DECAF by decaf-project
DECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope dynamic Android malware analysis platform. DroidScope is now an extension to DECAF.
updated at April 26, 2024, 1:03 p.m.
javascript-malware-collection by HynekPetrak
Collection of almost 40.000 javascript malware samples
updated at April 25, 2024, 1:46 p.m.
stringsifter by mandiant
A machine learning tool that ranks strings based on their relevance for malware analysis.
updated at April 25, 2024, 12:46 p.m.
python-evt by williballenthin
Pure Python parser for classic Windows Event Log files (.evt)
updated at April 25, 2024, 3:18 a.m.
mailchecker by FGRibreau
Cross-language temporary (disposable/throwaway) email detection library. Covers 55 734+ fake email providers.
updated at April 24, 2024, 10:29 p.m.
HaboMalHunter by Tencent
HaboMalHunter is a sub-project of Habo Malware Analysis System (https://habo.qq.com), which can be used for automated malware analysis and security assessment on the Linux system.
updated at April 24, 2024, 9:55 p.m.
plasma by plasma-disassembler
Plasma is an interactive disassembler for x86/ARM/MIPS. It can generates indented pseudo-code with colored syntax.
updated at April 24, 2024, 9:27 p.m.
sandboxapi by InQuest
Minimal, consistent Python API for building integrations with malware sandboxes.
updated at April 24, 2024, 6:58 p.m.
polichombr by ANSSI-FR
Collaborative malware analysis framework
updated at April 24, 2024, 5:45 p.m.