#1Tools for dissecting, understanding, and reverse engineering malicious software behavior.
Kitploit recommended
ozcanpng/cve-2026-76070Original research and PoC for a pre-auth Base64-decoded password stack buffer overflow in Netis NC63 login.cgi
emsec/halHAL – The Hardware Analyzer
hydradragonantivirus/hydradragonav-mobileAndroid Antivirus which doesn't require root, adb, ca install and cloud with many features and ways to detect more zero-day malware
peterlinccl/vulnerability-dlink-cve-2025-14659Static analysis (Ghidra) and custom packet-crafting (Scapy) demonstrating a root-level DHCP command injection vulnerability (CVE-2025-14659) in…
gavmor/x86-cpp-reversing-skillClaude Code skill for reverse-engineering 32-bit little-endian x86 C++ binaries (vtables, RTTI, inheritance recovery)
duriantaco/ravageEvidence first autonomous web security testing for controlled, authorized targets. With reproducible labs, audit trails, reports, and XBEN…
skylot/jadxCommand-line and GUI tool for decompiling Android Dex and APK files into readable Java source code, with resource decoding, deobfuscation, and Smali…
the-art-of-hacking/h4ckerCurated collection of cybersecurity resources, labs, and training materials covering ethical hacking, penetration testing, exploit development,…
jithinkrishnanrs/stylesmuggler-ioc-toolkitStyleSmuggler (CVE-2026-75650) IOC toolkit for Magento Open Source and Adobe Commerce. Detect compromised stores, Rust implants, PHP web shells,…
xernary/cve-2026-82539Security advisory for TOTOLINK a720r buffer overflow vulnerability
gherardofiori/maliciousbrowserextensionsThis Repository is created after my own research into malicious browser extensions, by brining the work of many others and news articles into one…
zzzxxxxxxxxxx/ghostlock-got-w29CVE-2026-43499 (GhostLock) research on HUAWEI MatePad Pro 11 GOT-W29
bkerler/mtkclientMediatek Flash and Repair Utility
daffainfo/vol-rsVolatility 3 ported to Rust. Same output, much faster.
jeanextreme002/pymemoryeditorA pure-Python library that lets you inspect, modify and search the memory of any running process in a few lines of Python :snake: .
sgswzglwlx/vivo-root-buildBuilds a root exploit for vivo/iQOO devices targeting CVE-2026-43499, leveraging kernel techniques like KASLR bypass and CFI manipulation to achieve…
google/artemisNatural-language Android automation agent that drives real devices via ADB, captures Logcat and screenshots, and exposes an MCP server for AI IDEs…
delvinru/apk-infoAPK full-featured parser
