#2Tools for observing malware behavior in isolated environments to understand its actions and impact.
Kitploit recommended
malwaretech/appcontainersandboxAn example sandbox using AppContainer (Windows 8+)
nuguardai/nuguardopensource repo for validating agentic AI applications: redteam, behavior, supply-chain, static analysis
epfl-vlsc/memoroMemoro: A Detailed Heap Profiler
livecvebench/cve-factoryCVE-Factory
secforce/droidgroundA flexible playground for Android CTF challenges.
deputation/instrumentation_callbacksA proof of concept demonstrating instrumentation callbacks on Windows 10 21h1 with a TLS variable to ensure all syscalls are caught.
sfaci/mascA Web Malware Scanner
ohjeongwook/shellcodeemulatorShellcode emulator written with Unicorn Framework With Process Dump Emulation Environment
security-prince/resources-for-application-securitySome good resources for getting started with application security
leandrofroes/gftraceA command line Windows API tracing tool for Golang binaries.
rasetsuu/vmp-devirtTrace-assisted VMProtect devirtualization research platform: version front-ends feed a shared Remill/LLVM backend to lift handlers, recover dataflow,…
nanashili/rea-rustRust port of REA, a local-only reverse-engineering tool with CLI/MCP workflows and a native Ghidra worker
idiom/pftriagePython tool and library to help analyze files during malware triage and analysis.
radareorg/r2webAccess radare2 from anywhere, anytime.
rog3rsm1th/frelatageCoverage-based fuzzer for python applications
yeet-src/sigwireLive kernel signal observability tool using eBPF tracepoints to stream every signal raised on a Linux host, showing sender, target, disposition,…
hamz-a/frida-android-libbinderPoC Frida script to view Android libbinder traffic
0x742/noiaWeb-based tool for browsing mobile application sandboxes, previewing SQLite databases and binary files, and downloading app data via Frida…
