis.
- malware
- virustotal
- malpedia
- urlhaus
Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).
- pe-format
- hooking
- pe-dumper
- pe-analyzer
oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.
- python
- python-library
- olefile
- malware-analysis
Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android
- android
- antivirus
- machine-learning
- malware-detection
Security sensor for realtime threat detection and protection
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
- pe-sieve
- anti-malware
- malware-analysis
- malware-detection
Mobile Edge-Dynamic Unified Security Analysis
- malware
- dynamic-analysis
- frida-snippets
- android-malware
Elastic Security detection content for Endpoint
Powerful Python tool to analyze PDF documents
Android Unpacker presented at Defcon 22: Android Hacker Protection Level 0
- android-unpacker
- gdb
- qemu
- reverse-engineering
Sandboxed Execution Environment
Automatic and platform-independent unpacker for Windows binaries based on emulation
- reverse-engineering
- unpacker
- pefile
- windows
HaboMalHunter is a sub-project of Habo Malware Analysis System (https://habo.qq.com), which can be used for automated malware analysis and security assessment on the Linux system.
- malware-analysis
- dynamic-analysis
- security
- linux
PEframe is a open source tool to perform static analysis on Portable Executable malware and malicious MS Office documents.
Endpoint detection for Windows, Linux, and macOS. Sigma, YARA, and IOC rules on native telemetry. Written in Rust. No cloud account required.
- blue-team
- detection-engineering
- edr
- endpoint-detection