#1Debugging tools specifically for analyzing malware execution flow and identifying vulnerabilities.
Kitploit recommended

1day research effort
BattleTech: The Crescent Hawk's Inception reverse engeneering


Desktop workbench for AFL++ fuzzing, cross-architecture QEMU emulation, harness development, Ghidra headless analysis, custom mutators, and patch…

libtalloc is a python script for use with GDB that can be used to analyse the "trivial allocator" (talloc)

Experimental Linux strace LLM agent

Config-driven Dart AOT snapshot analyzer that exports blutter-compatible symbols and structs for IDA, radare2 and Frida, and decompiles functions…

This repository provides a learning environment to understand how an Exim RCE exploit for CVE-2018-6789 works.

Z2A-BlackLotus Challenge stage 2 bootkit-rootkit analysis

A MCP Debugger Server for Windows executables (x86 and x64). Exposes debugger functionality as MCP Tools for static / dynamic analysis of the…

Frida-based tool that ports Cheat Engine's MonoDataCollector to Android and iOS, enabling runtime Mono/IL2CPP data collection and memory inspection…

Heap analysis tooling for mempool

A radare2 script to parse the gopclntab to facilitate Reverse Engineering Go binaries.

Windows kernel proof-of-concept demonstrating an anti-debugging technique that prevents WinDbg from breaking by manipulating the kernel exception…

notepad++堆缓冲区溢出漏洞CVE-2023-40031 分析与复现

Dynamic branch-divergence finder for native code -- traces two Frida executions and finds the exact instruction where they diverge.

Inspects, decompiles and structurally patches Hermes bytecode (HBC) from React Native apps, with a GDB-style REPL, CFG, decompiler and re-serializing…

IDA Pro processor modules adding disassembly support for uncommon CPU, DSP, and GPU architectures including XMOS xCORE, TI C7x/PRU, MicroBlaze, and…