diff --git a/TOOLS.md b/TOOLS.md new file mode 100644 index 0000000..cc39787 --- /dev/null +++ b/TOOLS.md @@ -0,0 +1,417 @@ +# Tools + +1. [Analysis](#analysis) +1. [Decompilers](#decompilers) +1. [Dissasembler](#dissasembler) +1. [Hex editor](#hex editor) +1. [Monitor](#monitor) +1. [Other](#other) +1. [Rootkits detector](#rootkits detector) +1. [Unpacking](#unpacking) + + +## Analysis + +### CAPA +***Web:*** https://github.com/fireeye/capa
+***Developer:*** ???
+***Description:*** ???
+ +### DIE +***Web:*** https://github.com/horsicq/DIE-engine
+***Developer:*** ???
+***Description:*** ???
+ +### ExeinfoPe +***Web:*** https://github.com/ExeinfoASL/ASL
+***Developer:*** A.S.L Software
+***Description:*** ExEinfo PE - Win32 exe identifier
+ +### PE-Bear +***Web:*** https://github.com/hasherezade/pe-bear-releases
+***Developer:*** ???
+***Description:*** ???
+ +### PEiD +***Web:*** ???
+***Developer:*** ???
+***Description:*** ???
+ +### PEStudio +***Web:*** https://www.winitor.com/download
+***Developer:*** www.winitor.com
+***Description:*** Malware Initial Assessment
+ +### ProtectionID +***Web:*** ???
+***Developer:*** [PiD Team] (CDKiller/TippeX)
+***Description:*** PiD Team's Protection ID
+ +### XAPKDetector +***Web:*** https://github.com/horsicq/XAPKDetector
+***Developer:*** ???
+***Description:*** ???
+ +### XELFViewer +***Web:*** https://github.com/horsicq/XELFViewer
+***Developer:*** ???
+***Description:*** ???
+ +### XPEViewer +***Web:*** https://github.com/horsicq/XPEViewer
+***Developer:*** ???
+***Description:*** ???
+ + +## Decompilers + +### [ANDROID] JADX +***Web:*** https://github.com/skylot/jadx
+***Developer:*** jadx
+***Description:*** jadx-gui
+ +### [AUTOIT] Exe2Aut +***Web:*** ???
+***Developer:*** ???
+***Description:*** ???
+ +### [AUTOIT] MyAutToExe +***Web:*** ???
+***Developer:*** CW2K@gmx.de
+***Description:*** Decompiles 'compiled' AutoIT Exe files.
+ +### [DELPHI] Dede +***Web:*** ???
+***Developer:*** DaFixer
+***Description:*** ???
+ +### [DELPHI] IDR +***Web:*** https://github.com/crypto2011/IDR
+***Developer:*** ???
+***Description:*** Interactive Delphi Reconstructor
+ +### [DOTNET] dnSpyEx +***Web:*** https://github.com/dnSpyEx/dnSpy
+***Developer:*** dnSpy
+***Description:*** dnSpy
+ +### [DOTNET] GrayWolf +***Web:*** ???
+***Developer:*** DigitalBodyGuard
+***Description:*** GrayWolf
+ +### [DOTNET] ILSpy +***Web:*** https://github.com/icsharpcode/ILSpy
+***Developer:*** ic#code
+***Description:*** ILSpy
+ +### [JAVA] JD-GUI +***Web:*** https://github.com/java-decompiler/jd-gui
+***Developer:*** ???
+***Description:*** JD-GUI
+ +### [JAVA] Recaf +***Web:*** https://github.com/Col-E/Recaf
+***Developer:*** ???
+***Description:*** ???
+ +### [PYTHON] PyInstxtractor +***Web:*** https://github.com/extremecoders-re/pyinstxtractor
+***Developer:*** ???
+***Description:*** ???
+ +### [VB] P-Code-ExDec +***Web:*** ???
+***Developer:*** ???
+***Description:*** ???
+ + +## Dissasembler + +### BDASM +***Web:*** ???
+***Developer:*** ???
+***Description:*** BDASM MFC Application
+ +### Cutter +***Web:*** https://github.com/rizinorg/cutter
+***Developer:*** ???
