Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
Program for determining types of files for Windows, Linux and MacOS.
The pattern matching swiss knife
FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
Security sensor for realtime threat detection and protection
Elastic Security detection content for Endpoint
Android Unpacker presented at Defcon 22: Android Hacker Protection Level 0
A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis
Interactive Delphi Reconstructor
A static analyzer for PE executables.
Scan files or process memory for CobaltStrike beacons and parse their configuration
A machine learning tool that ranks strings based on their relevance for malware analysis.
HaboMalHunter is a sub-project of Habo Malware Analysis System (https://habo.qq.com), which can be used for automated malware analysis and security assessment on the Linux system.
A tool for studying JavaScript malware.
WinDBG Anti-RootKit Extension
PEframe is a open source tool to perform static analysis on Portable Executable malware and malicious MS Office documents.
Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness
Yet another static code analyzer for malicious Android applications
Limon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators of Linux malware. It allows one to inspect Linux malware before execution, during execution, and after execution (post-mortem analysis) by performing static, dynamic and memory analysis using open source tools
A framework for automated extraction of static and dynamic features from Android applications
- android-malware-detection
- android-analysis
A Tool for Automatic Analysis of Malware Behavior
Incident Response - Fast suspicious file finder
Django application that performs SAST and Malware Analysis for Android APKs
ShowStopper is a tool for helping malware researchers explore and test anti-debug techniques or verify debugger plugins or other solutions that clash with standard anti-debug methods.