Search Results for "linux malware detect"
Sort By:
Showing 226 open source projects for "linux malware detect"
View related business solutions-
$300 Free Credits to Build on Google CloudPut your $300 in credit toward real workloads, then keep building with free monthly usage for 20+ products. No commitment and no charge until you upgrade.
-
Build Agents and Models on One PlatformGemini Enterprise Agent Platform is Google Cloud's comprehensive platform for developers to build, scale, govern, and optimize agents and models. Choose from Google's most advanced models and third-party models like Anthropic's Claude Model Family.
-
1
Crawler Detect
CrawlerDetect is a PHP class for detecting bots/crawlers/spiders
Crawler Detect is a PHP library that detects bots, crawlers, and spiders by analyzing user-agent headers and comparing them against a constantly updated list of known crawlers. It's useful for analytics, rate-limiting, or displaying alternative content for automated tools. It is fast, lightweight, and easy to integrate into any PHP application. -
2
Mobile Detect
Mobile_Detect is a lightweight PHP class for detecting mobile devices
Mobile-Detect is a lightweight PHP library that inspects the HTTP user agent string and HTTP headers to detect whether a request comes from a mobile, tablet, or desktop device. It includes a rich set of detection rules covering device brands, operating systems, and browser engines so developers can tailor responses (views, assets, or layouts) based on client form factor. Its API is simple: isMobile(), isTablet(), or deviceFamily() methods make branching logic intuitive. The library is used... -
3
Ghidra
Ghidra is a software reverse engineering (SRE) framework
Ghidra is a free and open-source reverse engineering framework developed by the NSA for analyzing compiled software. It supports a wide array of instruction sets and executable formats, offering features such as decompilation, disassembly, scripting, and interactive graphing. Designed for security researchers and analysts, Ghidra provides a robust environment for understanding malware, auditing code, and performing software forensics. It includes both GUI-based and headless analysis modes. -
4
DIE-engine
GUI & console sources for Detect It Easy(DiE)
...Both graphical and command-line workflows are maintained so analysis can be performed interactively or incorporated into scripts. Build configurations cover Windows, Linux, and macOS along with several Linux package formats. The repository is useful both as part of Detect It Easy and as source material for developers studying binary-analysis tooling. -
Veeam Data Platform v13.1 - Get Your Free TrialTry Veeam Data Platform today. Experience the unified platform that's secure by design, portable by default, and proven to recover clean, fast, and anywhere.
-
5
hollows_hunter
Recognizes and dumps a variety of potentially malicious implants
Hollows Hunter is a command-line malware analysis tool based on the PE-sieve passive memory scanner. It scans running processes, or even the full system, to identify potentially malicious implants. The tool can recognize and dump suspicious artifacts such as replaced PEs, injected PEs, shellcode, hooks, and in-memory patches. Unlike PE-sieve’s more process-specific workflow, Hollows Hunter can select targets using broader criteria such as process IDs, process names, or creation time. This... -
6
Portable Executable Parser
lightweight Go package to parse, analyze and extract metadata
Saferwall PE is a lightweight Go package for parsing, analyzing, and extracting metadata from Portable Executable (PE) binaries. Designed with malware analysis in mind, it is robust against malformed PE files and provides detailed insights into executable structures. -
7
APIs For OSINT
List of API's for gathering information about phone numbers, addresses
APIs for OSINT is a curated directory of application programming interfaces useful for automating open-source intelligence research. It organizes services for phone numbers, addresses, businesses, domains, DNS, IP addresses, email, archives, social platforms, finance, cryptocurrencies, malware analysis, geolocation, and other investigative areas. Each entry typically links to documentation and summarizes what the service provides. Many listings also note whether access is free, freemium, or... -
8
Falco
Malicious activity detection for Cloud-native applications
Falco is a open source project to detect abnormal application behavior in a cloud native environment like Kubernetes. This cloud native runtime security project allows you to detect unexpected application behavior and alerts on threats. -
9
Capstone
Capstone disassembly/disassembler framework
Capstone is a disassembly framework with the target of becoming the ultimate disasm engine for binary analysis and reversing in the security community. Created by Nguyen Anh Quynh, then developed and maintained by a small community, Capstone offers some unparalleled features. Support multiple hardware architectures: ARM, ARM64 (ARMv8), Ethereum VM, M68K, Mips, MOS65XX, PPC, Sparc, SystemZ, TMS320C64X, M680X, XCore and X86 (including X86_64). Having clean/simple/lightweight/intuitive... -
MongoDB Atlas runs apps anywhereMongoDB Atlas gives you the freedom to build and run modern applications anywhere—across AWS, Azure, and Google Cloud. With global availability in over 115 regions, Atlas lets you deploy close to your users, meet compliance needs, and scale with confidence across any geography.
