Screenshots

Example Usage

pipx install yaralyzer

# Scan against YARA definitions in a file:
yaralyze --yara-rules /secret/vault/sigmunds_malware_rules.yara lacan_buys_the_dip.pdf

# Scan against an arbitrary regular expression:
yaralyze --regex-pattern 'good and evil.*of\s+\w+byte' --regex-modifier wide the_crypto_archipelago.exe

# Scan against an arbitrary YARA hex pattern
yaralyze --hex-pattern 'd0 93 d0 a3 d0 [-] 9b d0 90 d0 93' one_day_in_the_life_of_ivan_cryptosovich.bin

See also

ret-sync

Open Source

ret-sync is a set of plugins that helps to synchronize a debugging session (WinDbg/GDB/LLDB/OllyDbg2…

mitmproxy2swagger

Free

Automagically reverse-engineer REST APIs via capturing traffic…

soSaver

Open Source

A Frida-based utility for dynamically extracting native (.so) libraries from Android applications.…

ida-sigmaker

Open Source

sigmaker is a zero-dependency IDA Pro 9.0+ cross-platform signature maker plugin with optional SIMD …

Bulk Extractor

Open Source Kali

Scans a disk image, file, or directory and extracts features such as email addresses, URLs, credit c…

APKTool

Open Source Kali

Tool for reverse engineering Android APK files. Decodes resources to their original form, rebuilds d…