+***Description:*** ???
+ +### Immunity Debugger +***Web:*** ???
+***Developer:*** ???
+***Description:*** Immunity Debugger, 32-bit analysing debugger
+ +### OllyDbg 1.10 +***Web:*** ???
+***Developer:*** ???
+***Description:*** allyDbg, 32-bit analysing debugger
+ +### w32Dasm +***Web:*** ???
+***Developer:*** URSoft
+***Description:*** W32Dasm for Windows
+ +### x64dbg +***Web:*** https://sourceforge.net/projects/x64dbg
+***Developer:*** ???
+***Description:*** x64dbg
+ + +## HEX Editor + +### HxD +***Web:*** https://mh-nexus.de/en/hxd
+***Developer:*** Maël Hörz
+***Description:*** HxD Hex Editor
+ +### ImHex +***Web:*** https://github.com/WerWolv/ImHex
+***Developer:*** WerWolv
+***Description:*** ImHex Hex Editor
+ +### REHex +***Web:*** https://github.com/solemnwarning/rehex
+***Developer:*** ???
+***Description:*** ???
+ +### WinHex +***Web:*** https://x-ways.net/winhex
+***Developer:*** X-Ways Software Technology AG
+***Description:*** WinHex
+ + +## Monitor + +### Api Monitor +***Web:*** ???
+***Developer:*** rohitab.com
+***Description:*** API Monitor v2 (Alpha) 32-bit
+ +### Autoruns +***Web:*** https://docs.microsoft.com/en-us/sysinternals/downloads/autoruns
+***Developer:*** Sysinternals
+***Description:*** Autostart program viewer
+ +### CurrPorts +***Web:*** https://www.nirsoft.net/utils/cports.html
+***Developer:*** NirSoft
+***Description:*** CurrPorts
+ +### HollowsHunter +***Web:*** https://github.com/hasherezade/hollows_hunter
+***Developer:*** ???
+***Description:*** ???
+ +### MultiMon +***Web:*** https://www.resplendence.com/multimon_whatsnew
+***Developer:*** Resplendence Software Projects Sp.
+***Description:*** MultiMon
+ +### PE-sieve +***Web:*** https://github.com/hasherezade/pe-sieve
+***Developer:*** ???
+***Description:*** ???
+ +### Portmon +***Web:*** https://docs.microsoft.com/en-us/sysinternals/downloads/portmon
+***Developer:*** SysInternals
+***Description:*** Portmon/EE
+ +### Process Explorer +***Web:*** https://docs.microsoft.com/en-us/sysinternals/downloads/process-explorer
+***Developer:*** Sysinternals
+***Description:*** Sysinternals Process Explorer
+ +### Process Hacker 3 +***Web:*** https://processhacker.sourceforge.io/nightly.php
+***Developer:*** Process Hacker
+***Description:*** Process Hacker
+ +### Procmon +***Web:*** https://docs.microsoft.com/en-us/sysinternals/downloads/procmon
+***Developer:*** Sysinternals
+***Description:*** Process Monitor
+***Web:*** https://docs.microsoft.com/en-us/sysinternals/downloads/procmon
+***Developer:*** Sysinternals
+***Description:*** Process Monitor
+ +### RegShot +***Web:*** ???
+***Developer:*** Regshot Team
+***Description:*** Regshot 1.9.0 x86 ANSI
+ +### SysAnalyzer +***Web:*** ???
+***Developer:*** blah.com
+***Description:*** ???
+ +### TCPView +***Web:*** https://docs.microsoft.com/en-us/sysinternals/downloads/tcpview
+***Developer:*** Sysinternals
+***Description:*** Sysinternals TcpView
+ + +## Other + +### APKEasyTool +***Web:*** https://forum.xda-developers.com/t/tool-windows-apk-easy-tool-v1-59-2-2021-04-03.3333960/
+***Developer:*** Evildog1
+***Description:*** APK Easy Tool
+ +### ApkStudio +***Web:*** https://github.com/vaibhavpandeyvpz/apkstudio
+***Developer:*** Vaibhav Pandey -aka- VPZ
+***Description:*** Open-source, cross-platform Qt based IDE for reverse-engineering Android application packages.
