593 Open source projects that are alternatives of or similar to Reversinglabs Yara Rules

Malice Yara Plugin

DrSemu - Sandboxed Malware Detection and Classification Tool Based on Dynamic Behavior

Drltrace is a library calls tracer for Windows and Linux applications.

CLI tool to analyze PE files

Android app analysis and feature extraction library

Linker/Compiler/Tool detector for Windows, Linux and MacOS.

Yara Ruleset for scanning Linux servers for shells, spamming, phishing and other webserver baddies

Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android

🐺 Malware analysis platform

Android Reverse-Engineering Workbench for VS Code

A tool to cluster similar executables (PEs, DEXs, and etc), extract common signature, and generate Yara patterns for malware detection.

BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.

DIE engine

An open source framework for enterprise level automated analysis.

APK/DEX detector for Windows, Linux and MacOS.

A Web Malware Scanner

A curated list of awesome YARA rules, tools, and people.

Collecting IOCs posted on Twitter

Ghidra C++ Class and Run Time Type Information Analyzer

Funnel is a lightweight yara-based feed scraper

Yara rule making tool (IDA Pro & Binary Ninja & Cutter Plugin)

YARA malware query accelerator (web frontend)

A customizable, easy-to-navigate tool for researching, pen testing, and defending with the power of Shodan.

Exploits for YARA 3.7.1 & 3.8.1

Yara scan Phishing Kit's Zip archive(s)

YaraSploit is a collection of Yara rules generated from Metasploit framework shellcodes.

Validates yara rules and tries to repair the broken ones.

Factual-rules-generator is an open source project which aims to generate YARA rules about installed software from a machine.

Steam Controller reverse engineering and customization project.

An ICAP Server with yara scanner for URL and content.

One-step iOS binary runtime instrumentation for the lazy ones

Rust bindings for VirusTotal/Yara

Yara Based Detection Engine for web browsers

The repository contains the python implementation of the Android Malware Detection paper: "Empirical assessment of machine learning-based malware detectors for Android: Measuring the Gap between In-the-Lab and In-the-Wild Validation Scenarios"

Microcode Updates for the USENIX 2017 paper: Reverse Engineering x86 Processor Microcode

第三届阿里云安全算法挑战赛

🐺 Malware analysis platform

A list of awesome malware detection tools

Using Riru to dump il2cpp data at runtime

Network Scanner with Backdoor Detection, other Nmap resources and syn-protection detection

MultiAV scanner with Python and JSON REST API using Malice Docker AV Containers and Docker-Machine based Autoscaling

C# wrapper around the Yara pattern matching library

Automatic and platform-independent unpacker for Windows binaries based on emulation

Boomerang Decompiler - Fighting the code-rot :)

B2R2 is a collection of useful algorithms, functions, and tools for binary analysis.

Yara rules written by me, for free use.

Detection in the form of Yara, Snort and ClamAV signatures.

Yara powered NIDS with high speed packet capture powered by PF_RING

Analysis of file (doc, pdf, exe, ...) in deep (emmbedded file(s)) with clamscan and yara rules

r2yara - Module for Yara using radare2 information

Personal research and publication on malware families

Source code of Valve Anti-Cheat obtained from disassembly of compiled modules

YARA package for Sublime Text

RNN implementation with Keras for machine activity data to predict malware

Generate YARA rules for OOXML documents.

adversarial examples, adversarial malware examples, adversarial malware detection, adversarial deep ensemble, Android malware variants

Set of Yara rules for finding files using magics headers

frick - aka the first debugger built on top of frida

The Touhou PC-98 Restoration Project

Simple yara rule manager