speakeasy
mandiant/speakeasyWindows malware emulation framework that executes binaries, drivers, and shellcode in a modeled runtime, emulating APIs, process/thread behavior,…
binary-analysisdynamic-analysis-sandboxingmalware-analysis+1
2.1k
mandiant/speakeasyWindows malware emulation framework that executes binaries, drivers, and shellcode in a modeled runtime, emulating APIs, process/thread behavior,…
kevthehermit/ratdecodersPython Decoders for Common Remote Access Trojans
withsecurelabs/python-exe-unpackerA helper script for unpacking and decompiling EXEs compiled from python code.
ergrelet/unlicenseDynamic unpacker and import fixer for Themida/WinLicense 2.x and 3.x.
cecio/usbvalveExpose USB activity on the fly
cert-polska/kartonDistributed malware processing framework based on Python, Redis and S3.
monnappa22/limonLimon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators…
mitre/multiscannerModular file scanning/analysis framework
d4rksystem/vmwarecloakA PowerShell script that attempts to help malware analysts hide their VMware Windows VM's from malware that may be trying to evade analysis.
last-emo-boy/rikuneMCP server for reverse engineering Windows executables and binary formats. Combines static triage, Ghidra-assisted function recovery, plugin-driven…
hydradragonantivirus/hydradragonantivirusDynamic and static analysis with Real Time Malware Analysis with Antivirus for Windows, including open-source XDR (3 EDR projects), ClamAV, YARA-X,…
detuxsandbox/detuxThe Multiplatform Linux Sandbox
secrary/drsemuDrSemu - Sandboxed Malware Detection and Classification Tool Based on Dynamic Behavior
remnux/distroProvides supplemental files and Debian package sources for a specialized Linux distro focused on malware analysis, reverse engineering, and digital…
cert-polska/malduck🦆 Malduck is your ducky companion in malware analysis journeys
lloydlabs/wsb-detectwsb-detect enables you to detect if you are running in Windows Sandbox ("WSB")
payloadsecurity/sandbox_scryerParses public sandbox detonation reports to produce threat hunting intelligence, organizes findings via MITRE ATT&CK, assembles IOCs, and generates…
yarox24/attack_monitorEndpoint detection & Malware analysis software