#1Tools for dissecting, understanding, and reverse engineering malicious software behavior.
Kitploit recommended
shivammittal2403/cve-2026-80428-ctfContainerized educational CTF lab emulating CVE-2026-80428 (CWE-502 deserialization) for safe, isolated student and researcher practice.
skyscanner/cfripperLibrary and CLI tool for analysing CloudFormation templates and check them for security compliance.
ping-2o/ios.cve-2026-84616-84607research on finding the bug and fix of CVE-2026-84616 and CVE-2026-84607
0xax/linux-insidesA book-in-progress about the Linux kernel and its insides.
lintsinghua/deepauditDeepAudit：人人拥有的 AI 黑客战队，让漏洞挖掘触手可及。国内首个开源的代码漏洞挖掘多智能体系统。小白一键部署运行，自主协作审计 + 自动化沙箱 PoC 验证。支持 Ollama 私有部署 ，一键生成报告。支持中转站。让安全不再昂贵，让审计不再复杂。
tejasprasad2008-afk/tracetreeRuntime behavioral analysis tool that sandboxes suspicious packages in Docker, traces syscalls with strace, maps process cascades into directed…
gendigitalinc/sageLightweight Agent Detection & Response (ADR) layer for AI agents — guards commands, files, and web requests. Part of Gen Agent Trust Hub.
redzrush101/zte-blade-v40-vita-unlockUnlocking the ZTE Blade V40 Vita (P606F02 / Unisoc UMS9230 / UFS) bootloader via CVE-2022-38694 - Linux scripts, the FBE post-unlock hang fix, and…
owasp/wrongsecrets-binariesSource code for the Binaries of OWASP WrongSecrets
bytedance/appsharkStatic taint analysis platform for Android apps that detects vulnerabilities and compliance issues using customizable rule-based scanning and…
aftermathlabs/discord-crasherSome bugs found via binary instrumentation and fuzzing
winsiderss/systeminformerReal-time Windows system monitor with advanced process, network, and disk analysis, stack trace debugging, malware detection, and service management.…
praetorian-inc/trajanA multi-platform CI/CD vulnerability detection and attack automation tool for identifying security weaknesses in pipeline configurations.
accessmodifier364/cve-2026-43499-firetv-sheldonp-writeupSecurity research write-up on exploiting CVE-2026-43499 on the Amazon Fire TV Stick 3rd Gen (sheldonp), from temporary root to bootloader unlock.
promptfoo/modelauditSecurity scanner for AI/ML model files. Detects malicious code, backdoors, and vulnerabilities before deployment
bunnybuzz/enigmaNative C++ reverse-engineering engine with disassembly, decompilation, and analysis pipeline for PE/ELF binaries, featuring interactive GUI and…
badchars/darknet-mcp-server66-tool MCP server for dark web intelligence — breach data, ransomware tracking, Tor .onion access, malware analysis, blockchain intel, exploit…
