cristianzsh/frekiOpen-source malware analysis platform with static PE analysis, YARA pattern matching, VirusTotal integration, REST API, and Docker deployment for…
fr0gger/iatelligenceIATelligence is a Python script that will extract the IAT of a PE file and request GPT to get more information about the API and the ATT&CK matrix…
pandare9x/configuration_extractorsConfiguration Extractors for Malware
c3rb3ru5d3d53c/mwcfgA Feature Rich Modular Malware Configuration Extraction Utility for MalDuck
securityjoes/threatresearchPython config extractors for malware families including PlugX, Remcos, templateX, and RedLine Stealer, supporting C2 configuration extraction for…
embee-research/icedid-file-decryptorStatic Decryptor for IcedID Malware
embee-research/asyncrat-venom-dcrat-config-extractorConfig Extractor for Asyncrat/Dcrat/VenomRat
synacktiv/pridelocker-analysisThis repository contains a IDA Python script to recover PrideLocker ESX encryptor strings and a YARA rule
mandiant/flare-learning-hubFree educational content on reverse engineering and malware analysis from the FLARE team
zx41r/awesome-reverse-engineering-and-malware-analysisA verified map of reverse engineering and malware analysis. Disassemblers, unpacking, exploit dev, fuzzing, DFIR, and the deep-cut writeups other…
karib0u/kernagentHeadless AI agent for deterministic reverse engineering.
anpa1200/aidebugEvidence-focused malware reverse engineering with deep PE/.NET inspection, Ghidra reconstruction, AI cross-checks, YARA, and ELF debugging
kaandemir993/salat-stealer-telegram-proxy-decoy-c2-analysis"Reverse engineering analysis of Salat Stealer, a Go-based info-stealer that uses a Telegram proxy decoy, C2 communication, and encrypted memory…
kaandemir993/dropper-gcleaner-c2-infrastructure-kernel-driver-powershell-conhost-payload-analysisReverse engineering analysis of Dropper GCleaner, a malware that uses a resilient C2 infrastructure, kernel driver loading, PowerShell/Conhost…
kaandemir993/vidar-stealer-reverse-engineering"In-depth reverse engineering analysis of Vidar Stealer 2.0 covering Task Scheduler tampering (1999 timestamps), Explorer.exe process hollowing, and…
perkins-fund/malware-bibleFree educational courses in cybersecurity, reverse engineering, malware analysis, and programming designed to expand access, build practical skills,…