#1Tools for decompiling, disassembling, and understanding malware internals and complex binaries.
Kitploit recommended
inartin/365cam-streamLocal streaming tool for cheap WiFi cameras that bypasses cloud services and phone apps. Discovers cameras on your network, authenticates via PPPP…
evm-sec/high-pcodeOutput high level Pcode (PcodeAST) in Ghidra
leochen-coremind/spd_flasherCVE-2022-38694 Hardened Exploit - RP2350 USB Host Auto Flasher for Unisoc devices
canomer/cve-2025-54110-kernel-eop-pocProject Date : Oct 2025 / PoC implementation for CVE-2025-54110 a Kernel-Level Integer Overflow Vulnerability in the Windows `NtQueryDirectoryObject`…
kaandemir993/lumma-stealer-dllhost-hollowing-c2-domains-payload-extraction-analysisIn-depth reverse engineering analysis of Lumma Stealer, an info-stealer using process hollowing, Native API calls, and C2 communication. Includes…
knowlily/cve-2026-43499-honorCVE-2026-43499 (GhostLock) rt_mutex stack-UAF privilege escalation research on Honor BVL-AN16 (Magic6 Pro, SM8650, kernel 6.1.128). Includes analysis…
hui191/cve-2026-43499-aak-an00Honor WIN RT (AAK-AN00) CVE-2026-43499 temporary root - research notes
mr-wolf-is-me/ida-processor-modulesIDA Pro processor modules adding disassembly support for uncommon CPU, DSP, and GPU architectures including XMOS xCORE, TI C7x/PRU, MicroBlaze, and…
bytev0rtex/cve-2026-65330Proof-of-concept for a fixed PAC diversifier bypass in the tmpfs setxattr handler on iOS 26.6, demonstrating reachability of the vulnerable signing…
infobyte/wiremaxLua-based Wireshark postdissector that decrypts and parses Ubiquiti AirMAX/RouterBoard 802.11 vendor IEs into filterable fields.
dwexi/entropystripAlgorithmic PE de-obfuscator, Shannon entropy radar, and incident triage engine
rfxn/cpanel-sessionscribeDetection, mitigation, and reverse-engineering tooling for CVE-2026-41940 (SessionScribe): the cPanel/WHM unauthenticated session-forgery…
flopz-project/flopzPure Python assembler toolkit for creating shellcode, dynamically patching binaries, and instrumenting firmware images for debugging and fuzzing on…
416rehman/razer-lycosa-kernel-lpe-byovd-vulnerability-pocTwo kernel vulnerabilities in Razer Lycosa.sys (CWE-125 memory disclosure + CWE-121 stack overflow) chained to local privilege escalation.…
robertmotr/zirconiumDLL-injectable internal game cheat for Plutonium BO2 zombies
gmh5225/deobf-arxan-deob-cSimple C program to quickly deobfuscate windows executables protected with Arxan.
ea/xfg_analyzerA Binary Ninja plugin that uses bruteforced XFG hashes to recover precise function prototypes
