Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
Program for determining types of files for Windows, Linux and MacOS.
The FLARE team's open-source tool to identify capabilities in executable files.
the fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python&java scripts, device memory extraction, data decryption, and encryption, etc.
Free, offline checks for known mercenary spyware on Windows, Mac, Linux, iPhone and Android - plus the doors left open, suspicious links, emails, files and QR codes, your accounts, home network and nearby trackers. Apps with a window, 27 languages. Nothing leaves your computer.
Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, IPInfo, Shodan, AbuseIPDB, GreyNoise, URLScan.io, Whois/RDAP, NIST, and VulnCheck. Supports LLM enrichment, IOC extraction, YARA scanning, and Android analysis.
- malware
- virustotal
- malpedia
- urlhaus
Portable Executable reversing tool with a friendly GUI
- pe-file
- pe-format
- pe-analyzer
- pe-analyzer-gui
Malware Configuration And Payload Extraction
oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.
本程序旨在为安全应急响应人员对Linux主机排查时提供便利,实现主机侧Checklist的自动全面化检测,根据检测结果自动数据聚合,进行黑客攻击路径溯源。
Mobile Edge-Dynamic Unified Security Analysis
- malware
- dynamic-analysis
- frida-snippets
- android-malware
Detection tools for the June 2026 atomic-lockfile AUR supply-chain attack. Consolidated from community Gists.
Mac Sai: the open-source Mac cleaner, optimizer, and malware scanner. A free, Apple-notarized alternative to CleanMyMac, built with Swift 6 and SwiftUI.
- appkit
- cleanmymac
- cleanmymac-alternative
- darwin
All-in-One malware analysis tool.
Windows tool for dumping malware PE files from memory back to disk for analysis.
Maybe the most detailed analysis of pdd backdoors
A repository full of malware samples.
- malware
- malware-samples
- malware-sample
- virus
A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis
Scan files or process memory for CobaltStrike beacons and parse their configuration
Automatic and platform-independent unpacker for Windows binaries based on emulation
PE-bear (builds only)
- pe-analyzer
- pe-format
- pe-editor
Modular file scanning/analysis framework
- python
- analytic-machines
- analysis-framework
- python-script
Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness
Volatility plugin for extracts configuration data of known malware