+ +### ASCII Art Generator +***Web:*** ???
+***Developer:*** ASCII Art Generator
+***Description:*** ASCII Art Generator
+ +### AstroGrep +***Web:*** https://sourceforge.net/projects/astrogrep
+***Developer:*** AstroComma Inc.
+***Description:*** AstroGrep
+ +### AVFucker +***Web:*** ???
+***Developer:*** ???
+***Description:*** ???
+ +### Cool Beans NFO Creator +***Web:*** ???
+***Developer:*** Cool Beans Software
+***Description:*** Cool NFO Creator
+ +### FLOSS +***Web:*** https://github.com/fireeye/flare-floss
+***Developer:*** ???
+***Description:*** ???
+ +### HashMyFiles +***Web:*** https://www.nirsoft.net/utils/hash_my_files.html
+***Developer:*** NirSoft
+***Description:*** HashMyFiles
+ +### ImpREC +***Web:*** ???
+***Developer:*** ???
+***Description:*** ???
+ +### Indetectables Offset Locator +***Web:*** ???
+***Developer:*** ???
+***Description:*** ???
+ +### NFO Maker +***Web:*** ???
+***Developer:*** The Millenium Group
+***Description:*** NFO/DIZ Generator
+ +### ProcDOT +***Web:*** https://www.procdot.com/downloadprocdotbinaries.htm
+***Developer:*** CERT.at
+***Description:*** ProcDOT - Visual Malware Analysis
+ +### Process-Dump +***Web:*** http://split-code.com/processdump.html
+***Developer:*** ???
+***Description:*** ???
+ +### Resource Hacker +***Web:*** http://www.angusj.com/resourcehacker
+***Developer:*** Angus Johnson
+***Description:*** Resource viewer, decompiler & recompiler
+ +### Scylla +***Web:*** https://github.com/NtQuery/Scylla
+***Developer:*** ???
+***Description:*** ???
+ +### ShowString +***Web:*** ???
+***Developer:*** ???
+***Description:*** ???
+ +### Strings +***Web:*** https://docs.microsoft.com/en-us/sysinternals/downloads/strings
+***Developer:*** Sysinternals
+***Description:*** Search for ANSI and Unicode strings in binary images.
+ +### Threadtear +***Web:*** https://github.com/GraxCode/threadtear
+***Developer:*** ???
+***Description:*** ???
+ +### VirusTotalUploader +***Web:*** https://github.com/SamuelTulach/VirusTotalUploader
+***Developer:*** Samuel Tulach
+***Description:*** uploader
+ +### XOpCodeCalc +***Web:*** ???
+***Developer:*** ???
+***Description:*** ???
+ + +## Rootkits Detector + +### GMER +***Web:*** http://www.gmer.net
+***Developer:*** ???
+***Description:*** ???
+ +### Sysinspector +***Web:*** ???
+***Developer:*** ESET
+***Description:*** ESET SysInspector - System Analyzer Tool
+ +### Windows Kernel Explorer +***Web:*** https://github.com/AxtMueller/Windows-Kernel-Explorer
+***Developer:*** ???
+***Description:*** ???
+ + +## UnPacking + +### De4Dot +***Web:*** ???
+***Developer:*** de4dot
+***Description:*** de4dot
+ +### GUnPacker +***Web:*** ???
+***Developer:*** ???
+***Description:*** ???
+ +### NETUnpack +***Web:*** ???
+***Developer:*** NTCore
+***Description:*** .NET Generic Unpacker
+ +### QUnpack +***Web:*** ???
+***Developer:*** ???
+***Description:*** ???
+ +### RL!dePacker +***Web:*** ???
+***Developer:*** ???
+***Description:*** ???
+ +### UniExtract +***Web:*** https://github.com/Bioruebe/UniExtract2
+***Developer:*** ???
+***Description:*** Universal Extractor
+ +### VM Unpacker +***Web:*** ???
+***Developer:*** YingCracker
+***Description:*** Anti Spyware Toolkit VMUnpacker
+ +### XVolkolak +***Web:*** ???
+***Developer:*** ???
+***Description:*** ???