How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
Malware static analysis framework
The main features of korelogicsecurity/mastiff are: Detection and Classification, Malware Analysis, Malware Analysis Sandboxes, Sandboxing and Reverse Engineering.
Projects with overlapping indexed features include: kevoreilly/capev2 — Malware Configuration And Payload Extraction. nationalsecurityagency/ghidra — Ghidra is a software reverse engineering suite designed to analyze compiled binaries and reconstruct program logic… radareorg/radare2 — Radare2 is a comprehensive framework for reverse engineering and analyzing compiled software. It provides a… justicerage/manalyze — A static analyzer for PE executables. fireeye/stringsifter — A machine learning tool that ranks strings based on their relevance for malware analysis. katjahahn/portex — Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation…
Ghidra is a software reverse engineering suite designed to analyze compiled binaries and reconstruct program logic without access to original source code. It provides an interactive environment for disassembly and decompilation, utilizing a platform-independent intermediate representation to maintain consistency across diverse hardware architectures. The framework supports automated binary analysis through programmatic routines, enabling the investigation of complex code patterns and security indicators. The platform distinguishes itself through a modular architecture that allows for extensiv
Radare2 is a comprehensive framework for reverse engineering and analyzing compiled software. It provides a command-line environment designed for disassembling, debugging, and patching binary executables across a wide range of processor architectures and operating systems. The system distinguishes itself through a modular, plugin-based architecture that supports cross-platform analysis and automated workflows. It utilizes memory-mapped file access to enable efficient structural inspection and modification of binaries without requiring full file loads. By lifting machine instructions into a un
Malware Configuration And Payload Extraction
Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness