Advanced Binary Analysis Tool
Project description
๐ NusantaraScan
"An open-source binary analysis tool for modern security workflows."
๐ง Tentang Proyek
NusantaraScan adalah tool open-source untuk analisis binary, mencakup malware analysis dan reverse engineering, dengan output yang terstruktur dan mudah dipahami.
Dirancang agar:
- Powerful untuk analis profesional
- Tetap simpel untuk pemula
๐ก๏ธ Fitur
- โ Static Analysis โ Informasi lengkap file binary (PE, ELF, Mach-O)
- โ String Extraction โ Deteksi string mencurigakan (URL, IP, API calls)
- โ Entropy Analysis โ Deteksi file terenkripsi atau packed
- โ Section Analysis โ Analisis struktur internal binary
- โ YARA Integration โ Scan dengan custom YARA rules
- ๐ง Disassembly โ (Coming soon) dengan Capstone Engine
- โ Multi-format Export โ JSON, HTML, Text
๐ Instalasi
git clone https://github.com/Lutfifakee-Project/NusantaraScan.git
cd NusantaraScan
pip install -r requirements.txt
python main.py --help
Via PyPI (Rekomendasi)
pip install nusantarascan
Setelah terinstall, langsung jalankan:
nusantarascan notepad.exe
๐ป Contoh Penggunaan
# Analisis dasar
python main.py notepad.exe
# Analisis mendalam dengan YARA scan
python main.py malware.exe --deep
# Scan dengan custom YARA rules
python main.py suspicious.dll --yara rules/malware.yara
# Export hasil ke HTML
python main.py file.exe --output report.html --format html
๐ Contoh Output
_ _ _ ____
| \ | |_ _ ___ __ _ _ __ | |_ __ _ _ __ __ _/ ___| ___ __ _ _ __
| \| | | | / __|/ _` | '_ \| __/ _` | '__/ _` \___ \ / __/ _` | '_ \
| |\ | |_| \__ \ (_| | | | | || (_| | | | (_| |___) | (_| (_| | | | |
|_| \_|\__,_|___/\__,_|_| |_|\__\__,_|_| \__,_|____/ \___\__,_|_| |_| v0.1.0
https://github.com/Lutfifakee-Project/
[+] Target : notepad.exe
[+] Size : 200,704 bytes (196.00 KB)
[+] MD5 : 6f51bcabf1b2b34ad7e670aee6da451f
[+] Entropy : 6.3093
๐ Section Analysis:
โโโโโโโโโโณโโโโโโโโโโโโโโโโโโณโโโโโโโโโโโโโโโณโโโโโโโโโโโณโโโโโโโโโโ
โ Name โ Virtual Address โ Virtual Size โ Raw Size โ Entropy โ
โกโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโฉ
โ .text โ 0x1000 โ 0x2448f โ 0x24600 โ 6.2747 โ
โ .rdata โ 0x26000 โ 0x9288 โ 0x9400 โ 5.9296 โ
โโโโโโโโโโดโโโโโโโโโโโโโโโโโโดโโโโโโโโโโโโโโโดโโโโโโโโโโโดโโโโโโโโโโ
โ
Scan completed!
๐ฆ Requirements
- Python 3.8 atau lebih baru
Install dependencies:
pip install -r requirements.txt
Dependencies:
pefileโ Analisis file PE Windowspyelftoolsโ Analisis file ELF Linuxcapstoneโ Disassembly engine (coming soon)yara-pythonโ YARA integrationrichโ CLI output formatting
๐ Struktur Proyek
NusantaraScan/
โโโ main.py # Entry point utama
โโโ requirements.txt # Dependencies
โโโ setup.py # Installer
โโโ README.md # Dokumentasi
โโโ nusantarascan/
โโโ cli.py # CLI handler
โโโ analyzers/ # Binary analyzers (PE, ELF)
โโโ utils/ # Utilities (hash, entropy)
โโโ signatures/ # YARA scanner
โโโ formatters/ # JSON/HTML export
๐ Lisensi
Proyek ini menggunakan lisensi GNU General Public License v3.0
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file nusantarascan-0.1.3.tar.gz.
File metadata
- Download URL: nusantarascan-0.1.3.tar.gz
- Upload date:
- Size: 3.3 kB
- Tags: Source
- Uploaded using Trusted Publishing? No
- Uploaded via: twine/6.2.0 CPython/3.13.3
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
5d9de7a122aa1eec922ebda37e2b721bcf6841a83472dc292f9c9d1215d7049b
|
|
| MD5 |
0b30109d3171326e8f94ce9e5197d861
|
|
| BLAKE2b-256 |
9dd1e3d01832b26283fe9988e420d8612e5f13fe2e7dcdec33c0c9733577bb31
|
File details
Details for the file nusantarascan-0.1.3-py3-none-any.whl.
File metadata
- Download URL: nusantarascan-0.1.3-py3-none-any.whl
- Upload date:
- Size: 3.3 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? No
- Uploaded via: twine/6.2.0 CPython/3.13.3
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
264b13876017f8a147e99ce5a053731c9decda938ab258b851300dc4dde92dcf
|
|
| MD5 |
e493b7756b28516bd100e548b6f46fc3
|
|
| BLAKE2b-256 |
9251a65280216d1fb5decbde6877fdae79a1b0a1124d51baeb14f3660f1acec7
|