malware-analysis

There are 238 repositories under malware-analysis topic.

x64dbg
x64dbg / x64dbg
An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.
binary-analysis cpp ctf cybersecurity debugger debugging disassembler dynamic-analysis exploit-development hacking malware-analysis oscp program-analysis reverse-engineering security security-tools windows x64 x86 x86-64
Language:C++ 43176
radareorg / radare2
UNIX-like reverse engineering framework and command-line toolset
radare2 c commandline reverse-engineering forensics security binary-analysis malware-analysis disassembler hacktoberfest
Language:C 19620
Mobile-Security-Framework-MobSF
MobSF / Mobile-Security-Framework-MobSF
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
static-analysis dynamic-analysis mobsf android-security mobile-security windows-mobile-security ios-security api-testing web-security malware-analysis runtime-security devsecops apk rest cwe owasp mstg masvs mastg
Language:JavaScript 16313
rshipp / awesome-malware-analysis
Defund the Police.
analysis-framework automated-analysis awesome awesome-list chinese chinese-translation domain-analysis drop-ice dynamic-analysis list malware-analysis malware-collection malware-research malware-samples network-traffic static-analysis threat-intelligence threat-sharing threatintel
11060
ytisf / theZoo
A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.
malware malware-analysis malware-research malware-samples malwareanalysis thezoo
Language:Python 10703
Scanners-Box
We5ter / Scanners-Box
A powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑
apk-analysis binary-analysis code-analyzer devsecops exploitation-framework hacker-tools information-security malware-analysis penetration-testing pentesting-tools privacy-compliance redteam-tools security-audit security-automation smart-contracts static-analysis vulnerability-scanners wifi-hacking wifi-security
7973
pwndbg
pwndbg / pwndbg
Exploit Development and Reverse Engineering with GDB Made Easy
binary-ninja capture-the-flag ctf debugging disassembler gdb gdbinit gef hack hacktoberfest ida-pro linux malware-analysis peda pwnable pwndbg python reverse-engineering
Language:Python 6713
Detect-It-Easy
horsicq / Detect-It-Easy
Program for determining types of files for Windows, Linux and MacOS.
binary-analysis debugger detect detector disassembler elf entropy hacktoberfest hacktoberfest2023 mach-o macho malware-analysis malware-research packer pentest program-analysis reverse-engineering scanner static-analysis unpacker
Language:JavaScript 6580
gef
hugsy / gef
GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux
python exploit gdb linux reverse-engineering ctf ida-pro binary-ninja pwn exploit-development debugging malware-analysis pwntools powerpc sparc mips discord gef python-api
Language:Python 6488
bee-san / pyWhat
🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it is! 🧙‍♀️
cyber security hacking cybersecurity malware re python pcap malware-analysis malware-research tryhackme hacktoberfest
Language:Python 6352
mandiant / flare-vm
A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.
malware-analysis reverse-engineering flare
Language:PowerShell 5855
MISP / MISP
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
misp threat-sharing threat-hunting threatintel malware-analysis stix information-exchange fraud-management security cti cybersecurity fraud-detection fraud-prevention threat-analysis information-security information-sharing threat-intelligence threat-intelligence-platform intelligence threat-intel
Language:PHP 4984
mentebinaria / retoolkit
Reverse Engineer's Toolkit
malware-analysis reverse-engineering windows
Language:Inno Setup 4668
CalebFenton / simplify
Android virtual machine and deobfuscator
android android-malware dalvik deobfuscation deobfuscator emulator java malware malware-analysis malware-analyzer malware-research optimization reverse-engineer-apk reverse-engineering virtual-machine
Language:Java 4366
lief-project / LIEF
LIEF - Library to Instrument Executable Formats
android art binary-analysis dex elf executable-formats lief macho malware-analysis modification oat parser parsing pe python reverse-engineering sdk vdex
Language:C++ 4140
charles2gan / GDA-android-reversing-Tool
the fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python&java scripts, device memory extraction, data decryption, and encryption, etc.
decompiler vulnerability-scanners malware-analysis security-audit mobile-security privacy-protection
Language:Java 3879
capa
mandiant / capa
The FLARE team's open-source tool to identify capabilities in executable files.
gsoc-2024 malware-analysis reverse-engineering
Language:Python 3852
InQuest / awesome-yara
A curated list of awesome YARA rules, tools, and people.
