76,855 visible repositories in the index
1–24 of 51 · Most stars
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
Program for determining types of files for Windows, Linux and MacOS.
The pattern matching swiss knife
ClamAV - Documentation is here: https://docs.clamav.net
The FLARE team's open-source tool to identify capabilities in executable files.
the fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python&java scripts, device memory extraction, data decryption, and encryption, etc.
Free Windows, Mac and Linux cleaner, scanner, and more.
Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, IPInfo, Shodan, AbuseIPDB, GreyNoise, URLScan.io, Whois/RDAP, NIST, and VulnCheck. Supports LLM enrichment, IOC extraction, YARA scanning, and Android analysis.
Portable Executable reversing tool with a friendly GUI
YARA signature and IOC database for my scanners and tools
One of a few malware collections on the GitHub.
Security sensor for realtime threat detection and protection
Detection tools for the June 2026 atomic-lockfile AUR supply-chain attack. Consolidated from community Gists.
Mac Sai: the open-source Mac cleaner, optimizer, and malware scanner. A free, Apple-notarized alternative to CleanMyMac, built with Swift 6 and SwiftUI.
All-in-One malware analysis tool.
Noriben - Portable, Simple, Malware Analysis Sandbox
A static analyzer for PE executables.
DECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope dynamic Android malware analysis platform. DroidScope is now an extension to DECAF.
A machine learning tool that ranks strings based on their relevance for malware analysis.
HaboMalHunter is a sub-project of Habo Malware Analysis System (https://habo.qq.com), which can be used for automated malware analysis and security assessment on the Linux system.
PEframe is a open source tool to perform static analysis on Portable Executable malware and malicious MS Office documents.
Modular file scanning/analysis framework
Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness
Yet another static code analyzer for malicious Android applications