Malware Analysis
386 items from rshipp/awesome-malware-analysis ★14,275
-
angr github.com
Binary code analysis tool that also supports symbolic execution.
-
Volatility github.com
Python based memory extraction and analysis framework.
-
Ghidra github.com
Software Reverse Engineering Framework.
-
Fibratus github.com
Fibratus is a tool for exploration and tracing of the Windows kernel. It is able to capture the most of the Windows kernel activity - process/thread creation and termination, file system I/O, registry, network activity, DLL loading/unloading and much more. Fibratus has a very…
-
Krakatau github.com
Java decompiler and disassembler.
-
Flare VM github.com
Based on Windows.
-
de4dot github.com
.NET deobfuscator and unpacker.
-
dnSpy github.com
.NET assembly editor, decompiler, and debugger
-
LOKI github.com
Simple Indicators of Compromise and Incident Response Scanner
-
Bytecode Viewer github.com
-
BinWalk github.com
Analyze, reverse engineer, and extract firmware images.
-
theZoo github.com
Project created to make the possibility of malware analysis open and available to the public.
-
Capstone github.com
-
Maltrail github.com
-
GEF github.com
GDB plugin.
-
Moloch github.com
Moloch is an open source, large scale IPv4 packet capturing (PCAP), indexing and database system. A simple web interface is provided for PCAP browsing, searching, and exporting. APIs are exposed that allow PCAP data and JSON-formatted session data to be downloaded directly…
-
Quark-Engine github.com
An Obfuscation-Neglect Android Malware Scoring System.
-
cowrie github.com
SSH Honeypot (based on kippo).
-
XORTool github.com
A tool to analyze multi-byte xor cipher.
-
PEDA github.com
GDB plugin (only python2.7).
-
Yara rules github.com
-
Manalyze github.com
A static analyzer, which checks portable executables for malicious content.
-
CSCI 4976 github.com
-
uncompyle6 github.com
decompiler for the over 20 releases and 20 years of CPython.
-
plasma github.com
-
Detect It Easy(DiE) github.com
-
File Formats posters github.com
-
BAP github.com
-
chopshop github.com
is a MITRE developed framework to aid analysts in the creation and execution of pynids based decoders and detectors of APT tradecraft.
-
MailChecker github.com
💸 Cross-language temporary (disposable/throwaway) email detection library.
- next page of items loading…
