{"id":45527876,"url":"https://github.com/elementmerc/anya","last_synced_at":"2026-04-02T18:26:29.049Z","repository":{"id":339871738,"uuid":"1160513374","full_name":"elementmerc/anya","owner":"elementmerc","description":"A malware analysis platform built in Rust","archived":false,"fork":false,"pushed_at":"2026-02-23T20:44:04.000Z","size":1380,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":0,"default_branch":"master","last_synced_at":"2026-02-24T05:36:40.595Z","etag":null,"topics":["analysis","cybersecurity","forensics","malware","rust","security"],"latest_commit_sha":null,"homepage":"","language":"Rust","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"agpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/elementmerc.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE.TXT","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2026-02-18T03:09:33.000Z","updated_at":"2026-02-23T20:44:08.000Z","dependencies_parsed_at":null,"dependency_job_id":"9f5f2c8f-6554-4aa5-9bc4-2aaa8ee69bd8","html_url":"https://github.com/elementmerc/anya","commit_stats":null,"previous_names":["elementmerc/anya"],"tags_count":2,"template":false,"template_full_name":null,"purl":"pkg:github/elementmerc/anya","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/elementmerc%2Fanya","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/elementmerc%2Fanya/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/elementmerc%2Fanya/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/elementmerc%2Fanya/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/elementmerc","download_url":"https://codeload.github.com/elementmerc/anya/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/elementmerc%2Fanya/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":29808859,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-02-24T22:43:48.403Z","status":"online","status_checked_at":"2026-02-25T02:00:07.329Z","response_time":61,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["analysis","cybersecurity","forensics","malware","rust","security"],"created_at":"2026-02-23T00:25:24.001Z","updated_at":"2026-03-15T04:47:26.385Z","avatar_url":"https://github.com/elementmerc.png","language":"Rust","funding_links":[],"categories":[],"sub_categories":[],"readme":"\u003cdiv align=\"center\"\u003e\n\n\u003cimg src=\"icon.svg\" alt=\"Anya logo\" width=\"96\" height=\"96\"\u003e\n\n# Anya\n\n**Fast static malware analysis**\n\n[![CI](https://github.com/elementmerc/anya/actions/workflows/ci.yml/badge.svg)](https://github.com/elementmerc/anya/actions/workflows/ci.yml)\n[![Release](https://img.shields.io/github/v/release/elementmerc/anya)](https://github.com/elementmerc/anya/releases/latest)\n[![License: AGPL-3.0](https://img.shields.io/badge/license-AGPL--3.0-blue)](LICENSE.TXT)\n[![crates.io](https://img.shields.io/crates/v/anya-security-core)](https://crates.io/crates/anya-security-core)\n\n\u003c!-- \u003cimg src=\"docs/assets/demo.gif\" alt=\"Anya GUI demo\" width=\"720\"\u003e --\u003e\n\n\u003c/div\u003e\n\n---\n\nAnya analyses binary files without executing them. Drop a PE or ELF onto the GUI, or pipe files through the CLI. Get hashes, entropy, imports, sections, MITRE ATT\u0026CK mappings, and a risk score. All in under seconds, all locally.\n\n**Anya** (AHN-yah) means \"eye\" in Igbo.\n\n---\n\n## Install\n\n```bash\ncurl -fsSL https://raw.githubusercontent.com/elementmerc/anya/master/install.sh | bash\n```\n\nPrompts for CLI, GUI, or both. No root required for CLI.\n\n### Platform grid\n\n| Platform | CLI | GUI |\n|---|---|---|\n| **Linux x86_64** | `.tar.gz` + `musl` | `.AppImage` / `.deb` |\n| **Linux arm64** | `.tar.gz` + `musl` | — |\n| **macOS (Intel + Apple Silicon)** | Universal binary | `.dmg` (universal) |\n| **Windows x86_64** | `.zip` | `.msi` |\n| **Docker** | `linux/amd64` + `linux/arm64` | — |\n\n### Docker\n\n```bash\ndocker pull elementmerc/anya:latest\n\ndocker run --rm \\\n  -v \"$(pwd)/samples:/samples:ro\" \\\n  elementmerc/anya:latest \\\n  --file /samples/malware.exe --json\n```\n\n### From source\n\n```bash\n# CLI\ncargo install anya-security-core --locked\n\n# GUI (requires Node 22 + Tauri prerequisites)\nnpm ci \u0026\u0026 npm run tauri build\n```\n\n---\n\n## CLI usage\n\n```bash\n# Analyse a file\nanya --file suspicious.exe\n\n# JSON output\nanya --file suspicious.exe --json\n\n# Batch scan\nanya --directory ./samples --recursive --json --output results.jsonl --append\n\n# Teacher Mode (guided lessons inline)\nanya --file suspicious.exe --guided\n\n# Random Bible verse\nanya verse\n\n# Init config\nanya --init-config\n```\n\nFull flag reference: `anya --help`\n\n---\n\n## GUI\n\nLaunch Anya, drag a file onto the drop zone. Seven tabs:\n\n| Tab | What it shows |\n|---|---|\n| Overview | Risk score, file metadata, SHA-256 |\n| Entropy | Full entropy chart + per-section breakdown |\n| Imports | DLL tree with expandable function lists and inline explanations |\n| Sections | W+X detection, per-section entropy, characteristics |\n| Strings | Extracted ASCII strings |\n| Security | ASLR, DEP, version info, signed status |\n| MITRE | Mapped ATT\u0026CK techniques with tactic tagging |\n\n**Teacher Mode** (toggle in Settings → Learning) surfaces contextual lessons as you navigate findings. **Bible Verses** (same section) shows a rotating NLT verse in the status bar.\n\nAnalysis history is stored in a local SQLite database. Nothing leaves your device.\n\n---\n\n## Why Anya?\n\n| | Anya | VirusTotal | Ghidra | CAPA |\n|---|---|---|---|---|\n| Offline | ✓ | ✗ | ✓ | ✓ |\n| No cloud upload | ✓ | ✗ | ✓ | ✓ |\n| Desktop GUI | ✓ | Browser | ✓ | ✗ |\n| \u003c 1 s analysis | ✓ | Network-bound | ✗ | Seconds |\n| MITRE mapping | ✓ | Partial | ✗ | ✓ |\n| Beginner-friendly | ✓ | — | ✗ | — |\n\n---\n\n## Docs\n\n- [Architecture](docs/ARCHITECTURE.md)\n- [JSON output schema](docs/JSON_SCHEMA.md)\n- [CHANGELOG](docs/CHANGELOG.md)\n- [Security scope \u0026 limitations](SECURITY.md)\n- [Privacy policy](docs/PRIVACY.md)\n- [Commercial licensing](docs/COMMERCIAL_LICENSE.md)\n\n---\n\n## Uninstalling\n\n- **Windows**: Use Add/Remove Programs — the uninstaller launches automatically.\n- **Linux**: `sudo apt remove anya` — the uninstaller runs during removal.\n- **macOS**: Drag Anya.app to the Trash, then optionally run:\n  `~/Applications/Anya.app/Contents/MacOS/anya-gui --uninstall`\n  to remove your analysis database and preferences.\n\n---\n\n## Licence\n\nAGPL-3.0-or-later. See [LICENSE.TXT](LICENSE.TXT).\n\nCommercial licensing: daniel@themalwarefiles.com\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Felementmerc%2Fanya","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Felementmerc%2Fanya","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Felementmerc%2Fanya/lists"}