#1Tools for dissecting, understanding, and reverse engineering malicious software behavior.
Kitploit recommended
mfmokbel/crawlectorCrawlector is a threat hunting framework designed for scanning websites for malicious objects.
0xroam/loadreloadShellcode Loader for Master Thesis
mainframed/dc30_workshopDEFCON 30 Mainframe buffer overlow workshop container
bmaia/binwallyBinary and Directory tree comparison tool using Fuzzy Hashing
malpedia/malpedia-flossedFLARE floss applied to all unpacked+dumped samples in Malpedia, pre-processed for further use.
x86byte/sboxCompile-time AES string obfuscation for C++
polaris64/web_exploit_detectorThe Web Exploit Detector is a Node.js application used to detect possible infections, malicious code and suspicious files in web hosting environments
epsilon537/boxlambdaFPGA based microcomputer sandbox for software and RTL experimentation
dmdhrumilmistry/security-harnessMulti-agent static application-security review harness for AI coding agents: maps codebases, hunts vulnerability classes, chains and verifies…
lunixbochs/revsyncrealtime cross-tool collaborative reverse engineering
mayhamad/memtracerLive memory analysis tool for detecting reflectively loaded .NET DLLs by scanning process memory regions for abnormal flags, page types, and PE…
jas502n/finalshelldecodepassFinalShellDecodePass 加密解密
cdong1012/idapython-malware-scriptsScripts for automating malware analysis and reverse engineering workflows in IDA Pro, covering binary inspection, static analysis, and code…
intelbroker/endurance-wipera small wiper malware programmed in c#
dr4k0nia/xorstringsnetEasy XOR string encryption for NET based binaries
buter-chkalova/project-rvbbitEducational Linux kernel rootkit PoC exploring DKOM, syscall hooking, stealth, observability and defensive detection
coffeeandsecurity/dakshscraFramework-aware static code analysis tool for automated source code review with platform-specific rules, taint analysis, effort estimation, and…
synacktiv/samsung-q60t-exploitExploit suite targeting Tizen-based Samsung Q60T TV, including v8 and kernel exploits, firmware decryption, and root shell access via payload…
