#malware-analysis (30 Repositories)
Ranked open-source repositories tagged with #malware-analysis, scored by pull request acceptance likelihood and maintainer engagement velocity.
65.2%
19.0h
30 repositories tagged #malware-analysis
chainguard-dev/malcontent
#supply #chain #attack #detection
MISP/MISP
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
mandiant/capa
The FLARE team's open-source tool to identify capabilities in executable files.
x64dbg/x64dbg
An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.
mandiant/flare-floss
FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
AdvDebug/Brovan
Run Windows and Linux programs on Windows, Linux and Android. A user-mode NT and Linux kernel emulator with WHP/KVM acceleration.
kevoreilly/CAPEv2
Malware Configuration And Payload Extraction
HyperDbg/HyperDbg
State-of-the-art native debugging tools
w0h1v/mcp-virustotal
MCP server for VirusTotal API — analyze URLs, files, IPs, and domains with comprehensive security reports, relationship analysis, and pagination support.
mandiant/VM-Packages
Chocolatey packages supporting the analysis environment projects FLARE-VM & Commando VM.
MobSF/Mobile-Security-Framework-MobSF
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
mpast/mobileAudit
Django application that performs SAST and Malware Analysis for Android APKs
Jakiboy/ReVens
Windows-based AI-powered Reverse Engineering Toolkit "AIO", Built for Security (Malware analysis, Pentesting) & Educational purposes.
cisagov/thorium
A scalable file analysis and data generation platform that allows users to easily orchestrate arbitrary docker/vm/shell tools at scale.
secana/PeNet
Portable Executable (PE) library written in .Net
duty1g/x64dbg-mcp-server
x64dbg-MCP Server is a native MCP (Model Context Protocol) plugin for x64dbg that exposes the debugger's full functionality over HTTP. Connect any MCP-compatible AI assistant and control x64dbg programmatically: set breakpoints, step through code, read memory, dump registers, and more. Built with Zig — zero dependencies, single-binary output, cros
hasherezade/pe-bear
Portable Executable reversing tool with a friendly GUI
tklengyel/drakvuf
DRAKVUF Black-box Binary Analysis
Pithus/bazaar
Android security & privacy analysis for the masses.
lief-project/LIEF
LIEF - Library to Instrument Executable Formats (C++, Python, Rust)
binref/refinery
High Octane Triage Analysis
pandaadir05/ghost
Detects process injection and memory manipulation used by malware. Finds RWX regions, shellcode patterns, API hooks, thread hijacking, and process hollowing. Built in Rust for speed. Includes CLI and TUI interfaces.
atomdrift-project/scan
0-day malware detection for binaries, source & scripts (that doesn't suck)
H4NM/WhoYouCalling
Records an executable's network activity into a Full Packet Capture file (.pcap) and much more.
bl4ckr0ss3/knife
A terminal-first reverse engineering toolkit in Rust: PE/ELF/Mach-O analysis through CLI, TUI, and MCP. Installs as knife.
JameZUK/Arkana
Arkana - Your entire malware analysis lab, behind one AI prompt. 250+ MCP tools for binary analysis with Claude Code or other MCP
CERT-Polska/karton
Distributed malware processing framework based on Python, Redis and S3.
vmkspv/lenspect
A lightweight security threat scanner intended to make malware detection more accessible and efficient.
depalmar/ai_for_the_win
Build AI-powered security tools. 50+ hands-on labs covering ML, LLMs, RAG, threat detection, DFIR, and red teaming. Includes Colab notebooks, Docker environment, and CTF challenges.