A list of useful tools for Malware Analysis (will be updated regularly)
☆168Aug 5, 2025Updated last year
Alternatives and similar repositories for malware-tools
Users that are interested in malware-tools are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Collection of notes, useful resources, list of tools and scripts related to threat detection, digital forensics and incident response.☆14Oct 20, 2026Updated 2 weeks ago
- ☆27Oct 18, 2026Updated 2 weeks ago
- Just load this .js module and it will start tracking all external calls by a JS-application☆50Dec 17, 2024Updated last year
- Rolling Timeline for Incident Recorder.☆14Dec 4, 2023Updated 2 years ago
- ☆12Oct 10, 2026Updated 3 weeks ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- sms.db SQLite queries for assets listed in the Shared with You Photo Library☆11Sep 21, 2022Updated 4 years ago
- Automatic process management library for Rust☆12Feb 20, 2026Updated 8 months ago
- Automatic updater plugin for x64dbg☆25Jul 5, 2025Updated last year
- This is a MCP server for DIE (Detect It Easy )☆14Jun 27, 2025Updated last year
- Just a bunch of SQLite queries that are useful for manually parsing iOS databases or embedding in scripts☆14Jun 13, 2026Updated 4 months ago
- General malware analysis stuff☆37Aug 26, 2024Updated 2 years ago
- ELF binary file format parser in C☆12Jul 17, 2021Updated 5 years ago
- Plugin for x64Dbg adding Lua scripting.☆21May 3, 2019Updated 7 years ago
- Use Markdown content on your site by combining it with HTML! Implemented from scratch with 100% syntax support.☆22Oct 12, 2026Updated 3 weeks ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- paste string formatted byte data block into x64dbg easy.☆41Jan 2, 2021Updated 5 years ago
- Configurable tool to scan for webshell indicators of compromise (IOCs) across HTTP/HTTPS services with rate-limiting and abnormal reply d…☆18Aug 1, 2025Updated last year
- A collection of PowerShell scripts for analyzing macOS Forensic Artifacts☆36Mar 16, 2026Updated 7 months ago
- Parse .hex firmwares files into a raw file for reversing.☆12Nov 19, 2024Updated last year
- xLCB plugin for x64dbg☆21Oct 4, 2016Updated 10 years ago
- Develop macOS apps on Windows with seamless cross-platform tools.☆15Jun 5, 2025Updated last year
- DateTime Library - a library written in assembler (for x86 and x64) which provides simple date and time conversion, manipulation and comp…☆17Apr 11, 2024Updated 2 years ago
- Basic Deobfuscator for SaintFuscator, Using CCFlow with this tool is recommended☆17Jun 4, 2021Updated 5 years ago
- Collection of fasmg code samples and small projects.☆12Jul 21, 2022Updated 4 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- A simple cryptor for .NET/Native files with Injection and obfuscation☆55Oct 8, 2024Updated 2 years ago
- Tool for obtaining information about PPL processes☆16Feb 12, 2024Updated 2 years ago
- Basic network sec tool for real-time threat detection and C2 communication prevention. Features 70+ detection modules, IOC integration, c…☆17Jun 11, 2024Updated 2 years ago
- Invoke-DetectItEasy is a wrapper for excelent tool called Detect-It-Easy. This PS module is very useful for Threat Hunting and Forensics.☆31Feb 15, 2022Updated 4 years ago
- Some of CrackMes made by me :)☆18Dec 24, 2021Updated 4 years ago
- ☆17Feb 15, 2022Updated 4 years ago
- Tiny C header that allows easy hiding of WinAPI imports via PEB☆57Oct 10, 2026Updated 3 weeks ago
- Track previous changes on specific AD accounts (users, computers) and Groups (online DC), even if event logs were wiped/not collected (e.…☆16Feb 25, 2025Updated last year
- Golang bindings for PE-sieve☆43Nov 11, 2023Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- CLI tools for forensic investigation of Windows artifacts☆356Jul 21, 2025Updated last year
- This tool is meant to parse an NTFS $MFT file.☆15Mar 26, 2024Updated 2 years ago
- 🦇 Ultimate batch file collection - Essential Windows automation scripts & utilities☆14Sep 3, 2026Updated 2 months ago
- Windows Registry Editor (regedit) with advanced search features.☆35Nov 4, 2018Updated 8 years ago
- A repo that aims to centralize a current, running list of relevant parsers/tools for known DFIR artifacts☆83Oct 20, 2025Updated last year
- ☆22Aug 16, 2025Updated last year
- Handbook of windows forensic artifacts across multiple Windows version with interpretation tips and some examples. Work in progress!☆509Updated this week