Repository Index

Program for determining types of files for Windows, Linux and MacOS.

• debugger
• detect
• unpacker
• disassembler

Loki - Simple IOC and YARA Scanner

• python
• yara
• signature
• scanner

The repository host gives no description.

• defcon
• android
• blackhat
• blackbox

Android Unpacker presented at Defcon 22: Android Hacker Protection Level 0

• android-unpacker
• gdb
• qemu
• reverse-engineering

Dynamic unpacker based on PE-sieve

• libpeconv
• pe-sieve
• memory-forensics
• malware-unpacker

Script to create templates to use with VirtualBox to make vm detection harder

• virtualbox
• antivm
• sandbox
• malware-analysis

PE-bear (builds only)

• pe-analyzer
• pe-format
• pe-editor

A machine learning tool that ranks strings based on their relevance for malware analysis.

• machine-learning
• fireeye-flare
• strings
• malware-analysis

HaboMalHunter is a sub-project of Habo Malware Analysis System (https://habo.qq.com), which can be used for automated malware analysis and security assessment on the Linux system.

• malware-analysis
• dynamic-analysis
• security
• linux

A Tool for Automatic Analysis of Malware Behavior

• machine-learning
• clustering
• classification
• malware-analysis

C++ application that uses memory and code hooks to detect packers

A pintool in order to unpack malware

Django application that performs SAST and Malware Analysis for Android APKs

• android-security
• sast
• malware-analysis
• code-security

ShowStopper is a tool for helping malware researchers explore and test anti-debug techniques or verify debugger plugins or other solutions that clash with standard anti-debug methods.

• research
• anti-debug
• malware

Android Mobile Device Hardening

• forensic
• security
• hardening
• android-security

Malware Analysis Tool using Function Level Fuzzy Hashing

simple YARA-based IOC scanner

• yara
• ioc
• security
• incident-response

ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits

• linux
• security
• kernel
• rootkit

Scalable Binary Data Extraction in Hadoop

BluePill: Neutralizing Anti-Analysis Behavior in Malware Dissection (Black Hat Europe 2019, IEEE TIFS 2020)

• malware-analysis
• reverse-engineering
• debugger
• malware

Sample staging & detonation utility to be used in combination with Cuckoo Sandbox.

An ICAP Server with yara scanner for URL and content.

• python
• icap-server
• yara
• malware-analysis

Analysis tool for estimating the likelihood that a binary contains compressed or encrypted bytes

• entropy
• pe-file
• pe-files
• pe-format

Android Malware Behavior Deleter

• android
• malware
• antivirus
• editor