norimaci
mnrkbys/norimaciLightweight macOS malware analysis sandbox that monitors system activity via OpenBSM or Monitor.app, generating detailed reports and timelines of…
dynamic-analysis-sandboxingforensicsmalware-analysis
mnrkbys/norimaciLightweight macOS malware analysis sandbox that monitors system activity via OpenBSM or Monitor.app, generating detailed reports and timelines of…
kaysec/hybrid-submitA script that automatically submits files to Hybrid Analysis (API)
hynekpetrak/malware-jailSandbox for semi-automatic Javascript malware analysis, deobfuscation and payload extraction. Written for Node.js
secretsquirrel/recomposerRandomly changes Win32/64 PE Files for 'safer' uploading to malware and sandbox sites.
saadahla/anti-sandboxC++ tool for detecting AnyRun sandbox environments, enabling malware to evade dynamic analysis and automated sandboxing systems.
sobri3195/pegasus-malware-scanMulti-layered malware scanner combining hash-based verification, behavioral analysis, and sandbox execution for threat detection, incident response,…
0x534a/dynmxSignature-based detection of malware features based on Windows API call sequences. It's like YARA for sandbox API traces!
cert-polska/drakvuf-sandboxAutomated hypervisor-level malware analysis sandbox with agentless guest introspection, web-based result exploration, and guided installer for…
idanr1986/cuckoo-droidCuckooDroid - Automated Android Malware Analysis with Cuckoo Sandbox.
rin449/bhpaiMulti-format malware analysis platform combining a stealth Ring-3 Windows sandbox, static PE/PDF analyzers, ransomware key recovery, and an AI…
patriksimek/vm2Isolated JavaScript sandbox for Node.js that runs untrusted code with restricted access to built-in modules and host resources via Proxy-based…
blacksnufkin/litterboxA self-hosted sandbox for red teams to test payloads against modern detection before deployment. MCP integration lets an LLM agent drive analysis end…
fencesandbox/fenceLightweight, container-free sandbox for running commands with network and filesystem restrictions
mrexodia/dumpulatorAn easy-to-use library for emulating memory dumps. Useful for malware analysis (config extraction, unpacking) and dynamic analysis in general…
navikt/cpltSandbox for AI coding agents. Runs Copilot CLI, Claude Code, OpenCode, Gemini CLI, Antigravity, Pi, goose or a plain shell inside a kernel-level…
advdebug/brovanUser-mode x86_64 binary emulator for malware analysis and reverse engineering. Supports PE, ELF, memory dumps, and raw binaries with syscall tracing,…
beelzebub-labs/azazeleBPF-powered silent observer for containerized runtimes, built for malware analysis sandboxes and Agentic AI monitoring.
