#2Tools for observing malware behavior in isolated environments to understand its actions and impact.
Kitploit recommended
0x534a/dynmxSignature-based detection of malware features based on Windows API call sequences. It's like YARA for sandbox API traces!
gmh5225/awesome-llvm-securityCurated collection of LLVM security resources covering binary lifting, code obfuscation, static analysis, symbolic execution, sanitizers, and…
qilingframework/qilingA True Instrumentable Binary Emulation Framework
mozillazg/ptcpdumpeBPF-based packet analyzer that captures network traffic with automatic process, container, and Kubernetes pod metadata annotation, supporting…
mathaix/openclawmachinesManage OpenClaw in your team (Enterprise) by providing it compute infrastructure, tool integration, Authentication and security primitives
doctormord/philips-pm-5139-5138a-5136-firmware-projectFirmware reverse engineering of the Philips PM5139 / PM5138A / PM5136 function generators: 8051 emulators used as measuring instruments, 35 sections…
e-m-b-a/embaEMBA - The firmware security analyzer
immunityinc/libptraceAn event driven multi-core process debugging, tracing, and manipulation framework.
fuzzingbrain/fuzzingbrain-benchA benchmark for LLM-driven bug discovery: 77 challenges across 43 open-source projects (C/C++/Java).
mxmssh/draflAFL + DynamoRIO = fuzzing binaries with no source code on Linux
penberg/chimeraSandbox untrusted code with safe access to the host.
danieldev23/frida-ssl-bypassFrida toolkit that bypasses SSL/TLS certificate pinning on Android apps, hooking Java TrustManager, OkHttp, Conscrypt, and native OpenSSL/BoringSSL…
radareorg/radare2UNIX-like reverse engineering framework and command-line toolset
theqmaks/phantom-fridaBuild anti-detection Frida server from source. ~90 patches covering 16 detection vectors, weekly auto-builds with random names.
fatmike-gh/mcpdebuggerA MCP Debugger Server for Windows executables (x86 and x64). Exposes debugger functionality as MCP Tools for static / dynamic analysis of the…
cocoadebug/cocoadebugiOS Debugging Tool 🚀
cert-polska/drakvuf-sandboxAutomated hypervisor-level malware analysis sandbox with agentless guest introspection, web-based result exploration, and guided installer for…
spinkham/skipfishWeb application security scanner created by lcamtuf for google - Unofficial Mirror
