Screenshots

Example Usage

pipx install yaralyzer

# Scan against YARA definitions in a file:
yaralyze --yara-rules /secret/vault/sigmunds_malware_rules.yara lacan_buys_the_dip.pdf

# Scan against an arbitrary regular expression:
yaralyze --regex-pattern 'good and evil.*of\s+\w+byte' --regex-modifier wide the_crypto_archipelago.exe

# Scan against an arbitrary YARA hex pattern
yaralyze --hex-pattern 'd0 93 d0 a3 d0 [-] 9b d0 90 d0 93' one_day_in_the_life_of_ivan_cryptosovich.bin

See also

pyinstxtractor-ng

Open Source

PyInstaller Extractor Next Generation…

AndKittyInjector

Open Source

Inject a shared library into a process using ptrace…

ipatool

Open Source

Command-line tool that allows searching and downloading app packages (known as ipa files) from the i…

Frida

Open Source Kali

Dynamic instrumentation toolkit for developers, reverse engineers, and security researchers. Injects…

soSaver

Open Source

A Frida-based utility for dynamically extracting native (.so) libraries from Android applications.…

MemProcFS-Analyzer

Open Source

MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR…