#1Tools for decompiling, disassembling, and understanding malware internals and complex binaries.
Kitploit recommended

Magisk module that auto-packages renef_server (dynamic instrumentation for Android)
A disassembler & experimental decompiler for TLOU2 DC Scripts.

This tool calculates tricky canonical huffman histogram for CVE-2023-4863.

CVE-2026-36425 OPSWAT AppRemover (ardrv.sys) improper access control advisory

SnatchBox (CVE-2020-27935) is a sandbox escape vulnerability and exploit affecting macOS up to version 10.15.x

Independent IoT security research, vulnerability disclosures, and PoCs focusing on firmware analysis, hardware interfaces, and cryptographic flaws.

General malware analysis stuff

Open-source Android Auto phone-side implementation with protocol reverse engineering, TLS mutual authentication, H.264 video projection, touch input…

AST-based Python code transformation & deobfuscation framework

A plugin that provides resources for beginners to learn reverse engineering using Binary Ninja. It automatically installs several other plugins, and…

Proof-of-concept exploit for the MSMQ QueueJumper RCE, crafting malformed packets to trigger unauthenticated remote code execution via the Message…

Imphash-like calculation on Golang binaries

Hive v5 file decryption algorithm

Mobile Helper Framework (mhf) is a tool that automates the process of identifying the framework/technology used to create a mobile application.…

Enable Microsoft PDB support in Ghidra without installing Visual Studio

Intel Management Engine JTAG Proof of Concept - 2022 Instructions

Proof-of-concept exploiting AMD AmdTools64.sys MSR read/write IOCTLs to overwrite IA32_LSTAR, bypass SMEP and escalate from administrator to SYSTEM…