Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
Loki - Simple IOC and YARA Scanner
- python
- yara
- signature
- scanner
Malware Configuration And Payload Extraction
Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android
Security sensor for realtime threat detection and protection
FakeNet-NG - Next Generation Dynamic Network Analysis Tool
The repository host gives no description.
Elastic Security detection content for Endpoint
BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.
DRAKVUF Black-box Binary Analysis
Android Unpacker presented at Defcon 22: Android Hacker Protection Level 0
A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis
Malcom - Malware Communications Analyzer
Scan files or process memory for CobaltStrike beacons and parse their configuration
DECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope dynamic Android malware analysis platform. DroidScope is now an extension to DECAF.
- binary-analysis
- taint-analysis
Sandboxed Execution Environment
Automatic and platform-independent unpacker for Windows binaries based on emulation
Script to create templates to use with VirtualBox to make vm detection harder
Simple Bash IOC Scanner
Malicious HTTP traffic explorer
WinDBG Anti-RootKit Extension
PEframe is a open source tool to perform static analysis on Portable Executable malware and malicious MS Office documents.
Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness