Analysing the malware to breakdown its function and infection routine is a kind of tough job. here we describing the

ManaTI Project Machine Learning for Threat Intuitive Analysis The ManaTI project consists of a front-end web application and a back-end

GDB dashboard Modular visual interface for GDB in Python. This comes as a standalone single-file .gdbinit which, among the other things, enables

idenLib – Library Function Identification When analyzing malware or 3rd party software, it’s challenging to identify statically linked libraries and

box.js A utility to analyze malicious JavaScript. Installation Simply install box-js from npm: npm install box-js –global Usage Looking to

MISP – Malware Information Sharing Platform and Threat Sharing MISP, Malware Information Sharing Platform, and Threat Sharing is an open

Maltrail is a malicious traffic detection system, utilizing publicly available (black)lists containing malicious and/or generally suspicious trails, along with static trails

PE-sieve is a light-weight tool that helps to detect malware running on the system, as well as to collect the potentially

Ropper You can use ropper to display information about binary files in different file formats and you can search for

Pharos Static Binary Analysis Framework The Pharos static binary analysis framework is a project of the Software Engineering Institute at

Pharos Static Binary Analysis Framework The Pharos static binary analysis framework is a project of the Software Engineering Institute at

mpDNS aka multi-purpose DNS Server DNS Server with multiple useful features Should work on Python 2 and 3 names.db ->

MC Extractor is a tool which parses Intel, AMD, VIA and Freescale processor microcode binaries. It can be used by

ME Analyzer is a tool which parses Intel Engine firmware images from the Converged Security Management Engine, Converged Security Trusted

CocoaDebug – iOS Debugging Tool Feature  Shake to hide or show the black bubble. (support both device and simulator)  Long

Cmulator – Scriptable x86 RE Sandbox Emulator Cmulator is ( x86 – x64 ) Scriptable Reverse Engineering Sandbox Emulator for

MC Extractor is a tool which parses Intel, AMD, VIA and Freescale processor microcode binaries. It can be used by

ME Analyzer is a tool which parses Intel Engine firmware images from the Converged Security Management Engine, Converged Security Trusted

uniFuzzer uniFuzzer is a fuzzing tool for closed-source binaries based on Unicorn and LibFuzzer. Currently, it supports fuzzing 32-bits LSB ELF files on

unicorn-bios Basic BIOS emulator/debugger for Unicorn Engine. Installation brew install –HEAD macmade/tap/unicorn-bios Use Copyright (C) 2019 macmade  Source: https://github.com/macmade/

Dagda is a tool to perform static analysis of known vulnerabilities, trojans, viruses, malware & other malicious threats in docker images/containers

Mitaka Mitaka is an OSINT friendly IOC (Indicator of Compromise) search tool. It works as a Chrome extension and it

MISP – Malware Information Sharing Platform and Threat Sharing MISP, Malware Information Sharing Platform, and Threat Sharing is an open

Simple Vulnerability Manager Simple Vulnerability Manager is the perfect tool for any vulnerability analyst. Just a couple of clicks and

Sigma Generic Signature Format for SIEM Systems What is Sigma? Sigma is a generic and open signature format that allows

CocoaDebug – iOS Debugging Tool Feature  Shake to hide or show the black bubble. (support both device and simulator)  Long

fsmon FileSystem Monitor utility that runs on Linux, Android, iOS, and OSX. Backends fsmon filesystem information is taken from different

Introduction r2 is a rewrite from scratch of radare in order to provide a set of libraries and tools to

CocoaDebug – iOS Debugging Tool Feature  Shake to hide or show the black bubble. (support both device and simulator)  Long

pcodedmp.py – A VBA p-code disassembler It is not widely known, but macros are written in VBA (Visual Basic for