rshipp/awesome-malware-analysis

combine by mlsecproject

Tool to gather Threat Intelligence indicators from publicly available sources

created at Feb. 21, 2014, 5:33 p.m.

Python

89 +0

655 +0

171 +0

GitHub

xortool by hellman

A tool to analyze multi-byte xor cipher

created at Jan. 18, 2011, 5:26 p.m.

Python

48 +0

1,398 +3

173 +1

GitHub

honeytrap by honeytrap

Advanced Honeypot framework.

created at Feb. 8, 2017, 4:07 p.m.

Go

51 +0

1,226 +1

174 +0

GitHub

wdbgark by swwwolf

WinDBG Anti-RootKit Extension

created at Nov. 22, 2014, 10:53 a.m.

C++

63 +0

615 +1

178 +0

GitHub

dionaea by DinoTools

Home of the dionaea honeypot

created at Dec. 21, 2015, 8:13 p.m.

Python

45 +0

713 +1

182 +0

GitHub

bulk_extractor by simsong

This is the development tree. Production downloads are at:

created at April 3, 2012, 4:36 a.m.

C++

76 +0

1,115 +3

187 +0

GitHub

binaryalert by airbnb

BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.

created at July 12, 2017, 9:27 p.m.

Python

73 +0

1,409 +2

187 +0

GitHub

vivisect by vivisect

None

created at Nov. 14, 2014, 6:28 p.m.

Python

70 +0

939 +1

187 +0

GitHub

fibratus by rabbitstack

Adversary tradecraft detection, protection, and hunting

created at March 25, 2016, 11:28 a.m.

Go

70 +0

2,210 +0

190 +0

GitHub

pharos by cmu-sei

Automated static analysis tools for binary programs

created at June 12, 2015, 5:51 p.m.

C++

78 +0

1,557 +1

191 +1

GitHub

HashCheck by gurnec

HashCheck Shell Extension for Windows with added SHA2, SHA3, and multithreading; originally from code.kliu.org

created at Dec. 5, 2014, 2:58 a.m.

C

71 +0

1,761 +0

194 +0

GitHub

malSploitBase by misterch0c

Malware exploits

created at Jan. 3, 2016, 8:16 p.m.

Python

56 +0

538 +1

197 +0

GitHub

thug by buffer

Python low-interaction honeyclient

created at Feb. 20, 2012, 11:56 a.m.

Python

76 +0

994 +3

204 +2

GitHub

malcom by tomchop

Malcom - Malware Communications Analyzer

created at June 4, 2013, 3:06 p.m.

Python

131 +0

1,155 +1

215 +0

GitHub

HaboMalHunter by Tencent

HaboMalHunter is a sub-project of Habo Malware Analysis System (https://habo.qq.com), which can be used for automated malware analysis and security assessment on the Linux system.

created at Jan. 12, 2017, 6:17 a.m.

Python

55 +0

732 +0

220 +0

GitHub

Krakatau by Storyyeller

Java decompiler, assembler, and disassembler

created at Oct. 20, 2012, 1:36 a.m.

Rust

95 +0

1,992 +0

221 +0

GitHub

Noriben by Rurik

Noriben - Portable, Simple, Malware Analysis Sandbox

created at April 10, 2013, 8:37 p.m.

Python

90 +0

1,120 +3

222 +0

GitHub

IDR by crypto2011

Interactive Delphi Reconstructor

created at Feb. 16, 2016, 12:39 p.m.

C++

83 +0

968 +4

224 -1

GitHub

Scylla by NtQuery

Imports Reconstructor

created at Sept. 13, 2011, 6:58 p.m.

C++

55 +0

1,116 +7

232 +0

GitHub

javascript-malware-collection by HynekPetrak

Collection of almost 40.000 javascript malware samples

created at May 7, 2017, 7:17 p.m.

JavaScript

37 +0

682 +5

237 +0

GitHub