flare-learning-hub
mandiant/flare-learning-hubFree educational content on reverse engineering and malware analysis from the FLARE team
binary-analysisdebuggerseducation+4
1.4k
mandiant/flare-learning-hubFree educational content on reverse engineering and malware analysis from the FLARE team
ctxis/capeMalware Configuration And Payload Extraction
ignacioj/whacamoleLive memory analysis detecting malware IOCs in processes, modules, handles, tokens, threads, .NET assemblies, memory address space and environment…
cert-polska/drakvuf-sandboxAutomated hypervisor-level malware analysis sandbox with agentless guest introspection, web-based result exploration, and guided installer for…
anpa1200/aidebugEvidence-focused malware reverse engineering with deep PE/.NET inspection, Ghidra reconstruction, AI cross-checks, YARA, and ELF debugging
kevthehermit/ratdecodersPython Decoders for Common Remote Access Trojans
payloadsecurity/sandbox_scryerParses public sandbox detonation reports to produce threat hunting intelligence, organizes findings via MITRE ATT&CK, assembles IOCs, and generates…
spamscanner/spamscannerSpam Scanner is a Node.js anti-spam, email filtering, and phishing prevention tool and service. Built for @ladjs, @forwardemail, @cabinjs, @breejs,…
jstrosch/subparseModular malware analysis artifact collection and correlation framework
hackinglz/svg_phishing_toolsSVG Analysis and generation tools for commonly seen SVG attachment phishing
roxanne_ardary/emailxposeEmailXpose is an open source AI-powered email security system that detects phishing, spam, scams, malware, and social engineering attacks. It goes…
roxanne_ardary/safeforgeSafeForge is an open-source mobile app hub built on GitLab that enables developers to build, upload, and share applications in a secure, AI-verified…
cuckoosandbox/cuckooCuckoo Sandbox is an automated dynamic malware analysis system
crowdstrike/crowdfmsCrowdStrike Feed Management System. CrowdFMS is a framework for automating collection and processing of samples from VirusTotal, by leveraging the…
qeeqbox/analyzerAnalyze, extract and visualize features, artifacts and IoCs of files and memory dumps (Windows, Linux, Android, iPhone, Blackberry, macOS binaries,…
capesandbox/cape-parsersCAPE core and community parsers
nexusfuzzy/raccoon_configScans a list of raccoon servers from Tria.ge and extracts the config