Ghidra – Free Reverse Engineering Tool Released by NSA
NSA released Ghidra a free reverse Engineering tool for Malware analyst with an interactive GUI capability that runs on various
Advertisements
Malware Analysis
MISP – Malware Information Sharing Platform and Threat Sharing
The objective of MISP is to foster the sharing of structured information within the security community and abroad.
Read more
Malboxes: Builds malware analysis Windows VMs
Malboxes is a tool to streamline and simplify the creation and management of virtual machines used for malware analysis.
Read more
Flawfinder v2.0.7 – Searches through C/C++ source code looking for potential security flaws
To run flawfinder, simply give flawfinder a list of directories or files. For each directory given, all files that have
Read more
CAPE: Malware Configuration And Payload Extraction
CAPE is a malware sandbox. It is derived from Cuckoo and is designed to automate the process of malware analysis
Read more
Manticore – Dynamic Binary Analysis Tool
Manticore is a prototyping tool for dynamic binary analysis, with support for symbolic execution, taint analysis, and binary instrumentation.
Read more
FLOSS – Automatically extract obfuscated strings from Malware
The FireEye Labs Obfuscated String Solver (FLOSS) uses advanced static analysis techniques to automatically deobfuscate strings from malware binaries. You
Read more
Maltrail – Malicious Traffic Detection System
Maltrail is a malicious traffic detection system, utilizing publicly available (black)lists containing malicious and/or generally suspicious trails, along with static
Read more
PEframe – Tool To Perform Static Analysis On Malware
PEframe is an open source tool to perform static analysis on Portable Executable malware and generic suspicious file. It can
Read more
ProcDOT – Visual Malware Analysis
There are plenty of tools for behavioral malware analysis. The defacto standard ones, though, are Sysinternals’s Process Monitor (also known
Read more