1.horsicq / Detect-It-Easy
Program for determining types of files for Windows, Linux and MacOS.
- debugger
- detect
- unpacker
- disassembler
- reverse-engineering
- elf
- +14 more
+1,265 stars
from 10,609 · score 7.14
Trending repositories
Ranked by Attention Score: stars gained over the last 180 complete days
10 repositories by Attention Score · May 9, 2026 – Nov 4, 2026 (UTC)
+54 stars
from 1,120 · score 4.01
3.Mutasem-mk4 / procscope
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.
- bpf
- ebpf
- forensics
- golang
- linux-security
- reverse-engineering
- +14 more
+46 stars
from 2 · score 3.85
4.nsmfoo / antivmdetection
Script to create templates to use with VirtualBox to make vm detection harder
- virtualbox
- antivm
- sandbox
- malware-analysis
+15 stars
from 766 · score 2.77
5.CapacitorSet / box-js
A tool for studying JavaScript malware.
+8 stars
from 666 · score 2.20
+7 stars
from 483 · score 2.08
7.Apr4h / CobaltStrikeScan
Scan files or process memory for CobaltStrike beacons and parse their configuration
+6 stars
from 911 · score 1.95
8.CheckPointSW / showstopper
ShowStopper is a tool for helping malware researchers explore and test anti-debug techniques or verify debugger plugins or other solutions that clash with standard anti-debug methods.
+5 stars
from 222 · score 1.79
+4 stars
from 774 · score 1.61
10.HynekPetrak / malware-jail
Sandbox for semi-automatic Javascript malware analysis, deobfuscation and payload extraction. Written for Node.js
- malware-samples
- wscript
- deobfuscation
- angler
- javascript
- malware-jail
- +6 more
+4 stars
from 476 · score 1.61