The FLARE team's open-source tool to identify capabilities in executable files.
- malware-analysis
- reverse-engineering
- binary-analysis
- threat-intelligence
47,133 repositories indexed
1–24 of 26 · Most stars
The FLARE team's open-source tool to identify capabilities in executable files.
Free, open-source check for traces of mercenary spyware (Pegasus, Predator, Graphite, Candiru and more) on computers, Android phones and iPhone backups. Double-click apps for Windows, Mac and Linux, in 27 languages.
Malware Configuration And Payload Extraction
Security sensor for realtime threat detection and protection
FakeNet-NG - Next Generation Dynamic Network Analysis Tool
Powerful Python tool to analyze PDF documents
A machine learning tool that ranks strings based on their relevance for malware analysis.
A tool for studying JavaScript malware.
WinDBG Anti-RootKit Extension
PEframe is a open source tool to perform static analysis on Portable Executable malware and malicious MS Office documents.
AVClass malware labeling tool
Limon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators of Linux malware. It allows one to inspect Linux malware before execution, during execution, and after execution (post-mortem analysis) by performing static, dynamic and memory analysis using open source tools
A framework for automated extraction of static and dynamic features from Android applications
A Tool for Automatic Analysis of Malware Behavior
File Scanning Framework
A pintool in order to unpack malware
ShowStopper is a tool for helping malware researchers explore and test anti-debug techniques or verify debugger plugins or other solutions that clash with standard anti-debug methods.
Wraps around various tools and provides some additional checks/information to produce a centralized report of a PE file.
Tool to help analyze PDF files
Malware Analysis Tool using Function Level Fuzzy Hashing
Open-source cross-platform defensive spyware, stalkerware and surveillance software detector
Reverse engineering tool for virtualization wrappers
Python implementation of the Packed Executable iDentifier (PEiD)
A Python library and command line tools to provide interactive log visualization.