All Categories → Security → malware-analysis

Top 201 malware-analysis open source projects

Matire

Malware Analysis, Threat Intelligence and Reverse Engineering: LABS

✭ 55

c reverse-engineering malware-analysis threat-intelligence

Drebin

Drebin - NDSS 2014 Re-implementation

✭ 52

python machine-learning malware-analysis malware-research malware-detection

Virustotal

A simple command-line script to interact with the virustotal-api

✭ 50

python malware-analysis virustotal

Pentesting Bible

Learn ethical hacking.Learn about reconnaissance,windows/linux hacking,attacking web technologies,and pen testing wireless networks.Resources for learning malware analysis and reverse engineering.

✭ 8,981

linux windows awesome awesome-list hacking pentesting malware osint resources bugbounty hacking-tool malware-analysis redteam kali-linux information-gathering sql-injection csrf dork xxe osint-resources

Pecli

CLI tool to analyze PE files

✭ 46

reverse-engineering malware malware-analysis yara

Rigek

Analyzing Rig Exploit Kit

✭ 45

malware-analysis

Analyst Casefile

Maltego CaseFile entities for information security investigations, malware analysis and incident response

✭ 41

security malware-analysis incident-response malware-research

Apkid

Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android

✭ 999

android machine-learning malware-analysis malware-research yara antivirus malware-detection

Malcom

Malcom - Malware Communications Analyzer

✭ 988

python malware infosec malware-analysis dfir threat-intelligence pcap

Norimaci

Norimaci is a simple and lightweight malware analysis sandbox for macOS

✭ 37

python macos malware malware-analysis sandbox

Virustotal Tools

Submits multiple domains to VirusTotal API

✭ 29

python csv scanner malware malware-analysis ioc malware-detection virustotal

Besafe

BeSafe is robust threat analyzer which help to protect your desktop environment and know what's happening around you

✭ 21

cybersecurity malware-analysis threat-hunting threat-intelligence

Thezoo

A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.

✭ 7,849

python malware malware-analysis malware-research malwareanalysis malware-samples thezoo

Malware Samples

A collection of malware samples caught by several honeypots i manage

✭ 863

malware malware-analysis honeypot ransomware botnet

Emofishes

Emofishes is a collection of proof of concepts that help improve, bypass or detect virtualized execution environments (focusing on the ones setup for malware analysis).

✭ 11

c malware-analysis sandbox bypass proof

Macbook issues

《macOS软件安全与逆向分析》勘误

✭ 11

reverse-engineering malware-analysis binary-analysis

Malboxes

Builds malware analysis Windows VMs so that you don't have to.

✭ 900

python python3 hacktoberfest vagrant virtual-machine malware-analysis packer malware-research

Yargen

yarGen is a generator for YARA rules

✭ 795

python malware malware-analysis malware-research yara

See

Sandboxed Execution Environment

✭ 770

python malware-analysis virtualization sandbox malware-research

Hidden

Windows driver with usermode interface which can hide objects of file-system and registry, protect processes and etc

✭ 768

c security windows kernel driver malware-analysis registry rce rootkit

Awesome Rat

RAT And C&C Resources. 250+ Open Source Projects, 1200+ RAT/C&C blog/video.

✭ 759

malware-analysis rat

Vipermonkey

A VBA parser and emulation engine to analyze malicious macros.

✭ 697

python macros vba security parser malware-analysis emulation

Fame

FAME Automates Malware Evaluation

✭ 663

python framework malware infosec malware-analysis incident-response malware-research

Makin

makin - reveal anti-debugging and anti-VM tricks [This project is not maintained anymore]

✭ 645

reverse-engineering hooks debugging malware-analysis capstone

Drakvuf

DRAKVUF Black-box Binary Analysis

✭ 628

c introspection malware-analysis virtualization

Habomalhunter

HaboMalHunter is a sub-project of Habo Malware Analysis System (https://habo.qq.com), which can be used for automated malware analysis and security assessment on the Linux system.

✭ 627

python linux security static-analysis malware-analysis elf dynamic-analysis

Speakeasy

Windows kernel and user mode emulation.

✭ 605

python malware-analysis emulation

Malware Samples

A collection of malware samples and relevant dissection information, most probably referenced from http://blog.inquest.net

✭ 565

actionscript malware malware-analysis malware-research

Antivmdetection

Script to create templates to use with VirtualBox to make vm detection harder

✭ 527

python malware-analysis virtualbox sandbox

Multiscanner

Modular file scanning/analysis framework

✭ 494

python linux malware metadata malware-analysis malware-research python-script yara scanning antivirus

Flare Emu

✭ 487

python malware-analysis emulation

Apklab

Android Reverse-Engineering Workbench for VS Code

✭ 470

typescript bytecode android reverse-engineering malware-analysis mitm smali malware-detection apktool

Stringsifter

A machine learning tool that ranks strings based on their relevance for malware analysis.

