94 Open source projects that are alternatives of or similar to Rootkits

Simple yara rule manager

Exploits for YARA 3.7.1 & 3.8.1

An open source framework for enterprise level automated analysis.

Yara rules written by me, for free use.

Set of Yara rules for finding files using magics headers

PEframe is a open source tool to perform static analysis on Portable Executable malware and malicious MS Office documents.

An ICAP Server with yara scanner for URL and content.

yarGen is a generator for YARA rules

Detection in the form of Yara, Snort and ClamAV signatures.

Repository of YARA rules made by McAfee ATR Team

YaraSploit is a collection of Yara rules generated from Metasploit framework shellcodes.

This project is a SIEM with SIRP and Threat Intel, all in one.

Modular file scanning/analysis framework

YARA package for Sublime Text

Please no pull requests for this repository. Thanks!

Repository of Yara rules dedicated to Phishing Kits Zip files

Real-time, container-based file scanning at enterprise scale

Rust bindings for VirusTotal/Yara

An extendable, tabbed, dockable UI widget plugin for BinaryNinja https://binary.ninja.

Validates yara rules and tries to repair the broken ones.

Hamburglar -- collect useful information from urls, directories, and files

r2yara - Module for Yara using radare2 information

A static analyzer for PE executables.

A Binary Genetic Traits Lexer Framework

ReversingLabs YARA Rules

🐺 Malware analysis platform

A Vim syntax-highlighting file for YARA rules

A tool to cluster similar executables (PEs, DEXs, and etc), extract common signature, and generate Yara patterns for malware detection.

IoC's, PCRE's, YARA's etc

Analysis of file (doc, pdf, exe, ...) in deep (emmbedded file(s)) with clamscan and yara rules

The pattern matching swiss knife

Generate YARA rules for OOXML documents.

Real-time Packet Observation Tool

Knowledge base workflow management for YARA rules and C2 artifacts (IP, DNS, SSL) (ALPHA STATE AT THE MOMENT)

Extract and aggregate threat intelligence.

Factual-rules-generator is an open source project which aims to generate YARA rules about installed software from a machine.

Investigation Planner for fast running analysis with predictable execution time. For example, static analysis.

Funnel is a lightweight yara-based feed scraper

The Python interface for YARA

Yara rule making tool (IDA Pro & Binary Ninja & Cutter Plugin)

CLI tool to analyze PE files

Yara scan Phishing Kit's Zip archive(s)

16,432 Free Yara rules created by

C# wrapper around the Yara pattern matching library

Scripts for the Ghidra software reverse engineering suite.

Yara powered NIDS with high speed packet capture powered by PF_RING

Defanged Indicator of Compromise (IOC) Extractor.

Malice Yara Plugin

Indicators of Compromises (IOC) of our various investigations

Tools for parsing rulesets using the exact grammar as YARA. Written in Go.

🐺 Malware analysis platform

Hex patterns, include patterns and magic files for the use with the ImHex Hex Editor

Guidance for mitigation web shells. #nsacyber

YARA malware query accelerator (web frontend)

Various Yara signatures (possibly to be included in a release later).

Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android

Operation Wocao - Indicators of Compromise

DIE engine

Yara Based Detection Engine for web browsers