-
10
Pitest
State of the art mutation testing system for the JVM
PIT is a state of the art mutation testing system, providing gold standard test coverage for Java and the jvm. It's fast, scalable and integrates with modern test and build tooling. Faults (or mutations) are automatically seeded into your code, then your tests are run. If your tests fail then the mutation is killed, if your tests pass then the mutation lived. As it is actually able to detect whether each statement is meaningfully tested, mutation testing is the gold standard against which... -
11
ggshield
Detect and validate 500+ types of hardcoded secrets
GitGuardian’s ggshield is an open-source command-line interface (CLI) tool designed to help developers and security teams detect hardcoded secrets and sensitive credentials early in the development process, either locally or in CI/CD pipelines. It scans source code, configuration files, commit history, and other artifacts to automatically detect hundreds of different secret types — such as API keys, tokens, and passwords — helping prevent accidental leaks before they reach version control or... -
12
Face Alignment
2D and 3D Face alignment library build using pytorch
Detect facial landmarks from Python using the world's most accurate face alignment network, capable of detecting points in both 2D and 3D coordinates. Build using FAN's state-of-the-art deep learning-based face alignment method. For numerical evaluations, it is highly recommended to use the lua version which uses identical models with the ones evaluated in the paper. More models will be added soon. By default, the package will use the SFD face detector. However, the users can alternatively... -
13
actionlint
Static checker for GitHub Actions workflow files
actionlint is a static checker for GitHub Actions workflow files. It analyzes workflow YAML to catch syntax mistakes, invalid keys, expression errors, incorrect action inputs, and workflow configuration problems before they break CI. The tool also performs strong type checks for GitHub Actions expressions, which helps detect nonexistent properties and type mismatches. It can validate reusable workflows, workflow calls, glob syntax, runner labels, cron syntax, and job dependencies. actionlint... -
14
lockfile linting
Lint an npm or yarn lockfile to analyze and detect security issues
lockfile-lint is a security tool that helps validate npm and Yarn lockfiles to prevent malicious dependency injections. It checks for common security issues such as package integrity violations and unauthorized registry usage. -
15
Laravel Location
Detect a users location by their IP Address
Retrieve a visitor's location from their IP address using various services. -
16
Linguist
Detect blob languages, suppress generated files and generate graphs
This library is used on GitHub.com to detect blob languages, ignore binary or vendored files, suppress generated files in diffs, and generate language breakdown graphs. Linguist is a Ruby library so you will need a recent version of Ruby installed. There are known problems with the macOS/XCode supplied version of Ruby that causes problems installing some of the dependencies. Accordingly, we highly recommend you install a version of Ruby using Homebrew, rbenv, rvm, ruby-build, asdf or other... -
17
NPMplus
improved fork of nginx-proxy-manager
NPMplus is an enhancement tool for the npm ecosystem, providing additional features for managing dependencies, optimizing installations, and improving package management workflows. -
18
progressbar
A really basic thread-safe progress bar for Golang applications
A very simple thread-safe progress bar that should work on every OS without problems. I needed a progress bar for croc and everything I tried had problems, so I made another one. In order to be OS agnostic I do not plan to support multi-line outputs. The progressbar implements an io.Writer, so it can automatically detect the number of bytes written to a stream, so you can use it as a progress bar for an io. Reader. A progress bar with an unknown length is a spinner. Any bar with -1 length... -
19
LIEF
LIEF - Library to Instrument Executable Formats (C++, Python, Rust)
LIEF (Library to Instrument Executable Formats) is a cross-platform library that enables parsing, modifying, and abstracting executable formats such as ELF, PE, and Mach-O. It's widely used in reverse engineering and binary analysis. -
20
GraphQL Inspector
Validate schema, get schema change notifications, validate operations
Validate schemas and detect changes. Receive schema change notifications. Keep Operations and Fragments consistent. Start using our GitHub Application, setup everything up within few clicks. Using GitHub workflows? Try out the GitHub Action. GraphQL Inspector can be used in any Continuous Integration service. Use our modularized, CI suited version of CLI. GraphQL Inspector offers a CLI that lets you analyze your GraphQL API but also client-side applications. Our codebase is publicly... -
21
Maltrail
Malicious traffic detection system
Maltrail is a malicious traffic detection system, utilizing publicly available (black)lists containing malicious and/or generally suspicious trails, along with static trails compiled from various AV reports and custom user-defined lists, where trail can be anything from domain name, URL, IP address (e.g. 185.130.5.231 for the known attacker) or HTTP User-Agent header value (e.g. sqlmap for automatic SQL injection and database takeover tool). Also, it uses (optional) advanced heuristic mechanisms that can help in the discovery of unknown threats (e.g. new malware). Sensor(s) is a standalone component running on the monitoring node (e.g. Linux platform connected passively to the SPAN/mirroring port or transparently inline on a Linux bridge) or at the standalone machine (e.g. Honeypot) where it "monitors" the passing Traffic for blacklisted items/trails (i.e. domain names, URLs and/or IPs). -
22
v2ray-rules-dat
V2Ray routing rules file enhanced version, which can replace V2Ray
v2ray-rules-dat is a repository that compiles and distributes enhanced rule data (domain lists, geo-IP/geo-domain data, block/proxy/detect lists) intended for use with tools like V2Ray, Xray-core, and similar network/proxy frameworks. The dataset serves as an alternative or supplement to official geoip/ geosite data files, often providing more up-to-date, community-curated entries — enabling better routing, blocking, or traffic management when using those proxy tools. The repository is... -
23
Laravel Stats
Get insights about your Laravel or Lumen Project
Get insights about your Laravel or Lumen Project. The easiest way to install the package is by using Composer. -
24
Lombok
New additions to the Java programming language
Project Lombok is a java library that automatically plugs into your editor and build tools, spicing up your java. Never write another getter or equals method again, with one annotation your class has a fully featured builder, Automate your logging variables, and much more. Project Lombok is available as a single jar file on the project site. It includes the APIs for development as an installer for IDE integration. On most systems, simply double-clicking the jar file will launch the... -
25
BypassAntiVirus
The remote control no-kill series of articles and supporting tools
...Results were historically compared against multiple antivirus engines to illustrate differences in detection behavior. Because the repository concerns defensive bypass techniques that can be misused, it is most appropriate for authorized red-team research, malware analysis, and defensive detection engineering.
