Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
The FLARE team's open-source tool to identify capabilities in executable files.
the fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python&java scripts, device memory extraction, data decryption, and encryption, etc.
IntelOwl: manage your Threat Intelligence at scale
Free, open-source check for traces of mercenary spyware (Pegasus, Predator, Graphite, Candiru and more) on computers, Android phones and iPhone backups. Double-click apps for Windows, Mac and Linux, in 27 languages.
FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
- malware
- deobfuscation
- strings
- flare
Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, IPInfo, Shodan, AbuseIPDB, GreyNoise, URLScan.io, Whois/RDAP, NIST, and VulnCheck. Supports LLM enrichment, IOC extraction, YARA scanning, and Android analysis.
- malware
- virustotal
- malpedia
- urlhaus
Loki - Simple IOC and YARA Scanner
- python
- yara
- signature
- scanner
Malware Configuration And Payload Extraction
oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.
One of a few malware collections on the GitHub.
本程序旨在为安全应急响应人员对Linux主机排查时提供便利,实现主机侧Checklist的自动全面化检测,根据检测结果自动数据聚合,进行黑客攻击路径溯源。
Mobile Edge-Dynamic Unified Security Analysis
- malware
- dynamic-analysis
- frida-snippets
- android-malware
FakeNet-NG - Next Generation Dynamic Network Analysis Tool
Detection tools for the June 2026 atomic-lockfile AUR supply-chain attack. Consolidated from community Gists.
Windows kernel and user mode emulation.
All-in-One malware analysis tool.
yarGen is a generator for YARA rules
The repository host gives no description.
Powerful Python tool to analyze PDF documents
BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.
Noriben - Portable, Simple, Malware Analysis Sandbox
Malcom - Malware Communications Analyzer
Sandboxed Execution Environment