Malware Analysis
Showing 36 of 235 projects
A Python framework for disassembly, static analysis, symbolic execution, and debugging of binaries and malware.
A curated collection of public JSON APIs for cybersecurity professionals, covering threat intelligence, malware analysis, and security tools.
A Python package with 30 low-high level honeypots for monitoring network traffic, bots, and credential attacks.
A PowerShell module for reverse engineering that disassembles code, analyzes malware, parses memory structures, and inspects Windows internals.
A Python utility for checking file hashes against multiple malware analysis services like VirusTotal, Hybrid Analysis, and MISP.
A dynamic binary analysis framework based on QEMU for whole-system taint analysis and security research.
Sandboxed Execution Environment
A dynamic unpacker for Windows malware that deploys packed executables, waits for payload unpacking, and dumps the extracted code.
A low-interaction honeypot that emulates vulnerable services to capture malware and analyze attacks.
Dynamic analysis tool for Android applications that monitors runtime behavior, detects information leaks, and visualizes app activity.
A curated collection of macOS and iOS security resources including tools, research, malware analysis, and hardening guides.
A script that generates VirtualBox templates to harden Windows VMs against malware detection.
A freeware reversing tool for PE files, designed for fast and flexible malware analysis.
A command-line toolkit for analyzing and working with Portable Executable (PE) binaries on multiple platforms.
An automatic, platform-independent unpacker for Windows binaries using emulation to analyze packed malware.
A collection of nearly 40,000 JavaScript malware samples for security research and analysis.
A machine learning tool that ranks strings by relevance for malware analysis, helping analysts prioritize suspicious strings.
An automated malware analysis tool for Linux ELF files, extracting static and dynamic features for security assessment.
A scalable, modular object scanner and intrusion detection system that extracts, flags, and enriches files with metadata.
A Python tool to analyze, explore, and revive malicious HTTP traffic from PCAP files for security research.
A utility for analyzing and studying malicious JavaScript by emulating a Windows JScript environment.
A comprehensive mobile application reverse engineering and analysis framework for security testing against OWASP mobile threats.
A WinDBG extension for viewing and analyzing Windows kernel anomalies to detect rootkits and system modifications.
A reinforcement learning environment for training AI agents to manipulate malware samples and evade static machine learning detection.
An extension of Cuckoo Sandbox that adds automated Android malware analysis capabilities for executing and analyzing Android applications.
A Python library and CLI for extracting and refanging defanged Indicators of Compromise (IOCs) from text.
A portable utility that identifies linkers, compilers, and packers used to create executable files across Windows, Linux, and macOS.
A collection of public exploits targeting malware infrastructure for security research and analysis.
A Python tool for collecting security intelligence from public feeds about IPs, domains, URLs, emails, hashes, and SSL fingerprints.
A Java library for static malware analysis of Portable Executable files with robust handling of malformations.
A tool for real-time SSL/TLS key extraction and traffic decryption to simplify encrypted network analysis for security researchers.
Automated tool for creating and preparing virtual machines for Cuckoo Sandbox malware analysis.
A Volatility plugin that extracts configuration data and decoded strings from known malware families in memory images.
A Python tool for extracting malware family names and tags from antivirus engine labels, designed for large-scale malware analysis.
A web application honeypot sensor that clones websites to attract and analyze malicious attacks.
A customizable live OS constructor tool written in Bash for remote forensics, malware hunting, and incident response.
Related Tags
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.