Alternatives and similar repositories for obfuscation-detection

Users that are interested in obfuscation-detection are comparing it to the libraries listed below

• nasbench / SEDR-Internals
  Symantec EDR Internals
  ☆28Updated 4 years ago
• 0x534a / dynmx
  Signature-based detection of malware features based on Windows API call sequences. It's like YARA for sandbox API traces!
  ☆82Updated 2 years ago
• adava / CnCHunter
  This project fully automates the process of analyzing and exploiting IoT malware to find live CnC servers.
  ☆41Updated last year
• alexey-kleymenov / reverse_engineering_tools
  Various code samples and useful tips and tricks from reverse engineering and malware analysis fields.
  ☆105Updated 4 months ago
• stratosphereips / yara-rules
  Repository of Yara rules created by the Stratosphere team
  ☆28Updated 4 years ago
• errbody / DPRK-Research
  ☆38Updated 2 weeks ago
• vmware-samples / tau-research
  The project will serve as a central repository for VMware Threat Analysis Unit (TAU) to share threat intelligence with the security commu…
  ☆17Updated 2 years ago
• fkie-cad / yapscan
  Yapscan is a YAra based Process SCANner, aimed at giving more control about what to scan and giving detailed reports on matches.
  ☆62Updated 2 years ago
• michelcrypt4d4mus / yaralyzer
  Visually inspect and force decode YARA and regex matches found in both binary and text data with colors. Lots of colors.
  ☆141Updated last month
• 0vercl0k / paracosme
  Paracosme is a zero-click remote memory corruption exploit that compromises ICONICS Genesis64 which was demonstrated successfully on stag…
  ☆89Updated 2 years ago
• thewhiteninja / deobshell
  Powershell script deobfuscation using AST in Python
  ☆72Updated last month
• elastic / siglearn
  Code for BH21 talk: "Generating YARA Rules by Classifying Malicious Byte Sequences"
  ☆17Updated 9 months ago
• xforcered / elfpack
  ELF Sectional docking payload injector system
  ☆21Updated 3 years ago
• Malwation / sentello
  Sentello is python script that simulates the anti-evasion and anti-analysis techniques used by malware.
  ☆75Updated 4 years ago
• magicsword-io / bootloaders
  bootloaders.io is a curated list of known malicious bootloaders for various operating systems. The project aims to assist security profes…
  ☆67Updated 2 years ago
• levanvn / APT32_Deobfuscate
  My scripts to deobfuscate APT32 malware
  ☆27Updated 3 years ago
• jstrosch / subparse
  Modular malware analysis artifact collection and correlation framework
  ☆53Updated last year
• n1ght-w0lf / Uchihash
  A small utility to deal with malware embedded hashes.
  ☆52Updated 2 years ago
• CybercentreCanada / Maco
  Maco - Malware config extractor framework
  ☆41Updated last month
• avast / yari
  YARI is an interactive debugger for YARA Language.
  ☆89Updated last month
• airbus-cert / yara-ttd
  Use YARA rules on Time Travel Debugging traces
  ☆95Updated 2 years ago
• X-Junior / Malware-IDAPython-Scripts
  ☆22Updated last year
• tccontre / KnowledgeBase
  Collection of tips, tools, arsenal and techniques I've learned during RE and other CyberSecStuff
  ☆57Updated last month
• JPCERTCC / Lazarus-research
  Lazarus analysis tools and research report
  ☆57Updated last year
• fr0gger / MalwareMuncher
  Malware Muncher is a proof-of-concept Python script that utilizes the Frida framework for binary instrumentation and API hooking, enablin…
  ☆45Updated 2 years ago
• airbus-cert / vbSparkle
  VBScript & VBA source-to-source deobfuscator with partial-evaluation
  ☆80Updated last year
• CAPESandbox / community
  Community modules for CAPE Sandbox
  ☆105Updated 3 weeks ago
• AragornTseng / Mem2Img
  Mem2Img: Memory-Resident Malware Detection via Convolution Neural Network
  ☆25Updated 4 years ago
• password123456 / CertVerify
  A scanner that files with compromised or untrusted code signing certificates written in python.
  ☆64Updated 2 years ago
• OTRF / BHEU22-ADFS
  Writing Your Own Ticket to the Cloud Like APT: A Deep-dive to AD FS Attacks, Detections, and Mitigations
  ☆12Updated 2 years ago