Files
toolkit/TOOLS.md
T
2022-02-16 02:10:22 -03:00

10 KiB

Tools

  1. Analysis
  2. Decompilers
  3. Dissasembler
  4. Hex editor
  5. Monitor
  6. Other
  7. Rootkits detector
  8. Unpacking

Analysis

CAPA

Web: https://github.com/fireeye/capa
Developer: ???
Description: ???

DIE

Web: https://github.com/horsicq/DIE-engine
Developer: ???
Description: ???

ExeinfoPe

Web: https://github.com/ExeinfoASL/ASL
Developer: A.S.L Software
Description: ExEinfo PE - Win32 exe identifier

PE-Bear

Web: https://github.com/hasherezade/pe-bear-releases
Developer: ???
Description: ???

PEiD

Web: ???
Developer: ???
Description: ???

PEStudio

Web: https://www.winitor.com/download
Developer: www.winitor.com
Description: Malware Initial Assessment

ProtectionID

Web: ???
Developer: [PiD Team] (CDKiller/TippeX)
Description: PiD Team's Protection ID

XAPKDetector

Web: https://github.com/horsicq/XAPKDetector
Developer: ???
Description: ???

XELFViewer

Web: https://github.com/horsicq/XELFViewer
Developer: ???
Description: ???

XPEViewer

Web: https://github.com/horsicq/XPEViewer
Developer: ???
Description: ???

Decompilers

[ANDROID] JADX

Web: https://github.com/skylot/jadx
Developer: jadx
Description: jadx-gui

[AUTOIT] Exe2Aut

Web: ???
Developer: ???
Description: ???

[AUTOIT] MyAutToExe

Web: ???
Developer: [email protected]
Description: Decompiles 'compiled' AutoIT Exe files.

[DELPHI] Dede

Web: ???
Developer: DaFixer
Description: ???

[DELPHI] IDR

Web: https://github.com/crypto2011/IDR
Developer: ???
Description: Interactive Delphi Reconstructor

[DOTNET] dnSpyEx

Web: https://github.com/dnSpyEx/dnSpy
Developer: dnSpy
Description: dnSpy

[DOTNET] GrayWolf

Web: ???
Developer: DigitalBodyGuard
Description: GrayWolf

[DOTNET] ILSpy

Web: https://github.com/icsharpcode/ILSpy
Developer: ic#code
Description: ILSpy

[JAVA] JD-GUI

Web: https://github.com/java-decompiler/jd-gui
Developer: ???
Description: JD-GUI

[JAVA] Recaf

Web: https://github.com/Col-E/Recaf
Developer: ???
Description: ???

[PYTHON] PyInstxtractor

Web: https://github.com/extremecoders-re/pyinstxtractor
Developer: ???
Description: ???

[VB] P-Code-ExDec

Web: ???
Developer: ???
Description: ???

Dissasembler

BDASM

Web: ???
Developer: ???
Description: BDASM MFC Application

Cutter

Web: https://github.com/rizinorg/cutter
Developer: ???
Description: ???

Immunity Debugger

Web: ???
Developer: ???
Description: Immunity Debugger, 32-bit analysing debugger

OllyDbg 1.10

Web: ???
Developer: ???
Description: allyDbg, 32-bit analysing debugger

w32Dasm

Web: ???
Developer: URSoft
Description: W32Dasm for Windows

x64dbg

Web: https://sourceforge.net/projects/x64dbg
Developer: ???
Description: x64dbg

HEX Editor

HxD

Web: https://mh-nexus.de/en/hxd
Developer: Maël Hörz
Description: HxD Hex Editor

ImHex

Web: https://github.com/WerWolv/ImHex
Developer: WerWolv
Description: ImHex Hex Editor

REHex

Web: https://github.com/solemnwarning/rehex
Developer: ???
Description: ???

WinHex

Web: https://x-ways.net/winhex
Developer: X-Ways Software Technology AG
Description: WinHex

Monitor

Api Monitor

Web: ???
Developer: rohitab.com
Description: API Monitor v2 (Alpha) 32-bit

Autoruns

Web: https://docs.microsoft.com/en-us/sysinternals/downloads/autoruns
Developer: Sysinternals
Description: Autostart program viewer

CurrPorts

Web: https://www.nirsoft.net/utils/cports.html
Developer: NirSoft
Description: CurrPorts

HollowsHunter

Web: https://github.com/hasherezade/hollows_hunter
Developer: ???
Description: ???

MultiMon

Web: https://www.resplendence.com/multimon_whatsnew
Developer: Resplendence Software Projects Sp.
Description: MultiMon

PE-sieve

Web: https://github.com/hasherezade/pe-sieve
Developer: ???
Description: ???

