malware-analysis

There are 243 repositories under malware-analysis topic.

x64dbg
x64dbg / x64dbg
An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.
binary-analysis cpp ctf cybersecurity debugger debugging disassembler dynamic-analysis exploit-development hacking malware-analysis oscp program-analysis reverse-engineering security security-tools windows x64 x86 x86-64
Language:C++ 43836
radareorg / radare2
UNIX-like reverse engineering framework and command-line toolset
binary-analysis c commandline disassembler forensics hacktoberfest malware-analysis radare2 reverse-engineering security
Language:C 20047
Mobile-Security-Framework-MobSF
MobSF / Mobile-Security-Framework-MobSF
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
android-security api-testing apk cwe devsecops dynamic-analysis ios-security malware-analysis mastg masvs mobile-security mobsf mstg owasp rest runtime-security static-analysis web-security windows-mobile-security
Language:JavaScript 16768
rshipp / awesome-malware-analysis
Defund the Police.
analysis-framework automated-analysis awesome awesome-list chinese chinese-translation domain-analysis drop-ice dynamic-analysis list malware-analysis malware-collection malware-research malware-samples network-traffic static-analysis threat-intelligence threat-sharing threatintel
11399
ytisf / theZoo
A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.
malware malware-analysis malware-research malware-samples malwareanalysis thezoo
Language:Python 10949
Scanners-Box
We5ter / Scanners-Box
A powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑
apk-analysis binary-analysis code-analyzer devsecops exploitation-framework hacker-tools information-security malware-analysis penetration-testing pentesting-tools privacy-compliance redteam-tools security-audit security-automation smart-contracts static-analysis vulnerability-scanners wifi-hacking wifi-security
8129
pwndbg
pwndbg / pwndbg
Exploit Development and Reverse Engineering with GDB Made Easy
python gdb peda gdbinit pwndbg reverse-engineering debugging ctf gef hack linux disassembler ida-pro binary-ninja capture-the-flag malware-analysis pwnable hacktoberfest
Language:Python 7023
Detect-It-Easy
horsicq / Detect-It-Easy
Program for determining types of files for Windows, Linux and MacOS.
binary-analysis debugger detect detector disassembler elf entropy hacktoberfest hacktoberfest2023 mach-o macho malware-analysis malware-research packer pentest program-analysis reverse-engineering scanner static-analysis unpacker
Language:JavaScript 6974
gef
hugsy / gef
GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux
binary-ninja ctf debugging discord exploit exploit-development gdb gef ida-pro linux malware-analysis mips powerpc pwn pwntools python python-api reverse-engineering sparc
Language:Python 6691
bee-san / pyWhat
🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it is! 🧙‍♀️
cyber security hacking cybersecurity malware re python pcap malware-analysis malware-research tryhackme hacktoberfest
Language:Python 6478
mandiant / flare-vm
A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.
malware-analysis reverse-engineering flare
Language:PowerShell 6165
MISP / MISP
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
cti cybersecurity fraud-detection fraud-management fraud-prevention information-exchange information-security information-sharing intelligence malware-analysis misp security stix threat-analysis threat-hunting threat-intel threat-intelligence threat-intelligence-platform threat-sharing threatintel
Language:PHP 5127
mentebinaria / retoolkit
Reverse Engineer's Toolkit
reverse-engineering malware-analysis windows
Language:Inno Setup 4752
CalebFenton / simplify
Android virtual machine and deobfuscator
deobfuscation java optimization android reverse-engineering malware-analysis dalvik malware deobfuscator virtual-machine emulator malware-analyzer android-malware malware-research reverse-engineer-apk
Language:Java 4417
lief-project / LIEF
LIEF - Library to Instrument Executable Formats
android art binary-analysis dex elf executable-formats lief macho malware-analysis modification oat parser parsing pe python reverse-engineering rust sdk vdex
Language:C++ 4295
capa
mandiant / capa
The FLARE team's open-source tool to identify capabilities in executable files.
malware-analysis reverse-engineering gsoc-2024
Language:Python 4011
charles2gan / GDA-android-reversing-Tool
the fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python&java scripts, device memory extraction, data decryption, and encryption, etc.
decompiler vulnerability-scanners malware-analysis security-audit mobile-security privacy-protection
Language:Java 4009
InQuest / awesome-yara
A curated list of awesome YARA rules, tools, and people.
