Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
Program for determining types of files for Windows, Linux and MacOS.
the fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python&java scripts, device memory extraction, data decryption, and encryption, etc.
IntelOwl: manage your Threat Intelligence at scale
FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
- malware
- deobfuscation
- strings
- flare
Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android
Mobile Edge-Dynamic Unified Security Analysis
- malware
- dynamic-analysis
- frida-snippets
- android-malware
A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis
Scan files or process memory for CobaltStrike beacons and parse their configuration
Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness
Sandbox for semi-automatic Javascript malware analysis, deobfuscation and payload extraction. Written for Node.js
- malware-samples
- wscript
- deobfuscation
- angler
Django application that performs SAST and Malware Analysis for Android APKs
Android Mobile Device Hardening
- forensic
- security
- hardening
- android-security
simple YARA-based IOC scanner
Reverse engineering tool for virtualization wrappers
A warehouse for your malware
Ragpicker is a Plugin based malware crawler with pre-analysis and reporting functionalities. Use this tool if you are testing antivirus products, collecting malware for another analyzer/zoo.
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.
Builds json representation of PDF malware sample
Advanced eBPF-driven Digital Forensics and Incident Response (DFIR) framework for live Golang malware analysis, threat hunting, and observability.