malware-analysis · GitHub Topics

x64dbg

x64dbg@x64dbg

x64dbg 是一个开源的Windows二进制调试器，旨在进行恶意软件分析和你没有源代码的可执行文件的逆向工程。有许多可用的功能和一个全面的插件系统来添加你自己的功能

debugger windows x64 disassembler reverse-engineering security x86 x86-64 cpp malware-analysis

C++44.86 k

1 个月前

radare2

radare org@radareorg

UNIX-like 逆向工程框架和命令行工具集

radare2 c commandline reverse-engineering forensics security binary-analysis malware-analysis disassembler hacktoberfest

C20.74 k

1 天前

Mobile-Security-Framework-MobSF

Mobile Security Framework @MobSF

MobSF （移动端安全框架）是一个自动化的移动端应用程序(Android/iOS/Windows)安全问题检出的框架和工具，可以进行静态和动态分析的渗透测试，恶意软件分析和安全评估

static-analysis dynamic-analysis mobsf android-security mobile-security windows-mobile-security ios-security api-testing web-security malware-analysis

JavaScript17.5 k

9 小时前

PENTESTING-BIBLE

@blaCCkHatHacEEkr

#夺旗赛 (CTF) 和网络安全资源# articles

翻译 - 该存储库由共享资源和撰写文章的所有社区成员创建和开发，而我唯一要做的@cry__pto就是搜索和上传文件。该存储库的更新将继续进行，直到链接数量达到10000个链接和10000个pdf文件为止。学习道德黑客和渗透测试。数百道德黑客和渗透测试，红队，网络安全和计算机科学资源。

pentesting resources redteam hacking osint osint-resources malware-analysis hacking-tool windows linux

12.92 k

2 年前

theZoo

tisf@ytisf

A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.

翻译 - LIVE恶意软件的存储库，您可以尽情享受。 theZoo是一个旨在使恶意软件分析的可能性公开并向公众开放的项目。

malware malware-analysis malware-samples malware-research thezoo malwareanalysis

Python11.34 k

6 个月前

pyWhat

@bee-san

🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it is! 🧙‍♀️

翻译 - 🐸识别任何东西。 pyWhat可以轻松让您识别电子邮件，IP地址等。给它提供一个.pcap文件或一些文本，它会告诉您它是什么！ ♀‍♀️

cyber security hacking cybersecurity malware re python pcap malware-analysis malware-research

Python6.66 k

1 年前

MISP

MISP Project@MISP

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

翻译 - MISP（核心软件）-开源威胁情报和共享平台（以前称为恶意软件信息共享平台）

misp threat-sharing threat-hunting threatintel malware-analysis stix information-exchange fraud-management security cti

PHP5.4 k

1 天前

capa

@mandiant

capa 可用于识别可执行文件功能，用于分析恶意软件的工具，它可以帮助安全专家快速提取恶意软件的静态特征，并生成易于理解的报告

malware-analysis reverse-engineering binary-analysis threat-intelligence

Python4.88 k

3 天前

retoolkit

@mentebinaria

Reverse Engineer's Toolkit

翻译 - 反向工程师的工具包

reverse-engineering malware-analysis windows

Inno Setup4.82 k

7 个月前

GDA-android-reversing-Tool

@charles2gan

the fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leakin...

翻译 - GDA是完全用c ++编写的新反编译器，因此它不依赖Java平台，该平台简洁，可移植且速度很快，并支持APK，DEX，ODEX，燕麦。

decompiler vulnerability-scanners malware-analysis security-audit mobile-security privacy-protection

Java4.21 k

6 个月前

pafish

Alberto Ortega@a0rtega

Pafish is a testing tool that uses different techniques to detect virtual machines and malware analysis environments in the same way that malware families do

翻译 - Pafish是一种演示工具，它采用了与恶意软件家族相同的多种技术来检测沙箱和分析环境。

malware reverse-engineering virtual-machine malware-families analysis-environments sandbox malware-analysis rdtsc malware-research

C3.16 k

3 年前

pe-sieve

hasherezade@hasherezade

Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).

翻译 - 扫描给定的进程。识别并转储各种潜在的恶意植入物（替换/注入的PE，shellcode，hook，内存中的修补程序）。

pe-format hooking pe-dumper pe-analyzer libpeconv process-analyzer scans anti-malware pe-sieve malware-analysis

C++3.11 k

17 天前

BlueTeam-Tools

@A-poc

Tools and Techniques for Blue Team / Incident Response

blue-team blueteam cheatsheet incident-response malware-analysis tools vulnerability-management wiki incident resources

2.83 k

8 个月前

pe-bear

hasherezade@hasherezade

Portable Executable reversing tool with a friendly GUI

pe-file pe-format pe-analyzer pe-analyzer-gui pe-editor multiplatform malware-analysis bearparser

C++2.78 k

25 天前

hollows_hunter

hasherezade@hasherezade

Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).

翻译 - 扫描所有正在运行的进程。识别并转储各种潜在的恶意植入（替换/植入的 PE、shellcode、挂钩、内存中的补丁）。

pe-sieve anti-malware malware-analysis malware-detection memory-forensics

C2.04 k

17 天前

malware_training_vol1

hasherezade@hasherezade

Materials for Windows Malware Analysis training (volume 1)

翻译 - Windows Malware分析培训的材料（第1卷）

windows-malware-analysis malware-analysis malware-research

Assembly1.94 k

5 个月前