Obfu-DE-Scate
user1342/obfu-de-scateFuzzy comparison tool for deobfuscating Android APKs by identifying renamed functions across versions, generating mapping files and interactive HTML…
android-securitybinary-analysismalware-analysis+2
199
user1342/obfu-de-scateFuzzy comparison tool for deobfuscating Android APKs by identifying renamed functions across versions, generating mapping files and interactive HTML…
rad9800/pmdPractical Windows malware development course: API hashing, DLL sideloading, shellcode execution, PE manipulation, payload hosting, and delivery labs.
blacksnufkin/rusty-playgroundSome Rust program I wrote while learning Malware Development
nozominetworks/upx-recovery-toolAutomates repair of malformed UPX headers in ELF binaries, restoring magic, filesize, blocksize, and overlay fields so standard unpackers can process…
c3rb3ru5d3d53c/mwcfgA Feature Rich Modular Malware Configuration Extraction Utility for MalDuck
warpedatom/offsetinspectPowerShell toolkit for AMSI/Defender detection-boundary analysis and static malware triage maps byte offsets to detection triggers, plus YARA,…
pan-unit42/dotnetfilePython library for parsing CLR/PE metadata in .NET assemblies, exposing streams and hash fingerprints to support malware analysis and threat hunting.
struppigel/portexanalyzerguiGraphical interface for PortEx, a Portable Executable and Malware Analysis Library
cdong1012/idapython-malware-scriptsScripts for automating malware analysis and reverse engineering workflows in IDA Pro, covering binary inspection, static analysis, and code…
maldev-academy/drmbinviaordinalimportsCreate Anti-Copy DRM Malware
n1ght-w0lf/uchihashA small utility to deal with malware embedded hashes.
dump-guy/get-pdinvokeimportsPowerShell module for automatic detection of P/Invoke, Dynamic P/Invoke, and D/Invoke in .NET assemblies. Reveals unmanaged API calls, MDTokens, and…
hasherezade/flareon2024Solutions and write-ups for Flare-On 11 CTF challenges, showcasing reverse engineering, binary analysis, and malware analysis techniques with…
withsecurelabs/radare2-scriptsCollection of radare2 scripts for malware analysis: carve binaries from memory dumps, patch PE headers, and decode hashed function imports in…
ignacioj/whacamoleLive memory analysis detecting malware IOCs in processes, modules, handles, tokens, threads, .NET assemblies, memory address space and environment…
hasherezade/flareon2023Source-code solutions to Flare-On 10 reverse engineering challenges, demonstrating binary and malware analysis techniques for CTF-style reversing…
anpa1200/aidebugEvidence-focused malware reverse engineering with deep PE/.NET inspection, Ghidra reconstruction, AI cross-checks, YARA, and ELF debugging
embee-research/icedid-file-decryptorStatic Decryptor for IcedID Malware