This project is a community-curated repository of YARA rules used to detect malware, webshells, and other malicious patterns in files. It serves as a dataset of signatures for identifying known malware families, software packers, and threat intelligence indicators. The collection provides specialized detection capabilities for identifying exploit kits and anti-analysis evasion techniques, such as anti-debugging and anti-virtualization methods. It also includes signatures for cryptographic algorithm detection and the identification of unauthorized remote administration tools on servers. The r
A Yara rule generator for finding related samples and hunting
dex2jar is an Android dex decompiler and reverse engineering tool designed to convert Dalvik executable bytecode into Java class files. It functions as a bytecode converter that transforms compiled Android binaries into a format compatible with standard Java analysis tools. The project facilitates Android app decompilation and Java bytecode recovery by translating executable files into readable structures. This allows for the analysis of application logic and the identification of security vulnerabilities or malicious behavior during Android malware analysis. The tool performs static bytecod
Origami is a Ruby framework designed to parse, analyze, and forge PDF documents.
The main features of cogent/origami-pdf are: Document Analysis, Document Analysis Tools, Security and Malware Analysis.
Open-source alternatives to cogent/origami-pdf include: yara-rules/rules — This project is a community-curated repository of YARA rules used to detect malware, webshells, and other malicious… alienvault-otx/yabin — A Yara rule generator for finding related samples and hunting. neo23x0/yargen — yarGen is a generator for YARA rules. pxb1988/dex2jar — dex2jar is an Android dex decompiler and reverse engineering tool designed to convert Dalvik executable bytecode into… tylerha97/eeabc765e9befad9b80a.
