How this analysis was created: This summary and feature list were written by an AI model that read the project's README and public documentation pages. Each feature links to the documentation it came from; stars, license and language come straight from the GitHub API. The model does not read the source code, and the analysis is refreshed when the project is re-analysed. Learn more on our About page.
Malware static analysis framework
The main features of korelogicsecurity/mastiff are: Detection and Classification, Malware Analysis, Malware Analysis Sandboxes, Sandboxing and Reverse Engineering.
Open-source alternatives to korelogicsecurity/mastiff include: kevoreilly/capev2 — Malware Configuration And Payload Extraction. nationalsecurityagency/ghidra — Ghidra is a software reverse engineering suite designed to analyze compiled binaries and reconstruct program logic… radareorg/radare2 — Radare2 is a comprehensive framework for reverse engineering and analyzing compiled software. It provides a… justicerage/manalyze — A static analyzer for PE executables. fireeye/stringsifter — A machine learning tool that ranks strings based on their relevance for malware analysis. katjahahn/portex — Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation…
Ghidra is a software reverse engineering suite designed to analyze compiled binaries and reconstruct program logic without access to original source code. It provides an interactive environment for disassembly and decompilation, utilizing a platform-independent intermediate representation to maintain consistency across diverse hardware architectures. The framework supports automated binary analysis through programmatic routines, enabling the investigation of complex code patterns and security indicators. The platform distinguishes itself through a modular architecture that allows for extensiv
Radare2 is a comprehensive framework for reverse engineering and analyzing compiled software. It provides a command-line environment designed for disassembling, debugging, and patching binary executables across a wide range of processor architectures and operating systems. The system distinguishes itself through a modular, plugin-based architecture that supports cross-platform analysis and automated workflows. It utilizes memory-mapped file access to enable efficient structural inspection and modification of binaries without requiring full file loads. By lifting machine instructions into a un
Malware Configuration And Payload Extraction
Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness