Qu1cksc0pe
All-in-One malware analysis tool.
파일 탐색기
최종 버전 다운로드 (.zip)- FUNDING.yml
- linux_emulator.py
- go_binary_parser.py
- multi.py
- smart_analyzer.py
- helpers.py
- path_cfg.py
- __init__.py
- andro_familydetect.py
- android_dynamic_analyzer.py
- apkAnalyzer.py
- apkSecCheck.py
- apple_analyzer.py
- archiveAnalyzer.py
- banners.py
- batch_analyzer.py
- document_analyzer.py
- domainCatcher.py
- email_analyzer.py
- emulator.py
- hashScanner.py
- html_script_analyzer.py
- installer.sh
- languageDetect.py
- linux_dynamic_analyzer.py
- linux_static_analyzer.py
- lnk_analyzer.py
- mcp_server.py
- packerAnalyzer.py
- pcap_analyzer.py
- powershell_analyzer.py
- resourceChecker.py
- sigChecker.py
- VTwrapper.py
- web_app.py
- windows_api_hooker.py
- windows_dynamic_analyzer.py
- windows_process_reader.py
- windows_static_analyzer.py
- sc0pe_android_enumeration.js
- adfraud.yara
- advobfuscator.yara
- adware-adpath.yara
- adware-assd.yara
- adware-snake_recipes.yara
- adware_detect.yara
- adwarech_ccm.yara
- adwo_adware.yara
- agent_variant.yara
- airpush-adware.yara
- airpush_adware.yara
- airpush_rocking.yara
- amtrckr.yara
- andr_spynote.yara
- android-buhsam.yara
- android-cerberus.yara
- android-coinhive.yara
- android-spywaller.yara
- android_banker_tordow.yara
- android_bankosy.yara
- android_pegasus.yara
- androrat.yara
- anti_debugging.yara
- anti_reversing.yara
- anubis-variant.yara
- anubis_v3.yara
- appdome_obfuscator.yara
- auto-whatsapp-responder.yara
- backdoor.yara
- bangcle-packer.yara
- bangcle-packer1.yara
- bankbot1.yara
- bankbot2.yara
- bankbot3.yara
- bankbot4.yara
- bankbot5.yara
- bankbot6.yara
- bankbot_overlaytrojan.yara
- banker-anubis.yara
- banker.yara
- banker_blackrock.yara
- banker_cosmetiq.yara
- banker_gugi.yara
- banker_redalert.yara
- bankingapps.yara
- btc-eth-address_detection.yara
- chrome-trojan.yara
- cloudsota.yara
- coudw.yara
- cryptowallets.yara
- dexguard_apkid.yara
- dexguard_detect.yara
- dresscode_trojan.yara
- fake-cleaner.yara
- fake_avg.yara
- fake_german_bankingapps.yara
- fakecop_smsFraud.yara
- fakeinst-certs.yara
- fakeinst-offers_xmls.yara
- fakeinst.yara
- fakeinst_domains.yara
- fakeinst_v2.yara
- fakeinst_v3.yara
- fakeinst_v4.yara
- frida-detection.yara
- hackingteam.yara
- itau_banker-trojan.yara
- java_native_interface.yara
- joker-malware.yara
- kazachstan.yara
- kemoge.yara
- legu-packer.yara
- libyan_scorpions.yara
- location.yara
- lotsofads.yara
- MALW_Mailers.yara
- malware_banker_sec.yara
- marcher-obfuscated.yara
- mazain_banker.yara
- mazainrule.yara
- misusing_accessibility.yara
- mobidash-adware_installer.yara
- mopub_aggr_adware.yara
- native-code.yara
- phonecaller.yara
- pytm_sdk_tracker.yara
- ransomware1.yara
- razorpay_tracker.yara
- russian_playstore-phishing.yara
- saveme-spyware.yara
- simp-locker.yara
- sms-sender.yara
- sms-thief.yara
- spyware-sms.yara
- spyware_libraries.yara
- telerat.yara
- tiktok-malware.yara
- towelhacking_ransom.yara
- trojan-anubis.yara
- trojan-anubis_variant.yara
- trojan-banker_marcher.yara
- trojan-cajino.yara
- trojan-eventbot.yara
- trojan_smsboxer.yara
- trojansms.yara
- vikingbotnet.yara
- virbox_packer_detection.yara
- wormhole.yara
- xmrig-detection.yara
- detections.json
- family.json
- libScanner.conf
- perms.json
- crime_mirai.yara
- custom_mirai_mx.yara
- gen_gobfuscate.yar
- Linux.Virus.Vit.yara
- MALW_Mirai_Satori_ELF.yara
- linux.conf
- linux_func_categories.json
- mitre_for_linux.json
- packer.yara
- packer_compiler_signatures.yara
- peid.yara
- peid_to_remove.yara
- CVE-2017-11882.yara
- gen_rtf_malver_objects.yara
- gen_susp_office_dropper.yara
