#1Tools for dissecting, understanding, and reverse engineering malicious software behavior.
Kitploit recommended
smarttfoxx/cve-2025-60791Easywork Enterprise 2.1.3.354 is vulnerable to Cleartext Storage of Sensitive Information in Memory. The application leaves valid device-bound…
nccgroup/ghidra-nanomipsnanoMIPS module for Ghidra
ztcoalson/if-guide[NeurIPS '25] Code for Paper "IF-Guide: Influence Function-Guided Suppression of Harmful Training Data for Reducing LLM Toxicity"
thomrgn/xzutils_backdoor_obfuscationScript to obfuscate a payload the same way as it was done by the XZ utils attack (CVE-2024-3094)
shinycolumn/cve-2025-56799OS Command Injection Vulnerability via Cache Clearing Scheduler in Reolink Desktop Application
shinycolumn/cve-2025-56802AES-CFB Key Generation and Management Vulnerability in Reolink Desktop Application
taptap/cve-2025-59489Automated scanner that detects Unity runtime injection vulnerability CVE-2025-59489 in Android APKs by extracting Unity version and checking against…
fcavallarin/domdigDOM XSS scanner for Single Page Applications
bin4ry/unipwnBLE exploit framework for Unitree robots: command injection via hardcoded AES keys enables remote takeover, payload injection, and wormable…
theldus/breadInjectable real-mode x86 debugger for BIOS reverse engineering and arbitrary real-mode code debugging via serial cable, with GDB integration and…
shoucheng3/xwiki__xwiki-commons_cve-2023-31126_14-10-3Java library providing technical commons for XWiki projects, with a focus on vulnerability analysis and static code inspection for security testing.
shoucheng3/jenkinsci__workflow-cps-plugin_cve-2022-25173_2646-v6ed3b5b01ff1Exploit for CVE-2022-25173 targeting Jenkins Pipeline Groovy Plugin's CPS interpreter sandbox bypass, enabling arbitrary code execution within…
oneton429/cve-2016-3627PoC of CVE-2016-3627
arkha-corvus/letsdefend-soc173-follina-0-day-detectedWe are presented with a security alert indicating the detection of the Follina (CVE-2022-30190) vulnerability. A malicious Word document triggered…
mandiant/commando-vmCustomizable Windows-based virtual machine distribution pre-packaged with offensive security tools for penetration testing and red teaming operations.
qduarte-42/rainfallIntroduction to the exploitation of ELF binaries.
synacktiv/synacktiv-rulesPublic repository of Sigma and YARA rules created by Synacktiv
0xdsm/apepeExtracts app settings, permissions, deeplinks, and SSL pinning bypass suggestions from Android APK files via static analysis of AndroidManifest.xml,…
