OpenHub — The Ultimate Curated Software & Tool Directory

ShadowStrike

ShadowStrike A Windows EDR Platform

soc-training-program

Certified SOC Analyst (CSA) Program - A comprehensive 6-month, hands-on Security Operations Center training curriculum. Developed by Aminu Idris, AMCPN | International Cybersecurity and Digital Forens

Malware-Analysis 37

figment

Spin up a fully configured, host‑only malware analysis lab with FlareVM, REMnux or CAPE Sandbox using a few repeatable commands.

Malware-Analysis 36

JSConfuser-String-Decryptor

A simple algorithm for statically decrypting strings from JSConfuser-protected programs.

Malware-Analysis 36

ezuri_unpack

Simple unpacking script for Ezuri ELF Crypter

Malware-Analysis 36

Worms

This is a collection of Worms for educational purposes

Malware-Analysis 36

MalwareHandbook

A book covering the whole spectrum of Malware

Malware-Analysis 36

angr-antievasion

Final project for the M.Sc. in Engineering in Computer Science at Università degli Studi di Roma "La Sapienza" (A.Y. 2016/2017).

Malware-Analysis 35

malware-souk

Collaborative malware exchange repository.

Malware-Analysis 35

Malcore-x64dbg

This x64dbg plugin allows you to upload your sample to Malcore and view the results.

Malware-Analysis 35

Sandroid_core

Android Sandbox for Automated Forensic, Malware, and Security Analysis

Malware-Analysis 34

MABEL-dataset

MABEL: Malware Analysis Benchmark for Artificial Intelligence and Machine Learning

Malware-Analysis 34

androidDump

A tool pulls loaded binaries ordered by memory regions

Malware-Analysis 34

clara

Serverless, real-time, ClamAV+Yara scanning for your S3 Buckets

Malware-Analysis 34

plugins

A repository of example plugins for Relyze Desktop.

Malware-Analysis 34

themida-dumper

Generic Themida/WinLicense payload extractor. Launches protected PE as suspended process, detects section decryption, dumps unpacked binary with fixed headers, and scans process memory for IOCs. Supp

Malware-Analysis 34

APKStat

Automated Information Retrieval From APKs For Initial Analysis

Malware-Analysis 33

PeNet-Analyzer

Analyzers for Portable Executable anomalies and other malware behavior.

Malware-Analysis 33

blackbox-re-agent

Conversational black-box reverse-engineering agent on the pi coding agent — analyzes apk/.o/.hex/exe with a self-provisioning toolchain (radare2 · Ghidra · angr · jadx). Static analysis. Claude Code &

Malware-Analysis 33

PlanqX_EDR-Endpoint-Detection-and-Response

PlanqX EDR is an open-source, advanced Endpoint Detection and Response (EDR) solution for Windows, offering real-time system and network security. Features include API hooking, ELAM, ETW integration,

Malware-Analysis 33

Lnk2Vbs

A Python script that embeds Target VBS into LNK and when executed runs the VBS script from within.

Malware-Analysis 33

hyperhives-macos-infostealer-analysis

Full static analysis of HyperHives macOS Rust infostealer — 571 decrypted config values, C2 infrastructure, DPRK/Contagious Interview attribution, YARA/Sigma rules, STIX 2.1 bundle, ATT&CK Navigator l

Malware-Analysis 33

smartvmi

Virtual Machine Introspection (VMI) for memory forensics and machine-learning.

Malware-Analysis 32

radare2-scripts

A collection of useful radare2 scripts!

Malware-Analysis 32