✭ 469

python machine-learning reverse-engineering malware-analysis strings

Linux.mirai

Leaked Linux.Mirai Source Code for Research/IoC Development Purposes

✭ 466

c linux iot malware malware-analysis ioc malware-research botnet leak

Wdbgark

WinDBG Anti-RootKit Extension

✭ 450

windows malware visual-studio driver malware-analysis anomaly-detection debugging-tool malware-research windbg

Pev

The PE file analysis toolkit

✭ 422

c reverse-engineering malware-analysis malware-research binary-analysis

Saferwall

A hackable malware sandbox for the 21st Century

✭ 419

go static-analysis malware-analysis sandbox antivirus dynamic-analysis

Malware analysis

Various snippets created during malware analysis

✭ 413

python malware malware-analysis

Sec skills

软件安全工程师技能表

✭ 410

reverse-engineering malware-analysis binary-analysis android-security

Fcl

FCL (Fileless Command Lines) - Known command lines of fileless malicious executions

✭ 409

command-line malware malware-analysis incident-response threat-hunting malware-detection

Dex Oracle

A pattern based Dalvik deobfuscator which uses limited execution to improve semantic analysis

✭ 398

ruby android reverse-engineering malware malware-analysis malware-research dex deobfuscation

Ssma

SSMA - Simple Static Malware Analyzer [This project is not maintained anymore by me]

✭ 388

python malware malware-analysis

Engine

Droidefense: Advance Android Malware Analysis Framework

✭ 386

java android security static-analysis malware engine malware-analysis static-code-analysis trojan dynamic-analysis reverse ransomware

Drakvuf Sandbox

DRAKVUF Sandbox - automated hypervisor-level malware analysis system

✭ 384

javascript reverse-engineering malware malware-analysis sandbox malware-research

Cs7038 Malware Analysis

Course Repository for University of Cincinnati Malware Analysis Class (CS[567]038)

✭ 378

assembly infosec malware-analysis engineering university

Simplify

Android virtual machine and deobfuscator

✭ 3,865

java Smali kotlin android reverse-engineering optimization emulator malware virtual-machine malware-analysis malware-research deobfuscation malware-analyzer dalvik deobfuscator android-malware reverse-engineer-apk

Gef

GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging features for exploit developers & reverse engineers ☢

✭ 4,197

python c linux reverse-engineering exploit debugging ctf malware-analysis ida-pro gdb pwn mips discord python-api gef binary-ninja pwntools sparc powerpc exploit-development

Stoq

An open source framework for enterprise level automated analysis.

✭ 352

python framework malware-analysis security-automation malware-research yara malware-detection

Pwndbg

Exploit Development and Reverse Engineering with GDB Made Easy

✭ 4,178

python shell c Makefile Dockerfile assembly linux reverse-engineering malware debugging ctf malware-analysis disassembler ida-pro gdb peda gdbinit pwndbg gef binary-ninja defcon pwnable capture-the-flag

Malware Jail

Sandbox for semi-automatic Javascript malware analysis, deobfuscation and payload extraction. Written for Node.js

✭ 349

javascript analysis malware-analysis payload malware-research deobfuscation

Malware Sample Library

Malware sample library.

✭ 345

malware malware-analysis

Gonnacry

A Linux Ransomware

✭ 341

python c linux cryptography encryption malware malware-analysis openssl aes decryption ransomware aes-encryption

Winappdbg

WinAppDbg Debugger

✭ 338

python windows debugger infosec fuzzing malware-analysis malware-research

Icewater

16,432 Free Yara rules created by

✭ 324

cluster malware-analysis yara dna threat

Idenlib

idenLib - Library Function Identification [This project is not maintained anymore]

✭ 322

cpp windows reverse-engineering debugging malware-analysis binary-analysis

Deeptraffic

Deep Learning models for network traffic classification

✭ 321

python deep-learning malware-analysis cnn-model

Malheur

A Tool for Automatic Analysis of Malware Behavior

✭ 313

c machine-learning classification clustering malware-analysis

Malsub

A Python RESTful API framework for online malware analysis and threat intelligence services.

✭ 308

python malware api-client restful cybersecurity malware-analysis virustotal

Polichombr

Collaborative malware analysis framework

✭ 307

python reverse-engineering security-tools malware-analysis malware-research ida ida-plugin

Misp

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

61-120 of 201 malware-analysis projects

‹

›