Native Flare-VM MCP server for Windows reverse engineering and malware analysis
View on GitHub ↗mal-mcp - Flare-VM Native Malware Analysis MCP Server
A native Model Context Protocol (MCP) server engineered specifically to run directly on Windows inside Flare-VM without requiring a Kali Linux host, WinRM network configuration, or SMB shares.
Exposes 52 specialized tools across static analysis, dynamic behavioral monitoring, memory injection scanning, debuggers, and automated composite playbooks.
1. System & Host Diagnostics - checkflarevmstatus: Diagnostic check of Flare-VM host info, Windows version, and availability of all installed RE tools. - executepowershell: Run arbitrary PowerShell command locally with captured stdout/stderr and exit code. - executecmd: Run CMD / Command Prompt commands locally. - getfilehash: MD5, SHA1, and SHA256 hashes of a local file (in-process via hashlib). - readfilehex: Read binary files or inspect specific offsets and bytes. - listprocesses: Enumerate running processes using psutil with process name/PID filtering.
2. Static Analysis - dieanalyze: Run DetectItEasy (diec.exe) for compiler, packer, and protector detection. - flossextractstrings: Run Mandiant FLOSS (floss.exe) for obfuscated, stack, and tight string recovery. - capaanalyze: Run Mandiant CAPA (capa.exe) for capability detection and ATT&CK mapping. - yarascan: Scan a file or directory with YARA rules using yara64.exe or yara-python. - stringsextract: Extract printable strings using Sysinternals strings.exe (ASCII and Unicode). - sigcheckanalyze: Verify Authenticode digital signatures, certificate validity, publisher, and binary metadata with sigcheck64.exe. - entropyanal
From the project README.
Add the radar badge to your README — it shows your project was picked up by MCP Radar and links to this page:
[](https://mcp.liqiwa.com/s/8uggy-sec--mal-mcp.html)
Stop your AI from making things up — it proposes, deterministic tools decide, every claim checked against ground truth with evidence. Grounded facts and context survive resets. Reverse engineering is
zhuyansen/new-term-radarDaily radar for new AI terms: names of new models, products and repos, caught on X, Hugging Face, GitHub and sitemaps before keyword tools list them.
yzg1226/mcd-party-officer🍟 麦当劳门店派对成团调度 Skill — 把派对从「策划」推进到「办得成」：成团概率雷达 / 包场vs拼团 / 择日黄历 / 儿童营养指数 / 招募卡与邀请函
fellowgeek/mcp-memoryAn OKF-backed Model Context Protocol (MCP) server delivering persistent long-term memory and SQLite FTS5 search for AI agents.
hirotomasato/yowesGenerate realistic teacher documents (ID cards, licenses, letters) for 13 countries via MCP.
hujjun/mcd-saver-strategist麦当劳省钱点餐助手（麦门精算师）｜麦当劳优惠券组合优化 Skill：拉取麦当劳菜单与全部可用优惠券，算出最省的点餐组合，巨无霸套餐 ¥47 → ¥21.9（省 53%）。McDonalds MCP（麦当劳 MCP）coupon optimizer · McDonalds China MCP Server · Agent Skill for WorkBuddy · 麦当劳程序员创意开发大赛参赛作品
The top new MCP servers of the week, every Monday. No spam, unsubscribe anytime.