norimaci
mnrkbys/norimaciLightweight macOS malware analysis sandbox that monitors system activity via OpenBSM or Monitor.app, generating detailed reports and timelines of…
dynamic-analysis-sandboxingforensicsmalware-analysis
mnrkbys/norimaciLightweight macOS malware analysis sandbox that monitors system activity via OpenBSM or Monitor.app, generating detailed reports and timelines of…
kaysec/hybrid-submitA script that automatically submits files to Hybrid Analysis (API)
hynekpetrak/malware-jailSandbox for semi-automatic Javascript malware analysis, deobfuscation and payload extraction. Written for Node.js
secretsquirrel/recomposerRandomly changes Win32/64 PE Files for 'safer' uploading to malware and sandbox sites.
saadahla/anti-sandboxC++ tool for detecting AnyRun sandbox environments, enabling malware to evade dynamic analysis and automated sandboxing systems.
sobri3195/pegasus-malware-scanMulti-layered malware scanner combining hash-based verification, behavioral analysis, and sandbox execution for threat detection, incident response,…
0x534a/dynmxSignature-based detection of malware features based on Windows API call sequences. It's like YARA for sandbox API traces!
cert-polska/drakvuf-sandboxAutomated hypervisor-level malware analysis sandbox with agentless guest introspection, web-based result exploration, and guided installer for…
idanr1986/cuckoo-droidCuckooDroid - Automated Android Malware Analysis with Cuckoo Sandbox.
rin449/bhpaiMulti-format malware analysis platform combining a stealth Ring-3 Windows sandbox, static PE/PDF analyzers, ransomware key recovery, and an AI…
blacksnufkin/litterboxA self-hosted sandbox for red teams to test payloads against modern detection before deployment. MCP integration lets an LLM agent drive analysis end…
mrexodia/dumpulatorAn easy-to-use library for emulating memory dumps. Useful for malware analysis (config extraction, unpacking) and dynamic analysis in general…
advdebug/brovanUser-mode x86_64 binary emulator for malware analysis and reverse engineering. Supports PE, ELF, memory dumps, and raw binaries with syscall tracing,…
beelzebub-labs/azazeleBPF-powered silent observer for containerized runtimes, built for malware analysis sandboxes and Agentic AI monitoring.
brandon7cc/mac-monitorAdvanced macOS system monitor leveraging Apple Endpoint Security to collect, enrich, and display process, file, memory, and XPC events for malware…
pjlantz/droidboxDynamic analysis sandbox for Android apps that monitors network traffic, file operations, cryptographic API usage, permission circumvention, and…
zeromemoryex/c2-hunterReal-time C2 traffic extractor for malware analysts. Hooks Win32 connection APIs to intercept and analyze command-and-control communication,…
struppigel/hedgehog-toolsCollection of scripts for malware analysis, deobfuscation, and configuration extraction. Supports static analysis, unpacking, shellcode conversion,…