Links
External sources for tools and malware samples.
Tool homepages & downloads
| Resource |
|---|
| Compiler Explorer |
MARE Lab
| Triage & Static Identification |
|---|
| DIE (Detect It Easy) |
| PEStudio |
| capa |
| FLOSS |
| YARA |
| HxD |
| 010 Editor |
| Disassembly & Decompilation |
|---|
| Ghidra |
| Cutter |
| IDA Free |
| Debugging |
|---|
| x64dbg (x32/x64) |
| WinDbg |
| .NET-Specific |
|---|
| dnSpyEx |
| de4dot |
| ILSpy |
| Dynamic (Behavioral) Monitoring |
|---|
| ProcMon |
| ProcDOT (WinDump; Graphviz; Setup) |
| Process Explorer |
| System Informer |
| Regshot |
| Autoruns |
| Sysmon |
| Network Analysis |
|---|
| Wireshark |
| FakeNet-NG |
| INetSim |
| TCPView |
| mitmproxy |
| Unpacking & Injection Detection |
|---|
| PE-sieve |
| Hollows Hunter |
| Memory Forensics |
|---|
| Volatility 3 |
| Decode & Data Utilities |
|---|
| CyberChef |
| Environments & Distros |
|---|
| FLARE-VM |
| REMnux |
| any.run |
| Triage |
| Hybrid Analysis |
| VirusTotal |
Malware sample sources
Curate with caution
Live malware. Handle in an isolated, offline VM.
| Resource |
|---|
| theZoo |