47,133 repositories indexed
1–24 of 25 · Most stars
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
Loki - Simple IOC and YARA Scanner
Security sensor for realtime threat detection and protection
BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.
Noriben - Portable, Simple, Malware Analysis Sandbox
Simple Bash IOC Scanner
Limon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators of Linux malware. It allows one to inspect Linux malware before execution, during execution, and after execution (post-mortem analysis) by performing static, dynamic and memory analysis using open source tools
DC3 Malware Configuration Parser (DC3-MWCP) is a framework for parsing configuration information from malware. The information extracted from malware includes items such as addresses, passwords, filenames, and mutex names.
simple YARA-based IOC scanner
Python implementation of the Packed Executable iDentifier (PEiD)
ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits
Simple framework to extract "actionable" data from Android malware (C&Cs, phone numbers etc.)
Docker image gathering packers and tools for making datasets of packed executables and training machine learning models for packing detection
Sublime Malware Research Tool
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.
Analysis tool for estimating the likelihood that a binary contains compressed or encrypted bytes
Based on the Volatility framework, this script will run various plugins as well as create a timeline, or use YARA/ClamAV/VirusTotal to find badness.
A simple many-rules to many-files YARA scanner for incident response or malware zoos.
Yet another implementation of PEiD with yara
Integrated MALware Simulator and Emulator
The repository host gives no description.
Implementation of the packing detection heuristic from the paper "Packed PE File Detection for Malware Forensics" of Han et al.
A Single Library Parser to extract meta information,static analysis and detect macros within the files.
A simple tool to organise large malicious/benign files into a organised Structure.