awesome-malware-analysis

An open-source framework for receiving and redistributing abuse feeds and threat intel.

Share and collaborate in developing Threat Intelligence.

Common Attack Pattern Enumeration and Classification

AbuseIPDB is a project dedicated to helping combat the spread of hackers, spammers, and abusive activity on the internet.

Community based IP blacklist service.

A tool designed for consistent and safe capture of off network web resources.

Threat intelligence tracker, with IP/domain/hash search.

One click tool to retrieve as much metadata as possible for a website and to assess its good standing.

Free online dig and other network tools.

A live incident response script for gathering Windows artifacts.

Open Source Malware Analysis Pipeline System.

Collaborative Research Into Threats, a malware and threat repository.

A malware analysis framework featuring a pipeline that can be extended with custom modules, which can be chained and interact with each other to perform end-to-end analysis.

Store, tag, and search malware.

A PoC malware with good intentions that aimes to stress anti-malware systems.

Automated cryptographic algorithm reverse engineering and classification framework.

A fully customizable, Windows-based, security distribution for malware analysis.

A database containing exploits used by malware.

A tool for analyzing PDFs and attempting to determine whether they are malicious.

A tool for studying JavaScript malware, featuring JScript/WScript support and ActiveX emulation.

Disassembler for analyzing malicious shellcode.

Upload common malware lures for Deep File Inspection and heuristical analysis.

JavaScript unpacking and deobfuscation.

Library and tools for x86 shellcode emulation.

Wrapper for a variety of tools for reporting on Windows PE files.

A scalable file triage and malware analysis system integrating the cyber security community's best tools..

An open source, serverless AWS pipeline that scans and alerts on uploaded files based on a set of YARA rules.

Detects capabilities in executable files.

Local Linux rootkit detection.

Open source antivirus engine.

A collection of papers and notes related to Advanced Persistent Threats.

Endgame Malware BEnchmark for Research, a repository that makes it easy to (re)create a machine learning model that can be used to predict a score for a PE file based on static analysis.