47,133 repositories indexed
1–24 of 30 · Most stars
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
Free, open-source check for traces of mercenary spyware (Pegasus, Predator, Graphite, Candiru and more) on computers, Android phones and iPhone backups. Double-click apps for Windows, Mac and Linux, in 27 languages.
FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
Malcom - Malware Communications Analyzer
DECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope dynamic Android malware analysis platform. DroidScope is now an extension to DECAF.
Automatic and platform-independent unpacker for Windows binaries based on emulation
HaboMalHunter is a sub-project of Habo Malware Analysis System (https://habo.qq.com), which can be used for automated malware analysis and security assessment on the Linux system.
Malicious HTTP traffic explorer
WinDBG Anti-RootKit Extension
CuckooDroid - Automated Android Malware Analysis with Cuckoo Sandbox.
Sandbox for semi-automatic Javascript malware analysis, deobfuscation and payload extraction. Written for Node.js
Limon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators of Linux malware. It allows one to inspect Linux malware before execution, during execution, and after execution (post-mortem analysis) by performing static, dynamic and memory analysis using open source tools
A framework for automated extraction of static and dynamic features from Android applications
A Tool for Automatic Analysis of Malware Behavior
DC3 Malware Configuration Parser (DC3-MWCP) is a framework for parsing configuration information from malware. The information extracted from malware includes items such as addresses, passwords, filenames, and mutex names.
C++ application that uses memory and code hooks to detect packers
VolatilityBot – An automated memory analyzer for malware samples and memory dumps
Automatic deployment of Cuckoo Sandbox malware lab using Packer and Vagrant
Wraps around various tools and provides some additional checks/information to produce a centralized report of a PE file.
Automatically exported from code.google.com/p/jsunpack-n
The repository host gives no description.
A Python library and command line tools to provide interactive log visualization.
Automated malware unpacker
Simple framework to extract "actionable" data from Android malware (C&Cs, phone numbers etc.)