#1Tools for dissecting, understanding, and reverse engineering malicious software behavior.
Kitploit recommended
osxninja/cybersecurity-projectsThis repository contains the complete record of my three-year research journey, covering the project from foundational concepts to advanced-level…
cyb3rmx/qu1cksc0peAll-in-One malware analysis tool.
httptoolkit/frida-interception-and-unpinningFrida scripts to rewrite mobile applications at runtime to directly MitM all HTTPS traffic
google/bindiffQuickly find differences and similarities in disassembled code
nvidia/skillspectorSecurity scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and…
zydak/leetobfuscatorObfuscates C/C++ through LLVM passes: string encryption, control-flow flattening, MBA rewriting, and anti-analysis to defeat reverse engineering.
mozilla/firefox-devtools-mcpModel Context Protocol server for Firefox DevTools - enables AI assistants to inspect and control Firefox browser through WebDriver BiDi
nationalsecurityagency/ghidraGhidra is a software reverse engineering (SRE) framework
michaels1011/ephemora-cellCapability-based WASM runtime for executing untrusted AI-generated code with enforced CPU, memory, time, I/O, and filesystem limits. Provides…
stackrox/kube-linterKubeLinter is a static analysis tool that checks Kubernetes YAML files and Helm charts to ensure the applications represented in them adhere to best…
bigbodycobain/shadowbrokerReal-time geospatial OSINT platform aggregating 60+ public telemetry feeds (ADS-B, AIS, satellites, CCTV) into a unified map with server-side recon…
momo5502/sogen🪅 Windows & Linux userspace emulator
e-m-b-a/embaEMBA - The firmware security analyzer
fabriziosalmi/tanstack-compromise-checkerShell script to detect TanStack npm supply chain attack indicators (CVE-2026-45321 / GHSA-g7cv-rxg3-hmpx)
worksbutnottested/lightkeeperMaps execution-coverage data onto Ghidra disassembly to highlight visited code paths and accelerate reverse-engineering workflows.
rmdycz/k80pro-miro-cve-2026-64560Device-bound CVE-2026-64560 adaptation for RedMi K80pro miro OS 3.0.304.0
quarkslab/conf-presentationsQuarkslab conference talks
imeiplus/ghostlock-pfem10GhostLock (CVE-2026-43499) for OPPO Find X5 Pro (PFEM10) — OPlus watchdog & heap-spray detector reverse engineering
