The FLARE team's open-source tool to identify capabilities in executable files.
- malware-analysis
- reverse-engineering
- binary-analysis
- threat-intelligence
47,133 repositories indexed
1–17 of 17 · Most stars
The FLARE team's open-source tool to identify capabilities in executable files.
Free, open-source check for traces of mercenary spyware (Pegasus, Predator, Graphite, Candiru and more) on computers, Android phones and iPhone backups. Double-click apps for Windows, Mac and Linux, in 27 languages.
Security sensor for realtime threat detection and protection
Elastic Security detection content for Endpoint
DRAKVUF Black-box Binary Analysis
Interactive Delphi Reconstructor
Malcom - Malware Communications Analyzer
DECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope dynamic Android malware analysis platform. DroidScope is now an extension to DECAF.
A pintool in order to unpack malware
ShowStopper is a tool for helping malware researchers explore and test anti-debug techniques or verify debugger plugins or other solutions that clash with standard anti-debug methods.
Python implementation of the Packed Executable iDentifier (PEiD)
A Python library and command line tools to provide interactive log visualization.
A modular Python application to pull intelligence about malicious files
YALIH (Yet Another Low Interaction Honeyclient) is a low Interaction Client honeypot designed to detect malicious websites through signature, anomaly and pattern matching techniques
Analysis tool for estimating the likelihood that a binary contains compressed or encrypted bytes
Packing detection tool for PE files
Integrated MALware Simulator and Emulator