Dynamic Analysis (Sandboxing)

gmh5225/frida-stalker-ntstrace

frida-stalker based system call tracer on windows(x64).

cert-polska/karton

Distributed malware processing framework based on Python, Redis and S3.

lloydlabs/wsb-detect

wsb-detect enables you to detect if you are running in Windows Sandbox ("WSB")

brad-sp/cuckoo-modified

Modified edition of cuckoo

urule99/jsunpack-n

Automatically exported from code.google.com/p/jsunpack-n

deputation/instrumentation_callbacks

A proof of concept demonstrating instrumentation callbacks on Windows 10 21h1 with a TLS variable to ensure all syscalls are caught.

oalabs/frida-wshook

Script analysis tool based on Frida.re

oalabs/frida-extract

Frida.re based RunPE (and MapViewOfSection) extraction tool

catern/rsyscall

Process-independent interface to Linux system calls

freeqaz/react2shell

RCE exploit toolkit for CVE-2025-55182 and CVE-2025-66478 in React Server Components. Includes multiple exploit variants, detection scripts, a…

radareorg/r2web

Access radare2 from anywhere, anytime.

fracturelabs/go-scan-spring

Vulnerability scanner for Spring4Shell (CVE-2022-22965)

jacobpimental/nanocore_extractor

Extracts nanocore sample from compile AutoIT script

lohanichaten/log4j-cve-2021-44228

Proof-of-concept exploit for CVE-2021-44228 (Log4Shell) targeting Java applications via JNDI injection for remote code execution.

hulina9900-boop/diy-cve-2026-42945-poc

Proof-of-concept exploit environment for CVE-2026-42945 targeting nginx 1.30.0 on Ubuntu 22.04 with PHP-FPM, packaged as a Docker-based local testing…

aastikgakhar/cve-2025-55182-react2shell

Detects exposed React Server Components vulnerable to CVE-2025-55182 via RSC negotiation.