Packagist · PyPI
MISP/MISP
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
AGPL-3.0Aug 28, 2026 · metrics 2.10.0
All tags
Catalogue tag
#malware-analysis
Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.
26 records
Go
chainguard-dev/malcontent
#supply #chain #attack #detection
Apache-2.0Sep 8, 2026 · metrics 2.10.0
PyPI
ev-flow/quark-engine
No repository description published.
GPL-3.0Sep 13, 2026 · metrics 2.10.0
PyPI · npm
mandiant/flare-floss
FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
Apache-2.0Oct 16, 2026 · metrics 2.10.0
Go · PyPI
oracle/macaron
Macaron is an extensible supply-chain security analysis framework from Oracle Labs that supports a wide range of build systems and CI/CD services. It can be used to prevent supply chain attacks, detect malicious Python packages, or check conformance to frameworks, such as SLSA. Documentation:
UPL-1.0Sep 18, 2026 · metrics 2.10.0
PyPI · crates.io
lief-project/LIEF
LIEF - Library to Instrument Executable Formats (C++, Python, Rust)
Apache-2.0Oct 20, 2026 · metrics 2.10.0
PyPI
mandiant/speakeasy
Windows kernel and user mode emulation.
MITSep 9, 2026 · metrics 2.10.0
PyPI
sjkim1127/Reversecore_MCP
A security-first MCP server that empowers AI agents to perform automated reverse engineering, malware analysis, forensics, vulnerability research, and SAST — powered by Radare2, YARA, LIEF, Capstone, and more.
MITSep 12, 2026 · metrics 2.10.0
PyPI
CybercentreCanada/assemblyline-base
Base components for Assemblyline 4 (Datastore, ODM, Filestore, Remote Datatypes, utils function, etc...)
MITSep 5, 2026 · metrics 2.10.0
PyPI
CybercentreCanada/assemblyline-ui
Web interface and APIs for Assemblyline 4
MITSep 17, 2026 · metrics 2.10.0
PyPI
depalmar/ai_for_the_win
Build AI-powered security tools. 50+ hands-on labs covering ML, LLMs, RAG, threat detection, DFIR, and red teaming. Includes Colab notebooks, Docker environment, and CTF challenges.
Custom licenseSep 16, 2026 · metrics 2.10.0
PyPI · crates.io
dmaivel/ntoseye
WinDbg-like kernel debugger for Windows, from Linux and macOS
MITSep 26, 2026 · metrics 2.10.0
PyPI · crates.io · npm
williballenthin/lancelot
intel x86(-64) code analysis library that reconstructs control flow
Apache-2.0Oct 21, 2026 · metrics 2.10.0
crates.io
ATRAPSLLC/dotscope
A high-performance, cross-platform framework for analyzing and reverse engineering .NET PE executables. Built in pure Rust, `dotscope` provides comprehensive tooling for parsing CIL (Common Intermediate Language) bytecode, metadata structures, and disassembling .NET assemblies without requiring Windows or the .NET runtime.
Custom licenseSep 13, 2026 · metrics 2.10.0
PyPI
CybercentreCanada/assemblyline-v4-service
Base service class from Assemblyline 4
MITOct 20, 2026 · metrics 2.10.0
PyPI
CybercentreCanada/assemblyline-core
Core server components for Assemblyline 4 (Alerter, dispatcher, expiry, ingester, scaler, updater, ...)
MITSep 5, 2026 · metrics 2.10.0
npm
REMnux/remnux-mcp-server
MCP server for using the REMnux malware analysis toolkit via AI assistants
GPL-3.0Sep 10, 2026 · metrics 2.10.0
PyPI
anyrun/anyrun-sdk
Simplify integration with ANY.RUN REST API services
Apache-2.0Oct 20, 2026 · metrics 2.10.0
—
mukul975/Anthropic-Cybersecurity-Skills
817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0
Apache-2.0Sep 16, 2026 · metrics 2.10.0
Go
saferwall/cli
saferwall-cli :wrench: helps you scan, re-scan and download samples using the Saferwall API.
Apache-2.0Oct 19, 2026 · metrics 2.10.0
PyPI
mahmoudimus/ida-sigmaker
sigmaker is a zero-dependency IDA Pro 9.0+ cross-platform signature maker plugin with optional SIMD (e.g. AVX2/NEON/SSE2) speedups that works on MacOS/Linux/Windows. It allows configurable wildcard operand patterns, nibbles, and signature generation just by right clicking.
MITSep 11, 2026 · metrics 2.10.0
crates.io
ATRAPSLLC/gobin
Static analysis library for Go compiled binaries - identification and metadata extraction
Apache-2.0Sep 19, 2026 · metrics 2.10.0
crates.io
akiselev/ghidra-cli
Automate Ghidra reverse engineering from the command line — headless analysis, decompilation, and structured JSON output for AI agents like Claude Code
GPL-3.0Sep 14, 2026 · metrics 2.10.0
crates.io
riven-labs/unstrip
Recover symbols, types, interfaces, and method signatures from stripped Go binaries. Ghidra, IDA, and Binary Ninja exporters included.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
CybercentreCanada/assemblyline-service-client
Service client that interfaces with the API to fetch tasks and publish the result for a service in Assemblyline 4
MITSep 17, 2026 · metrics 2.10.0
PyPI
decalage2/oletools
oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.
Custom licenseSep 17, 2026 · metrics 2.10.0