malware-analysis

FakeNet-NG - Next Generation Dynamic Network Analysis Tool

Materials for Windows Malware Analysis training (volume 1)

All-in-One malware analysis tool.

Windows kernel and user mode emulation.

IDA Pro plugin with a rich set of features: decryption, deobfuscation, patching, lib code recognition and various pseudocode transformations

x64dbg-MCP Server is a native MCP (Model Context Protocol) plugin for x64dbg that exposes the debugger's full functionality over HTTP. Connect any MCP-compatible AI assistant and control x64dbg programmatically: set breakpoints, step through code, read memory, dump registers, and more. Built with Zig — zero dependencies, single-binary output, cros

yarGen is a generator for YARA rules

A Pin Tool for tracing API calls etc

A curated list of awesome resources related to executable packing

A self-hosted sandbox for red teams to test payloads against modern detection before deployment. MCP integration lets an LLM agent drive analysis end to end.

Free educational content on reverse engineering and malware analysis from the FLARE team

Course Repository for University of Cincinnati Malware Analysis Class (CS[567]038)

DRAKVUF Sandbox - automated hypervisor-level malware analysis system

DRAKVUF Black-box Binary Analysis

a list of 350+ Free TryHackMe rooms to start learning cybersecurity with THM

🚀🚀 This is a 🎇🔥 REAL WORLD🔥 🎇 Malware Collection I have Compiled & analysed by researchers🔥 to understand more about Malware threats😈, analysis and mitigation🧐.

A VBA parser and emulation engine to analyze malicious macros.

A library for creating, reading and editing PE files and .NET modules.

Agent-native reverse-engineering lab with a 197-article knowledge base, MCP tools, and CTF/APK/PE automation workflows.

A scalable file analysis and data generation platform that allows users to easily orchestrate arbitrary docker/vm/shell tools at scale.

Stop your AI from making things up — it proposes, deterministic tools decide, every claim checked against ground truth with evidence. Grounded facts and context survive resets. Reverse engineering is the proving ground. MCP server + CLI.

The essential toolkit for reversing, malware analysis, and cracking

30 different honeypots in one package! (dhcp, dns, elastic, ftp, http proxy, https proxy, http, https, imap, ipp, irc, ldap, memcache, mssql, mysql, ntp, oracle, pjl, pop3, postgres, rdp, redis, sip, smb, smtp, snmp, socks5, ssh, telnet, vnc)

A curated list of tools officially presented at Black Hat events

FAME Automates Malware Evaluation

A collection of malware samples and relevant dissection information, most probably referenced from http://blog.inquest.net

Reverse Engineering and Malware Analysis Roadmap

GUI analyzer for deep-diving into PDF files. Detect malicious payloads, understand object relationships, and extract key information for threat analysis.