#1Tools for dissecting, understanding, and reverse engineering malicious software behavior.
Kitploit recommended
wazuh/wazuhOpen-source XDR and SIEM platform for threat detection, log analysis, file integrity monitoring, vulnerability assessment, and compliance management…
graphworlok/cve-2021-35394-ecosystemTracking the family of unrelated IoT botnets sharing CVE-2021-35394 as a delivery vector — findings, relationships, methodology.
rivitna/malwareCurated YARA rules and detection programs for identifying ransomware families, providing signature-based indicators for malware triage, threat…
chrischo-h/bithovenBithoven is a smart contract language for composing powerful and secure instruments on Bitcoin. LR(1) parser with static analysis for compile-time…
strace/straceLinux syscall tracer using ptrace to monitor, debug, and analyze system calls, signal deliveries, and process state changes for diagnostics and…
michel-dv/xz-utils-backdoor-case-studyTechnical case study of the XZ Utils backdoor (CVE-2024-3094), covering supply-chain trust abuse, malicious release artifacts, build-stage injection,…
rustsec/rustsecRustSec API & Tooling
ylca0/idalib-cliAgent-native CLI wrapping IDA Pro IDALib for stateless, JSON-output binary analysis: disassembly, Hex-Rays decompilation, CFG, xrefs, strings, and…
mo200909/office-malware-forensics-lab-remnux-static-analysisStatic analysis of 2 malicious Office documents on REMnux using oletools; identified CVE-2017-11882 and obfuscated macros.
1rhino2/fnprintmatch functions in binaries by what they do, not what their bytes look like. behavioral function fingerprinting via microexecution.
mouseos/aquos-r6-ghostlockTemporary root exploit for Sharp AQUOS R6 A101SH S0029 using GhostLock CVE-2026-43499
manuelschipper/naha guard that blocks catastrophic agent actions
microsoft/applicationinspectorA source code analyzer built for surfacing features of interest and other characteristics to answer the question 'What's in the code?' quickly using…
rderaison/bromureProper sandboxing for agentic coding and web browsing
microsoft/mxcPolicy-driven, layered isolation and containment
getkern/kernRootless container runtime and sandbox that launches kernel-enforced OCI images in milliseconds with no daemon, featuring resource profiles, seccomp…
d4vinci/scraplingAdaptive web scraping framework with anti-bot bypass, automatic element relocation, concurrent crawling, proxy rotation, and browser automation for…
