Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
FakeNet-NG - Next Generation Dynamic Network Analysis Tool
The repository host gives no description.
Malcom - Malware Communications Analyzer
DECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope dynamic Android malware analysis platform. DroidScope is now an extension to DECAF.
- binary-analysis
- taint-analysis
WinDBG Anti-RootKit Extension
Modular file scanning/analysis framework
- python
- analytic-machines
- analysis-framework
- python-script
A framework for automated extraction of static and dynamic features from Android applications
- android-malware-detection
- android-analysis
DC3 Malware Configuration Parser (DC3-MWCP) is a framework for parsing configuration information from malware. The information extracted from malware includes items such as addresses, passwords, filenames, and mutex names.
File Scanning Framework
Django application that performs SAST and Malware Analysis for Android APKs
A malware/botnet analysis framework written in Ruby.
Simple framework to extract "actionable" data from Android malware (C&Cs, phone numbers etc.)
Based on the Volatility framework, this script will run various plugins as well as create a timeline, or use YARA/ClamAV/VirusTotal to find badness.
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.