Malware Analysis
386 items from rshipp/awesome-malware-analysis ★14,275
-
Yara rules generator github.com
Generator for YARA rules - The main principle is the creation of yara rules from strings found in malware files while removing all strings that also appear in goodware files.
-
al-khaser github.com
-
MISP github.com
-
capa github.com
-
Barf github.com
Binary Analysis and Reverse engineering Framework.
-
bulk_extractor github.com
Computer forensics tool that scans a disk image, a file, or a directory of files and extracts useful information without parsing the file system or file system structures. Because of ignoring the file system structure, the program distinguishes itself in terms of speed and…
-
dnstwist github.com
-
IDR github.com
Interactive Delphi Reconstructor.
-
PyInstaller Extractor github.com
-
ngrep github.com
strives to provide most of GNU grep's common features, applying them to the network layer. ngrep is a pcap-aware tool that will allow you to specify extended regular or hexadecimal expressions to match against data payloads of packets. It currently recognizes TCP, UDP and ICMP…
-
ScyllaHide github.com
-
FLOSS github.com
-
ThreatIngestor github.com
-
Pafish github.com
-
DECAF (Dynamic Executable Code Analysis Framework) github.com
Dynamic Executable Code Analysis Framework based on QEMU (DroidScope is now an extension to DECAF)
-
un{i}packer github.com
Automatic and platform-independent unpacker for Windows binaries based on emulation.
-
StringSifter github.com
A machine learning tool that ranks strings based on their relevance for malware analysis.
-
CapTipper github.com
Malicious HTTP traffic explorer
-
Scalpel github.com
Scalpel is an open source data carving tool.
-
binnavi github.com
-
Combine github.com
-
PEframe github.com
Tool for performing static analysis on PE malware and generic suspicious files.
-
MultiScanner github.com
-
Nauz File Detector github.com
Static Linker/Compiler/Tool detector for Windows, Linux and MacOS.
-
MHN github.com
-
PortEx github.com
Java library for static malware analysis of PE files with a focus on PE malformation robustness and anomaly detection.
-
FakeNet-NG github.com
-
HashCheck github.com
-
YETI github.com
-
FireEye OpenIOCs github.com
FireEye Publicly Shared Indicators of Compromise (IOCs)
-
RABCDAsm github.com
Collection of utilities including an ActionScript 3 assembler/disassembler.
-
malice.io github.com
-
APT Notes github.com
-
fn2yara github.com
-
PyREBox github.com
-
Malheur github.com
Tool for the automatic analysis of malware behavior (recorded from malicious software in a sandbox environment).
-
Zeus Source Code github.com
-
Conpot github.com
-
BinaryAlert github.com
-
Scylla Imports Reconstructor github.com
-
Honeytrap github.com
-
Noriben github.com
-
DRAKVUF github.com
-
inVtero.net github.com
Advanced memory analysis for Windows x64 with nested hypervisor support.
-
Malcom github.com
-
Ember github.com
-
PackerAttacker github.com
Tool that uses memory and code hooks to detect packers.
-
Hostintel github.com
Pull intelligence per host.
-
evolve github.com
Web interface for the Volatility Memory Forensics Framework.
-
Udis86 github.com
- next page of items loading…
