antispy

AntiSpy English | 简体中文 A powerful anti rootkit toolkit AntiSpy is a free but powerful anti virus and rootkits toolkit. It offers you the ability with the highest privileges that can detect,analyze and restore various kernel modifications and hooks. With its assistance,you can easily spot and...

wafaray

Enhance your malware detection with WAF + YARA WAFARAY WAFARAY is a LAB deployment based on Debian 11.3.0 stable x64 made and cooked between two main ingredients WAF + YARA to detect malicious files e.g. webshells, virus, malware, binaries typically through web functions upload files. -blue.svg...

mobileAudit

Mobile Audit MobileAudit - SAST and Malware Analysis for Android Mobile APKs A Django web application to perform static analysis and detect malicious content inside Android APKs. The project extracts app metadata, scans source code for weaknesses, and aggregates results SAST findings, best...

WAS

WAS WAS - Wait A Sec : Automatic USB drive malware scanning tool for the security-minded person. Author: Fabio Baroni http://www.pentest.guru/ @Fabiothebest89 How many times have you plugged in a USB drive and double clicked on a file without scanning for malware? I guess, MANY. Wait A Sec! Even ...

hollows_hunter

hollowshunter Hollows Hunter is a command-line application based on PE-sieve passive memory scanner. Recognizes and dumps a variety of potentially malicious implants replaced/implanted PEs, shellcodes, hooks, in-memory patches. While in case of PE-sieve you can select the process only by its PID,...

memhunter

Memhunter Automated hunting of memory resident malware at scale This project is WORK IN PROGRESS. Expect feature changes and binary releases on the upcoming weeks. Overview Memhunter is an endpoint sensor tool that is specialized in detecing resident malware, improving the threat hunter analysis...

binaryalert

BinaryAlert: Serverless, Real-Time & Retroactive Malware Detection .. image:: https://travis-ci.org/airbnb/binaryalert.svg?branch=master :target: https://travis-ci.org/airbnb/binaryalert :alt: Build Status .. image:: https://coveralls.io/repos/github/airbnb/binaryalert/badge.svg?branch=master...

DeepTraffic

Deep Learning models for network traffic classification For more information please read our papers. 🎓Wei Wang's Google Scholar Homepage Wei Wang, Xuewen Zeng, Xiaozhou Ye, Yiqiang Sheng and Ming Zhu,"Malware Traffic Classification Using Convolutional Neural Networks for Representation Learning,"...

mail-security-tester

Mail Security Testing Framework A testing framework for mail security and filtering solutions. IMPORTANT: Don't do anything evil with this! Tests of cloud or otherwise hosted solutions should always be approved by the tested provider. Only use your own test accounts and don't annoy anyone with a...

ThreatScraper

ThreatScraper ThreatScraper is a Python-based tool designed to check virus information by using VirusTotal API. It offers functionalities such as scheduling the checking at specific times, showing and saving the graph of malware detection trends, as well as saving virus information to an Excel...

AMDH

AMDH Android Mobile Device Hardening written with python3. Android version, PObY-A Privacy Owned by You - Android, with malware and settings scans is available on the Play Store and the source code can be found HERE Motivations AMDH was created to help automate scanning installed applications on...

Judge-Jury-and-Executable

Judge Jury and Executable A Threat Hunting Forensics Tool Features: Scan a mounted filesystem for threats right away Or gather a system baseline before an incident, for extra threat hunting ability Can be used before, during or after an incident For one to many workstations Scans the MFT, bypassi...

systeminformer

System Informer A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc...

systeminformer

System Informer システムリソースの監視、ソフトウェアのデバッグ、マルウェアの検出を支援する、無料で強力な多目的ツールです。 Winsider Seminars & Solutions, Inc. が提供しています。...

clamav

ClamAV ClamAV® 是一个开源防病毒引擎，用于检测木马、病毒、 恶意软件及其他恶意威胁。 文档与常见问题 ClamAV 文档托管在 docs.clamav.net。 每个版本的源码归档中还包含一份文档副本，可供 离线 阅读。 您可以通过向 Cisco-Talos/clamav-documentation 提交改进来为文档做出贡献。 ClamAV 新闻 有关本版本及以往版本功能的信息，请阅读 新闻。 通过阅读我们的博客了解 ClamAV 的最新动态， 并在 Twitter 上关注我们 @clamav。 ClamAV 签名 任何人都可以学会阅读和编写 ClamAV...

WhacAMole

WhacAMole WhacAMole is a program that analyzes processes in memory in an integral way, detecting and alerting of anomalies related to malware and presenting and saving in files all the relevant information for verification, correlation or analysis, as well as dumping memory regions, processes and...

DGA

DGA 该仓库包含生成域名的算法以及恶意域名词典。 其开发目的是研究将机器学习和神经网络应用于检测和分类恶意域名的可能性。 字典列表 alexa.csv root@kitploit: alexa top million opendns-top-domains.txt root@kitploit: a few dns domain's from opendns zeus.txt root@kitploit: domain's from GameoverZeus.py http://garage4hackers.com/entry.php?b=3081 cryptolocker.txt...

Yara-Rules

适用于以下内容的 Yara 规则： Aurora Stealer Bandit Stealer Ducktail Meduza Stealer MetaStealer Nitrogen PSWSTEALER RaccoonStealerv2 SolarMarker Vidar Stealer WhiteSnake Stealer SwaetRAT DanaBot FakeBat Ande Loader WorkersDevBackdoor Pure Logs Stealer PikaBot JinxLoader GaryStealer Illyrian Stealer PureCrypt...

pisc

Public OCI-Image Security Checker 公開OCIイメージセキュリティチェッカー 概要 PISC（Public OCI-Image または Docker-Image Security Checker）は、OCIコンテナイメージのセキュリティを評価するコマンドラインツールです。 以下の条件のいずれかに該当する場合、終了コード 1 で終了します。 マルウェア 🍄（エクスプロイト 🐙、ハックツール 👾、バックドア 🐴、暗号通貨マイナー 💰 など 💩）by virustotal 悪用可能なクリティカルな脆弱性 🐞 by...

Pegasus-Malware-Scan

pegasus-malware-scan 説明 Pegasus Malware Scanは、高度な脅威検出とマルウェア解析のために設計された包括的なサイバーセキュリティソリューションです。Pythonで構築されたこの強力なツールは、多層的な検出技術を採用し、一般的なウイルスから高度な持続的脅威（APT）に至るまで、幅広い悪意のあるソフトウェアを特定・無力化します。 Pegasus Malware Scanとは？ Pegasus Malware...