SojoboA binary analysis framework
Stars: ✭ 116 (+480%)
NaoSimple No-meaning Assembly Omitter for IDA Pro (This is just a prototype)
Stars: ✭ 228 (+1040%)
Radare2UNIX-like reverse engineering framework and command-line toolset
Stars: ✭ 15,412 (+76960%)
malwinxJust a normal flask web app to understand win32api with code snippets and references.
Stars: ✭ 76 (+280%)
Oletoolsoletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.
Stars: ✭ 1,848 (+9140%)
antimalwareappAnti-malware for Android using machine learning
Stars: ✭ 206 (+930%)
CapaThe FLARE team's open-source tool to identify capabilities in executable files.
Stars: ✭ 1,981 (+9805%)
LiefAuthors
Stars: ✭ 2,730 (+13550%)
speakeasyWindows kernel and user mode emulation.
Stars: ✭ 1,017 (+4985%)
ReplicaGhidra Analysis Enhancer 🐉
Stars: ✭ 194 (+870%)
bluepillBluePill: Neutralizing Anti-Analysis Behavior in Malware Dissection (Black Hat Europe 2019, IEEE TIFS 2020)
Stars: ✭ 94 (+370%)
bazaarAndroid security & privacy analysis for the masses
Stars: ✭ 191 (+855%)
Attack monitorEndpoint detection & Malware analysis software
Stars: ✭ 186 (+830%)
ML-AntivirusAn antivirus powered by machine learning.
Stars: ✭ 32 (+60%)
adv-dnn-ens-malwareadversarial examples, adversarial malware examples, adversarial malware detection, adversarial deep ensemble, Android malware variants
Stars: ✭ 33 (+65%)
Pe SieveScans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).
Stars: ✭ 1,783 (+8815%)
LisaSandbox for automated Linux malware analysis.
Stars: ✭ 177 (+785%)
assemblyline-coreCore server components for Assemblyline 4 (Alerter, dispatcher, expiry, ingester, scaler, updater, ...)
Stars: ✭ 16 (-20%)
pftriagePython tool and library to help analyze files during malware triage and analysis.
Stars: ✭ 77 (+285%)
ApiscoutThis project aims at simplifying Windows API import recovery on arbitrary memory dumps
Stars: ✭ 146 (+630%)
toolkitThe essential toolkit for reversing, malware analysis, and cracking
Stars: ✭ 176 (+780%)
cheatsheetThese are some of the commands which I use frequently during Malware Analysis and DFIR.
Stars: ✭ 23 (+15%)
Information Security TasksThis repository is created only for infosec professionals whom work day to day basis to equip ourself with uptodate skillset, We can daily contribute daily one hour for day to day tasks and work on problem statements daily, Please contribute by providing problem statements and solutions
Stars: ✭ 108 (+440%)
vminspectTools for inspecting disk images
Stars: ✭ 25 (+25%)
BashacksSet of functions to increase productivity while hacking with Bash
Stars: ✭ 138 (+590%)
emeraldImport DynamoRIO drcov code coverage data into Ghidra
Stars: ✭ 30 (+50%)
Visualize logsA Python library and command line tools to provide interactive log visualization.
Stars: ✭ 128 (+540%)
Gda Android Reversing ToolGDA is a new fast and powerful decompiler in C++(working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python&java scripts, device memory extraction, dat…
Stars: ✭ 2,332 (+11560%)
Mwdb CoreMalware repository component for samples & static configuration with REST API interface.
Stars: ✭ 125 (+525%)
Practical Malware AnalysisMaterials for a course based on the Practical Malware Analysis text by Andrew Honig and Michael Sikorski
Stars: ✭ 16 (-20%)
CirtkitTools for the Computer Incident Response Team 💻
Stars: ✭ 117 (+485%)
Anti-DebuggingA collection of c++ programs that demonstrate common ways to detect the presence of an attached debugger.
Stars: ✭ 297 (+1385%)
Malware-ZooHashes of infamous malware
Stars: ✭ 18 (-10%)
MacholibreMach-O & Universal Binary Parser
Stars: ✭ 102 (+410%)
Analyzer🔍 Offline Analyzer for extracting features, artifacts and IoCs from Windows, Linux, Android, iPhone, Blackberry, macOS binaries, emails and more
Stars: ✭ 108 (+440%)
Batch-AntivirusBatch Antivirus, a powerful antivirus suite written in batch with real-time protection and heuristical scanning.
Stars: ✭ 26 (+30%)
aparoidStatic and dynamic Android application security analysis
Stars: ✭ 62 (+210%)
NfrA lightweight tool to score network traffic and flag anomalies
Stars: ✭ 104 (+420%)
d9scanNetwork Scanner with Backdoor Detection, other Nmap resources and syn-protection detection
Stars: ✭ 23 (+15%)
Vm setupA collection of scripts to initialize a windows VM to run all the malwares!
Stars: ✭ 101 (+405%)
binary viewerA binary visualization tool to aid with reverse engineering and malware detection similar to Cantor.Dust
Stars: ✭ 55 (+175%)
FileintelA modular Python application to pull intelligence about malicious files
Stars: ✭ 97 (+385%)
UnAutoItThe Cross Platform AutoIt Extractor
Stars: ✭ 90 (+350%)
ssdcssdeep cluster analysis for malware files
Stars: ✭ 24 (+20%)
FlorentinoFast Static File Analysis Framework
Stars: ✭ 92 (+360%)
MaliceVirusTotal Wanna Be - Now with 100% more Hipster
Stars: ✭ 1,253 (+6165%)
Flare Fakenet Ng[Suspended] FakeNet-NG - Next Generation Dynamic Network Analysis Tool
Stars: ✭ 1,214 (+5970%)
rtfraptorExtract OLEv1 objects from RTF files by instrumenting Word
Stars: ✭ 50 (+150%)
gitavscanGit Anti-Virus Scan Action - Detect trojans, viruses, malware & other malicious threats.
Stars: ✭ 23 (+15%)
angr-antievasionFinal project for the M.Sc. in Engineering in Computer Science at Università degli Studi di Roma "La Sapienza" (A.Y. 2016/2017).
Stars: ✭ 35 (+75%)