Tools

cyb3rmx/qu1cksc0pe

All-in-One malware analysis tool.

microsoft/procdump-for-linux

A Linux version of the ProcDump Sysinternals tool

x0rz/eqgrp_lost_in_translation

Decrypted content of odd.tar.xz.gpg, swift.tar.xz.gpg and windows.tar.xz.gpg

timb-machine/linux-malware

Tracking interesting Linux (and UNIX) malware. Send PRs

aikidosec/safe-chain

Protect against malicious code installed via npm, yarn, pnpm, npx, pnpx, pip, uv and poetry with Aikido Safe Chain. Free to use, no tokens required.

rasta-mouse/threatcheck

Identifies the bytes that Microsoft Defender / AMSI Consumer flags on.

hasherezade/tiny_tracer

Intel Pin-based tracer for API calls, syscalls, and instructions with anti-debug evasion, used for malware analysis and reverse engineering of packed…

sh4hin/androl4b

A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis

xacone/bestedrofthemarket

Open-source Windows kernel-level EDR lab for understanding and testing detection methods against process injection, credential dumping, and other…

mattifestation/powershellarsenal

A PowerShell Module Dedicated to Reverse Engineering

cecio/usbvalve

Expose USB activity on the fly

datadog/security-labs-pocs

Proof of concept code for Datadog Security Labs referenced exploits.

loerting/threadtear

Multifunctional java deobfuscation tool suite

diogo-fernan/ir-rescue

A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.

forrest-orr/moneta

Moneta is a live usermode memory analysis tool for Windows with the capability to detect malware IOCs

michaelweber/macrome

Excel Macro Document Reader/Writer for Red Teamers & Analysts