Alternatives and similar repositories for obfuscation-detection

Users that are interested in obfuscation-detection are comparing it to the libraries listed below

• nasbench / SEDR-Internals
  Symantec EDR Internals
  ☆27Updated 3 years ago
• errbody / DPRK-Research
  ☆38Updated 5 months ago
• fkie-cad / yapscan
  Yapscan is a YAra based Process SCANner, aimed at giving more control about what to scan and giving detailed reports on matches.
  ☆61Updated 2 years ago
• 0vercl0k / paracosme
  Paracosme is a zero-click remote memory corruption exploit that compromises ICONICS Genesis64 which was demonstrated successfully on stag…
  ☆89Updated last year
• adava / CnCHunter
  This project fully automates the process of analyzing and exploiting IoT malware to find live CnC servers.
  ☆43Updated last year
• alexey-kleymenov / reverse_engineering_tools
  Various code samples and useful tips and tricks from reverse engineering and malware analysis fields.
  ☆105Updated last month
• thewhiteninja / deobshell
  Powershell script deobfuscation using AST in Python
  ☆68Updated last year
• levanvn / APT32_Deobfuscate
  My scripts to deobfuscate APT32 malware
  ☆27Updated 3 years ago
• JPCERTCC / QuasarRAT-Analysis
  QuasarRAT analysis tools and research report
  ☆27Updated last year
• magicsword-io / bootloaders
  bootloaders.io is a curated list of known malicious bootloaders for various operating systems. The project aims to assist security profes…
  ☆63Updated last year
• airbus-cert / vbSparkle
  VBScript & VBA source-to-source deobfuscator with partial-evaluation
  ☆80Updated last year
• avast / yari
  YARI is an interactive debugger for YARA Language.
  ☆88Updated last month
• stratosphereips / yara-rules
  Repository of Yara rules created by the Stratosphere team
  ☆26Updated 4 years ago
• marcusbotacin / Dropper
  Embed an executable as a PE resource, drops and launches it in runtime.
  ☆61Updated 3 years ago
• 0x534a / dynmx
  Signature-based detection of malware features based on Windows API call sequences. It's like YARA for sandbox API traces!
  ☆83Updated 2 years ago
• Malwation / sentello
  Sentello is python script that simulates the anti-evasion and anti-analysis techniques used by malware.
  ☆73Updated 4 years ago
• michelcrypt4d4mus / yaralyzer
  Visually inspect and force decode YARA and regex matches found in both binary and text data. With Colors.
  ☆136Updated last week
• vmware-samples / tau-research
  The project will serve as a central repository for VMware Threat Analysis Unit (TAU) to share threat intelligence with the security commu…
  ☆17Updated 2 years ago
• n1ght-w0lf / Uchihash
  A small utility to deal with malware embedded hashes.
  ☆52Updated last year
• JPCERTCC / Lazarus-research
  Lazarus analysis tools and research report
  ☆56Updated last year
• t0-retooling / defender-recon24
  ☆52Updated 9 months ago
• elastic / siglearn
  Code for BH21 talk: "Generating YARA Rules by Classifying Malicious Byte Sequences"
  ☆17Updated 6 months ago
• memoryforensics1 / VolExp
  volatility explorer
  ☆91Updated 4 years ago
• SafeBreach-Labs / Back2TheFuture
  Find patterns of vulnerabilities on Windows in order to find 0-day and write exploits of 1-days. We use Microsoft security updates in ord…
  ☆187Updated 4 years ago
• X-Junior / Malware-IDAPython-Scripts
  ☆22Updated last year
• tccontre / KnowledgeBase
  Collection of tips, tools, arsenal and techniques I've learned during RE and other CyberSecStuff
  ☆55Updated last week
• airbus-cert / yara-ttd
  Use YARA rules on Time Travel Debugging traces
  ☆92Updated 2 years ago
• fr0gger / MalwareMuncher
  Malware Muncher is a proof-of-concept Python script that utilizes the Frida framework for binary instrumentation and API hooking, enablin…
  ☆46Updated 2 years ago
• AragornTseng / Mem2Img
  Mem2Img: Memory-Resident Malware Detection via Convolution Neural Network
  ☆25Updated 4 years ago
• 0xcpu / winsmsd
  Windows (ShadowMove) Socket Duplication
  ☆85Updated 5 years ago