We have compiled a comprehensive list of useful tools for performing binary analysis.
Read more
Tag: anti-malware
FLOSS – malware analysis utility
FLOSS is a malware analysis utility that automatically extracts and deobfuscates strings from executable binaries.
Read more
capa – command line malware analysis tool
capa examines executable files and related analysis reports to identify behaviors such as persistence, command execution, file system access.
Read more
YARA-X – malware pattern matching engine
YARA-X is a Rust-based malware pattern matching engine with a powerful CLI, compiled rules, detailed diagnostics and editor integration.
Read more
Lenspect – check files and URLs with VirusTotal
Lenspect checks files and URLs through VirusTotal, with detailed detection results, scan history, report exports, and quota monitoring.
Read more
FastFinder – threat hunting and forensic triage tool
FastFinder investigates suspicious files on Linux using hashes, YARA rules, memory inspection, continuous monitoring and event forwarding.
Read more
Raspirus – lightweight signature-based malware scanner
Raspirus is a Rust-based malware scanner using YARA rules, multithreaded scanning, archive checks and a desktop interface for Linux.
Read more
Hostsblock – malware-blocking cronscript
Hostsblock is a POSIX-compatible script for Linux designed to take advantage of the HOSTS file to block malware.
Read more
libredefender – antivirus program
libredefender is an antivirus program. Scanning is implemented with libclamav.
Read more
Unhide – forensic tool to find hidden processes and ports
Unhide finds hidden Linux processes and TCP/UDP ports by comparing process listings, kernel information and network socket reports.
Read more
phpMussel – malware detection for uploaded files
phpMussel scans uploaded files for malware, with archive inspection, configurable upload restrictions, quarantine, and logging.
Read more
Linux Malware Detect – malware scanner
Linux Malware Detect scans shared hosting systems for malicious files using hashes, YARA rules, ClamAV integration and real-time monitoring.
Read more
ClamTk – graphical frontend for ClamAV
ClamTk provides a GTK interface to ClamAV for file and folder scanning, scheduled checks, quarantine, scan history and VirusTotal analysis.
Read more
YARA – identify and classify malware with detection rules
YARA identifies and classifies malware using custom rules, text and binary patterns, process scanning, and command-line tools.
Read more
ClamAV – antivirus engine
ClamAV is an antivirus engine for Linux with on-demand and on-access scanning, signature updates, archive inspection and a scanning daemon.
Read more
Rootkit Hunter – security tool
rkhunter (Rootkit Hunter) is a Unix-based tool that scans for rootkits, backdoors and possible local exploits.
Read more
chkrootkit – detect signs of rootkits on Linux
chkrootkit examines Linux systems for signs of rootkits, hidden processes, altered commands and other indicators of compromise.
Read more