Malware Analysis
386 items from rshipp/awesome-malware-analysis ★14,275
-
PyIOCe github.com
-
ViruSign virussign.com
Giant database dedicated to combating malware in the digital world.
-
VirusShare virusshare.com
Virus online database with more than 44 millions of samples.
-
urlscan.io urlscan.io
-
tcpxtract tcpxtract.sourceforge.net
is a tool for extracting files from network traffic based on file signatures. Extracting files based on file type headers and footers (sometimes called "carving") is an age old data recovery technique.
-
tcpick tcpick.sourceforge.net
is a textmode sniffer libpcap-based that can track, reassemble and reorder tcp streams. Tcpick is able to save the captured flows in different files or displays them in the terminal, and so it is useful to sniff files that are transmitted via ftp or http. It can display all the…
-
SecurityTrails securitytrails.com
Web based archive for WHOIS and DNS records. REST API available free of charge.
-
Privoxy privoxy.org
-
TrID mark0.net
Utility for identifying file types from their binary signatures.
-
Malshare malshare.com
Free Malware repository providing researchers access to samples, malicious feeds, and Yara results.
-
Internet Storm Center (DShield) isc.sans.edu
the ISC run a regular podcast going into the latest vulnerabilities and security news.
-
Hybrid Analysis hybrid-analysis.com
Free powerful online sandbox by CrowdStrike.
-
OllyDbg ollydbg.de
A 32-bit assembler level analysing debugger for Windows
-
cutter github.com
a decompiler based on radare2.
-
peepdf eternal-todo.com
-
CRITs crits.github.io
Web-based tool which combines an analytic engine with a cyber threat database.
-
Contagio contagiodump.blogspot.com
Collection of the latest malware samples, threats, observations, and analyses.
-
chkrootkit chkrootkit.org
-
Swftools swftools.org
Collection of utilities to work with SWF files.
-
Exif Tool sno.phy.queensu.ca
Read, write and edit file metadata.
-
Malware Museum archive.org
Collection of malware programs, usually viruses, that were distributed in the 1980s and 1990s on home computers.
-
AndroTotal andrototal.org
dead
-
Intezer analyze.intezer.com
Intezer Analyze dives into Windows binaries to detect micro-code similarities to known threats, in order to provide accurate yet easy-to-understand results.
-
Foremost foremost.sourceforge.net
Extract particular kind of files using headers.
-
Binary Ninja binary.ninja
Binary analysis framework.
-
tsurugi tsurugi-linux.org
heavily customized Linux distribution that designed to support DFIR investigations, malware analysis and OSINT activities. It is based on Ubuntu 20.04(64-bit with a 5.15.12 custom kernel)
-
PhishStats phishstats.info
Phishing Statistics with search for IP, domain and website title.
-
Cuckoo Sandbox cuckoosandbox.org
Cuckoo Sandbox is an Open Source software for automating analysis of suspicious files. To do so it makes use of custom components that monitor the behavior of the malicious processes while running in an isolated environment.
-
ClamAv clamav.net
ClamAV® is an open-source antivirus engine for detecting trojans, viruses, malware & other malicious threats.
-
HoneyDrive bruteforce.gr
HoneyDrive is the premier honeypot Linux distro. It is a virtual appliance (OVA) with Xubuntu Desktop 12.04.4 LTS edition installed. It contains over 10 pre-installed and pre-configured honeypot software packages such as Kippo SSH honeypot, Dionaea and Amun malware honeypots…
-
AutoShun autoshun.org
AutoShun is a Snort plugin that allows you to send your Snort IDS logs to a centralized server that will correlate attacks from your sensor logs with other snort sensors, honeypots, and mail filters from around the world.
-
Kaitai Struct kaitai.io
A declarative language to describe various binary data structures and a compiler to generate C++ parser code. [GPLv3+][MIT][Apache2]
-
Process Hacker processhacker.sourceforge.net
Comprehensive system monitoring and management tool.
-
Generic File Parser github.com
-
Yara Finder github.com
-
Malware Organiser github.com
-
ZScalar Zulu zulu.zscaler.com
-
ZeuS Tracker zeustracker.abuse.ch
-
Zeltser's Sources zeltser.com
-
Malicious Software zeltser.com
-
Zeltser's List zeltser.com
-
Zeltser's List zeltser.com
-
pestudio winitor.com
-
WindowsIR: Malware windowsir.blogspot.com
-
python-registry williballenthin.com
-
Whois whois.domaintools.com
-
VX Vault vxvault.net
-
VX Underground vx-underground.org
-
Jotti virusscan.jotti.org
-
Viper viper.li
- next page of items loading…
