Pafish is a testing tool that uses different techniques to detect virtual machines and malware analysis environments in the same way that malware families do

Stars: ✭ 2,026 (+205.58%)

Mutual labels: malware, malware-analysis, malware-research

Threat Hunting

Personal compilation of APT malware from whitepaper releases, documents and own research

Stars: ✭ 219 (-66.97%)

Mutual labels: malware, malware-analysis, malware-research

pyc2bytecode

A Python Bytecode Disassembler helping reverse engineers in dissecting Python binaries by disassembling and analyzing the compiled python byte-code(.pyc) files across all python versions (including Python 3.10.*)

Stars: ✭ 70 (-89.44%)

Mutual labels: infosec, malware-analysis, malware-research

Owlyshield

Owlyshield is an EDR framework designed to safeguard vulnerable applications from potential exploitation (C&C, exfiltration and impact))..

Stars: ✭ 281 (-57.62%)

Mutual labels: malware, malware-analysis, malware-research

freki

🐺 Malware analysis platform

Stars: ✭ 327 (-50.68%)

Mutual labels: malware, malware-analysis, malware-research

Wdbgark

WinDBG Anti-RootKit Extension

Stars: ✭ 450 (-32.13%)

Mutual labels: malware, malware-analysis, malware-research

Malware Analysis Scripts

Collection of scripts for different malware analysis tasks

Stars: ✭ 61 (-90.8%)

Mutual labels: malware, malware-analysis, malware-research

yara

Malice Yara Plugin

Stars: ✭ 27 (-95.93%)

Mutual labels: malware, malware-analysis, malware-research

Analyst Casefile

Maltego CaseFile entities for information security investigations, malware analysis and incident response

Stars: ✭ 41 (-93.82%)

Mutual labels: incident-response, malware-analysis, malware-research

Winappdbg

WinAppDbg Debugger

Stars: ✭ 338 (-49.02%)

Mutual labels: infosec, malware-analysis, malware-research

Malware-Zoo

Hashes of infamous malware

Stars: ✭ 18 (-97.29%)

Mutual labels: malware, malware-analysis, malware-research

Stoq

An open source framework for enterprise level automated analysis.

Stars: ✭ 352 (-46.91%)

Mutual labels: framework, malware-analysis, malware-research

awesome-executable-packing

A curated list of awesome resources related to executable packing

Stars: ✭ 720 (+8.6%)

Mutual labels: malware, malware-analysis, malware-research

bluepill

BluePill: Neutralizing Anti-Analysis Behavior in Malware Dissection (Black Hat Europe 2019, IEEE TIFS 2020)

Stars: ✭ 94 (-85.82%)

Mutual labels: malware, malware-analysis, malware-research

Drakvuf Sandbox

DRAKVUF Sandbox - automated hypervisor-level malware analysis system

Stars: ✭ 384 (-42.08%)

Mutual labels: malware, malware-analysis, malware-research

Thezoo

A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.

Stars: ✭ 7,849 (+1083.86%)

Mutual labels: malware, malware-analysis, malware-research

Fcl

FCL (Fileless Command Lines) - Known command lines of fileless malicious executions

Stars: ✭ 409 (-38.31%)

Mutual labels: incident-response, malware, malware-analysis

Antidebugging

A collection of c++ programs that demonstrate common ways to detect the presence of an attached debugger.

Stars: ✭ 161 (-75.72%)

Mutual labels: malware, malware-analysis, malware-research

Malcom

Malcom - Malware Communications Analyzer

Stars: ✭ 988 (+49.02%)

Mutual labels: malware, infosec, malware-analysis

Simplify

Android virtual machine and deobfuscator

Stars: ✭ 3,865 (+482.96%)

Mutual labels: malware, malware-analysis, malware-research

Binsnitch

Detect silent (unwanted) changes to files on your system

Stars: ✭ 144 (-78.28%)

Mutual labels: malware, infosec, malware-analysis

Dex Oracle

A pattern based Dalvik deobfuscator which uses limited execution to improve semantic analysis

Stars: ✭ 398 (-39.97%)

Mutual labels: malware, malware-analysis, malware-research

Multiscanner

Modular file scanning/analysis framework

Stars: ✭ 494 (-25.49%)

Mutual labels: malware, malware-analysis, malware-research

Linux.mirai

Leaked Linux.Mirai Source Code for Research/IoC Development Purposes

Stars: ✭ 466 (-29.71%)

Mutual labels: malware, malware-analysis, malware-research

MalwareDatabase

Malware samples for analysis, researchers, anti-virus and system protection testing.(1300+ Malware-samples!)

