Alternatives and similar repositories for Malware-IDAPython-Scripts

Users that are interested in Malware-IDAPython-Scripts are comparing it to the libraries listed below

• sisoma2 / malware_analysis
  Scripts, Yara rules and other files developed during malware investigations
  ☆25Updated 2 years ago
• n1ght-w0lf / pe-unmapper
  A small tool to unmap PE memory dumps.
  ☆11Updated last year
• FarghlyMal / Config-Extractors
  ☆27Updated 6 months ago
• fr0gger / MalwareMuncher
  Malware Muncher is a proof-of-concept Python script that utilizes the Frida framework for binary instrumentation and API hooking, enablin…
  ☆45Updated 2 years ago
• n1ght-w0lf / Uchihash
  A small utility to deal with malware embedded hashes.
  ☆51Updated last year
• cdong1012 / IDAPython-Malware-Scripts
  ☆73Updated last year
• Finch4 / Malware-Analysis-Reports
  My Malware Analysis Reports
  ☆20Updated 3 years ago
• hasherezade / pesieve-go
  Golang bindings for PE-sieve
  ☆43Updated last year
• gkucherin / de4dot
  .NET deobfuscator and unpacker (with a control flow unflattener for DoubleZero added).
  ☆29Updated 3 years ago
• Dump-GUY / CAPA_JsonConver
  Converts exported results of CAPA tool from .json format to another formats supporting by different tools.
  ☆22Updated 3 years ago
• hasherezade / pe2pic
  Small visualizator for PE files
  ☆69Updated last year
• deepinstinct / DeMotet
  Unpacking and decryption tools for the Emotet malware
  ☆47Updated 3 years ago
• nao-sec / rr_decoder
  Royal Road RTF Weaponizer object decoder
  ☆24Updated 8 months ago
• naksyn / talks
  Repo containing my public talks
  ☆23Updated 2 years ago
• lasq88 / MalwareAnalysis
  Malware Analysis tools
  ☆26Updated 9 months ago
• YoavLevi / IAT-Tracer
  An automation plugin for Tiny-Tracer framework to trace and watch functions directly out of the executable's import table or trace logs (…
  ☆116Updated 11 months ago
• SIFalcon / Detection
  ☆22Updated last year
• snemes / malware-analysis
  ☆23Updated 4 years ago
• usualsuspect / yara_vt_mock
  Emulates the VirusTotal "vt" YARA module for livehunt rule debugging/testing
  ☆21Updated 2 years ago
• 0x534a / dynmx
  Signature-based detection of malware features based on Windows API call sequences. It's like YARA for sandbox API traces!
  ☆83Updated last year
• leandrofroes / malware-research
  General malware analysis stuff
  ☆37Updated 9 months ago
• hasherezade / flareon2023
  ☆25Updated 7 months ago
• stairwell-inc / cobalt-strike-stager-parser
  ☆34Updated 2 years ago
• rivitna / APT
  ☆14Updated 2 years ago
• Dump-GUY / Get-PDInvokeImports
  Get-PDInvokeImports is tool (PowerShell module) which is able to perform automatic detection of P/Invoke, Dynamic P/Invoke and D/Invoke u…
  ☆54Updated 3 years ago
• RussianPanda95 / IDAPython
  IDA Python scripts
  ☆37Updated 2 months ago
• whichbuffer / Antidebug
  Defeating Anti-Debugging Techniques for Malware Analysis
  ☆13Updated 2 years ago
• ashemery / REDM
  Reverse Engineering and Debugging Malware
  ☆32Updated 2 years ago
• ihack4falafel / ROR13HashGenerator
  C# implementation to produce ROR-13 numeric hash for given function API name
  ☆32Updated 6 years ago
• KasperskyLab / Apihashes
  IDA Pro plugin for recognizing known hashes of API function names
  ☆81Updated 3 years ago