We have compiled a comprehensive list of useful tools for performing binary analysis.
Read more
Tag: anti-malware
FLOSS – malware analysis utility
FLOSS is a malware analysis utility that automatically extracts and deobfuscates strings from executable binaries.
Read more
capa – command line malware analysis tool
capa examines executable files and related analysis reports to identify behaviors such as persistence, command execution, file system access.
Read more
YARA-X – malware pattern matching engine
YARA-X is a Rust-based malware pattern matching engine with a powerful CLI, compiled rules, detailed diagnostics and editor integration.
Read more
Lenspect – graphical security threat scanner
Lenspect is a GNOME desktop application that checks suspicious files using VirusTotal threat intelligence in a simple graphical interface.
Read more
FastFinder – threat hunting and forensic triage tool
FastFinder investigates suspicious files on Linux using hashes, YARA rules, memory inspection, continuous monitoring and event forwarding.
Read more
Raspirus – lightweight signature-based malware scanner
Raspirus is a Rust-based malware scanner using YARA rules, multithreaded scanning, archive checks and a desktop interface for Linux.
Read more
Hostsblock – malware-blocking cronscript
Hostsblock is a POSIX-compatible script for Linux designed to take advantage of the HOSTS file to block malware.
Read more
libredefender – antivirus program
libredefender is an antivirus program. Scanning is implemented with libclamav.
Read more
Unhide – forensic tool to find hidden processes and ports
Unhide finds hidden Linux processes and TCP/UDP ports by comparing process listings, kernel information and network socket reports.
Read more
phpMussel – PHP-based anti-virus anti-trojan anti-malware solution
phpMussel is a PHP script designed to detect trojans, viruses, malware and other threats within files.
Read more
Linux Malware Detect – malware scanner
Linux Malware Detect scans shared hosting systems for malicious files using hashes, YARA rules, ClamAV integration and real-time monitoring.
Read more
ClamTk – graphical frontend for ClamAV
ClamTk provides a GTK interface to ClamAV for file and folder scanning, scheduled checks, quarantine, scan history and VirusTotal analysis.
Read more
YARA – pattern matching swiss knife for malware researchers
YARA is a free and open source tool aimed at (but not limited to) helping malware researchers to identify and classify malware samples.
Read more
ClamAV – antivirus engine
ClamAV is an antivirus engine for Linux with on-demand and on-access scanning, signature updates, archive inspection and a scanning daemon.
Read more
Rootkit Hunter – security tool
rkhunter (Rootkit Hunter) is a Unix-based tool that scans for rootkits, backdoors and possible local exploits.
Read more
chkrootkit – detect signs of rootkits on Linux
chkrootkit examines Linux systems for signs of rootkits, hidden processes, altered commands and other indicators of compromise.
Read more