# freki

> Self-hosted, open-source malware analysis platform with hash extraction, PE static analysis, YARA matching, VirusTotal queries, user accounts, comments and a REST API.

- **Category:** Security
- **Licence:** AGPL-3.0
- **Latest version:** v1.0.0
- **Open source:** oss
- **Languages:** YARA
- **Platforms:** Docker Compose, Build from Source
- **Tags:** Security, REST API, Docker, Hacktoberfest, Flask, Self Hosted, Self Hosting, Threat intelligence, Python3, Yara, Hashing, Malware, Malware analysis, Static analysis, Self Hosted Api, Reverse Engineering, Virustotal, Binary Analysis, Malware Research, Pe Files

## Description

Freki is a free, open-source malware analysis platform aimed at researchers and small teams who want an analysis instance on their own hardware. It computes a wide set of hashes for submitted files (from MD5 and the SHA families up to CRC32 and SSDEEP), performs static analysis of PE samples covering their headers, sections, imports, capabilities and embedded strings, runs YARA pattern matching, and queries the VirusTotal API for detection reports. Everything is reachable through a web interface with user accounts, community comments on samples and free sample downloads, plus a REST API for use from other projects. Deployment is documented via Docker Compose (a Flask app container, MariaDB and Nginx, configured through a .env file) or a step-by-step manual install on Ubuntu/Debian, Arch Linux or Fedora/RHEL using Python 3, a virtualenv and MariaDB. Freki describes itself as a collaborative alternative inspired by VirusTotal and MalwareBazaar rather than a full replacement; the newest tagged release is v1.0.0 from 2020 and several documentation pages are still marked "Coming soon".

## Links

- [Homepage](https://github.com/cristianzsh/freki)
- [Website](https://cristian.sh/freki)
- [Video demo](https://youtu.be/brvNUPgw7ho)
- [Freki documentation](https://cristianzsh.github.io/freki)

---
Source: https://selfhost.directory/project/freki