Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.
DECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope dynamic Android malware analysis platform. DroidScope is now an extension to DECAF.
- binary-analysis
- taint-analysis
Automatic and platform-independent unpacker for Windows binaries based on emulation
PE-bear (builds only)
- pe-analyzer
- pe-format
- pe-editor
PEframe is a open source tool to perform static analysis on Portable Executable malware and malicious MS Office documents.
Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness
Limon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators of Linux malware. It allows one to inspect Linux malware before execution, during execution, and after execution (post-mortem analysis) by performing static, dynamic and memory analysis using open source tools
DC3 Malware Configuration Parser (DC3-MWCP) is a framework for parsing configuration information from malware. The information extracted from malware includes items such as addresses, passwords, filenames, and mutex names.
VolatilityBot – An automated memory analyzer for malware samples and memory dumps
The Multiplatform Linux Sandbox
Django application that performs SAST and Malware Analysis for Android APKs
Wraps around various tools and provides some additional checks/information to produce a centralized report of a PE file.
Open-source cross-platform defensive spyware, stalkerware and surveillance software detector
Python implementation of the Packed Executable iDentifier (PEiD)
- peid
- peid-signature
- pe-file
- pe-files
Docker image gathering packers and tools for making datasets of packed executables and training machine learning models for packing detection
- docker-image
- executable-packing
- malware-packers
- research-platform
Analysis tool for estimating the likelihood that a binary contains compressed or encrypted bytes
- entropy
- pe-file
- pe-files
- pe-format