dynamic-analysis

There are 61 repositories under dynamic-analysis topic.

x64dbg
x64dbg / x64dbg
An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.
debugger windows x64 disassembler reverse-engineering security x86 x86-64 malware-analysis security-tools binary-analysis ctf dynamic-analysis exploit-development hacking oscp debugging program-analysis cybersecurity offensive-security
Language:C++ 47166
trufflehog
trufflesecurity / trufflehog
Find, verify, and analyze leaked credentials
credentials devsecops dynamic-analysis precommit scanning secret secret-management secrets security security-tools trufflehog verification
Language:Go 23104
Mobile-Security-Framework-MobSF
MobSF / Mobile-Security-Framework-MobSF
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
android-security api-testing apk cwe devsecops dynamic-analysis ios-security malware-analysis mastg masvs mobile-security mobsf mstg owasp rest runtime-security static-analysis web-security windows-mobile-security
Language:JavaScript 19751
rshipp / awesome-malware-analysis
Defund the Police.
analysis-framework automated-analysis awesome awesome-list chinese chinese-translation domain-analysis drop-ice dynamic-analysis list malware-analysis malware-collection malware-research malware-samples network-traffic static-analysis threat-intelligence threat-sharing threatintel
13142
OWASP / mastg
The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.
mobile-app pentesting android-application ios-app runtime-analysis network-analysis static-analysis reverse-engineering dynamic-analysis mobile-security android ios hacking reverse-enginnering mstg testing-cryptography compliancy-checklist mast mastg
Language:Python 12541
lamda
firerpa / lamda
The most powerful Android RPA agent framework, next generation of mobile automation robots.
adb agents ai android appium automation dynamic-analysis frida magisk mcp mcp-server mobile-security pentesting remote-control reverse-engineering security uiautomation uiautomator2 workflow xposed
Language:Python 7376
tanprathan / MobileApp-Pentest-Cheatsheet
The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.
mobile-app pentesting android-application ios-app runtime-analysis network-analysis static-analysis reverse-engineers dynamic-analysis
5053
JonathanSalwan / Triton
Triton is a dynamic binary analysis library. Build your own program analysis tools, automate your reverse engineering, perform software verification or just emulate code.
binary-analysis binary-translation deobfuscation dynamic-analysis emulator instruction-semantics lifter program-analysis reverse-engineering symbolic-execution taint-analysis
Language:C++ 3910
binsider
orhun / binsider
Analyze ELF binaries like a boss 😼🕵️‍♂️
analysis binary binary-data dynamic-analysis elf hex-editor hexdump linux ratatui reverse-engineering rust static-analysis terminal terminal-ui terminal-user-interface tui
Language:Rust 3528
dweinstein / awesome-frida
Awesome Frida - A curated list of Frida resources http://www.frida.re/ (https://github.com/frida/frida)
android awesome dynamic-analysis frida hooking ios r2frida
3351
ac-pm / Inspeckage
Android Package Inspector - dynamic analysis with api hooks, start unexported activities and more. (Xposed Module)
android-application security-analysis dynamic-analysis xposed
Language:Java 2922
panda-re / panda
Platform for Architecture-Neutral Dynamic Analysis
dynamic-analysis pandare pypanda qemu reverse-engineering
Language:C 2678
iddoeldor / frida-snippets
Hand-crafted Frida examples
frida hooking java java-native-interface mobile-security reverse-engineering objective-c ios android instrumentation runtime-analysis dynamic-analysis arm64 aarch64
Language:JavaScript 2490
BinaryAnalysisPlatform / bap
Binary Analysis Platform
arm bap binary-analysis disassembler dynamic-analysis emulator instruction-semantics lifter mips ocaml powerpc program-analysis program-verification reverse-engineering security static-analysis symbolic-execution taint-analysis x86
Language:OCaml 2184
medusa
Ch0pin / medusa
Mobile Edge-Dynamic Unified Security Analysis
android android-malware dynamic-analysis frida frida-scripts frida-snippets ios ios-reverse-engineering malware medusa penetration-testing pentest
Language:JavaScript 2107
mutant
mbj / mutant
Automated code reviews via mutation testing - semantic code coverage.
mutation-testing ruby coverage rspec minitest code-review code-quality-analyzer mutant uncovered-semantics static-analysis dynamic-analysis static-anaysis
Language:Ruby 2042
oddcod3 / Phantom-Evasion
Python antivirus evasion tool
antivirus evasion dynamic-analysis obfuscator apkinjection payload msfvenom
Language:Python 1445
ksluckow / awesome-symbolic-execution
A curated list of awesome symbolic execution resources including essential research papers, lectures, videos, and tools.
awesome-list dynamic-analysis dynamic-symbolic-execution symbolic-execution
1444
nowsecure / r2frida
Radare2 and Frida better together.
