PortEx
struppigel/portexJava library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness
anomaly-detectionbinary-analysisforensics+3
struppigel/portexJava library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness
mwemuorg/mwemuPure Rust x86 hardware emulator and Windows process simulator for malware analysis, shellcode emulation, and payload unpacking. Supports 32/64-bit PE…
suleram/view8Decompiles serialized V8 bytecode (JSC files) into high-level readable JavaScript-like code, with support for multiple V8 versions, tree output, and…
pandaadir05/ghostDetects process injection and memory manipulation used by malware. Finds RWX regions, shellcode patterns, API hooks, thread hijacking, and process…
pinksawtooth/how_to_become_a_malware_analystCurated guide to becoming a malware analyst, covering essential knowledge, reverse engineering, analysis tools, and LLM-assisted learning with…
netspooky/inhaleA malware analysis and classification tool.
secrary/drsemuDrSemu - Sandboxed Malware Detection and Classification Tool Based on Dynamic Behavior
helixo32/crimsonedrSimulate the behavior of AV/EDR for malware development training.
sjkim1127/reversecore_mcpA security-first MCP server that empowers AI agents to perform automated reverse engineering, malware analysis, forensics, vulnerability research,…
joxeankoret/cosa-nostraCosa Nostra, a FOSS graph based malware clusterization toolkit.
cert-polska/malduck🦆 Malduck is your ducky companion in malware analysis journeys
nmantani/fileinsight-pluginsFileInsight-plugins: decoding toolbox of McAfee FileInsight hex editor for malware analysis
dr4k0nia/niximportsA .NET malware loader, using API-Hashing to evade static analysis
secretsquirrel/recomposerRandomly changes Win32/64 PE Files for 'safer' uploading to malware and sandbox sites.
darkcodersc/psylodbgUser-friendly Microsoft Windows Debugger for Malware Analysts.
struppigel/hedgehog-toolsCollection of scripts for malware analysis, deobfuscation, and configuration extraction. Supports static analysis, unpacking, shellcode conversion,…
idiom/pftriagePython tool and library to help analyze files during malware triage and analysis.