Repository Index

The pattern matching swiss knife

Free, open-source check for traces of mercenary spyware (Pegasus, Predator, Graphite, Candiru and more) on computers, Android phones and iPhone backups. Double-click apps for Windows, Mac and Linux, in 27 languages.

Loki - Simple IOC and YARA Scanner

• python
• yara
• signature
• scanner

Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android

• android
• antivirus
• machine-learning
• malware-detection

FakeNet-NG - Next Generation Dynamic Network Analysis Tool

• fakenet-ng
• traffic-redirection
• malware-analysis
• mandiant-flare

BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.

• security
• yara
• serverless
• terraform

DRAKVUF Black-box Binary Analysis

• malware-analysis
• virtualization
• xen
• introspection

A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis

• mobile-security
• android
• malware-analyzer
• penetration-testing

Malcom - Malware Communications Analyzer

• malware
• network-traffic
• pcap
• threat-intelligence

Scan files or process memory for CobaltStrike beacons and parse their configuration

Sandboxed Execution Environment

• python
• sandbox
• malware-analysis
• malware-research

Script to create templates to use with VirtualBox to make vm detection harder

• virtualbox
• antivm
• sandbox
• malware-analysis

Simple Bash IOC Scanner

A machine learning tool that ranks strings based on their relevance for malware analysis.

• machine-learning
• fireeye-flare
• strings
• malware-analysis

Modular file scanning/analysis framework

• python
• analytic-machines
• analysis-framework
• python-script

Incident Response - Fast suspicious file finder

• dfir
• investigation
• incident-response
• threat-hunting

Django application that performs SAST and Malware Analysis for Android APKs

• android-security
• sast
• malware-analysis
• code-security

Open-source cross-platform defensive spyware, stalkerware and surveillance software detector

• anti-surveillance
• dfir
• keylogger-detector
• privacy

Reverse engineering tool for virtualization wrappers

Ragpicker is a Plugin based malware crawler with pre-analysis and reporting functionalities. Use this tool if you are testing antivirus products, collecting malware for another analyzer/zoo.

Based on the Volatility framework, this script will run various plugins as well as create a timeline, or use YARA/ClamAV/VirusTotal to find badness.

Android Malware Behavior Deleter

• android
• malware
• antivirus
• editor