#1Tools for dissecting, understanding, and reverse engineering malicious software behavior.
Kitploit recommended
google/artemisNatural-language Android automation agent that drives real devices via ADB, captures Logcat and screenshots, and exposes an MCP server for AI IDEs…
delvinru/apk-infoAPK full-featured parser
artur9010/amazon-mustang-hackKernel exploit research achieving temporary root on Amazon Fire 7 (Fire OS 7.3.3.1) via the Mali kbase JIT use-after-free CVE-2022-38181, with a…
secure-system/insularIsolate your big brother apps https://secure-system.gitlab.io/Insular/
seqra/opentaintFormal inter-procedural taint analysis engine for application security. Tracks untrusted data across function boundaries, persistence layers, and…
abraxas/cve-2025-38502-linux-lpeResearch repository for CVE-2025-38502, a Linux kernel BPF cgroup local storage out-of-bounds access via tail calls enabling local privilege…
themalwareguardian/cve-2022-34302Demonstrates CVE-2022-34302, a Secure Boot bypass via the New Horizon Datasys signed bootloader whose built-in custom PE/COFF loader executes…
nicholasaleks/infected-dronesA collection of vulnerabilities & exploits against modern GCS
themalwareguardian/cve-2022-34303Demonstrates CVE-2022-34303 Secure Boot bypass via CryptoPro signed UEFI Shell, using the mm command to nullify gSecurity2 and load unsigned UEFI…
v-pun215/tourmalineReverse engineering notes, deobfuscated source, IOCs, and YARA rules for the Tourmaline ClickFix Python RAT, covering its DNS tunnel and blockchain…
storyyeller/krakatauJava decompiler, assembler, and disassembler
8b-is/smart-treeSmart Tree: not just a tree, a philosophy. A context-aware, AI-crafted replacement for 20+ tools with MEM8 quantum compression, semantic search,…
hui191/cve-2026-43499-aak-an00Honor WIN RT (AAK-AN00) CVE-2026-43499 temporary root - research notes
lmx-071028/cve-2024-30350-research-notesResearch notes documenting CVE-2024-30350, an out-of-bounds read in Foxit PDF Reader annotation handling, covering triage, disclosure, and defensive…
elastic/labs-releasesElastic Security Labs releases
nathan-luevano/silicaExhaustive differential validation of all 4.3B AArch64 instruction encodings.
owasp/owasp-java-encoderThe OWASP Java Encoder is a Java 1.5+ simple-to-use drop-in high-performance encoder class with no dependencies and little baggage. This project will…
