Dex OracleA pattern based Dalvik deobfuscator which uses limited execution to improve semantic analysis
Stars: ✭ 398 (+552.46%)
PafishPafish is a testing tool that uses different techniques to detect virtual machines and malware analysis environments in the same way that malware families do
Stars: ✭ 2,026 (+3221.31%)
Freki🐺 Malware analysis platform
Stars: ✭ 285 (+367.21%)
Drakvuf SandboxDRAKVUF Sandbox - automated hypervisor-level malware analysis system
Stars: ✭ 384 (+529.51%)
SimplifyAndroid virtual machine and deobfuscator
Stars: ✭ 3,865 (+6236.07%)
AntidebuggingA collection of c++ programs that demonstrate common ways to detect the presence of an attached debugger.
Stars: ✭ 161 (+163.93%)
OwlyshieldOwlyshield is an EDR framework designed to safeguard vulnerable applications from potential exploitation (C&C, exfiltration and impact))..
Stars: ✭ 281 (+360.66%)
MalwareDatabaseMalware samples for analysis, researchers, anti-virus and system protection testing.(1300+ Malware-samples!)
Stars: ✭ 21 (-65.57%)
SojoboA binary analysis framework
Stars: ✭ 116 (+90.16%)
XapkdetectorAPK/DEX detector for Windows, Linux and MacOS.
Stars: ✭ 208 (+240.98%)
DrsemuDrSemu - Sandboxed Malware Detection and Classification Tool Based on Dynamic Behavior
Stars: ✭ 237 (+288.52%)
MaliceVirusTotal Wanna Be - Now with 100% more Hipster
Stars: ✭ 1,253 (+1954.1%)
PecliCLI tool to analyze PE files
Stars: ✭ 46 (-24.59%)
Anti-DebuggingA collection of c++ programs that demonstrate common ways to detect the presence of an attached debugger.
Stars: ✭ 297 (+386.89%)
decrypticonJava-layer Android Malware Simplifier
Stars: ✭ 17 (-72.13%)
ApkfileAndroid app analysis and feature extraction library
Stars: ✭ 190 (+211.48%)
MalwaresearchA command line tool to find malwares on http://openmalware.org
Stars: ✭ 190 (+211.48%)
Malware FeedBringing you the best of the worst files on the Internet.
Stars: ✭ 69 (+13.11%)
bluepillBluePill: Neutralizing Anti-Analysis Behavior in Malware Dissection (Black Hat Europe 2019, IEEE TIFS 2020)
Stars: ✭ 94 (+54.1%)
PevThe PE file analysis toolkit
Stars: ✭ 422 (+591.8%)
Linux.miraiLeaked Linux.Mirai Source Code for Research/IoC Development Purposes
Stars: ✭ 466 (+663.93%)
MultiscannerModular file scanning/analysis framework
Stars: ✭ 494 (+709.84%)
binlexA Binary Genetic Traits Lexer Framework
Stars: ✭ 303 (+396.72%)
Malware SamplesA collection of malware samples and relevant dissection information, most probably referenced from http://blog.inquest.net
Stars: ✭ 565 (+826.23%)
yaraMalice Yara Plugin
Stars: ✭ 27 (-55.74%)
Malware-ZooHashes of infamous malware
Stars: ✭ 18 (-70.49%)
WdbgarkWinDBG Anti-RootKit Extension
Stars: ✭ 450 (+637.7%)
PolichombrCollaborative malware analysis framework
Stars: ✭ 307 (+403.28%)
Detect It EasyProgram for determining types of files for Windows, Linux and MacOS.
Stars: ✭ 2,982 (+4788.52%)
ProbedroidA SDK for the creation of analysis tools without obtaining app source code in order to profile runtime performance, examine code coverage, and track high-risk behaviors of a given app on Android 5.0 and above.
Stars: ✭ 182 (+198.36%)
PwndbgExploit Development and Reverse Engineering with GDB Made Easy
Stars: ✭ 4,178 (+6749.18%)
Nauz File DetectorLinker/Compiler/Tool detector for Windows, Linux and MacOS.
Stars: ✭ 146 (+139.34%)
FameFAME Automates Malware Evaluation
Stars: ✭ 663 (+986.89%)
MalwareHashDBMalware hashes for open source projects.
Stars: ✭ 31 (-49.18%)
YargenyarGen is a generator for YARA rules
Stars: ✭ 795 (+1203.28%)
SimpleatorSimpleator ("Simple-ator") is an innovative Windows-centric x64 user-mode application emulator that leverages several new features that were added in Windows 10 Spring Update (1803), also called "Redstone 4", with additional improvements that were made in Windows 10 October Update (1809), aka "Redstone 5".
Stars: ✭ 260 (+326.23%)
Threat HuntingPersonal compilation of APT malware from whitepaper releases, documents and own research
Stars: ✭ 219 (+259.02%)
malware-writeupsPersonal research and publication on malware families
Stars: ✭ 104 (+70.49%)
freki🐺 Malware analysis platform
Stars: ✭ 327 (+436.07%)
ThezooA repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.
Stars: ✭ 7,849 (+12767.21%)
Nt wrapperA wrapper library around native windows sytem APIs
Stars: ✭ 287 (+370.49%)
Vxug PapersResearch code & papers from members of vx-underground.
Stars: ✭ 291 (+377.05%)
MedusaBinary instrumentation framework based on FRIDA
Stars: ✭ 258 (+322.95%)
ZelosA comprehensive binary emulation and instrumentation platform.
Stars: ✭ 298 (+388.52%)
Macbook《macOS软件安全与逆向分析》随书源码
Stars: ✭ 302 (+395.08%)
MalsubA Python RESTful API framework for online malware analysis and threat intelligence services.
Stars: ✭ 308 (+404.92%)
Reverse Engineering TutorialA FREE comprehensive reverse engineering tutorial covering x86, x64, 32-bit ARM & 64-bit ARM architectures.
Stars: ✭ 5,763 (+9347.54%)
DrltraceDrltrace is a library calls tracer for Windows and Linux applications.
Stars: ✭ 282 (+362.3%)
Phishing.databasePhishing Domains, urls websites and threats database. We use the PyFunceble testing tool to validate the status of all known Phishing domains and provide stats to reveal how many unique domains used for Phishing are still active.
Stars: ✭ 296 (+385.25%)
ColdfireGolang malware development framework
Stars: ✭ 309 (+406.56%)
Analyst CasefileMaltego CaseFile entities for information security investigations, malware analysis and incident response
Stars: ✭ 41 (-32.79%)
ApkidAndroid Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android
Stars: ✭ 999 (+1537.7%)
GonnacryA Linux Ransomware
Stars: ✭ 341 (+459.02%)