
karton
Distributed malware processing framework based on Python, Redis and S3.

Distributed malware processing framework based on Python, Redis and S3.

Python Command-Line Ghidra MCP

Windows artifact analysis toolkit that maps AV detections to PE offsets, sections, RVA/VA and strings, with YARA, AMSI, capa and multi-engine…

Python-based malware analysis sandbox that integrates with Sysinternals Procmon to automatically collect, analyze, and report runtime indicators with…

🐍 🔍 GuardDog is a CLI tool to Identify malicious PyPI and npm packages

Linux system-call monitor using ptrace to trace file, process, network, and memory activity, with namespace isolation and machine learning…

Strelka Web UI for File Submission and Analysis

A lightweight security auditor and sandbox for shell scripts. Oversight combines a Static Analysis engine (Rust) with Dynamic Enforcement (Linux…

AST-based Python code transformation & deobfuscation framework

RetDec is a retargetable machine-code decompiler based on LLVM.

Dynamic unpacker based on PE-sieve

Tool for solving BPF filters and crafting packets based on these.

MAPS cloud scanner and response parser for Microsoft Defender research.

Image-based Android malware detection framework tackling obfuscation and concept drift. Includes curated datasets and Python code for training…

Python-based scanner for CVE-2025-55182 indicators of compromise. Checks filesystem paths, processes, systemd services, cron persistence, and…

Python based tool for generating Shellcode from PIC C

ThePhish: an automated phishing email analysis tool

Static deobfuscator for Themida, WinLicense and Code Virtualizer 3.x's mutation-based obfuscation.