Ghidra (T) alternatives
6 tools in the catalogue cover the same ground as Ghidra (T) and can replace it depending on the need. Each one is reachable, re-checked daily, and listed with its pricing.
- Malware Analysis ToolsfreeCurated resource and reference guide for malware analysis tools with recommendations for virtualization, safety practices, and tool selection for analysis scenarios.
- YARAifyfreeScans a file against thousands of public YARA rules and returns which ones match. Names a threat family rather than giving a yes-or-no verdict.
- Any RunfreemiumInteractive malware analysis sandbox allowing real-time manual interaction with Windows, macOS, Linux, and Android environments. Fast report generation with MITRE ATT&CK mapping.
- Hybrid AnalysisfreemiumFree automated malware analysis service powered by CrowdStrike Falcon Sandbox. Combines runtime data with memory dump analysis to extract execution pathways and IOCs for evasive malware.
- JoeSandbox Document AnalyzerfreemiumHosted automated malware analysis service that performs dynamic and static analysis of files including Office documents, PDFs, and executables with comprehensive behavioral reporting.
- Malware ConfigfreeDatabase for searching and analyzing extracted malware configurations by hash, domain, or IP address to track C2 infrastructure and malware attributes.
Ghidra (T)
Malicious File Analysis
Also written Ghidra
Free and open-source reverse engineering framework from NSA for analyzing compiled software. Includes disassembly, decompilation, scripting, and interactive graphing for malware analysis.
RECOMMENDED USE
Reverse engineering and static malware analysis
Information
Video tutorials
Learn to use Ghidra (T)
Suggested workflow
Chain these tools in order for a complete investigation
Similar tools
These tools can also help you
Akana Android Malware
Malicious File AnalysisOnline Android Interactive Analysis Environment with plugins for analyzing malicious Android applications and APKs for suspicious behavior and malware characteristics.
detux Linux Sandbox
Malicious File AnalysisOpen-source multiplatform Linux sandbox for analyzing Linux malware across multiple CPU architectures (x86, x86-64, ARM, MIPS) using QEMU emulation and traffic analysis.
Malware-Traffic-Analysis.net
Malicious File AnalysisTraining resource and PCAP repository providing network traffic captures from malware infections since 2013. Includes tutorials and exercises for malware traffic analysis.
TYLabs QuickSand Framework
Malicious File AnalysisPython-based malware analysis framework for analyzing Office documents and PDFs to identify exploits in decoded streams using YARA signatures.
User reviews
Be the first to leave a review