262 Open source projects that are alternatives of or similar to assemblyline

Personal research and publication on malware families

Malice Yara Plugin

⛔🛡️ WeDefend - Monitor and Protect Windows from Remote Access Trojan

An open source framework for enterprise level automated analysis.

APK/DEX detector for Windows, Linux and MacOS.

Personal compilation of APT malware from whitepaper releases, documents and own research

Android app analysis and feature extraction library

A curated list of awesome YARA rules, tools, and people.

Android virtual machine and deobfuscator

Malware Analysis Zoo

Java-layer Android Malware Simplifier

Drebin - NDSS 2014 Re-implementation

Bringing you the best of the worst files on the Internet.

Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android

Linker/Compiler/Tool detector for Windows, Linux and MacOS.

DrSemu - Sandboxed Malware Detection and Classification Tool Based on Dynamic Behavior

Malware Sample Sources

Collaborative malware analysis framework

WinAppDbg Debugger

Intel Owl: analyze files, domains, IPs in multiple ways from a single API at scale

DRAKVUF Sandbox - automated hypervisor-level malware analysis system

Drltrace is a library calls tracer for Windows and Linux applications.

Sandbox for semi-automatic Javascript malware analysis, deobfuscation and payload extraction. Written for Node.js

A command line tool to find malwares on http://openmalware.org

Program for determining types of files for Windows, Linux and MacOS.

WinDBG Anti-RootKit Extension

A SDK for the creation of analysis tools without obtaining app source code in order to profile runtime performance, examine code coverage, and track high-risk behaviors of a given app on Android 5.0 and above.

Binary instrumentation framework based on FRIDA

Modular file scanning/analysis framework

🐺 Malware analysis platform

A pattern based Dalvik deobfuscator which uses limited execution to improve semantic analysis

Leaked Linux.Mirai Source Code for Research/IoC Development Purposes

A curated list of awesome resources related to executable packing

A collection of c++ programs that demonstrate common ways to detect the presence of an attached debugger.

The PE file analysis toolkit

A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.

Sandboxed Execution Environment

Submits multiple domains to VirusTotal API

FCL (Fileless Command Lines) - Known command lines of fileless malicious executions

Android Reverse-Engineering Workbench for VS Code

Code written as part of our various malware investigations

Distributed malware processing framework based on Python, Redis and MinIO.

Builds malware analysis Windows VMs so that you don't have to.

yarGen is a generator for YARA rules

Maltego CaseFile entities for information security investigations, malware analysis and incident response

VirusTotal Wanna Be - Now with 100% more Hipster

Owlyshield is an EDR framework designed to safeguard vulnerable applications from potential exploitation (C&C, exfiltration and impact))..

Collection of scripts for different malware analysis tasks

FAME Automates Malware Evaluation

A repository of my completed writeups, along with the samples themselves.

A Python library and command line tools to provide interactive log visualization.

A binary analysis framework

Setup scripts for my Malware Analysis VMs

Malware repository component for samples & static configuration with REST API interface.

Hashes of infamous malware

🐺 Malware analysis platform

Pafish is a testing tool that uses different techniques to detect virtual machines and malware analysis environments in the same way that malware families do

A collection of malware samples and relevant dissection information, most probably referenced from http://blog.inquest.net

A modular Python application to pull intelligence about malicious files

BONOMEN - Hunt for Malware Critical Process Impersonation