Program for determining types of files for Windows, Linux and MacOS.
- debugger
- detect
- unpacker
- disassembler
Repository Index
47,133 repositories indexed
1–20 of 20 · Most stars
FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
- malware
- deobfuscation
- strings
- flare
Loki - Simple IOC and YARA Scanner
- python
- yara
- signature
- scanner
Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android
- android
- antivirus
- machine-learning
- malware-detection
Scan files or process memory for CobaltStrike beacons and parse their configuration
Simple Bash IOC Scanner
Modular file scanning/analysis framework
- python
- analytic-machines
- analysis-framework
- python-script
Volatility plugin for extracts configuration data of known malware
Sandbox for semi-automatic Javascript malware analysis, deobfuscation and payload extraction. Written for Node.js
- malware-samples
- wscript
- deobfuscation
- angler
File Scanning Framework
- security-tools
- network-defense
- file-analysis
- file-analyzer
Android Mobile Device Hardening
- forensic
- security
- hardening
- android-security
simple YARA-based IOC scanner
- yara
- ioc
- security
- incident-response
Reverse engineering tool for virtualization wrappers
Scalable Binary Data Extraction in Hadoop
Control Flow Graph Scanning for Android
An ICAP Server with yara scanner for URL and content.
- python
- icap-server
- yara
- malware-analysis
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.
A simple many-rules to many-files YARA scanner for incident response or malware zoos.
- yara
- yara-scanner
- incident-response
- dfir
Detect the Shai Hulud 2.0 npm supply chain attack (796+ packages). Scans for malicious files, hashes, and compromised ecosystems. Fast, accurate scanner.
- cdn
- cve
- polyfill
- polyfill-io
Advanced eBPF-driven Digital Forensics and Incident Response (DFIR) framework for live Golang malware analysis, threat hunting, and observability.