Handy scripts to speed up malware analysis
☆35Oct 3, 2023Updated 3 years ago
Alternatives and similar repositories for Malware-Analysis-Scripts
Users that are interested in Malware-Analysis-Scripts are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- VB Exe Parser is an IDA script written in Python. This script will help you to parse VB program internal structures. It can find: Event, …☆19Oct 7, 2016Updated 10 years ago
- Emu-strings project - JScript/VBScript automated dropper analysis system☆18Mar 25, 2021Updated 5 years ago
- certstream + analytics☆11Jan 17, 2020Updated 6 years ago
- Malware samples observed in the wild from time to time☆12Jul 29, 2019Updated 7 years ago
- IoC's, PCRE's, YARA's etc☆23Jul 13, 2026Updated 3 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- please use https://github.com/fireeye/vivisect instead☆16Oct 21, 2025Updated last year
- Cheat-Sheet with events too look out for when analysing malicious Office documents☆19Oct 21, 2017Updated 9 years ago
- ☆11Feb 8, 2026Updated 8 months ago
- This is a python version of samesame repo to generate homograph strings☆24Aug 22, 2018Updated 8 years ago
- hopefully a source-to-source deobfuscator, aiming at deobfuscating common scripts languages such as Powershell, VBA and Javascript. Curre…☆41Aug 17, 2019Updated 7 years ago
- Analysis of file (doc, pdf, exe, ...) in deep (emmbedded file(s)) with clamscan and yara rules☆51Sep 6, 2023Updated 3 years ago
- Identifies Bluetooth Low-energy devices☆17Jul 26, 2020Updated 6 years ago
- An embedded wireless security audit system☆21Mar 27, 2013Updated 13 years ago
- Malware (analysis results, tools, reference, analysis methods, etc.)☆17Apr 18, 2023Updated 3 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Static analysis tools for Microsoft Office Open XML files and documents☆74Oct 13, 2017Updated 9 years ago
- recovers and reconstructs fragmented Evtx files from disk images, memory dumps, pagefiles and unallocated space☆13Feb 3, 2015Updated 11 years ago
- Scripts targeting specific families☆13Jul 3, 2017Updated 9 years ago
- A set of public Yara rules☆11Apr 29, 2019Updated 7 years ago
- VBA analysis tools☆25Aug 15, 2025Updated last year
- Historical Observations of Actionable Reputation Data☆13Jun 26, 2018Updated 8 years ago
- Useful commands for infosec☆28Feb 13, 2023Updated 3 years ago
- My logstash plugins. Filter: sig (for security detect -> IOC, sig, New value, Reference, link, frequence, ...). Output: alert created by …☆10Jul 26, 2019Updated 7 years ago
- PyMal is a python based interactive Malware Analysis Framework. It is built on the top of three pure python programes Pefile, Pydbg and V…☆43Jul 10, 2016Updated 10 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Official VirusTotal plugin for IDA Pro☆182Sep 14, 2026Updated last month
- ☆81Jan 31, 2020Updated 6 years ago
- analysis of visual basic code☆48Mar 25, 2018Updated 8 years ago
- CLI tool for testing Office documents with macros using MaliciousMacroBot☆12Dec 3, 2023Updated 2 years ago
- It's like DocBleach, but in your browser☆18Oct 24, 2019Updated 7 years ago
- Shows command lines used by latest instances analyzed on Hybrid-Analysis☆43Sep 18, 2018Updated 8 years ago
- xlrd2 is a variant of xlrd that is actively maintained☆23Aug 1, 2024Updated 2 years ago
- An Android wrapper for Arc☆11May 13, 2018Updated 8 years ago
- Binary matching with Binary Ninja☆22Jul 8, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Event Log Analysis Tools☆31Sep 27, 2016Updated 10 years ago
- ☆100Oct 7, 2020Updated 6 years ago
- TA505 unpacker Python 2.7☆45Jun 22, 2020Updated 6 years ago
- ☆24Jul 7, 2023Updated 3 years ago
- An arpspoof clone (written in Go) that injects spoofed ARP packets into a LAN☆14Oct 31, 2016Updated 9 years ago
- Reuploading the code she removed.☆13May 27, 2019Updated 7 years ago
- Various snippets created during malware analysis☆466Oct 3, 2025Updated last year