47,133 repositories indexed
1–12 of 12 · Most stars
DECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope dynamic Android malware analysis platform. DroidScope is now an extension to DECAF.
Automatic and platform-independent unpacker for Windows binaries based on emulation
Script to create templates to use with VirtualBox to make vm detection harder
Volatility plugin for extracts configuration data of known malware
VolatilityBot – An automated memory analyzer for malware samples and memory dumps
The Multiplatform Linux Sandbox
Android Loadable Kernel Modules - mostly used for reversing and debugging on controlled systems/emulators
Open-source cross-platform defensive spyware, stalkerware and surveillance software detector
x86 emulation and shellcode detection
Docker image gathering packers and tools for making datasets of packed executables and training machine learning models for packing detection
Based on the Volatility framework, this script will run various plugins as well as create a timeline, or use YARA/ClamAV/VirusTotal to find badness.
Integrated MALware Simulator and Emulator