Search Results for "malware analysis" - Page 2
Sort By:
Showing 71 open source projects for "malware analysis"
View related business solutions-
$300 Free Credits to Build on Google CloudPut your $300 in credit toward real workloads, then keep building with free monthly usage for 20+ products. No commitment and no charge until you upgrade.
-
MongoDB Atlas runs apps anywhereMongoDB Atlas gives you the freedom to build and run modern applications anywhere—across AWS, Azure, and Google Cloud. With global availability in over 115 regions, Atlas lets you deploy close to your users, meet compliance needs, and scale with confidence across any geography.
-
1
Anya
A malware analysis platform built in Rust
Anya is a privacy-first static malware analysis tool for Windows, Linux, and macOS. It combines PE, ELF, and Mach-O binary analysis with MITRE ATT&CK mapping, confidence-based risk scoring, and plain-English explanations. All offline, with zero network calls. Built for analysts and students alike, it ships as both a CLI and a desktop GUI. -
2
HydraDragonAntivirus
Open Source Antivirus/XDR for Windows operating system
Dynamic and static analysis with Real Time Malware Analysis with Antivirus for Windows, including open-source XDR (3 EDR projects), ClamAV, YARA-X, machine learning AI, behavioral analysis, Unpacker, Deobfuscator, Decompiler, website signatures, Ghidra, Suricata, Sigma, Kernel, Hypervisior based protection and much more than you can imagine. -
3
A professional PE (Portable Executable) analysis and modification tool for Windows executables and DLLs.
-
4
url-checker-php-sdk
Official PHP SDK for the EmailVeritas URL Checker API
The EmailVeritas URL Checker PHP SDK provides real-time phishing and malicious link detection through the official EmailVeritas API. It enables developers to classify and analyze URLs directly from PHP applications using simple methods for URL Lookup and URL Scan. Lightweight and dependency-free, the SDK performs redirect-chain, WHOIS, and HTML metadata analysis. Composer support makes integration seamless with PSR-4 autoloading. Ideal for CRMs, contact forms, and security... -
Build Agents and Models on One PlatformGemini Enterprise Agent Platform is Google Cloud's comprehensive platform for developers to build, scale, govern, and optimize agents and models. Choose from Google's most advanced models and third-party models like Anthropic's Claude Model Family.
-
5
Process Monitor
Advanced monitoring tool for Windows
Process Monitor is an advanced Windows monitoring tool that provides real-time visibility into file system, Registry, and process/thread activity. It merges the capabilities of the older Filemon and Regmon utilities while adding powerful enhancements like non-destructive filtering and detailed event properties. Users can capture comprehensive data including session IDs, user names, thread stacks, and process details such as image paths and command lines. The tool supports highly configurable... -
6
Volatility
An advanced memory forensics framework
Volatility is a widely used open-source framework for analyzing memory captures (RAM dumps) from Windows, Linux, and macOS systems. It enables investigators and malware analysts to extract process lists, network connections, DLLs, strings, artifacts, and more. Volatility supports many plugins for detecting hidden processes, malware, rootkits, and event tracing. It’s essential in digital forensics and incident response workflows. -
7
Thunderbird Anti Virus 3.4
Thunderbird Anti Virus Free Scanner v3.4
...Designed with a focus on resource efficiency and transparent operations, Thunderbird AV provides a robust alternative to bloated security suites, offering a surgical approach to malware detection and system auditing. The v3.4 architecture integrates an advanced Heuristic Analysis Engine capable of deep-memory inspection and multi-tier file system scanning. This version debuts the Integrated Network Shield, a native firewall module that allows for instantaneous perimeter control. Complementing this is the Live I/O Analytics layer, which provides real-time telemetry of network throughput, allowing administrators and power users to identify anomalous data patterns as they occur. -
8
Thunderbird Anti Virus 3.2
Thunderbird Anti Virus Free Scanner v3.2
Thunderbird Anti-Virus v3.2 – Proactive Digital Guard Thunderbird Anti-Virus v3.2 represents the next evolution in desktop security, offering a streamlined yet uncompromising shield against modern cyber threats. Designed for users who demand high-level protection without the system bloat, version 3.2 introduces enhanced heuristic analysis and a refined scanning engine optimized for Windows 10 and 11. Core Defense Features: Real-Time Threat Detection: Monitors system activity to block malware, ransomware, and spyware before they can execute. Deep System Scanning: A versatile engine that targets hidden trojans and persistent threats in the deepest layers of your storage. ... -
9
Thunderbird Free Scanner
Thunderbird Anti Virus Online Free Scanner
...Included Scan Options Thunder Anti-Virus Free Scanner includes a comprehensive system scan. This option allows you to thoroughly scan your entire system, checking memory, hard drives, and connected devices for a wide range of threats, including malware, viruses, and trojans. You can also opt for a targeted folder scan, ideal when you need a faster analysis. You can select a specific folder or directory for a focused scan. This feature is ideal for users who want to check specific locations without scanning the entire system. -
Veeam Data Platform v13.1Try Veeam Data Platform today. Experience the unified platform that's secure by design, portable by default, and proven to recover clean, fast, and anywhere.
