Tools

google/magika

Fast and accurate AI powered file content types detection

horsicq/detect-it-easy

Program for determining types of files for Windows, Linux and MacOS.

mandiant/flare-vm

A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on…

tanprathan/mobileapp-pentest-cheatsheet

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration…

decalage2/oletools

Python toolkit for analyzing MS OLE2 and Office documents, extracting VBA macros, detecting exploits, and performing forensic analysis of structured…

virustotal/yara-x

A rewrite of YARA in Rust.

struppigel/portex

Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness

certcc/cve-2021-44228_scanner

Scanners for Jar files that may be vulnerable to CVE-2021-44228

target/halogen

Automatically create YARA rules from malicious documents.

netspooky/inhale

A malware analysis and classification tool.

tstillz/webshell-analyzer

Web shell scanner and analyzer.

crowdstrike/xwf-yara-scanner

Native YARA scanner X-Tension for X-Ways Forensics, enabling in-snapshot file scanning with multi-threaded RVS support, report table output, and no…

inquest/yara-rules-vt

Collection of YARA rules designed for usage through VirusTotal.com.

threatlabz/iocs

Curated Indicators of Compromise and YARA rules from Zscaler ThreatLabz public reports for threat hunting, malware research, and detection…

sh1n0g1/z9

Detects PowerShell-based malware artifacts from event logs and performs static analysis on PowerShell scripts to identify malicious activity.

dr4k0nia/tooling-playground

A collection of small scripts and tools for deobfuscation and malware analysis.