malwarefrank Goto Github PK

biggrep

A scalable search index for binary files

bloomers

Easily create file-backed bloom filters from lots of data

capa

The FLARE team's open-source tool to identify capabilities in executable files.

chopshop

Protocol Analysis/Decoder Framework

dncil

The FLARE team's open-source library to disassemble Common Intermediate Language (CIL) instructions.

dnfile

Parse .NET executable files.

dnfile-testfiles

Test data for dnfile

docker-mcrit

Dockerized Setup for the MinHash-based Code Recognition & Investigation Toolkit (MCRIT)

drakvuf-sandbox

DRAKVUF Sandbox - automated hypervisor-level malware analysis system

ghidra_scripts

machoke

malduck

:duck: Malduck is your ducky companion in malware analysis journeys

malware-similarity-litsearch

Malware Similarity Literature Search

mbc-markdown

MBC content in markdown

mcrit

The MinHash-based Code Relationship & Investigation Toolkit (MCRIT) is a framework created to simplify the application of the MinHash algorithm in the context of code similarity.

mquery

YARA malware query accelerator (web frontend)

packware

Effects of packers on machine-learning-based malware classifiers that use only static analysis

pefile

pefile is a Python module to read and work with PE (Portable Executable) files

peframe

PEframe is a open source tool to perform static analysis on Portable Executable malware and malicious MS Office documents.

pharos

Automated static analysis tools for binary programs

plyara

Parse YARA rules and operate over them more easily.

pynids

pype32-py3

python-magic

A python wrapper for libmagic

random-scripts

random personal scripts and utilities

sobod

Sequence of Bytes on Disk (Python module)

speakeasy

Windows kernel and user mode emulation.

ursadb

Trigram database written in C++, suited for malware indexing

vt-py

The official Python 3 client library for VirusTotal

yararules-python

Easily scan with multiple yara rules from different sources.