#1Tools for dissecting, understanding, and reverse engineering malicious software behavior.
Kitploit recommended
mentebinaria/retoolkitPre-configured bundle of reverse engineering and malware analysis tools for x86/x64 Windows systems, with desktop integration and plugin-ready…
idamcp/idamcpMCP server integrating IDA Pro with AI agents, featuring a stateless gateway for multi-session management, a relational SQL query engine for binary…
youkyi/pki-toolboxClient-side PKI toolbox that decodes X.509, CSR, chain, CRL, PKCS#7 and PKCS#12 artifacts, views ASN.1, converts formats, and generates self-signed…
nnonickreal/openqoreunleash the full power of your BES-based headphones! :)
hahwul/mzap⚡️ Multiple target ZAP Scanning
deepbluedynamics/grubcrawlerThe world's fastest agentic crawler. Reclaimed. Reinvented. Ready for war.
yonliud/cve-2026-0303Checkov PoC: arbitrary code execution through auto-loaded configuration and unsigned external Python checks.
doctormord/philips-pm-5139-5138a-5136-firmware-projectFirmware reverse engineering of the Philips PM5139 / PM5138A / PM5136 function generators: 8051 emulators used as measuring instruments, 35 sections…
idov31/silversealLinux post-exploitation framework with a UEFI bootkit that persistently and stealthily loads a Rust-based kernel module rootkit on modern Linux…
purp1ew0lf/blue-team-notesYou didn't think I'd go and leave the blue team out, right?
owasp-noir/alibiCross-check the views of your attack surface and find the endpoints that cannot corroborate each other.
trailofbits/ficklingA Python pickling decompiler and static analyzer
cxlfhx/ghostlock-pfem10GhostLock (CVE-2026-43499 / IonStack) research for OPPO Find X5 Pro (PFEM10): exploit chain, progress, blocker log, and OPPO 5-series kernel notes
uwctcjnwlk/web3-decoderBurp Suite extension for decoding Ethereum JSON-RPC calls and smart contract interactions, supporting multiple chains and automatic ABI retrieval.
secforce/droidgroundA flexible playground for Android CTF challenges.
mitmproxy/mitmproxyAn interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
abhinavagarwal07/gdcm-security-pocPrivate end-to-end sanitizer reproduction package for six GDCM findings
416rehman/deepzeroFind zero-days while you sleep. DeepZero is an automated vulnerability research framework that parses, decompiles, and analyzes thousands of Windows…
