#1Tools for dissecting, understanding, and reverse engineering malicious software behavior.
Kitploit recommended
darnellwashingtonjr94-art/sandb0x-xtract0rAutomated cross-platform sandbox that detonates suspicious files in isolated VMs/emulators, captures network and memory artifacts, and creates LLM…
buter-chkalova/rvbbit-arsenalOffensive & defensive Linux kernel security research focused on rootkit behavior, observable artifacts and detection.
buter-chkalova/project-rvbbitEducational Linux kernel rootkit PoC exploring DKOM, syscall hooking, stealth, observability and defensive detection
torvalds/linuxLinux kernel source tree
sepinf-inc/ipedIPED Digital Forensic Tool. It is an open source software that can be used to process and analyze digital evidence, often seized at crime scenes by…
saina15/cve-2020-14343-labControlled vulnerability research and reproduction lab for CVE-2020-14343 in PyYAML
google/oss-fuzzOSS-Fuzz - continuous fuzzing for open source software.
xiaoqimikko/async-http-client-checkSelf-hosted AI workspace with agents, skills, and tools (Gmail, Calendar) that runs entirely on your own provider API keys (BYOK). Bring your own…
cea-sec/miasmReverse engineering framework in Python
akanthed/secureai-scanSecureAI-Scan is a CLI tool that scans TypeScript and JavaScript codebases for security issues specific to AI-powered apps — prompt injection, MCP…
sandboxie-plus/sandboxieSandboxie Plus & Classic
blacktop/ipswiOS/macOS Research Swiss Army Knife
open-policy-agent/conftestWrite tests against structured configuration data using the Open Policy Agent Rego query language
amd2g2zz/kunglao-agentThe reverse-engineering expert agent: plans its own analysis path, derives every fact from raw evidence, and converges under mechanical verification…
0xblackash/cve-2026-68121Research repository for CVE-2026-68121, a Linux kernel PPPoE use-after-free in pppoe_sendmsg() enabling local privilege escalation, with PoC,…
0xblackash/cve-2026-81000Research repository for CVE-2026-81000 (TUNderflow), a Linux kernel TUN/TAP receive headroom integer underflow enabling local privilege escalation,…
mrphrazer/binary-ninja-headless-mcpHeadless Binary Ninja MCP server — giving AI agents deep reverse-engineering capabilities via 180 tools.
capstone-engine/capstoneMulti-architecture disassembly framework providing a lightweight, thread-safe API for binary analysis, reverse engineering, and malware research…