Stars: ✭ 21 (-96.83%)

Mutual labels: malware, malware-analysis, malware-research

training-materials

No description or website provided.

Stars: ✭ 47 (-92.91%)

Mutual labels: incident-response, malware, infosec

Anti-Debugging

A collection of c++ programs that demonstrate common ways to detect the presence of an attached debugger.

Stars: ✭ 297 (-55.2%)

Mutual labels: malware, malware-analysis, malware-research

malware-writeups

Personal research and publication on malware families

Stars: ✭ 104 (-84.31%)

Mutual labels: malware, malware-analysis, malware-research

Malware Samples

A collection of malware samples and relevant dissection information, most probably referenced from http://blog.inquest.net

Stars: ✭ 565 (-14.78%)

Mutual labels: malware, malware-analysis, malware-research

aurora

Malware similarity platform with modularity in mind.

Stars: ✭ 70 (-89.44%)

Mutual labels: malware, malware-research

incident-response-plan-template

A concise, directive, specific, flexible, and free incident response plan template

Stars: ✭ 288 (-56.56%)

Mutual labels: incident-response, infosec

HomebrewOverlay

Browser extension adware (showHomebrewOverlayOuter)

Stars: ✭ 52 (-92.16%)

Mutual labels: malware, malware-analysis

maalik

Feature-rich Post Exploitation Framework with Network Pivoting capabilities.

Stars: ✭ 75 (-88.69%)

Mutual labels: malware, infosec

YAFRA

YAFRA is a semi-automated framework for analyzing and representing reports about IT Security incidents.

Stars: ✭ 22 (-96.68%)

Mutual labels: incident-response, malware-research

malice-av

Malice AntiVirus Plugins

Stars: ✭ 98 (-85.22%)

Mutual labels: malware, malware-analysis

maldetect

Debian packaging of Linux Malware Detect (https://github.com/rfxn/linux-malware-detect)

Stars: ✭ 48 (-92.76%)

Mutual labels: malware, malware-analysis

Intelmq

IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.

Stars: ✭ 611 (-7.84%)

Mutual labels: incident-response, malware

mobileAudit

Django application that performs SAST and Malware Analysis for Android APKs

Stars: ✭ 140 (-78.88%)

Mutual labels: malware, malware-analysis

TweetFeed

Collecting IOCs posted on Twitter

Stars: ✭ 181 (-72.7%)

Mutual labels: malware, malware-research

maz

Malware Analysis Zoo

Stars: ✭ 25 (-96.23%)

Mutual labels: malware-analysis, malware-research

Magento Malware Scanner

Scanner, signatures and the largest collection of Magento malware

Stars: ✭ 608 (-8.3%)

Mutual labels: malware, infosec

InfosecHouse

Infosec resource center for offensive and defensive security operations.

Stars: ✭ 61 (-90.8%)

Mutual labels: incident-response, infosec

Simpleator

Simpleator ("Simple-ator") is an innovative Windows-centric x64 user-mode application emulator that leverages several new features that were added in Windows 10 Spring Update (1803), also called "Redstone 4", with additional improvements that were made in Windows 10 October Update (1809), aka "Redstone 5".

Stars: ✭ 260 (-60.78%)

Mutual labels: malware, malware-analysis

Open-source-tools-for-CTI

Public Repository of Open Source Tools for Cyber Threat Intelligence Analysts and Researchers

Stars: ✭ 91 (-86.27%)

Mutual labels: malware, infosec

Malware Research

Code written as part of our various malware investigations

Stars: ✭ 281 (-57.62%)

Mutual labels: malware-analysis, malware-research

Medusa

Binary instrumentation framework based on FRIDA