android-security dynamic-analysis frida ios-security radare2 static-analysis
Language:TypeScript 1336
CrossHair
pschanely / CrossHair
An analysis tool for Python that blurs the line between testing and type systems.
python static-analysis testing-framework symbolic-execution type-systems fuzzing contracts dynamic-analysis testing z3 concolic-execution hacktoberfest
Language:Python 1222
dynamic-analysis
analysis-tools-dev / dynamic-analysis
⚙️ A curated list of dynamic analysis tools and linters for all programming languages, binaries, and more.
dynamic analysis dynamic-code-analysis dynamic-analysis dast
Language:Markdown 1044
nowsecure / fsmon
Filesystem monitor tool for Linux/Android iOS/macOS
android dynamic-analysis filesystem linux nowsecure osx tracing
Language:C 977
enlightn
enlightn / enlightn
Your performance & security consultant, an artisan command away.
laravel static-analysis dynamic-analysis performance security audit code-quality code-review
Language:PHP 974
saferwall / saferwall
:cloud: Collaborative Malware Analysis Platform at Scale
antivirus dynamic-analysis malware malware-analysis multiav portable-executable sandbox security-tools static-analysis
Language:Go 763
Tencent / HaboMalHunter
HaboMalHunter is a sub-project of Habo Malware Analysis System (https://habo.qq.com), which can be used for automated malware analysis and security assessment on the Linux system.
malware-analysis dynamic-analysis security linux static-analysis elf
Language:Python 744
olacabs / jackhammer
Jackhammer - One Security vulnerability assessment/management tool to solve all the security team problems.
security-vulnerability-assessment vulnerability-management static-code-analysis mobile-security webappsec wordpress-security network-security security-scanner security dynamic-analysis source-code-analysis penetration-testing penetration-testing-framework application-security vulnerability-scanners vulnerability-scanning vulnerability-assessment
Language:Java 739
ossillate-inc / packj
Packj stops :zap: Solarwinds-, ESLint-, and PyTorch-like attacks by flagging malicious/vulnerable open-source dependencies ("weak links") in your software supply-chain
malware npm pypi python security security-audit security-tools vulnerability rubygems supply-chain-security malware-analysis static-analysis vulnerability-scanners dynamic-analysis sandboxing devops developer-tools devops-tools devsecops supply-chain
Language:Python 678
mohitmishra786 / reversingBits
A comprehensive collection of cheatsheets for reverse engineering, binary analysis, and assembly programming tools. This repository serves as a one-stop reference for security researchers, reverse engineers, and low-level programmers.
assembly binary-analysis binary-exploitation ctf-tools debugging disassembly malware-analysis penetration-testing program-analysis reverse-engineering reversing security-tools system-security vulnerability-research x86-assembly cybersecurity cybersecurity-tools dynamic-analysis static-analysis x86-64
Language:HTML 594
mattzeunert / FromJS
See where each character on the screen came from in code.
dataflow-analysis debugging dynamic-analysis
Language:JavaScript 539
lepotekil / MsfMania
Python AV Evasion Tools
shellcode-injection compression docker edr-evasion encoding encryption obfuscation pentesting polymorphism post-exploitation python3 red-teaming pe-format cross-platform crosscompiler modular monolith
Language:Python 521
enzet / symbolic-execution
History of symbolic execution (as well as SAT/SMT solving, fuzzing, and taint data tracking)
concolic concolic-execution dynamic-analysis dynamic-symbolic-execution history program-analysis solving symbolic-execution timeline
Language:Kotlin 493
droidefense / engine
Droidefense: Advance Android Malware Analysis Framework
android security reverse engineer malware malware-analysis dalvik opcodes trojan ransomware droidefense engine static-analysis static-code-analysis dynamic-analysis dynamic-code-analysis
Language:Java 477
H4NM / WhoYouCalling
Records an executable's network activity into a Full Packet Capture file (.pcap) and much more.
dynamic-analysis game-hacking malware-analysis malware-research network-analysis etw full-packet-capture windows-event-tracing sysadmin-tool
Language:C# 445
danleh / wasabi
A dynamic analysis framework for WebAssembly programs.
dynamic-analysis javascript wasm webassembly
Language:WebAssembly 384
decal / werdlists
:keyboard: Wordlists, Dictionaries and Other Data Sets for Writing Software Security Test Cases
attack-modeling threat-hunting computer-science password-cracker http-headers html-entities environment-variables network-discovery security-tools dictionary-search awesome-list penetration-testing test-automation exploit-development information-security open-source test-data dynamic-analysis regular-expression domain-name
Language:HTML 359
ispras / casr
Collect crash (or UndefinedBehaviorSanitizer error) reports, triage, and estimate severity.
coredump crash crash-reporting dynamic-analysis fuzzing gdb sdl triage exploitable apport afl rust aflplusplus security testing appsec devsecops ssdlc vulnerability-management libfuzzer
Language:Rust 334