Portmon

Web: https://docs.microsoft.com/en-us/sysinternals/downloads/portmon
Developer: SysInternals
Description: Portmon/EE

Process Explorer

Web: https://docs.microsoft.com/en-us/sysinternals/downloads/process-explorer
Developer: Sysinternals
Description: Sysinternals Process Explorer

Process Hacker 3

Web: https://processhacker.sourceforge.io/nightly.php
Developer: Process Hacker
Description: Process Hacker

Procmon

Web: https://docs.microsoft.com/en-us/sysinternals/downloads/procmon
Developer: Sysinternals
Description: Process Monitor
Web: https://docs.microsoft.com/en-us/sysinternals/downloads/procmon
Developer: Sysinternals
Description: Process Monitor

RegShot

Web: ???
Developer: Regshot Team
Description: Regshot 1.9.0 x86 ANSI

SysAnalyzer

Web: ???
Developer: blah.com
Description: ???

TCPView

Web: https://docs.microsoft.com/en-us/sysinternals/downloads/tcpview
Developer: Sysinternals
Description: Sysinternals TcpView

Other

APKEasyTool

Web: https://forum.xda-developers.com/t/tool-windows-apk-easy-tool-v1-59-2-2021-04-03.3333960/
Developer: Evildog1
Description: APK Easy Tool

ApkStudio

Web: https://github.com/vaibhavpandeyvpz/apkstudio
Developer: Vaibhav Pandey -aka- VPZ
Description: Open-source, cross-platform Qt based IDE for reverse-engineering Android application packages.

ASCII Art Generator

Web: ???
Developer: ASCII Art Generator
Description: ASCII Art Generator

AstroGrep

Web: https://sourceforge.net/projects/astrogrep
Developer: AstroComma Inc.
Description: AstroGrep

AVFucker

Web: ???
Developer: ???
Description: ???

Cool Beans NFO Creator

Web: ???
Developer: Cool Beans Software
Description: Cool NFO Creator

FLOSS

Web: https://github.com/fireeye/flare-floss
Developer: ???
Description: ???

HashMyFiles

Web: https://www.nirsoft.net/utils/hash_my_files.html
Developer: NirSoft
Description: HashMyFiles

ImpREC

Web: ???
Developer: ???
Description: ???

Indetectables Offset Locator

Web: ???
Developer: ???
Description: ???

NFO Maker

Web: ???
Developer: The Millenium Group
Description: NFO/DIZ Generator

ProcDOT

Web: https://www.procdot.com/downloadprocdotbinaries.htm
Developer: CERT.at
Description: ProcDOT - Visual Malware Analysis

Process-Dump

Web: http://split-code.com/processdump.html
Developer: ???
Description: ???

Resource Hacker

Web: http://www.angusj.com/resourcehacker
Developer: Angus Johnson
Description: Resource viewer, decompiler & recompiler

Scylla

Web: https://github.com/NtQuery/Scylla
Developer: ???
Description: ???

ShowString

Web: ???
Developer: ???
Description: ???

Strings

Web: https://docs.microsoft.com/en-us/sysinternals/downloads/strings
Developer: Sysinternals
Description: Search for ANSI and Unicode strings in binary images.

Threadtear

Web: https://github.com/GraxCode/threadtear
Developer: ???
Description: ???

VirusTotalUploader

Web: https://github.com/SamuelTulach/VirusTotalUploader
Developer: Samuel Tulach
Description: uploader

XOpCodeCalc

Web: ???
Developer: ???
Description: ???

Rootkits Detector

GMER

Web: http://www.gmer.net
Developer: ???
Description: ???

Sysinspector

Web: ???
Developer: ESET
Description: ESET SysInspector - System Analyzer Tool

Windows Kernel Explorer

Web: https://github.com/AxtMueller/Windows-Kernel-Explorer
Developer: ???
Description: ???

UnPacking

De4Dot

Web: ???
Developer: de4dot
Description: de4dot

GUnPacker

Web: ???
Developer: ???
Description: ???

NETUnpack

Web: ???
Developer: NTCore
Description: .NET Generic Unpacker

QUnpack

Web: ???
Developer: ???
Description: ???

RL!dePacker

Web: ???
Developer: ???
Description: ???

UniExtract

Web: https://github.com/Bioruebe/UniExtract2
Developer: ???
Description: Universal Extractor

VM Unpacker

Web: ???
Developer: YingCracker
Description: Anti Spyware Toolkit VMUnpacker

XVolkolak

Web: ???
Developer: ???
Description: ???