- indicator_office.yar
- Maldoc_malrtf_ole2link.yara
- Maldoc_Suspicious_OLE_target.yara
- Maldoc_UserForm.yara
- Maldoc_VBA_macro_code.yara
- MALWARE_Emotet_OneNote_Delivery_vbs_Mar23.yara
- MALWARE_OneNote_Delivery_Jan23.yara
- OneNote_EmbeddedFiles_NoPictures.yara
- pump_and_dump.yara
- QakBot_OneNote_Loader.yara
- Suspicious_Macro_Presence.yara
- blacklist_domains.txt
- file_sigs.json
- golang_categories.json
- ja3_fingerprints.lst
- malicious_html_codes.json
- malicious_rtf_codes.json
- multiple.conf
- special_artifact_patterns.json
- whitelist_domains.txt
- macos_backdoor.yara
- macos_injection.yara
- macos_persistence.yara
- osx_sym_categories.json
- antidebug_antivm.yara
- APT_APT1.yara
- APT_RedLeaves.yara
- APT_Stuxnet.yara
- bumblebeeloader.yara
- bumblebeeloader1.yara
- capabilities.yara
- CAPE_AgentTesla.yara
- CAPE_AsyncRat.yara
- CAPE_CobaltStrikeBeacon.yara
- CAPE_Emotet.yara
- CAPE_GetTickCountAntiVM.yara
- CAPE_Ryuk.yara
- CAPE_SingleStepAntiHook.yara
- ClamAV_Emotet_String_Aggregrate.yara
- crypto_signatures.yara
- detection.yara
- dotnet_hidden_executables_detect.yara
- Embedded_PE.yara
- gen_gobfuscate.yar
- Hunting_Rule_ShikataGaNai.yara
- image.yara
- IQY_File_With_Suspicious_URL.yara
- mal_msil_typhon_logger.yara
- MALW_cobaltstrike.yara
- MALW_Surtr.yara
- MINER_Monero.yara
- msil_mal_niximports_loader.yara
- msil_susp_obf_antidump.yara
- msil_susp_obf_xorstringsnet.yara
- msil_suspicious_use_of_strreverse.yara
- RAT_Ratdecoders.yara
- rusty_stealer.yara
- sfx_pdb_winrar_restrict.yara
- shellcode.yara
- STEALER_credstealer.yara
- STEALER_Lokibot.yara
- TOOLKIT_Redteam_Tools_by_GUID.yara
- TOOLKIT_Solarwinds_credential_stealer.yara
- urls.yara
- win.lumma_auto.yar
- Win32.Trojan.CaddyWiper.yara
- Win32.Trojan.Dridex.yara
- Win32.Trojan.Emotet.yara
- Win32.Trojan.HermeticWiper.yara
- Win32.Trojan.IsaacWiper.yara
- Win32.Trojan.TrickBot.yara
- WIN32_MALWR_POSSIBLE_EMOTET_07_20.yara
- win_amadey_a9f4.yara
- win_aurora_stealer_a_706a.yara
- win_colibriloader_unpacked.yara
- win_Eternity.yara
- win_isfb_auto.yara
- win_modern_loader_v1_01_1edf.yara
- win_phorpiex_a_84fc.yara
- win_qakbot_malped.yara
- win_stealc_w0.yara
- win_strelastealer.yara
- win_xwormmm_s1_6f74.yara
- dnlib.dll
- dotnet_blacklisted_methods.txt
- dotnet_malware_patterns.json
- mitre_for_windows.json
- powershell_code_patterns.json
- suspicious_registry_keys.txt
- windows.conf
- windows_api_categories.json
- windows_api_trace_list.txt
- windows_debug_signatures
- app.js
- favicon.ico
- style.css
- base.html
- index.html
- jobs.html
- result.html
- .dockerignore
- .gitignore
- .mcp.json
- build_deb.sh
- Dockerfile
- LICENSE
- qu1cksc0pe.py
- README.md
- requirements.txt
- setup.ps1
- setup.sh
# 설치 가이드
1. 코드 내려받기
git clone https://github.com/CYB3RMX/Qu1cksc0pe
깃허브에서 프로젝트 코드 전체를 내 컴퓨터로 내려받습니다.
cd Qu1cksc0pe
방금 내려받은 프로젝트 폴더 안으로 이동합니다.
2. 공식 설치 스크립트
쉬움 추천사전 준비물
- Python 3 pip 명령어를 쓰려면 Python이 필요합니다.
pip install "mcp>=2.0.0"
PyPI에 배포된 패키지를 바로 설치합니다. 소스 클론이 필요 없습니다.
설치 후 새 터미널을 열고, 프로그램의 버전 확인 명령(예: --version)으로 정상 설치됐는지 확인하세요.
이 레포의 README에 적힌 실제 명령어를 그대로 가져왔습니다.
3. Docker
쉬움사전 준비물
- Git GitHub에서 프로젝트 코드를 내려받으려면 필요합니다.
- Docker Desktop 컨테이너를 빌드하고 실행하려면 필요합니다. 설치 후 실행해서 백그라운드에 켜두세요.
docker build -t qu1cksc0pe .
Dockerfile을 기반으로 실행 가능한 이미지를 빌드합니다.
docker run -it --rm -v $(pwd):/data qu1cksc0pe:latest --file /data/suspicious_file --analyze
빌드된 이미지를 실제 컨테이너로 실행합니다.
터미널에 docker compose ps 를 입력해 컨테이너들이 Up 상태인지 확인하세요. README에 포트 번호가 적혀있다면 브라우저에서 http://localhost:포트번호 로 접속해보세요.
이 레포의 README에 적힌 실제 명령어를 그대로 가져왔습니다.
// repository documentation
Was this content helpful?
(0 ratings)
