UNIX-like reverse engineering framework and command-line toolset
-
Updated
Sep 5, 2024 - C
UNIX-like reverse engineering framework and command-line toolset
Pafish is a testing tool that uses different techniques to detect virtual machines and malware analysis environments in the same way that malware families do
State-of-the-art native debugging tools
Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
An easy-to-use library for emulating memory dumps. Useful for malware analysis (config extraction, unpacking) and dynamic analysis in general (sandboxing).
The PE file analysis toolkit
Dynamic unpacker based on PE-sieve
Contains all the material from the DEF CON 31 workshop "(In)direct Syscalls: A Journey from High to Low".
This repository contains sample programs that mimick behavior found in real-world malware. The goal is to provide source code that can be compiled and used for learning purposes, without having to worry about handling live malware.
Leaked Linux.Mirai Source Code for Research/IoC Development Purposes
Awesome CSIRT is an curated list of links and resources in security and CSIRT daily activities.
Kernel-Mode Driver that loads a dll into every new created process that loads kernel32.dll module
A Tool for Automatic Analysis of Malware Behavior
Cybersecurity research results. Simple C/C++ and Python implementations
Reverse Engineering tools
Deep Linux runtime visibility meets Wireshark
A small program written in C that is designed to load 32/64-bit shellcode and allow for execution or debugging. Can also output PE files from shellcode.
XZ backdoor reverse engineering
Malware Analysis, Threat Intelligence and Reverse Engineering: LABS
Add a description, image, and links to the malware-analysis topic page so that developers can more easily learn about it.
To associate your repository with the malware-analysis topic, visit your repo's landing page and select "manage topics."