yara-rules yara-signatures yara malware-rules malware-analysis malware-research malware-detection yara-scanner yara-manager threat-hunting awesome awesome-yara awesome-list ioc
3251
IntelOwl
intelowlproject / IntelOwl
IntelOwl: manage your Threat Intelligence at scale
security-tools python threat-intelligence ioc incident-response cyber-threat-intelligence enrichment honeynet osint osint-python threatintel malware-analysis malware-analyzer intel-owl threat-hunting hacktoberfest cyber-security cybersecurity threathunting dfir
Language:Python 3108
a0rtega / pafish
Pafish is a testing tool that uses different techniques to detect virtual machines and malware analysis environments in the same way that malware families do
analysis-environments malware malware-analysis malware-families malware-research rdtsc reverse-engineering sandbox virtual-machine
Language:C 3080
flare-floss
mandiant / flare-floss
FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
deobfuscation flare gsoc-2024 malware malware-analysis strings
Language:Python 3016
hasherezade / pe-sieve
Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).
anti-malware hooking libpeconv malware-analysis memory-forensics pe-analyzer pe-dumper pe-format pe-sieve process-analyzer scans
Language:C++ 2887
decalage2 / oletools
oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.
python python-library olefile malware-analysis ms-office-documents compound rtf forensics ole-files security parser pyparsing vba macros
Language:Python 2745
alexandreborges / malwoverview
Malwoverview is a first response tool used for threat hunting and offers intel information from Virus Total, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, InQuest and it is able to scan Android devices against VT.
malware virustotal malpedia urlhaus alienvault malshare threathunting malwarebazaar threatfox cybersecurity malware-analysis threat-hunting threatintelligence triage
Language:Python 2722
HyperDbg
HyperDbg / HyperDbg
State-of-the-art native debugging tool
binary-analysis debug debugger ept hook hyperdbg hypervisor kernel-debugger malware-analysis reverse-engineering security security-tools windows-kernel
Language:C 2577
hasherezade / pe-bear
Portable Executable reversing tool with a friendly GUI
bearparser malware-analysis multiplatform pe-analyzer pe-analyzer-gui pe-editor pe-file pe-format
Language:C++ 2415
APKLab
APKLab / APKLab
Android Reverse-Engineering Workbench for VS Code
apktool apk-decompiler apk-editor smali dalvik smalidea apksigner apk-studio android jadx reverse-engineering bytecode mitm malware-analysis app-analyzer malware-detection uber-apk-signer https-inspection
Language:TypeScript 2388
BlueTeam-Tools
A-poc / BlueTeam-Tools
Tools and Techniques for Blue Team / Incident Response
blue-team blueteam cheatsheet incident-response malware-analysis tools vulnerability-management wiki incident resources cyber-security defender
2345
APKiD
rednaga / APKiD
Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android
android antivirus machine-learning malware-detection malware-analysis malware-research yara yara-forensics packers android-protection android-protect-apps rasp appshielding
Language:YARA 1895
hasherezade / malware_training_vol1
Materials for Windows Malware Analysis training (volume 1)
windows-malware-analysis malware-analysis malware-research
Language:Assembly 1880
hasherezade / hollows_hunter
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
pe-sieve anti-malware malware-analysis malware-detection memory-forensics
Language:C 1876
alphaSeclab / awesome-rat
RAT And C&C Resources. 250+ Open Source Projects, 1200+ RAT/C&C blog/video.
c2 command-and-control command-control malware-analysis rat rat-analysis rat-malware remote-access-tool remote-administration-tool
1719
mandiant / flare-fakenet-ng
FakeNet-NG - Next Generation Dynamic Network Analysis Tool
fakenet-ng gsoc-2024 malware-analysis mandiant-flare traffic-redirection
Language:Python 1692
kevoreilly / CAPEv2
Malware Configuration And Payload Extraction
configs debugging-tools malware malware-analysis malware-research reverse-engineering sandbox unpacking cape
Language:Python 1667
maliceio / malice
VirusTotal Wanna Be - Now with 100% more Hipster
antivirus cloud cybersecurity dfir docker elasticsearch golang infosec malice malware malware-analysis malware-research virustotal
Language:Go 1600
JKornev / hidden
🇺🇦 Windows driver with usermode interface which can hide processes, file-system and registry objects, protect processes and etc
windows security malware-analysis registry driver kernel rootkit rce
Language:C 1598