Program for determining types of files for Windows, Linux and MacOS.
- debugger
- detect
- unpacker
- disassembler
Repository Index
47,133 repositories indexed
1–18 of 18 · Most stars
Free, open-source check for traces of mercenary spyware (Pegasus, Predator, Graphite, Candiru and more) on computers, Android phones and iPhone backups. Double-click apps for Windows, Mac and Linux, in 27 languages.
Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android
- android
- antivirus
- machine-learning
- malware-detection
Security sensor for realtime threat detection and protection
Elastic Security detection content for Endpoint
Android Unpacker presented at Defcon 22: Android Hacker Protection Level 0
- android-unpacker
- gdb
- qemu
- reverse-engineering
Scan files or process memory for CobaltStrike beacons and parse their configuration
DECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope dynamic Android malware analysis platform. DroidScope is now an extension to DECAF.
- binary-analysis
- taint-analysis
HaboMalHunter is a sub-project of Habo Malware Analysis System (https://habo.qq.com), which can be used for automated malware analysis and security assessment on the Linux system.
- malware-analysis
- dynamic-analysis
- security
- linux
A tool for studying JavaScript malware.
Limon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators of Linux malware. It allows one to inspect Linux malware before execution, during execution, and after execution (post-mortem analysis) by performing static, dynamic and memory analysis using open source tools
Wraps around various tools and provides some additional checks/information to produce a centralized report of a PE file.
simple YARA-based IOC scanner
- yara
- ioc
- security
- incident-response
Open-source cross-platform defensive spyware, stalkerware and surveillance software detector
A Python library and command line tools to provide interactive log visualization.
- cybersecurity
- investigation
- malware-analysis
- malware-research
ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits
Process HTTP Pcaps With YARA
Ragpicker is a Plugin based malware crawler with pre-analysis and reporting functionalities. Use this tool if you are testing antivirus products, collecting malware for another analyzer/zoo.