#1Tools for dissecting, understanding, and reverse engineering malicious software behavior.
Kitploit recommended
reveng007/amsi-patches-learned-till-nowI have documented all of the AMSI patches that I learned till now
lawndoc/mediatorAn extensible, end-to-end encrypted reverse shell that works across networks without port forwarding.
kube-tarian/tarianeBPF-based runtime security agent for Kubernetes that detects unknown processes and file changes, enforces pre-registered constraints, and automates…
googleprojectzero/maccconcToolkit for exploring Linux kernel race conditions using KCOV traces: GUI and terminal viewers for concurrent execution and memory access, plus…
redcanaryco/ebpfmonTerminal UI for real-time monitoring and inspection of eBPF programs and maps using bpftool, enabling live debugging and analysis of kernel-level…
sqlsure/sqlsureSemantic inspector for SQL — catches fan-out double-counting, additivity violations, wrong join keys, and policy breaches before the query runs.…
zydak/leetobfuscatorObfuscates C/C++ through LLVM passes: string encryption, control-flow flattening, MBA rewriting, and anti-analysis to defeat reverse engineering.
jaredcatkinson/malwaremorphologyHands-on security workshop on malware morphology, covering structural analysis techniques, classification concepts, and practical exercises from…
schich/lucky-sparkA stealthy stager designed for shellcode payloads staged with http/https like Sliver, or on github raw.
jp/hermes-proxyHermes Proxy - HTTP Traffic Analyzer
maldev-academy/drmbinviaordinalimportsCreate Anti-Copy DRM Malware
knight0x07/onenoteanalyzerA C# based tool for analysing malicious OneNote documents
martyx00/collareMulti-tool reverse engineering collaboration solution.
infobyte/cve-2023-21036Detection and sanitization for Acropalypse Now - CVE-2023-21036
theshinigami/mafridaA Magisk module that simplifies running the Frida server on Android, with easy management commands to download specific versions, enable or disable…
trailofbits/slither-mcpMCP server for Slither static analysis of Solidity smart contracts
bogdanticu88/threatmapIaC threat modeler with STRIDE, MITRE ATT&CK, and PASTA frameworks. REST API, GraphQL, and Docker support for Terraform, CloudFormation, and…
