CYB3RMX/Qu1cksc0pe

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

2049 stars · 260 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Qu1cksc0pe is an all-in-one malware analysis tool that statically and dynamically analyzes many file types, including Windows/Linux/macOS executables, Android APKs, documents, scripts, archives, PCAPs, and email files. It extracts indicators like DLLs, APIs, URLs, permissions, and MITRE ATT&CK mappings, and ships an MCP server exposing its analysis as tools for AI clients.

Use cases

• analyze a suspicious exe for malware behavior
• extract URLs and IPs from a malware sample
• inspect android apk permissions and capabilities
• map malware samples to MITRE ATT&CK techniques
• detect packers and embedded executables in binaries
• analyze malicious vba macros in documents
• run malware static analysis from an mcp client like claude

When to choose

• you need a single tool covering many file formats for triage
• you want quick static analysis of suspicious files on linux or termux
• you want to expose malware analysis to AI agents via MCP

When to avoid

• you need deep reverse engineering with a full disassembler/decompiler
• you require enterprise sandbox detonation with detailed behavioral reports
• you need managed threat intelligence feeds and correlation

Facets

cli-tool · maturity active

security reverse-engineering linter cli mcp security reverse-engineering developer-tools windows python cli malware-analysis yara apk-analysis threat-intelligence mitre-attack packer-detection termux command-line linux macos android

Member repositories

For agents

markdown · JSON · MCP: product_card(name="CYB3RMX/Qu1cksc0pe")