Binary Analysis

Java IDX ParserPython

A forensic tool that parses Java Cache IDX files to extract malware download history and binary data for incident response.

ELF PackerC

Encrypts 64-bit ELF files with self-decryption at runtime for binary protection.

Hexgolems - Pint Debugger BackendC++

A Lua wrapper and debugger backend for Intel PIN, enabling dynamic binary instrumentation via Lua scripts.

Woody Wood PackerC

An ELF packer that encrypts the .text section of executables and injects self-decryption shellcode, printing '....WOODY....' upon execution.

Dataset of Packed ELF

A dataset of ELF files packed with various packers for training machine learning models on executable packing detection.

Capstone4DelphiPascal

Delphi bindings for the Capstone disassembler library, enabling binary code analysis and reverse engineering.

PEiD (yara)Go

A portable PEiD implementation using YARA rules for malware analysis without requiring YARA installation.

PackingData

A dataset of PE files packed with various packers for malware analysis and security research.

Packer detection tool evaluationPython

Evaluates packer detection tools pypeid and Detect It Easy (DIE) on malware datasets to compare accuracy and false positive rates.

ada-bfdAda

Ada binding for GNU Binutils BFD library to read binary ELF and COFF files.

REMINDerPython

Detects packers in executable files using an entropy-based heuristic from academic research.

Deno DigRust

A tool that extracts application code and npm packages from standalone Deno binaries created with deno compile.