Andor

Valkyrie Comodo

Valkyrie is a sophisticated file verdict system that enhances malware detection through behavioral analysis and extensive file feature examination.

Hybrid-Analysis

Falcon Sandbox is a malware analysis framework that provides in-depth static and dynamic analysis of files, offering hybrid analysis, behavior indicators, and integrations with various security tools.

angr

angr is a Python 3 library for binary analysis with various capabilities like symbolic execution and decompilation.

Userland API Monitoring and Code Injection Detection

Explores malware interaction with Windows API and methods for detection and prevention.

FindYara

Use FindYara, an IDA python plugin, to scan your binary with yara rules and quickly jump to matches.

ROPgadget Tool

Search gadgets on binaries to facilitate ROP exploitation.

YaraHunter

YaraHunter scans container images, running Docker containers, and filesystems to find indicators of malware.

Reversing and Exploiting ARM Binaries: rwthCTF Trafman

A tutorial on setting up a virtual ARM environment, reversing ARM binaries, and writing basic exploits for ARM using the trafman challenge of rwthCTF as an example.