A professional Blue Team file analysis tool built on Kali Linux.

• True file type detection via magic bytes
• ClamAV antivirus scanning (3.6M+ signatures)
• YARA malware rule matching
• VirusTotal API (70+ engines)
• MalwareBazaar threat intelligence
• PE/EXE deep analysis
• Office macro detection
• PDF exploit detection
• Entropy analysis
• Suspicious string extraction
• Binwalk embedded file detection

python3 -m venv venv
source venv/bin/activate
pip install flask flask-cors python-magic pefile oletools yara-python requests pdfminer.six Pillow colorama

source venv/bin/activate
python3 app.py

Open browser at http://localhost:5000

In app.py replace YOUR_VIRUSTOTAL_API_KEY_HERE with your free VirusTotal API key.

• Python + Flask
• ClamAV
• YARA
• VirusTotal API
• MalwareBazaar API