#1Tools for dissecting, understanding, and reverse engineering malicious software behavior.
Kitploit recommended
diegslva/cve-2010-4221-labFrom patch to RCE: hand-built exploit for CVE-2010-4221 (ProFTPD TELNET IAC stack overflow), with the full failure-driven journey documented
concollmic/concollmicLLM-agent-powered concolic execution engine that instruments source code, summarizes path constraints in natural language, and generates test cases…
zhkl0228/unidbgAllows you to emulate an Android native library, and an experimental iOS emulation
owasp/railsgoatA vulnerable version of Rails that follows the OWASP Top 10
r3nzsec/irflow-timelineDFIR Timeline Analysis for macOS — SQLite-backed viewer for CSV, TSV, XLSX, EVTX, Plaso, $MFT, and $J files with AI Artifacts, AI Secret Hunt,…
s1eezer/cve-2026-8069Technical write-up and proof-of-concept for CVE-2026-8069, a local privilege escalation in Acer NitroSense and PredatorSense services, exploiting a…
serotav/writeupsCollection of detailed and optimized(?) write-ups for various CTF challenges
neo23x0/signature-baseYARA signature and IOC database for my scanners and tools
pinksawtooth/how_to_become_a_malware_analystCurated guide to becoming a malware analyst, covering essential knowledge, reverse engineering, analysis tools, and LLM-assisted learning with…
simoneavogadro/android-reverse-engineering-skillDecompiles Android APK/XAPK/JAR/AAR files and extracts HTTP APIs, authentication patterns, and call flows using jadx, with R8-resistant Kotlin name…
rizinorg/rizinUNIX-like reverse engineering framework and command-line toolset.
gadorach/vankyo-s30-bootloader-unlockVankyo MatrixPad S30 (Unisoc SC9863A) — Bootloader unlock via CVE-2022-38694 FDL1 method
ashishb/android-security-awesomeA collection of android security related resources
imthenachoman/how-to-secure-a-linux-serverStep-by-step guide for hardening a Linux server, covering SSH security, firewalls, intrusion detection, auditing, and system configuration to reduce…
orbitcurve/firmware-reverse-engineeringAgent skills for firmware extraction, static analysis, Ghidra reverse engineering, emulation, and security reporting, packaged for Claude Code and…
yardenbenita/cve-2023-52356-libtiff-analysisRoot-cause analysis and patch validation of CVE-2023-52356 in libtiff using AddressSanitizer and GDB.
badchemical/iot-vulnerability-research-publicIndependent IoT security research, vulnerability disclosures, and PoCs focusing on firmware analysis, hardware interfaces, and cryptographic flaws.
mhicairo-hue/cs50-cybersecurity-final-projectTechnical analysis of the XZ Utils backdoor (CVE-2024-3094), explaining the supply chain attack, obfuscation techniques, and impact on OpenSSH via…
