Repository Index

Malware Configuration And Payload Extraction

• configs
• debugging-tools
• malware
• malware-analysis

Security sensor for realtime threat detection and protection

• windows
• windows-kernel
• instrumentation
• security

FakeNet-NG - Next Generation Dynamic Network Analysis Tool

• fakenet-ng
• traffic-redirection
• malware-analysis
• mandiant-flare

yarGen is a generator for YARA rules

• python
• yara
• malware
• malware-research

A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis

• mobile-security
• android
• malware-analyzer
• penetration-testing

Scan files or process memory for CobaltStrike beacons and parse their configuration

Volatility plugin for extracts configuration data of known malware

• malware
• volatility
• forensics
• python

DC3 Malware Configuration Parser (DC3-MWCP) is a framework for parsing configuration information from malware. The information extracted from malware includes items such as addresses, passwords, filenames, and mutex names.

• python
• malware-analysis
• automation
• config-dump

C++ application that uses memory and code hooks to detect packers

Docker image gathering packers and tools for making datasets of packed executables and training machine learning models for packing detection

• docker-image
• executable-packing
• malware-packers
• research-platform

Advanced analysis software for APK payloads created by RATs.

• apk
• remoteaccesstrojan
• reverse-engineering
• aapt

A malware dataset curation tool which helps identify packed samples.

• malware
• packer
• security
• peid

Integrated MALware Simulator and Emulator

Detect the Shai Hulud 2.0 npm supply chain attack (796+ packages). Scans for malicious files, hashes, and compromised ecosystems. Fast, accurate scanner.

• cdn
• cve
• polyfill
• polyfill-io

Advanced eBPF-driven Digital Forensics and Incident Response (DFIR) framework for live Golang malware analysis, threat hunting, and observability.

• bpf
• ebpf
• forensics
• goroutine