Alternatives and similar repositories for obfuscation-detection

Users that are interested in obfuscation-detection are comparing it to the libraries listed below

• elastic / siglearn
  Code for BH21 talk: "Generating YARA Rules by Classifying Malicious Byte Sequences"
  ☆17Updated last year
• fkie-cad / yapscan
  Yapscan is a YAra based Process SCANner, aimed at giving more control about what to scan and giving detailed reports on matches.
  ☆62Updated 2 years ago
• nasbench / SEDR-Internals
  Symantec EDR Internals
  ☆29Updated 4 years ago
• errbody / DPRK-Research
  ☆46Updated 2 months ago
• Malwation / sentello
  Sentello is python script that simulates the anti-evasion and anti-analysis techniques used by malware.
  ☆75Updated 4 years ago
• airbus-cert / vbSparkle
  VBScript & VBA source-to-source deobfuscator with partial-evaluation
  ☆80Updated last year
• alexey-kleymenov / reverse_engineering_tools
  Various code samples and useful tips and tricks from reverse engineering and malware analysis fields.
  ☆106Updated 7 months ago
• 0vercl0k / paracosme
  Paracosme is a zero-click remote memory corruption exploit that compromises ICONICS Genesis64 which was demonstrated successfully on stag…
  ☆89Updated 2 years ago
• stratosphereips / yara-rules
  Repository of Yara rules created by the Stratosphere team
  ☆29Updated 4 years ago
• 0x534a / dynmx
  Signature-based detection of malware features based on Windows API call sequences. It's like YARA for sandbox API traces!
  ☆82Updated 2 years ago
• adava / CnCHunter
  This project fully automates the process of analyzing and exploiting IoT malware to find live CnC servers.
  ☆43Updated last year
• levanvn / APT32_Deobfuscate
  My scripts to deobfuscate APT32 malware
  ☆27Updated 3 years ago
• repnz / shellcode2exe
  Batch script to compile a binary shellcode blob into an exe file
  ☆89Updated 6 years ago
• packing-box / dataset-packed-elf
  Dataset of packed ELF samples
  ☆21Updated 2 weeks ago
• jstrosch / subparse
  Modular malware analysis artifact collection and correlation framework
  ☆53Updated last year
• tccontre / KnowledgeBase
  Collection of tips, tools, arsenal and techniques I've learned during RE and other CyberSecStuff
  ☆57Updated 4 months ago
• avast / yari
  YARI is an interactive debugger for YARA Language.
  ☆90Updated 4 months ago
• magicsword-io / bootloaders
  bootloaders.io is a curated list of known malicious bootloaders for various operating systems. The project aims to assist security profes…
  ☆68Updated 2 years ago
• thewhiteninja / deobshell
  Powershell script deobfuscation using AST in Python
  ☆73Updated 4 months ago
• 0xN3utr0n / Kanis
  Advanced threat detection solution for Linux.
  ☆36Updated 5 years ago
• CybercentreCanada / Maco
  Maco - Malware config extractor framework
  ☆43Updated this week
• 0xcpu / winsmsd
  Windows (ShadowMove) Socket Duplication
  ☆87Updated 5 years ago
• JPCERTCC / QuasarRAT-Analysis
  QuasarRAT analysis tools and research report
  ☆28Updated 2 years ago
• t0-retooling / defender-recon24
  ☆59Updated last year
• JPCERTCC / Lazarus-research
  Lazarus analysis tools and research report
  ☆57Updated 2 years ago
• WithSecureLabs / GarbageMan
  GarbageMan is a set of tools for analyzing .NET binaries through heap analysis.
  ☆119Updated 2 years ago
• malware-kitten / shellcode_hashes
  A collection of shellcode hashes
  ☆17Updated 7 years ago
• hasherezade / pe2pic
  Small visualizator for PE files
  ☆70Updated 2 years ago
• zom3y3 / ssdc
  ssdeep cluster analysis for malware files
  ☆31Updated 5 years ago
• mez-0 / YaraEngine
  A C++ Yara Rule Runner
  ☆13Updated 3 years ago