CERT-Polska / malduckView external linksLinks
Malduck is your ducky companion in malware analysis journeys
☆349Jun 22, 2025Updated 7 months ago
Alternatives and similar repositories for malduck
Users that are interested in malduck are comparing it to the libraries listed below
Sorting:
- Distributed malware processing framework based on Python, Redis and S3.☆462Dec 1, 2025Updated 2 months ago
- Malware repository component for samples & static configuration with REST API interface.☆373Feb 6, 2026Updated last week
- YARA malware query accelerator (web frontend)☆437Feb 3, 2026Updated last week
- A Feature Rich Modular Malware Configuration Extraction Utility for MalDuck☆131Nov 25, 2023Updated 2 years ago
- DRAKVUF Sandbox - automated hypervisor-level malware analysis system☆1,263Updated this week
- Cockroach is your primitive & immortal swiss army knife.☆49Dec 8, 2021Updated 4 years ago
- Windows kernel and user mode emulation.☆1,837Feb 4, 2026Updated last week
- ☆16Apr 30, 2024Updated last year
- Automatically create YARA rules from malicious documents.☆212May 16, 2022Updated 3 years ago
- Trigram database written in C++, suited for malware indexing☆130Jan 26, 2026Updated 2 weeks ago
- High Octane Triage Analysis☆808Updated this week
- The FLARE team's open-source library to disassemble Common Intermediate Language (CIL) instructions.☆171Feb 5, 2026Updated last week
- A Binary Genetic Traits Lexer Framework☆522Aug 14, 2025Updated 6 months ago
- Extract and Deobfuscate XLM macros (a.k.a Excel 4.0 Macros)☆587May 5, 2024Updated last year
- This project aims at simplifying Windows API import recovery on arbitrary memory dumps☆262Mar 27, 2023Updated 2 years ago
- Kaspersky's GReAT KLara☆730Jul 24, 2024Updated last year
- Binee: binary emulation environment☆530Feb 25, 2023Updated 2 years ago
- ☆113Sep 10, 2025Updated 5 months ago
- A machine learning tool that ranks strings based on their relevance for malware analysis.☆750Jan 22, 2026Updated 3 weeks ago
- YARI is an interactive debugger for YARA Language.☆90Sep 10, 2025Updated 5 months ago
- Repository of YARA rules made by Trellix ATR Team☆625Mar 18, 2025Updated 10 months ago
- Go Lang Portable Executable Parser☆39Mar 31, 2021Updated 4 years ago
- Dynamic unpacker based on PE-sieve☆796Sep 13, 2025Updated 5 months ago
- A modular Karton Framework service that unpacks common packers like UPX and others using the Qiling Framework.☆58May 24, 2021Updated 4 years ago
- Standard collection of rules for capa: the tool for enumerating the capabilities of programs☆685Jan 30, 2026Updated 2 weeks ago
- The FLARE team's open-source tool to identify capabilities in executable files.☆5,813Feb 5, 2026Updated last week
- Client library for the mwdb service by CERT Polska.☆42Sep 25, 2025Updated 4 months ago
- Malwoverview is a rapid response tool used to gather intelligence information from VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malsh…☆3,531Jan 20, 2026Updated 3 weeks ago
- DC3 Malware Configuration Parser (DC3-MWCP) is a framework for parsing configuration information from malware. The information extracted …☆339Feb 7, 2025Updated last year
- A static analyzer for PE executables.☆1,103Jan 30, 2026Updated 2 weeks ago
- Your bag of handy codes for malware researchers☆120Mar 20, 2020Updated 5 years ago
- Imaginary C2 is a python tool which aims to help in the behavioral (network) analysis of malware. Imaginary C2 hosts a HTTP server which …☆447Oct 26, 2022Updated 3 years ago
- The MinHash-based Code Relationship & Investigation Toolkit (MCRIT) is a framework created to simplify the application of the MinHash alg…☆96Jan 13, 2026Updated last month
- Quickly debug shellcode extracted during malware analysis☆625May 23, 2023Updated 2 years ago
- TA505 unpacker Python 2.7☆47Jun 22, 2020Updated 5 years ago
- Malware Configuration And Payload Extraction☆2,991Feb 6, 2026Updated last week
- A python script developed to process Windows memory images based on triage type.☆264Nov 25, 2023Updated 2 years ago
- Emulates the VirusTotal "vt" YARA module for livehunt rule debugging/testing☆25May 29, 2023Updated 2 years ago
- Generating YARA rules based on binary code☆220Oct 7, 2021Updated 4 years ago