hacksguard
rhacknarok/hacksguardA blazingly fast, multi-threaded TUI malware analysis tool built in Rust. Features deep PE parsing, YARA scanning, and heuristic risk scoring.
binary-analysisforensicsmalware-analysis+2
207
rhacknarok/hacksguardA blazingly fast, multi-threaded TUI malware analysis tool built in Rust. Features deep PE parsing, YARA scanning, and heuristic risk scoring.
uky007/petriagePETriage: A symbol-unified PE file reader for triage, built for multi-platform and multi-interface use.
c3rb3ru5d3d53c/mwcfgA Feature Rich Modular Malware Configuration Extraction Utility for MalDuck
farghlymal/config-extractorsExtracts and decrypts malware configuration data from captured samples, automating C2 endpoint discovery, credential extraction, and indicator triage…
pandaadir05/ghostDetects process injection and memory manipulation used by malware. Finds RWX regions, shellcode patterns, API hooks, thread hijacking, and process…
thannikudam/topazterminatorC-based tool exploiting the vulnerable wsftprm.sys kernel driver to terminate protected EDR/AV processes on Windows, including PPL processes, via…
adem-hosni/mappedimagesdetectorLightweight native Windows memory scanner for AV/EDR platforms, detecting suspicious mapped images and manual DLL injection techniques by IAT thunk
a0rtega/pafishPafish is a testing tool that uses different techniques to detect virtual machines and malware analysis environments in the same way that malware…
d35ha/callobfuscatorObfuscate specific windows apis with different apis
threatlabz/toolsTools developed by the Zscaler ThreatLabz Threat Intelligence team
mephistolist/sovietA Runtime Crypter in C for Linux ELF binaries.
securityjoes/threatresearchPython config extractors for malware families including PlugX, Remcos, templateX, and RedLine Stealer, supporting C2 configuration extraction for…
cristianzsh/frekiOpen-source malware analysis platform with static PE analysis, YARA pattern matching, VirusTotal integration, REST API, and Docker deployment for…
dosx-dev/obfus.hMacro-header for compile-time C obfuscation (tcc, win x86/x64)
ropfuscator/ropfuscatorROPfuscator is a fine-grained code obfuscation framework for C/C++ programs using ROP (return-oriented programming).
elfmaster/mayaHighly advanced Linux anti-exploitation and anti-tamper binary protector for ELF.
warpedatom/offsetinspectPowerShell toolkit for AMSI/Defender detection-boundary analysis and static malware triage maps byte offsets to detection triggers, plus YARA,…
lilify-jp/squre🛡️ Open-source binary protection toolkit for Windows PE. Nanomite, VM protection, anti-debug, and more.