Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
Free, open-source check for traces of mercenary spyware (Pegasus, Predator, Graphite, Candiru and more) on computers, Android phones and iPhone backups. Double-click apps for Windows, Mac and Linux, in 27 languages.
Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android
Security sensor for realtime threat detection and protection
Powerful Python tool to analyze PDF documents
DRAKVUF Black-box Binary Analysis
Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness
Modified edition of cuckoo
Limon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators of Linux malware. It allows one to inspect Linux malware before execution, during execution, and after execution (post-mortem analysis) by performing static, dynamic and memory analysis using open source tools
Modified edition of cuckoo
Incident Response - Fast suspicious file finder
Django application that performs SAST and Malware Analysis for Android APKs
simple YARA-based IOC scanner
Open-source cross-platform defensive spyware, stalkerware and surveillance software detector
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.
A simple many-rules to many-files YARA scanner for incident response or malware zoos.