A tool for malware analysts to search through base64-encoded samples and generate yara rules.
#binary-conversion tools
35 results
Cybersecurity tool merging DarunGrim's analysis algorithms, currently in internal testing for official release.
A tool that scans a corpus of malware and builds a YARA rule to detect similar code sections.
Bmaptool is a project no longer maintained by Intel, users are advised to create their own fork for ongoing use.
A command-line utility for examining Objective-C runtime information in Mach-O files and generating class declarations.
DMG2IMG is a tool for converting Apple compressed dmg archives to standard image disk files with support for zlib, bzip2, and LZFSE compression.
A tool for creating compact Linux memory dumps compatible with popular debugging tools.
Python forensic tool for extracting and analyzing information from Firefox, Iceweasel, and Seamonkey browsers.
A tool for translating Dalvik bytecode to equivalent Java bytecode, allowing Java analysis tools to analyze Android applications.
FLARE Obfuscated String Solver (FLOSS) automatically extracts and deobfuscates strings from malware binaries using advanced static analysis techniques.
A collection of binary tools for various purposes including linking, assembling, profiling, and more.
HxD is a freeware hex editor and disk editor with advanced features for editing files, memory, and disks.
iOS Mobile Backup Xtractor tool for extracting iOS backups.
Inceptor is a template-driven framework for evading Anti-Virus and Endpoint Detection and Response solutions, allowing users to create custom evasion techniques and test their security cont…
Online Java decompiler tool with support for modern Java features.
Kaitai Struct is a declarative language for describing binary data structures.
Krakatau provides an assembler and disassembler for Java bytecode, supporting conversion, creation, examination, comparison, and decompilation of Java binaries.
A library to access and parse the Microsoft Internet Explorer Cache File format.
A library to access and read QEMU Copy-On-Write (QCOW) image file formats with support for zlib compression and AES-CBC encryption.
PLASMA is an interactive disassembler with support for various architectures and formats, offering a Python API for scripting.
PLCinject is a tool for injecting and patching blocks on PLCs with a call instruction.
Verify scripts and executables to mitigate chain of supply attacks.
A tool for parsing Google Protobuf encoded blobs without the accompanying definition, providing a colored representation of the contents.
A Python library for loading and executing Beacon Object Files (BOFs) in-memory.
Load more tools
Showing 24 of 35