AwesomeRepos
Sign in

Tags / Security /

Malware analysis

Tool for detecting, classifying, or analyzing malware, such as YARA rules or analysis sandboxes.

Repositories

16

Net stars gained, last 7 days

+3,533

Top-level Tag

Security

Net stars gained each day, last 90 days

2026-10-27: +1,347 net stars. Most from interplains/Zero-Breach-Toolkit, +1,299.2026-10-28: +1,686 net stars. Most from interplains/Zero-Breach-Toolkit, +1,662.2026-10-29: +741 net stars. Most from interplains/Zero-Breach-Toolkit, +716.2026-10-30: +501 net stars. Most from interplains/Zero-Breach-Toolkit, +268.2026-11-01: +171 net stars. Most from interplains/Zero-Breach-Toolkit, +144.

Peak days

  1. 1

    Oct 27, 2026 +1,347 net stars (median day +26)

  2. 2

    Oct 28, 2026 +1,686 net stars (median day +26)

  3. 3

    Oct 29, 2026 +741 net stars (median day +26)

  4. 4

    Oct 30, 2026 +501 net stars (median day +26)

  5. 5

    Nov 1, 2026 +171 net stars (median day +26)

A peak day has at least 2 times the net stars of the median day of this chart, and at least 100 more. For each peak day, the list shows the repositories that gained the most net stars that day. It also shows their GitHub releases of that day or the day before (UTC), and their creation date when it was 14 days or less before. These events occur near the same day. They do not show why the stars came.

Largest

Most stars in total now.

  1. MobSF/Mobile-Security-Framework-MobSF22K

    readme: MobSF can be used for a variety of use cases such as mobile application security, penetration testing, malware analysis, and privacy analysis.

  2. horsicq/Detect-It-Easy12K

    readme: Detect It Easy combines format-aware parsing, signature matching, and programmable analysis for **malware analysis**, **reverse engineering**, and **digital forensics**.

  3. VirusTotal/yara10K

    readme: YARA is a tool aimed at (but not limited to) helping malware researchers to identify and classify malware samples.

  4. mandiant/capa6.3K

    readme: capa: Automatically Identify Malware Capabilities

  5. cuckoosandbox/cuckooarchived · 6K

    description: Cuckoo Sandbox is an automated dynamic malware analysis system

  6. Yara-Rules/rules4.9K

    readme: In this section you will find Yara rules specialised toward the identification of well-known malware.

  7. interplains/Zero-Breach-Toolkit4.4K

    readme: A free, open-source check for traces of known mercenary spyware (Pegasus, Predator, Graphite, Candiru and others) on computers, Android phones and iPhone backups.

  8. mandiant/flare-floss4.2K

    description: Automatically extract obfuscated strings from malware.

  9. a0rtega/pafisharchived · 3.9K

    readme: This allows analysts to study them and test whether the analysis environments are properly implemented.

  10. Neo23x0/Loki3.8K

    readme: Yara signature match on file data and process memory

Newest Admissions

Entered the index by the rising rule, newest first.

  1. jamixm4-crypto/sentinel184

    description: Open-source cross-platform defensive spyware, stalkerware and surveillance software detector

  2. interplains/Zero-Breach-Toolkit4.4K

    readme: A free, open-source check for traces of known mercenary spyware (Pegasus, Predator, Graphite, Candiru and others) on computers, Android phones and iPhone backups.

All 16 in the Repository Index

How a repository gets this Tag

An agent reads the description, the GitHub topics, and the start of the README of each repository. It chooses Tags only from the Tag list in the AwesomeRepos source code. For each Tag, it quotes the text. A code check keeps the Tag only when the quote is in that text. The quote under each repository is that evidence. A Tag does not rank repositories. It does not say that one repository can replace another. To report a wrong Tag, use "Report a problem with this page" on the page of the repository. All numbers on this page count only visible repositories.