Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
ClamAV - Documentation is here: https://docs.clamav.net
- clamav
- gplv2
- antivirus
- open-source
the fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python&java scripts, device memory extraction, data decryption, and encryption, etc.
Free Windows, Mac and Linux cleaner, scanner, and more.
- cleaner
- free
- kudu
- scanner
FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
- malware
- deobfuscation
- strings
- flare
Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, IPInfo, Shodan, AbuseIPDB, GreyNoise, URLScan.io, Whois/RDAP, NIST, and VulnCheck. Supports LLM enrichment, IOC extraction, YARA scanning, and Android analysis.
- malware
- virustotal
- malpedia
- urlhaus
Malware Configuration And Payload Extraction
One of a few malware collections on the GitHub.
Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android
Security sensor for realtime threat detection and protection
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
Mobile Edge-Dynamic Unified Security Analysis
- malware
- dynamic-analysis
- frida-snippets
- android-malware
A collection of PHP backdoors. For educational or testing purposes only.
- php
- php-backdoor
- webshell
FakeNet-NG - Next Generation Dynamic Network Analysis Tool
Detection tools for the June 2026 atomic-lockfile AUR supply-chain attack. Consolidated from community Gists.
Mac Sai: the open-source Mac cleaner, optimizer, and malware scanner. A free, Apple-notarized alternative to CleanMyMac, built with Swift 6 and SwiftUI.
- appkit
- cleanmymac
- cleanmymac-alternative
- darwin
Windows kernel and user mode emulation.
A collection of malware samples caught by several honeypots i manage
The repository host gives no description.
Elastic Security detection content for Endpoint
BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.
DRAKVUF Black-box Binary Analysis
Android Unpacker presented at Defcon 22: Android Hacker Protection Level 0
A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis