712 Open source projects that are alternatives of or similar to Drsemu

A collection of c++ programs that demonstrate common ways to detect the presence of an attached debugger.

Java-layer Android Malware Simplifier

A list of awesome malware detection tools

FCL (Fileless Command Lines) - Known command lines of fileless malicious executions

📓 Some security related notes

A Binary Genetic Traits Lexer Framework

Malware Analysis Zoo

Malware Machine Learning

A Python Bytecode Disassembler helping reverse engineers in dissecting Python binaries by disassembling and analyzing the compiled python byte-code(.pyc) files across all python versions (including Python 3.10.*)

ReversingLabs YARA Rules

Defund the Police.

Leaked Linux.Mirai Source Code for Research/IoC Development Purposes

Collection of malware persistence and hunting information. Be a persistent persistence hunter!

Binary instrumentation framework based on FRIDA

GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging features for exploit developers & reverse engineers ☢

The Kam1n0 Assembly Analysis Platform

A machine learning tool that ranks strings based on their relevance for malware analysis.

Python core of avatar²

Components of a decompilation pipeline.

makin - reveal anti-debugging and anti-VM tricks [This project is not maintained anymore]

DIE engine

Sandboxed Execution Environment

A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.

yarGen is a generator for YARA rules

Submits multiple domains to VirusTotal API

Code and exercises for a workshop on z3 and angr

cwe_checker finds vulnerable patterns in binary executables

WinDBG Anti-RootKit Extension

Public API, examples, documentation and issues for Binary Ninja

Andromeda - Interactive Reverse Engineering Tool for Android Applications

An impish, cross-platform binary parsing crate, written in Rust

FAME Automates Malware Evaluation

A collection of malware samples and relevant dissection information, most probably referenced from http://blog.inquest.net

CLI tool to analyze PE files

Builds malware analysis Windows VMs so that you don't have to.

Modular file scanning/analysis framework

PS / Bash / Python / Other scripts For FUN!

Intermediate Representation for Binary analysis and transformation

Maltego CaseFile entities for information security investigations, malware analysis and incident response

The OpenSource Disassembler

OWASP Seraphimdroid is an open source project with aim to create, as a community, an open platform for education and protection of Android users against privacy and security threats.

Collection of malware source code for a variety of platforms in an array of different programming languages.

Automated static analysis tools for binary programs

VirusTotal Wanna Be - Now with 100% more Hipster

BARF : A multiplatform open source Binary Analysis and Reverse engineering Framework

Malware Analysis, Threat Intelligence and Reverse Engineering: LABS

A port of Kaitai to the Hiew hex editor

The FLARE team's open-source tool to identify capabilities in executable files.

Binary Analysis Platform

This project aims at simplifying Windows API import recovery on arbitrary memory dumps

Portable Reverse Engineering Framework

Malware repository component for samples & static configuration with REST API interface.

A repository of my completed writeups, along with the samples themselves.

A modular Python application to pull intelligence about malicious files

Toolkit for enriching and speeding up static malware analysis

A Python library and command line tools to provide interactive log visualization.

Triton is a Dynamic Binary Analysis (DBA) framework. It provides internal components like a Dynamic Symbolic Execution (DSE) engine, a dynamic taint engine, AST representations of the x86, x86-64, ARM32 and AArch64 Instructions Set Architecture (ISA), SMT simplification passes, an SMT solver interface and, the last but not least, Python bindings.

BluePill: Neutralizing Anti-Analysis Behavior in Malware Dissection (Black Hat Europe 2019, IEEE TIFS 2020)

Awesome CSIRT is an curated list of links and resources in security and CSIRT daily activities.

Distributed malware processing framework based on Python, Redis and MinIO.