dorothy2

Binary analyzer

A framework for analyzing suspicious binaries by configuring analysis environments and executing them in a sandboxed space

A malware/botnet analysis framework written in Ruby.

GitHub

197 stars
22 watching
35 forks
Language: Ruby
last commit: about 1 year ago
Linked from 1 awesome list


Backlinks from these awesome lists:

Related projects:

Repository Description Stars
m4b/bingrep A tool to quickly inspect and analyze binary executables by parsing and coloring their contents. 1,711
m4b/goblin A Rust-based library for parsing and analyzing binary formats 1,190
carbonblack/binee A binary emulation environment that introspects system interactions to analyze malware behavior. 503
binref/refinery A command-line toolkit for analyzing binary data 664
martyx00/collare A tool for collaborative reverse engineering of binary files using multiple disassemblers and decompilers. 134
nsacyber/bam A tool that gathers and analyzes information about Windows updates, binaries, and symbols to aid in their analysis. 155
lunixbochs/usercorn A dynamic binary analysis and emulation framework for a wide range of architectures and operating systems. 891
packing-box/bintropy An analysis tool for estimating the likelihood of binary compression or encryption 42
binaryanalysisplatform/bap A comprehensive toolkit for analyzing and understanding binary programs 2,068
airbus-seclab/bincat A toolset for analyzing binary code with IDA integration and support for value, taint analysis, type reconstruction, and detection of use-after-free and double-free bugs. 1,691
mandiant/capa An executable file analysis tool that identifies capabilities and potential malicious behaviors. 4,873
stellarbear/yarasharp A C# wrapper around the Yara pattern matching library for detecting malware and analyzing binaries 36
uxmal/reko A binary decompiler that analyzes and reverse-engineers machine code binaries from various processor architectures. 2,168
zeropointdynamics/zelos A platform for emulating and analyzing binary behavior at the system call level. 408
reb311ion/replica An enhancement tool for Ghidra's binary analysis capabilities 287