yara-rules yara-signatures yara malware-rules malware-analysis malware-research malware-detection yara-scanner yara-manager threat-hunting awesome awesome-yara awesome-list ioc
3389
a0rtega / pafish
Pafish is a testing tool that uses different techniques to detect virtual machines and malware analysis environments in the same way that malware families do
malware reverse-engineering virtual-machine malware-families analysis-environments sandbox malware-analysis rdtsc malware-research
Language:C 3242
IntelOwl
intelowlproject / IntelOwl
IntelOwl: manage your Threat Intelligence at scale
security-tools python threat-intelligence ioc incident-response cyber-threat-intelligence enrichment honeynet osint osint-python threatintel malware-analysis malware-analyzer intel-owl threat-hunting hacktoberfest cyber-security cybersecurity threathunting dfir
Language:Python 3198
flare-floss
mandiant / flare-floss
FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
deobfuscation flare gsoc-2024 malware malware-analysis strings
Language:Python 3119
hasherezade / pe-sieve
Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).
anti-malware hooking libpeconv malware-analysis memory-forensics pe-analyzer pe-dumper pe-format pe-sieve process-analyzer scans
Language:C++ 2980
alexandreborges / malwoverview
Malwoverview is a first response tool used for threat hunting and offers intel information from Virus Total, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, InQuest and it is able to scan Android devices against VT.
malware virustotal malpedia urlhaus alienvault malshare threathunting malwarebazaar threatfox cybersecurity malware-analysis threat-hunting threatintelligence triage
Language:Python 2887
decalage2 / oletools
oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.
python python-library olefile malware-analysis ms-office-documents compound rtf forensics ole-files security parser pyparsing vba macros
Language:Python 2822
HyperDbg
HyperDbg / HyperDbg
State-of-the-art native debugging tools
hypervisor hyperdbg debugger ept windows-kernel hook kernel-debugger debug binary-analysis malware-analysis reverse-engineering security security-tools debugging debugging-tool chip fpga hardware hwdbg logic-analyzer
Language:C 2750
BlueTeam-Tools
A-poc / BlueTeam-Tools
Tools and Techniques for Blue Team / Incident Response
blue-team blueteam cheatsheet incident-response malware-analysis tools vulnerability-management wiki incident resources cyber-security defender
2555
hasherezade / pe-bear
Portable Executable reversing tool with a friendly GUI
pe-file pe-format pe-analyzer pe-analyzer-gui pe-editor multiplatform malware-analysis bearparser
Language:C++ 2542
APKLab
APKLab / APKLab
Android Reverse-Engineering Workbench for VS Code
apktool apk-decompiler apk-editor smali dalvik smalidea apksigner apk-studio android jadx reverse-engineering bytecode mitm malware-analysis app-analyzer malware-detection uber-apk-signer https-inspection
Language:TypeScript 2506
APKiD
rednaga / APKiD
Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android
android android-protect-apps android-protection antivirus appshielding machine-learning malware-analysis malware-detection malware-research packers rasp yara yara-forensics
Language:YARA 1969
hasherezade / hollows_hunter
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
pe-sieve anti-malware malware-analysis malware-detection memory-forensics
Language:C 1958
hasherezade / malware_training_vol1
Materials for Windows Malware Analysis training (volume 1)
windows-malware-analysis malware-analysis malware-research
Language:Assembly 1901
kevoreilly / CAPEv2
Malware Configuration And Payload Extraction
configs debugging-tools malware malware-analysis malware-research reverse-engineering sandbox unpacking cape
Language:Python 1794
alphaSeclab / awesome-rat
RAT And C&C Resources. 250+ Open Source Projects, 1200+ RAT/C&C blog/video.
c2 command-and-control command-control malware-analysis rat rat-analysis rat-malware remote-access-tool remote-administration-tool
1784
mandiant / flare-fakenet-ng
FakeNet-NG - Next Generation Dynamic Network Analysis Tool
fakenet-ng traffic-redirection malware-analysis mandiant-flare gsoc-2024
Language:Python 1735
JKornev / hidden
🇺🇦 Windows driver with usermode interface which can hide processes, file-system and registry objects, protect processes and etc
windows security malware-analysis registry driver kernel rootkit rce
Language:C 1653
maliceio / malice
VirusTotal Wanna Be - Now with 100% more Hipster
malice docker malware infosec virustotal elasticsearch golang antivirus cloud cybersecurity dfir malware-analysis malware-research
Language:Go 1633