Assembly Beginner's Guide

Mquery

Blazingly fast Yara queries for malware analysts with an analyst-friendly web GUI.

PinCTF

PinCTF is a tool for using Intel's Pin Tool to instrument reverse engineering binaries and count instructions.

Viper

A binary analysis and management framework for organizing and analyzing malware and exploit samples, and creating plugins.

Hfinger

Tool for fingerprinting malware HTTP requests.

Valkyrie Comodo

Valkyrie is a sophisticated file verdict system that enhances malware detection through behavioral analysis and extensive file feature examination.

Shellcode2PE

A Python script that converts shellcode into a PE32 or PE32+ file.

Yabin

Yabin creates Yara signatures from malware to find similar samples.

CLR Anti-Debugger/Profiler Code

Code to prevent a managed .NET debugger/profiler from working.

Boomerang Decompiler

An open source machine code decompiler that converts binary executables into readable C source code across multiple architectures and file formats.