gmh5225/eac-kernel-packet-fuckerReverse-engineered Easy Anti-Cheat kernel driver bypass that intercepts memory allocation to suppress violation packets, with report decryption…
cert-ee/cuckoo3Open-source automated malware analysis sandbox that runs suspicious files and URLs in isolated VMs and generates detailed behavioral reports.
alphadelta/secure-desktopAnti-keylogger/anti-rat application for Windows
mushorg/buttinskyBotnet monitoring is a crucial part in threat analysis and often neglected due to the lack of proper open source tools. Our tool will provide an open…
saadahla/anti-sandboxC++ tool for detecting AnyRun sandbox environments, enabling malware to evade dynamic analysis and automated sandboxing systems.
lcbower33/stegoscanAutomated steganography detection tool that scans websites, web servers, and local directories using AI-driven object/text recognition and deep file…
mephistolist/sovietA Runtime Crypter in C for Linux ELF binaries.
fabiobaroni/wasAutomatic USB drive malware scanning tool for the security-minded person
cmu-sei/pharosAutomated static analysis tools for binary programs
manhnho/shellsumA defense tool - detect web shells in local directories via md5sum
nuclearphoenixx/fake-sandbox👁🗨 This script will simulate fake processes of analysis sandbox/VM software that some malware will try to avoid.
alexmyg/andropytoolA framework for automated extraction of static and dynamic features from Android applications
password123456/certverifyA scanner that files with compromised or untrusted code signing certificates written in python.
cryptax/droidlysisAutomated pre-analysis tool for Android apps that disassembles samples, extracts properties via configurable pattern matching, and organizes output…
zeromemoryex/bypass-sandbox-evasionC++ tool that patches Windows API calls to bypass sandbox RAM size checks, enabling malware to evade detection in isolated analysis environments.
emalderson/thephishThePhish: an automated phishing email analysis tool
fboldewin/atmmalscanCommand-line DFIR tool for scanning Windows ATM systems to detect malware traces in process memory and disk, with automated memory dump creation for…
kaysec/hybrid-submitA script that automatically submits files to Hybrid Analysis (API)
