615 Open source projects that are alternatives of or similar to Capa

Pafish is a testing tool that uses different techniques to detect virtual machines and malware analysis environments in the same way that malware families do

Cmulator is ( x86 - x64 ) Scriptable Reverse Engineering Sandbox Emulator for shellcode and PE binaries . Based on Unicorn & Zydis Engine & javascript

A command line tool to find malwares on http://openmalware.org

Collaborative malware analysis framework

DRAKVUF Sandbox - automated hypervisor-level malware analysis system

makin - reveal anti-debugging and anti-VM tricks [This project is not maintained anymore]

A bunch of Windows anti-debugging tricks for x86 and x64.

A SDK for the creation of analysis tools without obtaining app source code in order to profile runtime performance, examine code coverage, and track high-risk behaviors of a given app on Android 5.0 and above.

🐺 Malware analysis platform

GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging features for exploit developers & reverse engineers ☢

Drltrace is a library calls tracer for Windows and Linux applications.

《macOS软件安全与逆向分析》勘误

UNIX-like reverse engineering framework and command-line toolset

The PE file analysis toolkit

Android virtual machine and deobfuscator

Linker/Compiler/Tool detector for Windows, Linux and MacOS.

This project aims at simplifying Windows API import recovery on arbitrary memory dumps

Android app analysis and feature extraction library

Advanced and easy to use penetration testing framework 💣🔎

No description or website provided.

Simpleator ("Simple-ator") is an innovative Windows-centric x64 user-mode application emulator that leverages several new features that were added in Windows 10 Spring Update (1803), also called "Redstone 4", with additional improvements that were made in Windows 10 October Update (1809), aka "Redstone 5".

Exploit Development and Reverse Engineering with GDB Made Easy

《macOS软件安全与逆向分析》随书源码

A machine learning tool that ranks strings based on their relevance for malware analysis.

Android Reverse-Engineering Workbench for VS Code

.NET runtime inspector

Malware Analysis, Threat Intelligence and Reverse Engineering: LABS

DrSemu - Sandboxed Malware Detection and Classification Tool Based on Dynamic Behavior

idenLib - Library Function Identification [This project is not maintained anymore]

A binary analysis framework

Livro: Fundamentos de Engenharia Reversa

APK/DEX detector for Windows, Linux and MacOS.

软件安全工程师技能表

Ghidra Analysis Enhancer 🐉

Awesome CSIRT is an curated list of links and resources in security and CSIRT daily activities.

Toolkit for enriching and speeding up static malware analysis

A collection of c++ programs that demonstrate common ways to detect the presence of an attached debugger.

Setup scripts for my Malware Analysis VMs

Program for determining types of files for Windows, Linux and MacOS.

Authors

A pattern based Dalvik deobfuscator which uses limited execution to improve semantic analysis

CLI tool to analyze PE files

Collection of scripts for different malware analysis tasks

(In dev)furikuri is framework for code protection

A binary to LLVM translator

Hook WinAPI functions used by Valve Anti-Cheat. Log calls and intercept arguments & return values. DLL written in C.

S2E: A platform for multi-path program analysis with selective symbolic execution.

逆向火绒安全软件驱动——sysdiag

This repository is created only for infosec professionals whom work day to day basis to equip ourself with uptodate skillset, We can daily contribute daily one hour for day to day tasks and work on problem statements daily, Please contribute by providing problem statements and solutions

Binary Analysis Platform

Mach-O & Universal Binary Parser

A port of Kaitai to the Hiew hex editor

😎 Curated list about cryptocurrency security (reverse / exploit / fuzz..)

A libre cross-platform disassembler.

Disables the "Unsupported Hardware" message in Windows Update, and allows you to continue installing updates on Windows 7 and 8.1 systems with Intel Kaby Lake, AMD Ryzen, or other unsupported processors.

Xiaomi Flower Care (MiFlora) API wrapper.

A collection of various awesome lists for hackers, pentesters and security researchers

🔍 Colourful, human-friendly hexdump tool

Library and tool for reading IDApro databases.

An open-source x64/x32 debugger for windows.