Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
Free, open-source check for traces of mercenary spyware (Pegasus, Predator, Graphite, Candiru and more) on computers, Android phones and iPhone backups. Double-click apps for Windows, Mac and Linux, in 27 languages.
Loki - Simple IOC and YARA Scanner
- python
- yara
- signature
- scanner
Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android
Security sensor for realtime threat detection and protection
Noriben - Portable, Simple, Malware Analysis Sandbox
A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis
DECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope dynamic Android malware analysis platform. DroidScope is now an extension to DECAF.
- binary-analysis
- taint-analysis
Automatic and platform-independent unpacker for Windows binaries based on emulation
Script to create templates to use with VirtualBox to make vm detection harder
Simple Bash IOC Scanner
Malicious HTTP traffic explorer
WinDBG Anti-RootKit Extension
Yet another static code analyzer for malicious Android applications
Volatility plugin for extracts configuration data of known malware
Sandbox for semi-automatic Javascript malware analysis, deobfuscation and payload extraction. Written for Node.js
- malware-samples
- wscript
- deobfuscation
- angler
Drltrace is a library calls tracer for Windows and Linux applications.
A framework for automated extraction of static and dynamic features from Android applications
- android-malware-detection
- android-analysis
C++ application that uses memory and code hooks to detect packers
VolatilityBot – An automated memory analyzer for malware samples and memory dumps
The Multiplatform Linux Sandbox
Automatic deployment of Cuckoo Sandbox malware lab using Packer and Vagrant
Django application that performs SAST and Malware Analysis for Android APKs
ShowStopper is a tool for helping malware researchers explore and test anti-debug techniques or verify debugger plugins or other solutions that clash with standard anti-debug methods.