The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning. Learn more →
Top 23 malware-analysis Open-Source Projects
-
x64dbg
An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.
-
-
InfluxDB
Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
-
Mobile-Security-Framework-MobSF
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
-
theZoo
A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.
-
Scanners-Box
A powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑
-
-
WorkOS
The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.
-
gef
GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux
-
pyWhat
🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it is! 🧙♀️
-
flare-vm
A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.
-
-
-
-
-
-
-
-
pafish
Pafish is a testing tool that uses different techniques to detect virtual machines and malware analysis environments in the same way that malware families do
-
pe-sieve
Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).
-
oletools
oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.
-
malwoverview
Malwoverview is a first response tool used for threat hunting and offers intel information from Virus Total, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, InQuest and it is able to scan Android devices against VT.
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
If it was me, I'd first run something like DIE on it (I have a few such programs installed)- https://github.com/horsicq/Detect-It-Easy
There is also GEF, which is widely used by the reverse engineering and CTF community.
Project mention: A recent abrupt change in Internet SSH brute force attacks against us | news.ycombinator.com | 2024-02-24
Project mention: retoolkit 2023.05 is here. 20+ tools/features added to this toolkit meant to be used by reverse engineers and malware analysts. It makes the process of setting up an analysis VM faster and might also introduce you to new tools you're unaware of. | /r/ReverseEngineering | 2023-06-05
Project mention: N00bs Night Malware RE Workshop with @c3rb3ru5d3d53c (OALABS) | /r/Malware | 2023-06-11Python3 Environment Basics For IDA Pro (Windows) https://www.patreon.com/posts/python3-basics-58467121 Hexcopy (save a click) https://github.com/OALabs/hexcopy-ida HashDB https://github.com/OALabs/hashdb-ida Flare-IDA https://github.com/mandiant/flare-ida Capa https://github.com/mandiant/capa Capa Rules https://github.com/mandiant/capa-rules BinDiff https://www.youtube.com/watch?v=BLBjcZe-C3I
Project mention: Is there still a way to counter virtual machine detection by popular anti cheat? | /r/VFIO | 2023-12-05Pafish is what you asking for, but as u/ForceBlade wrote, you cannot win this game.
NOTE:
The open source projects on this list are ordered by number of github stars.
The number of mentions indicates repo mentiontions in the last 12 Months or
since we started tracking (Dec 2020).
The latest post mention was on 2024-02-24.
malware-analysis related posts
- A recent abrupt change in Internet SSH brute force attacks against us
- Show HN: Toolkit for Reverse Engineers (indetectables-net)
- TheZoo a.k.a. Malware DB
- Tools to demonstrate malware or ransomware infected PC
- Advices for an automated malware analysis lab project
- Worms for practice
-
entropy VS ent - a user suggested alternative
2 projects | 27 Jun 2023
-
A note from our sponsor - WorkOS
workos.com | 19 Apr 2024
Index
What are some of the best open-source malware-analysis projects? This list will help you:
| Project | Stars | |
|---|---|---|
| 1 | x64dbg | 43,128 |
| 2 | radare2 | 19,558 |
| 3 | Mobile-Security-Framework-MobSF | 16,263 |
| 4 | awesome-malware-analysis | 11,026 |
| 5 | theZoo | 10,688 |
| 6 | Scanners-Box | 7,955 |
| 7 | pwndbg | 6,667 |
| 8 | Detect-It-Easy | 6,525 |
| 9 | gef | 6,451 |
| 10 | pyWhat | 6,346 |
| 11 | flare-vm | 5,840 |
| 12 | MISP | 4,969 |
| 13 | retoolkit | 4,663 |
| 14 | simplify | 4,304 |
| 15 | LIEF | 4,127 |
| 16 | capa | 3,830 |
| 17 | awesome-yara | 3,234 |
| 18 | IntelOwl | 3,103 |
| 19 | flare-floss | 3,007 |
| 20 | pafish | 2,996 |
| 21 | pe-sieve | 2,877 |
| 22 | oletools | 2,742 |
| 23 | malwoverview | 2,700 |
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com