agentic-malware-analysis

by mrphrazer · YARA · ★ 197

Agentic malware analysis environment with MCP-connected disassemblers, RE tooling, and structured workflows for Claude Code and Codex CLI.

Install

git clone https://github.com/mrphrazer/agentic-malware-analysis.git

Claude Desktop config

Add this to your claude_desktop_config.json:

{
  "mcpServers": {
    "agentic-malware-analysis": {
      "command": "npx",
      "args": [
        "-y",
        "github:mrphrazer/agentic-malware-analysis"
      ]
    }
  }
}

From the README

Automated deep malware reverse engineering driven by AI agents. A Kali-based Docker environment pairs 50+ RE tools with MCP-connected disassembler backends ([Binary Ninja][binary-ninja-headless-mcp] or [Ghidra][ghidra-headless-mcp]) and a structured multi-phase orchestrator skill that turns a raw binary into a case directory of ranked evidence, validated hypotheses, component maps, and a prioritized deep-analysis plan -- with no human interaction required. Ready for [Claude Code][claude-code] and [Codex CLI][codex-cli]. See the companion blog post [Building a Pipeline for Agentic Malware Anal…

Read full README on GitHub →

💡 Need a managed MCP host?

Try Claude Pro for the smoothest MCP experience, or browse our cloud-hosted servers.

Related filesystem servers

cline

★ 61,214

Autonomous coding agent right in your IDE, capable of creating/editing files, executing commands, using the browser, and more with your permission every step of the way.

Filesystem · TypeScript

mempalace

MemPalace

★ 50,486

The best-benchmarked open-source AI memory system. And it's free.

Filesystem · Python

GitNexus

abhigyanpatwari

★ 33,661

GitNexus: The Zero-Server Code Intelligence Engine - GitNexus is a client-side knowledge graph creator that runs entirely in your browser. Drop in a GitHub repo or ZIP file, and get an interactive knowledge graph wit a built in Graph RAG Agent. Perfect for code exploration

Filesystem · TypeScript

github-mcp-server

github

★ 29,391

GitHub's official MCP Server

Filesystem · Go

repomix

yamadashy

★ 24,132

📦 Repomix is a powerful tool that packs your entire repository into a single, AI-friendly file. Perfect for when you need to feed your codebase to Large Language Models (LLMs) or other AI tools like Claude, ChatGPT, DeepSeek, Perplexity, Gemini, Gemma, Llama, Grok, and more.

Filesystem · TypeScript

claude-plugins-official

anthropics

Official ★ 18,276

Official, Anthropic-managed directory of high quality Claude Code Plugins.

Filesystem · Python