Repository Index

Program for determining types of files for Windows, Linux and MacOS.

• debugger
• detect
• unpacker
• disassembler

Powerful Python tool to analyze PDF documents

A static analyzer for PE executables.

• malware
• static
• analysis
• pe

DECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope dynamic Android malware analysis platform. DroidScope is now an extension to DECAF.

• binary-analysis
• taint-analysis

Dynamic analysis of Android apps

HaboMalHunter is a sub-project of Habo Malware Analysis System (https://habo.qq.com), which can be used for automated malware analysis and security assessment on the Linux system.

• malware-analysis
• dynamic-analysis
• security
• linux

A tool for studying JavaScript malware.

• malware
• malwareanalysis
• nodejs
• es6

Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness

Volatility plugin for extracts configuration data of known malware

• malware
• volatility
• forensics
• python

Sandbox for semi-automatic Javascript malware analysis, deobfuscation and payload extraction. Written for Node.js

• malware-samples
• wscript
• deobfuscation
• angler

Limon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators of Linux malware. It allows one to inspect Linux malware before execution, during execution, and after execution (post-mortem analysis) by performing static, dynamic and memory analysis using open source tools

Android Malware Sandbox

Django application that performs SAST and Malware Analysis for Android APKs

• android-security
• sast
• malware-analysis
• code-security

simple YARA-based IOC scanner

• yara
• ioc
• security
• incident-response

Open-source cross-platform defensive spyware, stalkerware and surveillance software detector

• anti-surveillance
• dfir
• keylogger-detector
• privacy

Automatically exported from code.google.com/p/jsunpack-n

Reverse engineering tool for virtualization wrappers

A Python library and command line tools to provide interactive log visualization.

• cybersecurity
• investigation
• malware-analysis
• malware-research

Scalable Binary Data Extraction in Hadoop

A modular Python application to pull intelligence about malicious files

• malware-analysis
• malware-research
• investigation
• cybersecurity

Control Flow Graph Scanning for Android

Advanced analysis software for APK payloads created by RATs.

• apk
• remoteaccesstrojan
• reverse-engineering
• aapt

Builds json representation of PDF malware sample

Integrated MALware Simulator and Emulator