fucking-awesome-malware-analysis
Defund the Police. With repository stars⭐ and forks🍴
https://github.com/Correia-jpv/fucking-awesome-malware-analysis
Last synced: about 18 hours ago
JSON representation
-
Malware Collection
-
Honeypots
- Conpot - ICS/SCADA honeypot.
- DemoHunter - Low interaction Distributed Honeypots.
- Dionaea - Honeypot designed to trap malware.
- Glastopf - Web application honeypot.
- Honeytrap - Opensource system for running, monitoring and managing honeypots.
- MHN - MHN is a centralized server for management and data collection of honeypots. MHN allows you to deploy sensors quickly and to collect data immediately, viewable from a neat web interface.
- Mnemosyne - A normalizer for
- Thug - Low interaction honeyclient, for
-
Anonymizers
- Anonymouse.org - A free, web based anonymizer.
- Privoxy - An open source proxy server with some
-
Malware Corpora
- Tracker h3x - Agregator for malware corpus tracker
- vduddu malware repo - Collection of
- VX Vault - Active collection of malware samples.
- Clean MX - Realtime
-
-
Open Source Threat Intelligence
-
Other Resources
- TAXII - Trusted Automated eXchange of Indicator Information
- Bambenek Consulting Feeds
- CI Army - badguys.txt)) -
- Cybercrime tracker - Multiple botnet active tracker.
- malc0de - Searchable incident database.
-
-
Detection and Classification
-
Other Resources
- ClamAV - Open source antivirus engine.
- Exeinfo PE - Packer, compressor detector, unpack
- Generic File Parser - A Single Library Parser to extract meta information,static analysis and detect macros within the files.
- Yara Finder - A simple tool to yara match the file against various yara rules to find the indicators of suspicion.
-
-
Online Scanners and Sandboxes
-
Other Resources
- firmware.re - Unpacks, scans and analyzes almost any
- IRMA - An asynchronous and customizable
-
-
Browser Malware
-
Documents and Shellcode
-
Other Resources
- libemu - Library and tools for x86 shellcode
- OfficeMalScanner - Scan for
- olevba - A script for parsing OLE
-
-
Deobfuscation
-
Debugging and Reverse Engineering
-
Other Resources
- bamfdetect - Identifies and extracts
- Cutter - GUI for Radare2.
- Immunity Debugger - Debugger for
- ILSpy - ILSpy is the open-source .NET assembly browser and decompiler.
- Kaitai Struct - DSL for file formats / network protocols /
- ltrace - Dynamic analysis for Linux executables.
- OllyDbg - An assembly-level debugger for Windows
-
-
Network
-
Other Resources
- Haka - An open source security oriented
-
-
Memory Forensics
-
Other Resources
- Rekall - Memory analysis framework,
-
-
Windows Artifacts
-
Other Resources
- python-registry - Python
- RegRipper
- GitHub
-
-
Storage and Workflow
-
Other Resources
- Viper - A binary management and analysis framework for
-
-
Miscellaneous
-
Other Resources
- Malware Organiser - A simple tool to organise large malicious/benign files into a organised Structure.
-
-
Other
-
Other Resources
-
-
Source
-
Other Resources
-
Programming Languages
Categories
Malware Collection
14
Other
10
Debugging and Reverse Engineering
7
Open Source Threat Intelligence
5
Detection and Classification
4
Documents and Shellcode
3
Browser Malware
3
Windows Artifacts
3
Online Scanners and Sandboxes
2
Deobfuscation
2
Miscellaneous
1
Source
1
Memory Forensics
1
Storage and Workflow
1
Network
1
Sub Categories
Keywords
security
9
awesome
6
honeypot
5
awesome-list
5
malware-analysis
4
list
4
python
3
dynamic-analysis
2
static-analysis
2
malware-research
2
security-tools
2
malware
2
reverse-engineering
1
zip
1
malware-analyzer
1
rar
1
yara
1
pe-executable
1
pdf-parsing
1
office-files
1
mime
1
machine-learning
1
libmagic
1
virustotal
1
shellcode
1
low-interaction
1
honeyclient
1
client-honeypot
1
framework
1
dionaea
1
distributed
1
deception
1
scada
1
threatintel
1
threat-sharing
1
threat-intelligence
1
network-traffic
1
malware-samples
1
malware-collection
1
drop-ice
1
domain-analysis
1
chinese-translation
1
chinese
1
automated-analysis
1
analysis-framework
1
incident-response-tooling
1
incident-response
1
dfir
1
cybersecurity
1
honeyd
1