#1Tools for dissecting, understanding, and reverse engineering malicious software behavior.
Kitploit recommended
neorai/vt-py-scannerRecursively scan folders with VirusTotal API to detect malware. Features hash lookup, CSV export, real-time progress, and rate-limit handling for…
jbsouthe/http-breakout-proxyHTTP Proxy Analysis for reverse engineering protocol communication
calysteon/cve-2025-43504Technical deep-dive into CVE-2025-43504, a remote pre-authentication global buffer overflow in LLDB's debugserver for iOS, with PoC code and…
azr43lkn1ght/dfir-labsHands-on DFIR challenges covering digital forensics, incident response, malware analysis, and threat hunting with CTF-style flags and real-world…
sunrayvision/vision-msi-thermal-controlMSI Modern 15H AI C1MGT-096IT Linux thermal management - Reverse engineered EC control with fan profiles and battery threshold
0x90n/infosec-black-fridayAll the deals for InfoSec related software/tools this Black Friday
smolfiddle/sentinelnavSentinelNav: zero-dependency, pure Python binary visualization and forensics tool.
ghostwolflab/apt-individual-combat-guideEducational guide and code repository for understanding APT attack techniques, covering reconnaissance, web and service exploitation, trojans, C2,…
lycis/cawdogCAWODOG is a proof-of-concept project demonstrating how to protect Python-based AI models deployed on offline industrial machines. Across three…
smarttfoxx/cve-2025-65320Demonstrates cleartext storage of license keys in memory in Abacre Restaurant POS, enabling license activation bypass via debugger and memory dump…
wadingporque/apkprobeAPK decompiler & secrets scanner for Android security research! Extract leaked API keys, hardcoded credentials, endpoints from APK files. apk2url,…
saadahla/anti-sandboxC++ tool for detecting AnyRun sandbox environments, enabling malware to evade dynamic analysis and automated sandboxing systems.
rehints/hexrayscodexplorerHex-Rays Decompiler plugin for better code navigation
nccgroup/ghostringsGhidra scripts for recovering string definitions in Go binaries
corelight/zeek-agenttesla-detectorA Zeek based Agent Tesla malware C2 detector.
aurh1l-42-projects/woody-woodpackerELF binary packer that encrypts code sections and injects a runtime decryption stub for 64-bit Linux executables, demonstrating code injection and…
emilc3978/cve-2022-37969pocTutorial of CVE-2022-37969 with focus on the methodology of Kernel exploitation, not CVE's internal causes
shoucheng3/nahsra__antisamy_cve-2017-14735_1-5-6Java library for fast, configurable HTML sanitization from untrusted sources. Uses policy-driven scanning to remove malicious JavaScript and CSS,…
