#1Tools for dissecting, understanding, and reverse engineering malicious software behavior.
Kitploit recommended
google/kafelA language and library for specifying syscall filtering policies.
blackorbird/apt_reportInteresting APT Report Collection And Some Special IOCs
z3prover/z3High-performance SMT solver for automated theorem proving, constraint solving, and program verification. Supports multiple theories and language…
santhreal/keyhogOpen-source secret scanner in Rust
0xdea/rhabdomancerVulnerability research assistant that locates calls to potentially insecure API functions in a binary file.
0xdea/haruspexVulnerability research assistant that extracts pseudocode from the IDA Hex-Rays decompiler.
radareorg/radare2UNIX-like reverse engineering framework and command-line toolset
angr/angrA powerful and user-friendly binary analysis platform!
horsicq/xmachoviewerXMachOViewer is a Mach-O viewer for Windows, Linux and MacOS
horsicq/xpeviewerPE file viewer/editor for Windows, Linux and MacOS.
matthart1983/netwatchReal-time network diagnostics in your terminal. One command, zero config, instant visibility.
b2r2-org/b2r2B2R2 is a fully managed binary analysis framework written in F#. It provides a rich set of algorithms, functions, and tools for reverse engineering,…
tjnel/certgraveyard_yaraAutomated YARA rule generation from the Cert Central compromised certificate database.
owasp/java-html-sanitizerTakes third-party HTML and produces HTML that is safe to embed in your web application. Fast and easy to configure.
yaklang/yakitAll-in-one penetration testing platform with MITM proxy, web fuzzer, reverse connection handler, and plugin system for automated security testing and…
0sec-labs/foxguardA fast universal code security scanner, written in Rust. Batteries included: supports 14 languages, TUI for triage, secrets, post-quantum audits,…
huhusmang/awesome-llms-for-vulnerability-detectionThe community's most comprehensive, continuously-updated index of research on Large Language Models for software vulnerability detection — papers…
darnellwashingtonjr94-art/sandb0x-xtract0rAutomated cross-platform sandbox that detonates suspicious files in isolated VMs/emulators, captures network and memory artifacts, and creates LLM…
