Dynamic unpacker based on PE-sieve
- libpeconv
- pe-sieve
- memory-forensics
- malware-unpacker
Repository Index
47,133 repositories indexed
1–13 of 13 · Most stars
DECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope dynamic Android malware analysis platform. DroidScope is now an extension to DECAF.
- binary-analysis
- taint-analysis
Automatic and platform-independent unpacker for Windows binaries based on emulation
- reverse-engineering
- unpacker
- pefile
- windows
A machine learning tool that ranks strings based on their relevance for malware analysis.
- machine-learning
- fireeye-flare
- strings
- malware-analysis
HaboMalHunter is a sub-project of Habo Malware Analysis System (https://habo.qq.com), which can be used for automated malware analysis and security assessment on the Linux system.
- malware-analysis
- dynamic-analysis
- security
- linux
Android Loadable Kernel Modules - mostly used for reversing and debugging on controlled systems/emulators
- loadable-kernel-modules
- android-lkms
- emulators
- kernel
simple YARA-based IOC scanner
- yara
- ioc
- security
- incident-response
Ragpicker is a Plugin based malware crawler with pre-analysis and reporting functionalities. Use this tool if you are testing antivirus products, collecting malware for another analyzer/zoo.
Sample staging & detonation utility to be used in combination with Cuckoo Sandbox.
Analysis tool for estimating the likelihood that a binary contains compressed or encrypted bytes
- entropy
- pe-file
- pe-files
- pe-format
Based on the Volatility framework, this script will run various plugins as well as create a timeline, or use YARA/ClamAV/VirusTotal to find badness.
Detect the Shai Hulud 2.0 npm supply chain attack (796+ packages). Scans for malicious files, hashes, and compromised ecosystems. Fast, accurate scanner.
- cdn
- cve
- polyfill
- polyfill-io
A simple tool to organise large malicious/benign files into a organised Structure.
- malware
- malware-analysis
- malware-research
- clean-file