Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
Malware Configuration And Payload Extraction
Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android
Security sensor for realtime threat detection and protection
FakeNet-NG - Next Generation Dynamic Network Analysis Tool
The repository host gives no description.
Elastic Security detection content for Endpoint
BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.
DRAKVUF Black-box Binary Analysis
Android Unpacker presented at Defcon 22: Android Hacker Protection Level 0
A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis
Malcom - Malware Communications Analyzer
Scan files or process memory for CobaltStrike beacons and parse their configuration
DECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope dynamic Android malware analysis platform. DroidScope is now an extension to DECAF.
- binary-analysis
- taint-analysis
Sandboxed Execution Environment
Automatic and platform-independent unpacker for Windows binaries based on emulation
Script to create templates to use with VirtualBox to make vm detection harder
WinDBG Anti-RootKit Extension
Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness
Yet another static code analyzer for malicious Android applications
Volatility plugin for extracts configuration data of known malware
Sandbox for semi-automatic Javascript malware analysis, deobfuscation and payload extraction. Written for Node.js
- malware-samples
- wscript
- deobfuscation
- angler
Drltrace is a library calls tracer for Windows and Linux applications.