Tag: malware-analysis

Discover Ghidra, the NSA's open-source reverse engineering framework. This comprehensive guide covers installation, real code examples, advanced features, and why security researchers are abandoning expensive alternatives for this free SRE powerhouse.

Discover 0xor0ne's awesome-list: a meticulously curated cybersecurity collection spanning 2011-2026. From kernel exploitation to hardware hacking, this repository eliminates research friction for security professionals.

Malwoverview is an open-source threat hunting tool aggregating 17+ intelligence sources including VirusTotal, Shodan, and AbuseIPDB. Features LLM-powered AI enrichment, YARA scanning, IOC extraction, and privacy-first design for rapid malware triage.

mandiant/flare-vm automates Windows reverse engineering environment setup using Chocolatey and Boxstarter. Features configurable package selection, reboot-resilient installation, and VM-first security design.

Brandon7CC/mac-monitor is a native macOS security monitoring tool using Apple's Endpoint Security API. It provides graphical event analysis, process correlation, and dynamic filtering for malware triage and system troubleshooting on macOS 13.1+ with Apple Silicon or Intel.

Discover Google's JSIR, the MLIR-based next-generation JavaScript analysis tool enabling powerful deobfuscation and Hermes bytecode decompilation. Learn installation, real code examples, and why it's revolutionizing reverse engineering workflows.

Discover how Mandiant's capa automatically identifies malware capabilities in executable files. This open-source tool from the FLARE team maps capabilities to MITRE ATT&CK, supports static and dynamic analysis, and accelerates reverse engineering workflows.

GhidraMCP revolutionizes reverse engineering by connecting large language models to Ghidra via the Model Context Protocol. Learn how to set up this game-changing tool, explore real code examples, and discover use cases from malware analysis to vulnerability research that will 10x your productivity.