1.kevoreilly / CAPEv2
Malware Configuration And Payload Extraction
- configs
- debugging-tools
- malware
- malware-analysis
- malware-research
- reverse-engineering
- +3 more
+259 stars
from 3,391 · score 5.56
Trending repositories
Ranked by Attention Score: stars gained over the last 90 complete days
19 repositories by Attention Score · Aug 7, 2026 – Nov 4, 2026 (UTC)
2.rednaga / APKiD
Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android
- android
- antivirus
- machine-learning
- malware-detection
- malware-analysis
- malware-research
- +8 more
+77 stars
from 2,535 · score 4.36
3.rabbitstack / fibratus
Security sensor for realtime threat detection and protection
+59 stars
from 2,507 · score 4.09
4.elastic / protections-artifacts
Elastic Security detection content for Endpoint
+42 stars
from 1,467 · score 3.76
5.Rurik / Noriben
Noriben - Portable, Simple, Malware Analysis Sandbox
+35 stars
from 1,286 · score 3.58
6.tklengyel / drakvuf
DRAKVUF Black-box Binary Analysis
- malware-analysis
- virtualization
- xen
- introspection
+31 stars
from 1,259 · score 3.47
7.Neo23x0 / yarGen
yarGen is a generator for YARA rules
- python
- yara
- malware
- malware-research
- malware-analysis
- malwareanalysis
+22 stars
from 1,802 · score 3.14
8.cuckoosandbox / cuckooArchived
Cuckoo Sandbox is an automated dynamic malware analysis system
+6 stars
from 5,953 · score 1.95
9.dod-cyber-crime-center / DC3-MWCP
DC3 Malware Configuration Parser (DC3-MWCP) is a framework for parsing configuration information from malware. The information extracted from malware includes items such as addresses, passwords, filenames, and mutex names.
- python
- malware-analysis
- automation
- config-dump
- framework
- malware-automation
+5 stars
from 349 · score 1.79
10.tomchop / malcom
Malcom - Malware Communications Analyzer
- malware
- network-traffic
- pcap
- threat-intelligence
- malware-analysis
- infosec
- +1 more
+4 stars
from 1,170 · score 1.61
11.rafosw / APKdevastate
Advanced analysis software for APK payloads created by RATs.
- apk
- remoteaccesstrojan
- reverse-engineering
- aapt
- android
- security
- +1 more
+4 stars
from 61 · score 1.61
12.elastic / emberArchived
Elastic Malware Benchmark for Empowering Researchers
+3 stars
from 1,167 · score 1.39
13.mitre / multiscanner
Modular file scanning/analysis framework
- python
- analytic-machines
- analysis-framework
- python-script
- linux
- scanning
- +8 more
+3 stars
from 618 · score 1.39
14.Tencent / HaboMalHunter
HaboMalHunter is a sub-project of Habo Malware Analysis System (https://habo.qq.com), which can be used for automated malware analysis and security assessment on the Linux system.
- malware-analysis
- dynamic-analysis
- security
- linux
- static-analysis
- elf
+1 stars
from 750 · score 0.69
15.JPCERTCC / MalConfScan
Volatility plugin for extracts configuration data of known malware
+1 stars
from 497 · score 0.69
16.ANSSI-FR / polichombrArchived
Collaborative malware analysis framework
+1 stars
from 382 · score 0.69
17.codeyourweb / fastfinder
Incident Response - Fast suspicious file finder
- dfir
- investigation
- incident-response
- threat-hunting
+1 stars
from 260 · score 0.69
18.keithjjones / visualize_logs
A Python library and command line tools to provide interactive log visualization.
- cybersecurity
- investigation
- malware-analysis
- malware-research
+1 stars
from 145 · score 0.69
+1 stars
from 137 · score 0.69