Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
Program for determining types of files for Windows, Linux and MacOS.
Repository of yara rules
FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
DRAKVUF Black-box Binary Analysis
Malcom - Malware Communications Analyzer
Limon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators of Linux malware. It allows one to inspect Linux malware before execution, during execution, and after execution (post-mortem analysis) by performing static, dynamic and memory analysis using open source tools
Android Loadable Kernel Modules - mostly used for reversing and debugging on controlled systems/emulators
- loadable-kernel-modules
- android-lkms
- emulators
- kernel
simple YARA-based IOC scanner
Open-source cross-platform defensive spyware, stalkerware and surveillance software detector
The current repository contains all the scripts needed to build kernel-mode mac-a-mal malicious activity hooking on macOS.
Advanced analysis software for APK payloads created by RATs.
Based on the Volatility framework, this script will run various plugins as well as create a timeline, or use YARA/ClamAV/VirusTotal to find badness.