# decalage2/balbuzard

<https://repo.masters-masters.com/en/repos/decalage2/balbuzard>

[Home](https://repo.masters-masters.com/en) › [decalage2](https://repo.masters-masters.com/en/owners/decalage2) › [balbuzard](https://repo.masters-masters.com/en/repos/decalage2/balbuzard)

decalage2/balbuzard has 144 stars on GitHub. Its RepoMasters card: Prototype tier. Balbuzard is a package of malware analysis tools in python to extract…

| Field | Value |
| --- | --- |
| Owner | [decalage2](https://repo.masters-masters.com/en/owners/decalage2) |
| Stars | 144 |
| Forks | 27 |
| Language | [YARA](https://repo.masters-masters.com/en/languages/yara) |
| License | None |
| Created | 2016 |
| Tier | [Prototype (100 to 249 ★)](https://repo.masters-masters.com/en/ranks/rush) |
| View on GitHub | [decalage2/balbuzard](https://github.com/decalage2/balbuzard) |

## Repository

Balbuzard is a package of malware analysis tools in python to extract patterns of interest from suspicious files (IP addresses, domain names, known file headers, interesting strings, etc). It can also crack malware obfuscation such as XOR, ROL, etc by bruteforcing and checking for those patterns.

The tier for repos with 100 to 249 ★. Published odds per card pulled: 70%. Rarity: Common.

## More repos by decalage2

- [decalage2/awesome-security-hardening · ★ 6,599 · Stable](https://repo.masters-masters.com/en/repos/decalage2/awesome-security-hardening)
- [decalage2/oletools · ★ 3,443 · Python · RC](https://repo.masters-masters.com/en/repos/decalage2/oletools)
- [decalage2/ViperMonkey · ★ 1,134 · Python · Beta](https://repo.masters-masters.com/en/repos/decalage2/ViperMonkey)
- [decalage2/olefile · ★ 274 · Python · Alpha](https://repo.masters-masters.com/en/repos/decalage2/olefile)

## Nearby in YARA

- [tylabs/quicksand · ★ 153 · YARA · Prototype](https://repo.masters-masters.com/en/repos/tylabs/quicksand)
- [malpedia/signator-rules · ★ 151 · YARA · Prototype](https://repo.masters-masters.com/en/repos/malpedia/signator-rules)
- [nsacyber/WALKOFF-Apps · ★ 145 · YARA · Prototype](https://repo.masters-masters.com/en/repos/nsacyber/WALKOFF-Apps)
- [Xumeiquer/yara-forensics · ★ 143 · YARA · Prototype](https://repo.masters-masters.com/en/repos/Xumeiquer/yara-forensics)
- [mandiant/heyserial · ★ 142 · YARA · Prototype](https://repo.masters-masters.com/en/repos/mandiant/heyserial)
- [StrangerealIntel/Orion · ★ 142 · YARA · Prototype](https://repo.masters-masters.com/en/repos/StrangerealIntel/Orion)

---
Data: GitHub · Illustration drawn by RepoMasters from the repo’s ID and its language color.