Repository Index

The pattern matching swiss knife

ClamAV - Documentation is here: https://docs.clamav.net

• clamav
• gplv2
• antivirus
• open-source

the fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python&java scripts, device memory extraction, data decryption, and encryption, etc.

• decompiler
• vulnerability-scanners
• malware-analysis
• security-audit

Free Windows, Mac and Linux cleaner, scanner, and more.

• cleaner
• free
• kudu
• scanner

Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, IPInfo, Shodan, AbuseIPDB, GreyNoise, URLScan.io, Whois/RDAP, NIST, and VulnCheck. Supports LLM enrichment, IOC extraction, YARA scanning, and Android analysis.

• malware
• virustotal
• malpedia
• urlhaus

Loki - Simple IOC and YARA Scanner

• python
• yara
• signature
• scanner

Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android

• android
• antivirus
• machine-learning
• malware-detection

DRAKVUF Black-box Binary Analysis

• malware-analysis
• virtualization
• xen
• introspection

A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis

• mobile-security
• android
• malware-analyzer
• penetration-testing

Sandboxed Execution Environment

• python
• sandbox
• malware-analysis
• malware-research

Script to create templates to use with VirtualBox to make vm detection harder

• virtualbox
• antivm
• sandbox
• malware-analysis

WinDBG Anti-RootKit Extension

• kernel-mode
• c-plus-plus
• malware
• malware-analysis

Modular file scanning/analysis framework

• python
• analytic-machines
• analysis-framework
• python-script

A Tool for Automatic Analysis of Malware Behavior

• machine-learning
• clustering
• classification
• malware-analysis

Django application that performs SAST and Malware Analysis for Android APKs

• android-security
• sast
• malware-analysis
• code-security

Android Mobile Device Hardening

• forensic
• security
• hardening
• android-security

Wraps around various tools and provides some additional checks/information to produce a centralized report of a PE file.

Reverse engineering tool for virtualization wrappers

A Python library and command line tools to provide interactive log visualization.

• cybersecurity
• investigation
• malware-analysis
• malware-research

The pattern matching swiss knife

BluePill: Neutralizing Anti-Analysis Behavior in Malware Dissection (Black Hat Europe 2019, IEEE TIFS 2020)

• malware-analysis
• reverse-engineering
• debugger
• malware

Read-only check for traces of the November 2026 NIKKE PC launcher compromise. Windows, Linux (Proton, Steam Deck) and macOS.

• iced
• incident-response
• indicators-of-compromise
• infostealer

Ragpicker is a Plugin based malware crawler with pre-analysis and reporting functionalities. Use this tool if you are testing antivirus products, collecting malware for another analyzer/zoo.

The current repository contains all the scripts needed to build kernel-mode mac-a-mal malicious activity hooking on macOS.

• macos