Repository Index

Sandboxed Execution Environment

• python
• sandbox
• malware-analysis
• malware-research

Script to create templates to use with VirtualBox to make vm detection harder

• virtualbox
• antivm
• sandbox
• malware-analysis

CuckooDroid - Automated Android Malware Analysis with Cuckoo Sandbox.

Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness

ShowStopper is a tool for helping malware researchers explore and test anti-debug techniques or verify debugger plugins or other solutions that clash with standard anti-debug methods.

• research
• anti-debug
• malware

Process HTTP Pcaps With YARA

Ragpicker is a Plugin based malware crawler with pre-analysis and reporting functionalities. Use this tool if you are testing antivirus products, collecting malware for another analyzer/zoo.

Sample staging & detonation utility to be used in combination with Cuckoo Sandbox.

An ICAP Server with yara scanner for URL and content.

• python
• icap-server
• yara
• malware-analysis

Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.

• bpf
• ebpf
• forensics
• golang

Yet another implementation of PEiD with yara

• binary-analysis
• yara
• yara-rules
• peid

A Single Library Parser to extract meta information,static analysis and detect macros within the files.

• malware-analysis
• pdf-parsing
• pe-executable
• office-files