Malware Analysis
386 items from rshipp/awesome-malware-analysis ★14,275
-
Wireshark wireshark.org
The world’s foremost and widely-used network protocol analyzer.
-
virustotal virustotal.com
VirusTotal, a subsidiary of Google, is a free online service that analyzes files and URLs enabling the identification of viruses, worms, trojans and other kinds of malicious content detected by antivirus engines and website scanners. At the same time, it may be used as a means…
-
Hopper hopperapp.com
copyright: — macOS and Linux reverse engineering tool that lets you disassemble, decompile and debug applications. Hopper displays the code using different representations, e.g. the Control Flow Graph, and the pseudo-code of a procedure. Supports Apple Silicon.
-
Tor Browser torproject.org
Privacy browser routing traffic over the Tor network.
-
mitmproxy mitmproxy.org
Interactive intercepting HTTP proxy for penetration testers and software developers.
-
tcpdump tcpdump.org
Packet analyzer for network traffic capture.
-
Rekall rekall-forensic.com
Open source tool (and library) for the extraction of digital artifacts from volatile memory (RAM) samples.
-
Exploit database exploit-db.com
An ultimate archive of exploits and vulnerable software
-
REMnux remnux.org
Based on Debian.
-
NetworkMiner netresec.com
Network Forensic Analysis Tool.
-
Malzilla malzilla.sourceforge.net
Malware hunting tool.
-
any.run app.any.run
Interactive online malware analysis service for dynamic and static research of most types of threats using any environment.
-
Spyse spyse.com
Spyse is an OSINT search engine that provides fresh data about the entire web. All the data is stored in its own DB for instant access and interconnected with each other for flexible search. Provided data: IPv4 hosts, sub/domains/whois, ports/banners/protocols, technologies…
-
rkhunter rkhunter.sourceforge.net
A Rootkit Hunter for Linux
-
OpenVPN openvpn.net
OpenVPN is an open source software application that implements virtual private network (VPN) techniques for creating secure point-to-point or site-to-site connections in routed or bridged configurations and remote access facilities. It uses a custom security protocol that…
-
dotPeek jetbrains.com
Free-of-charge standalone tool based on ReSharper's bundled decompiler.
-
Fiddler telerik.com
Web debugging proxy.
-
ViruSign virussign.com
Giant database dedicated to combating malware in the digital world.
-
VirusShare virusshare.com
Virus online database with more than 44 millions of samples.
-
urlscan.io urlscan.io
-
tcpxtract tcpxtract.sourceforge.net
is a tool for extracting files from network traffic based on file signatures. Extracting files based on file type headers and footers (sometimes called "carving") is an age old data recovery technique.
-
tcpick tcpick.sourceforge.net
is a textmode sniffer libpcap-based that can track, reassemble and reorder tcp streams. Tcpick is able to save the captured flows in different files or displays them in the terminal, and so it is useful to sniff files that are transmitted via ftp or http. It can display all the…
-
SecurityTrails securitytrails.com
Web based archive for WHOIS and DNS records. REST API available free of charge.
-
Privoxy privoxy.org
-
TrID mark0.net
Utility for identifying file types from their binary signatures.
-
Malshare malshare.com
Free Malware repository providing researchers access to samples, malicious feeds, and Yara results.
-
Internet Storm Center (DShield) isc.sans.edu
the ISC run a regular podcast going into the latest vulnerabilities and security news.
-
Hybrid Analysis hybrid-analysis.com
Free powerful online sandbox by CrowdStrike.
-
OllyDbg ollydbg.de
A 32-bit assembler level analysing debugger for Windows
-
peepdf eternal-todo.com
- next page of items loading…
