#1Tools for decompiling, disassembling, and understanding malware internals and complex binaries.
Kitploit recommended
jaime64net/debuggerj-Debugger de aplicaciones x86 y x64 con intgracion de AI
mein-0/knockgigaProof-of-concept local privilege escalation exploiting Gigabyte gdrv3.sys IOCTLs to write the SYSTEM token into a user process via an unchecked…
gmh5225/memtoolsWindows Linux DMA、Dump 、Direct、inject 内存读取、写入工具
gmh5225/mapped-dumperA program written in C++ for remotely dumping manual mapped modules.
gmh5225/memory-relocallocC proof-of-concept that locates code caves in the .reloc section of mapped DLLs to allocate and execute small shellcode, replacing typical memory…
maximilianfeix/hexveroKnow what changed inside your app: inspect Electron apps and binaries, trace findings to file and line, compare releases. Locally, without executing…
yv1ing/secboxConducting cybersecurity testing using the pi agent in a pre-built sandbox environment.
newbe3e/pwn2own-automotive-2026-alpine-ilx-f511-0-click-rce-exploit-writeupThis is a write up of the exploit I developed for the Pwn2Own Automotive 2026 competition.
zentinelproxy/zentinelA security-first reverse proxy built to guard the free web.
sk4r4b/ntdll-reconstructionA technique that mixes NTDLL unhooking and hellsgate gate varients
xv4l3x/hermitInspects, decompiles and structurally patches Hermes bytecode (HBC) from React Native apps, with a GDB-style REPL, CFG, decompiler and re-serializing…
dwexi/entropystripAlgorithmic PE de-obfuscator, Shannon entropy radar, and incident triage engine
aethervm/aethervmLLVM-native binary analysis and emulation platform that lifts AArch64 and x86_64 machine code to LLVM IR for instrumentation, deobfuscation, and…
gmh5225/lithium-kernelWindows kernel-mode driver with user-mode client exposing IOCTL-based physical and virtual memory read/write, page table walking, pattern scanning,…
kaandemir993/overlord-rat-reverse-engineering-a-go-based-rat-injection-keylogging-c2-exfiltration-analysisFull static & memory analysis of Overlord RAT: Go agent architecture, HTTP/2 + WebSocket C2, reflective DLL injection, browser keylogging, and IOCs.…
oscarsantanaarias/ida-ghidra-bridgeTCP JSON bridge servers for IDA Pro and Ghidra exposing decompilation, xrefs, symbols, vtables, RTTI and memory patching to external scripts and…
reverserid/juriga fully autonomous AI agent for reverse engineering
x86rc/vmp-lazy-unpackEmulation-based unpacker and import resolver for Windows x86/x64 VMProtect 3.x binaries, using Unicorn to emulate syscalls and rebuild the IAT…
