Fuzzilli

de4dot

An open source .NET deobfuscator and unpacker that restores packed and obfuscated assemblies by reversing various obfuscation techniques.

Yara Manager

A program to manage yara ruleset in a database with support for different databases and configuration options.

CLR Anti-Debugger/Profiler Code

Code to prevent a managed .NET debugger/profiler from working.

manalyze

A static analysis tool for PE files that identifies potential malicious indicators through compiler detection, packing analysis, signature matching, and suspicious string identification.

CAPA

CAPA is a static analysis tool that detects and reports capabilities in executable files across multiple formats, mapping findings to MITRE ATT&CK tactics and techniques.

floss

A tool that extracts and deobfuscates strings from malware binaries using advanced static analysis techniques.

dnSpy

A .NET assembly debugger and editor that enables reverse engineering and dynamic analysis of compiled .NET applications without source code access.

Hooker

An open-source dynamic analysis framework that intercepts and monitors API calls in Android applications using the Android Substrate framework.

Hybrid-Analysis

Falcon Sandbox is a malware analysis framework that provides in-depth static and dynamic analysis of files, offering hybrid analysis, behavior indicators, and integrations with various security tools.