Cutter is a binary analysis platform and graphical user interface for the Rizin reverse engineering framework. It provides an environment for analyzing the internal logic and data structures of compiled binaries through integrated disassembly and visualization. The platform supports a containerized deployment model to provide isolated environments for binary analysis, which is used to examine suspicious binaries without risking the host system. It is an extensible security tool that allows for the addition of custom analysis capabilities and visualizers via native plugins and scripts. The to
A Python RESTful API framework for online malware analysis and threat intelligence services.
Cuckoo is an open-source automated malware analysis system that executes suspicious files inside isolated virtual machines and produces structured behavioral reports. The platform captures system calls, file operations, and network activity during execution, compiling them into comprehensive analysis documents for programmatic consumption. The system operates through a modular analysis pipeline that processes behavioral data, applying YARA signature patterns against captured artifacts to identify known malware families. Each analysis run starts from a clean virtual machine snapshot to ensure
A Python library to interface with a cuckoo-modified instance
The main features of keithjjones/cuckoo-modified-api are: Online Sandboxes, Malware Analysis Sandboxes.
Open-source alternatives to keithjjones/cuckoo-modified-api include: rizinorg/cutter — Cutter is a binary analysis platform and graphical user interface for the Rizin reverse engineering framework. It… detuxsandbox/detux — The Multiplatform Linux Sandbox. diogo-fernan/malsub — A Python RESTful API framework for online malware analysis and threat intelligence services. f-secure/see — Sandboxed Execution Environment. fireeye/stringsifter — A machine learning tool that ranks strings based on their relevance for malware analysis. cuckoosandbox/cuckoo — Cuckoo is an open-source automated malware analysis system that executes suspicious files inside isolated virtual…
