
shai-scan
Zero-dependency CLI scanner for npm/PyPI supply chain compromises. Detects compromised packages in lockfiles and system-level IOCs from attacks like…

Zero-dependency CLI scanner for npm/PyPI supply chain compromises. Detects compromised packages in lockfiles and system-level IOCs from attacks like…
Maliciousness scoring for Linux commands

Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness

PEframe is a open source tool to perform static analysis on Portable Executable malware and malicious MS Office documents.

An open source script to perform malware static analysis on Portable Executable

A malware analysis and classification tool.

Graphical interface for PortEx, a Portable Executable and Malware Analysis Library

A blazingly fast, multi-threaded TUI malware analysis tool built in Rust. Features deep PE parsing, YARA scanning, and heuristic risk scoring.

Static-first research tool for unpacking Nuitka-compiled binaries: extracts constants, modules, recovers .pyc files, and generates analysis reports.

Tool to help guess a files 256 byte XOR key by using frequency analysis

Python library for parsing CLR/PE metadata in .NET assemblies, exposing streams and hash fingerprints to support malware analysis and threat hunting.

Static analysis tool for investigating potentially malicious Microsoft Excel files, extracting metadata, macros, and embedded objects to aid digital…

JAR analysis tool for exploring, searching, and extracting specific classes from large JAR files with bytecode search, multi-selection extraction,…

Command line tool for scanning streams within office documents plus xor db attack

PETriage: A symbol-unified PE file reader for triage, built for multi-platform and multi-interface use.


Portable Executable reversing tool with a friendly GUI

pefile is a Python module to read and work with PE (Portable Executable) files