An implementation of the paper "ELF-Miner: Using Structural Knowledge and Data Mining Methods To Detect New (Linux) Malicious Executables"
☆14Dec 21, 2018Updated 7 years ago
Alternatives and similar repositories for ELF-Miner
Users that are interested in ELF-Miner are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Effects of packers on machine-learning-based malware classifiers that use only static analysis☆90Jun 17, 2024Updated 2 years ago
- makecfg is a tool for making CFG(Control Flow Graph) from binary.☆18Jan 11, 2022Updated 4 years ago
- ☆14Feb 18, 2021Updated 5 years ago
- This repository contains relevant samples and data related to the ELF Malware Analysis 101 articles☆51Apr 13, 2026Updated 5 months ago
- 基于机器学习的 Webshell 检测 (OPCode -> N-Gram -> TF-IDF -> XGBoost)☆46Jun 13, 2021Updated 5 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- ☆17Jul 8, 2024Updated 2 years ago
- ☆27Jul 31, 2021Updated 5 years ago
- Automated Yara Rule generation using Biclustering☆78Oct 8, 2025Updated 11 months ago
- dga classification with fasttext☆12Oct 29, 2018Updated 7 years ago
- Dataset of packed ELF samples☆22Jan 24, 2026Updated 8 months ago
- GDB for pwn☆11Sep 10, 2025Updated last year
- A Natural Language Processing based approach to detect malicious HTTP requests.☆11Oct 2, 2020Updated 5 years ago
- 基于卷积神经网络的WebShell检测工具，可以检测JSP和PHP类型文件，以opcode和bytecode作为检测特征，基于Django框架☆18Sep 27, 2021Updated 5 years ago
- Detect webshells.☆11Aug 14, 2020Updated 6 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- AVCLASS++: Yet Another Massive Malware Labeling Tool☆13Dec 7, 2019Updated 6 years ago
- A Modified gem5 for Simulating Virtualized Systems☆11Mar 1, 2015Updated 11 years ago
- A suite of simple programs to test Intels' TSX extension☆14May 13, 2017Updated 9 years ago
- a backdoor detection tool for Ethereum ERC token contract☆11Jun 17, 2022Updated 4 years ago
- Simple tool to extract icons from a pe file and other useful information☆13Jun 22, 2018Updated 8 years ago
- Transactional memory (mostly Intel® TSX) experiments☆14May 3, 2014Updated 12 years ago
- program course for haidian fellowship☆10Apr 15, 2021Updated 5 years ago
- ☆10Sep 9, 2015Updated 11 years ago
- This adds partial support of AVX2 and AVX-512 to gem5.☆15Dec 19, 2023Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- NUC980 ARM9 OpenWrt-LEDE☆16May 5, 2022Updated 4 years ago
- Symbol hash for ELF files☆117Feb 9, 2022Updated 4 years ago
- Linux Malware Sample Archive including various types of malicious ELF binaries and viruses. Be careful!☆194Feb 6, 2021Updated 5 years ago
- Python implementation of the LZJD algorithm☆33Jul 10, 2025Updated last year
- implement IDS using deep learning☆13May 24, 2019Updated 7 years ago
- This project was done as a part of RISC-V based MYTH (Microprocessor for you in Thirty Hours) workshop organized by Kunal Ghosh and Steve…☆17Sep 23, 2020Updated 6 years ago
- Factored Interactive POMDP solver based on symbolic Perseus.☆12Aug 12, 2025Updated last year
- Binary reversing tool to find all possible code paths between two functions.☆28Apr 25, 2018Updated 8 years ago
- New Cache implementation using Gem5☆13Apr 2, 2014Updated 12 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- FlipIt: An LLVM Based Fault Injector for HPC☆15May 14, 2021Updated 5 years ago
- Repository for author masking☆13Oct 29, 2018Updated 7 years ago
- Behavorial analysis of malware using machine learning☆16Mar 13, 2018Updated 8 years ago
- PIN-based Fault-Injector is a fault injector based on the Intel PIN tool. For more information, please refer to the following paper:☆18Jul 6, 2018Updated 8 years ago
- GDB plugin to dump SECCOMP rules set via prctnl(PR_SET_SECCOMP, SECCOMP_MODE_FILTER)☆22Mar 13, 2016Updated 10 years ago
- A benchmark suite (under construction) for smart contract vulnerability tools☆17Jul 13, 2021Updated 5 years ago
- PackGenome: Automatically Generating Robust YARA Rules for Accurate Malware Packer Detection☆29Dec 6, 2023Updated 2 years ago