-
10
Two tools able to edit your ipfilter.dat . These tools are able to edit your ipfilter.dat in order to check for big ranges and to check adjacent ranges . From the creators of ipfilterX , Nexus23 Labs . - Updates in Progress -
-
11
readpe
The PE file analysis toolkit
readpe (formerly known as pev) is a multiplatform toolkit to work with PE (Portable Executable) binaries. Its main goal is to provide feature-rich tools for properly analyze binaries with a strong focus on suspicious ones. -
12
WTE
Forensic Windows Triage Environment
* Files are compressed and ENCRYPTED so are identified as "Malware" by Sourceforge. Criminal Investigators auxiliary in conducting investigations on computer systems. WTE is an easy to use, integrated forensic system that enables an investigator to safely image, preview and analyze internal hard drives (DeadBox), and also to conduct live forensics (LiveBox) or data recovery, using their tool(s) of choice. Safely and Easily Search and Triage with no need to disassemble computers or... -
13
VX-API
Collection of various malicious functionality
VX-API is a research-oriented collection of Windows-focused code that demonstrates low-level techniques commonly studied in malware analysis and red-team development. It is organized as a Visual Studio solution so related functions and dependencies can be explored together. The repository covers areas such as anti-debugging, cryptographic helpers, fingerprinting, process creation, process injection, networking, library loading, and string handling. It also includes examples involving shellcode execution, privilege-related behavior, and Windows internals. ... -
14
Guia de Cyber Security
Get started in the field of information security
...It collects study resources, tools, career references, roadmaps, courses, books, channels, podcasts, and certification links. The guide introduces cybersecurity as a field and highlights different career paths, such as application security, cloud security, forensics, cryptography, malware analysis, threat intelligence, and security engineering. It also includes hands-on areas such as exploitation, API security testing, penetration testing tools, hardware hacking, CTF platforms, Linux distributions, virtual machines, and bug bounty resources. Because many security resources are available in different languages, the repository also points users toward translation tools. ... -
15
pe_to_shellcode
Converts PE into a shellcode
...Its goal is to add a reflective loading stub after compilation, instead of requiring the developer to build the PE with reflective loading already integrated. This makes it useful for controlled security research, malware analysis labs, and educational work on PE loading behavior. Because the technique is closely related to in-memory execution, it should be handled only in authorized environments. -
16
Blank Grabber
The most powerful stealer written in Python 3
...It should not be used as a normal utility, administration tool, or learning project for general users. The safest way to describe it is as a malware sample for defensive analysis, detection engineering, and awareness of common stealer techniques. It is no longer actively maintained in the original repository. -
17
Discord ATIO
ATIO is a AIO Script Developed with Python3
...The repository itself describes the project as potentially malicious and unethical, and many of its modules involve activities that can violate privacy, platform rules, or the law. It includes tools related to selfbotting, account abuse, token misuse, webhook spam, server disruption, and remote-access malware. Because of that, it should not be treated as a normal Discord utility or legitimate bot framework. Its safest use case is defensive review, malware-awareness training, or historical analysis of common Discord abuse tooling. The project is best categorized as high-risk archived code rather than software for practical deployment. -
18
VXUG-Papers
Research code & papers from members of vx-underground
...Due to the sensitive nature of some material, the collection is intended for legitimate research, education, and controlled analysis environments. -
19
Abdal Map Tracker
Display people's or device transit routes based on latitude and longit
Display people's or device transit routes based on latitude and longitude graphically -
20
Abdal Header Analyzer
analyzing site and web server headers
Abdal Header Analyzer is a software for analyzing site and web server headers. As you know, headers contain information that security experts and hackers use to analyze targets. -
21
AI-for-Security-Learning
AI-based security algorithms, and security data analysis
AI-for-Security-Learning is an educational repository that explores the intersection of artificial intelligence and cybersecurity. The project compiles learning resources, examples, and experimental tools that demonstrate how machine learning techniques can be applied to security-related problems. Topics addressed in the repository include malware detection, anomaly detection, threat classification, and intrusion detection systems. The materials help learners understand how AI can analyze... -
22
chords-malware-analyzer
Chords is binary file strings extractor, with many formats supported.
...Is able to extract strings from files just like strings, but it also supports windows wide string, base64 and hexadecimal strings (with decoding support) and automatic recognition of Indicators of Compromise (IOCs). It has been developed to support the malware analysis process, but is a general purpose tool. -
23
Treater Antivirus
Cloud antivirus scanner based on machine detection
Treater Anti-Virus is a free portable anti-virus on demand scanner which does not require the installation and updates of signatures. The application is able to detect and neutralize threats not found by the main protection program, such as Trojans, Ransomware, Worms, Dialers, Adware, Riskware, Pornware, SMS Blocks, etc. The utility does not require installation and can be launched from removable USB/CD drives as a "resuscitator" tool to unlock the computer. During the development, the... -
24
Dr0p1t-Framework
A framework that create an advanced stealthy dropper
...It also incorporates techniques to avoid forensic analysis, such as self-deletion and cleaning traces after execution. The generated executables are optimized to be small and efficient, improving their ability to bypass security controls. -
25
Cuckoo Sandbox
Cuckoo Sandbox is for automated analysis of malware
Cuckoo Sandbox uses components to monitor the behavior of malware in a Sandbox environment; isolated from the rest of the system. It offers automated analysis of any malicious file on Windows, Linux, macOS, and Android.