Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
the fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python&java scripts, device memory extraction, data decryption, and encryption, etc.
FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
- malware
- deobfuscation
- strings
- flare
Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android
Mac Sai: the open-source Mac cleaner, optimizer, and malware scanner. A free, Apple-notarized alternative to CleanMyMac, built with Swift 6 and SwiftUI.
- appkit
- cleanmymac
- cleanmymac-alternative
- darwin
A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis
Malcom - Malware Communications Analyzer
Yet another static code analyzer for malicious Android applications
Drltrace is a library calls tracer for Windows and Linux applications.
Limon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators of Linux malware. It allows one to inspect Linux malware before execution, during execution, and after execution (post-mortem analysis) by performing static, dynamic and memory analysis using open source tools
A framework for automated extraction of static and dynamic features from Android applications
- android-malware-detection
- android-analysis
A Tool for Automatic Analysis of Malware Behavior
C++ application that uses memory and code hooks to detect packers
Django application that performs SAST and Malware Analysis for Android APKs
Automatically exported from code.google.com/p/jsunpack-n
A modular Python application to pull intelligence about malicious files
Read-only check for traces of the November 2026 NIKKE PC launcher compromise. Windows, Linux (Proton, Steam Deck) and macOS.
An ICAP Server with yara scanner for URL and content.