1.kevoreilly / CAPEv2
Malware Configuration And Payload Extraction
- configs
- debugging-tools
- malware
- malware-analysis
- malware-research
- reverse-engineering
- +3 more
+102 stars
from 3,548 · score 4.63
Trending repositories
Ranked by Attention Score: stars gained over the last 30 complete days
12 repositories by Attention Score · Oct 6, 2026 – Nov 4, 2026 (UTC)
2.rednaga / APKiD
Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android
- android
- antivirus
- machine-learning
- malware-detection
- malware-analysis
- malware-research
- +8 more
+23 stars
from 2,589 · score 3.18
3.rabbitstack / fibratus
Security sensor for realtime threat detection and protection
+16 stars
from 2,550 · score 2.83
4.Rurik / Noriben
Noriben - Portable, Simple, Malware Analysis Sandbox
+16 stars
from 1,305 · score 2.83
5.elastic / protections-artifacts
Elastic Security detection content for Endpoint
+13 stars
from 1,496 · score 2.64
6.tklengyel / drakvuf
DRAKVUF Black-box Binary Analysis
- malware-analysis
- virtualization
- xen
- introspection
+10 stars
from 1,280 · score 2.40
7.Neo23x0 / yarGen
yarGen is a generator for YARA rules
- python
- yara
- malware
- malware-research
- malware-analysis
- malwareanalysis
+7 stars
from 1,817 · score 2.08
8.mitre / multiscanner
Modular file scanning/analysis framework
- python
- analytic-machines
- analysis-framework
- python-script
- linux
- scanning
- +8 more
+2 stars
from 619 · score 1.10
9.dod-cyber-crime-center / DC3-MWCP
DC3 Malware Configuration Parser (DC3-MWCP) is a framework for parsing configuration information from malware. The information extracted from malware includes items such as addresses, passwords, filenames, and mutex names.
- python
- malware-analysis
- automation
- config-dump
- framework
- malware-automation
+2 stars
from 352 · score 1.10
10.cuckoosandbox / cuckooArchived
Cuckoo Sandbox is an automated dynamic malware analysis system
+1 stars
from 5,958 · score 0.69
11.tomchop / malcom
Malcom - Malware Communications Analyzer
- malware
- network-traffic
- pcap
- threat-intelligence
- malware-analysis
- infosec
- +1 more
+1 stars
from 1,173 · score 0.69
12.elastic / emberArchived
Elastic Malware Benchmark for Empowering Researchers
+1 stars
from 1,169 · score 0.69