
flashmingo
Automatic analysis of SWF files based on some heuristics. Extensible via plugins.

Automatic analysis of SWF files based on some heuristics. Extensible via plugins.

Cmulator is ( x86 - x64 ) Scriptable Reverse Engineering Sandbox Emulator for shellcode and PE binaries . Based on Unicorn & Zydis Engine &…

Windows artifact analysis toolkit that maps AV detections to PE offsets, sections, RVA/VA and strings, with YARA, AMSI, capa and multi-engine…

Python tool that queries the VirusTotal API to check file hashes against 70+ antivirus engines, schedules recurring scans, and exports detection…

Python-based malware analysis sandbox that integrates with Sysinternals Procmon to automatically collect, analyze, and report runtime indicators with…

Distributed malware processing framework based on Python, Redis and S3.

A python script developed to process Windows memory images based on triage type.

Image-based Android malware detection framework tackling obfuscation and concept drift. Includes curated datasets and Python code for training…

Script analysis tool based on Frida.re

ParanoiDF - PDF Analysis Suite based on PeePDF by Jose Miguel Esparza (http://peepdf.eternal-todo.com/). Tools added: Password cracking, redaction…

Signature-based detection of malware features based on Windows API call sequences. It's like YARA for sandbox API traces!

ThePhish: an automated phishing email analysis tool

Strelka Web UI for File Submission and Analysis

A lightweight security auditor and sandbox for shell scripts. Oversight combines a Static Analysis engine (Rust) with Dynamic Enforcement (Linux…

Linux system-call monitor using ptrace to trace file, process, network, and memory activity, with namespace isolation and machine learning…