malware-analysis

An easy-to-use library for emulating memory dumps. Useful for malware analysis (config extraction, unpacking) and dynamic analysis in general (sandboxing).

High Octane Triage Analysis

Dynamic unpacker based on PE-sieve

iMonitor（冰镜 - 终端行为分析系统）

The PE file analysis toolkit

A Linux Ransomware

Contains all the material from the DEF CON 31 workshop "(In)direct Syscalls: A Journey from High to Low".

Deep Learning models for network traffic classification

A machine learning tool that ranks strings based on their relevance for malware analysis.

This repository contains sample programs that mimick behavior found in real-world malware. The goal is to provide source code that can be compiled and used for learning purposes, without having to worry about handling live malware.

APK/DEX detector for Windows, Linux and MacOS.

Packj stops :zap: Solarwinds-, ESLint-, and PyTorch-like attacks by flagging malicious/vulnerable open-source dependencies ("weak links") in your software supply-chain

#supply #chain #attack #detection

IDApython Scripts for Analyzing Golang Binaries

A comprehensive collection of cheatsheets for reverse engineering, binary analysis, and assembly programming tools. This repository serves as a one-stop reference for security researchers, reverse engineers, and low-level programmers.

Awesome CSIRT is an curated list of links and resources in security and CSIRT daily activities.

Portable Executable (PE) library written in .Net

A Binary Genetic Traits Lexer Framework

Extract and Deobfuscate XLM macros (a.k.a Excel 4.0 Macros)

Linker/Compiler/Tool detector for Windows, Linux and MacOS.

A curated list of awesome Memory Forensics for DFIR

A list of 350+ free TryHackMe rooms💻 to kick off your cybersecurity learning, organized by topics for easy exploration and practical skill-building !💀💥

Extracted Yara rules from Windows Defender mpavbase and mpasbase

AssemblyLine 4: File triage and malware analysis

LockKnife: The Ultimate Android Security Research Tool. A unified TUI workspace and headless CLI for deep Android security research, built for researchers and hackers. Powered by Python orchestration and a Rust-accelerated core, enabling AI agent–driven hacking, credential recovery/cracking, APK analysis, intelligence gathering, runtime inspection.

Hello, aspiring hackers! 🕵️‍♂️ Here’s a list of 500+ Free TryHackMe rooms to kickstart your cybersecurity journey. These rooms are absolutely free, and I’ve organized them by topic to help you dive in right away. 🛠️