Awesome Executable Packing
Section: Tools · Open-source tool to identify capabilities in PE, ELF or .NET executable files.
FreshScore 69
Entry
CAPA
Appears in 5 awesome lists
Mandiant's FLARE team's premier static analysis tool that identifies what a program can do by applying 800+ rules to binaries, mapping findings to MITRE ATT&CK, MAEC, and MBC frameworks in about 30 seconds without executing the sample. Supports PE, ELF, .NET, and shellcode, with JSON export for…
Open github.commandiant/capa
Found in these lists
Awesome Incident Response
Section: Sandboxing/Reversing Tools · detects capabilities in executable files. You run it against a PE, ELF, .NET module, or shellcode file and it tells you what it thinks the program can do.
FreshScore 89
Awesome Reverse Engineering
Section: File identification and triage · Identifies capabilities in executable files using rules over static or dynamic analysis results.
FreshScore 89
Hacking Tools
Section: Malware Analysis · Mandiant's FLARE team's premier static analysis tool that identifies what a program can do by applying 800+ rules to binaries, mapping findings to MITRE ATT&CK, MAEC, and MBC frameworks in about 30 seconds without executing the sample. Supports PE, ELF, .NET, and shellcode, with JSON export for…
FreshScore 91
Security lists for SOC/DFIR detections
Section: General
FreshScore 85
Often listed next to it
VirusTotal
VirusTotal, a subsidiary of Google, is a free online service that analyzes files and URLs enabling the identification of viruses, worms, trojans and other kinds of malicious content detected by antivirus engines and website scanners. At the same time, it may be used as a means to detect false…
In 13 listsDetails
Ghidra
A software reverse engineering (SRE) framework created and maintained by the National Security Agency Research Directorate.
In 9 listsDetails
angr
Python framework for symbolic execution and program analysis; angr-management is its official GUI front end, not a separate analysis engine.
In 7 listsDetails
Hybrid Analysis
Free malware analysis service for the community that detects and analyzes unknown threats using a unique Hybrid Analysis technology
In 7 listsDetails
REMnux
Linux toolkit for reverse-engineering and analyzing malicious software, providing a curated collection of free community-created tools in an Ubuntu-based distribution with Docker container support. Available as a virtual appliance or installable on existing systems, with AI-powered capabilities…
In 7 listsDetails
Radare2
Command-line toolkit for disassembly, binary inspection, debugging, and scripting.
In 5 listsDetails
Detect It Easy(DiE)
Identifies executable formats, compilers, packers, and other file characteristics.
In 5 listsDetails