Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

fucking-awesome-malware-analysis

Defund the Police. With repository stars⭐ and forks🍴
https://github.com/Correia-jpv/fucking-awesome-malware-analysis

Last synced: about 6 hours ago
JSON representation

Malware Collection
- Honeypots
  - Conpot - ICS/SCADA honeypot.
  - DemoHunter - Low interaction Distributed Honeypots.
  - Dionaea - Honeypot designed to trap malware.
  - Glastopf - Web application honeypot.
  - Honeytrap - Opensource system for running, monitoring and managing honeypots.
  - MHN - MHN is a centralized server for management and data collection of honeypots. MHN allows you to deploy sensors quickly and to collect data immediately, viewable from a neat web interface.
  - Mnemosyne - A normalizer for
  - Thug - Low interaction honeyclient, for
- Anonymizers
  - Anonymouse.org - A free, web based anonymizer.
  - Privoxy - An open source proxy server with some
- Malware Corpora
  - Tracker h3x - Agregator for malware corpus tracker
  - vduddu malware repo - Collection of
  - VX Vault - Active collection of malware samples.
  - Clean MX - Realtime
Open Source Threat Intelligence
- Other Resources
  - MAEC - Malware Attribute Enumeration and Characterization
  - TAXII - Trusted Automated eXchange of Indicator Information
  - Bambenek Consulting Feeds
  - CI Army - badguys.txt)) -
  - Cybercrime tracker - Multiple botnet active tracker.
  - malc0de - Searchable incident database.
Detection and Classification
- Other Resources
  - ClamAV - Open source antivirus engine.
  - Exeinfo PE - Packer, compressor detector, unpack
  - Generic File Parser - A Single Library Parser to extract meta information,static analysis and detect macros within the files.
  - Yara Finder - A simple tool to yara match the file against various yara rules to find the indicators of suspicion.
Online Scanners and Sandboxes
- Other Resources
  - firmware.re - Unpacks, scans and analyzes almost any
  - IRMA - An asynchronous and customizable
Browser Malware
- Other Resources
  - JSDetox - JavaScript
  - swftools - Tools for working with Adobe Flash
  - xxxswf - A
Documents and Shellcode
- Other Resources
  - libemu - Library and tools for x86 shellcode
  - OfficeMalScanner - Scan for
  - olevba - A script for parsing OLE
Deobfuscation
- Other Resources
  - ex_pe_xor
  - iheartxor
Debugging and Reverse Engineering
- Other Resources
  - bamfdetect - Identifies and extracts
  - Cutter - GUI for Radare2.
  - Immunity Debugger - Debugger for
  - ILSpy - ILSpy is the open-source .NET assembly browser and decompiler.
  - Kaitai Struct - DSL for file formats / network protocols /
  - ltrace - Dynamic analysis for Linux executables.
  - OllyDbg - An assembly-level debugger for Windows
Network
- Other Resources
  - Haka - An open source security oriented
Memory Forensics
- Other Resources
  - Rekall - Memory analysis framework,
Windows Artifacts
- Other Resources
  - python-registry - Python
  - RegRipper
  - GitHub
Storage and Workflow
- Other Resources
  - Viper - A binary management and analysis framework for
Miscellaneous
- Other Resources
  - Malware Organiser - A simple tool to organise large malicious/benign files into a organised Structure.
Other
- Other Resources
  - WindowsIR: Malware - Harlan
  - Windows Registry specification
  - Android Security
  - AppSec
  - CTFs
  - "Hacking"
  - Honeypots
  - Incident-Response
  - PCAP Tools
  - Security
Source
- Other Resources
  - rshipp/awesome-malware-analysis

Programming Languages

Python 10 JavaScript 1 PHP 1 Shell 1 Go 1

Categories

Malware Collection 14 Other 10 Debugging and Reverse Engineering 7 Open Source Threat Intelligence 6 Detection and Classification 4 Documents and Shellcode 3 Browser Malware 3 Windows Artifacts 3 Online Scanners and Sandboxes 2 Deobfuscation 2 Miscellaneous 1 Source 1 Memory Forensics 1 Storage and Workflow 1 Network 1

Sub Categories

Other Resources 45 Honeypots 8 Malware Corpora 4 Anonymizers 2

Keywords

security 9 awesome 6 honeypot 5 awesome-list 5 list 4 python 3 malware-analysis 3 static-analysis 2 dynamic-analysis 2 security-tools 2 malware-analyzer 1 malware 1 zip 1 ics 1 scada 1 deception 1 reverse-engineering 1 rar 1 pe-executable 1 pdf-parsing 1 office-files 1 mime 1 distributed 1 machine-learning 1 libmagic 1 virustotal 1 shellcode 1 low-interaction 1 honeyclient 1 client-honeypot 1 framework 1 threatintel 1 threat-sharing 1 threat-intelligence 1 network-traffic 1 malware-samples 1 malware-research 1 malware-collection 1 drop-ice 1 domain-analysis 1 chinese-translation 1 chinese 1 automated-analysis 1 analysis-framework 1 incident-response-tooling 1 incident-response 1 dfir 1 cybersecurity 1 honeyd 1 hacking 1