Reverse Engineering

20urc3/sekiryu

Comprehensive toolkit for Ghidra headless.

memn0ps/matrix-rs

Rusty Hypervisor - Windows Kernel Blue Pill Type-2 Hypervisor in Rust (Codename: Matrix)

coldzer0/cmulator

Cmulator is ( x86 - x64 ) Scriptable Reverse Engineering Sandbox Emulator for shellcode and PE binaries . Based on Unicorn & Zydis Engine &…

0vercl0k/cve-2022-21971

PoC for CVE-2022-21971 "Windows Runtime Remote Code Execution Vulnerability"

chrispetrou/hrshell

HRShell is an HTTPS/HTTP reverse shell built with flask. It is an advanced C2 server with many features & capabilities.

beardypig/ghidra-emotionengine

Ghidra Processor for the Play Station 2's Emotion Engine MIPS based CPU

sentinel-one/peafl64

Static Binary Instrumentation tool for Windows x64 executables

ospg/binwalk

Firmware Analysis Tool

mandiant/flare-qdb

Command-line and Python debugger for instrumenting and modifying native software behavior on Windows and Linux.

eybisi/kavanoz

Statically unpacking common android banker malware.

xchwarze/ar150-wifipineapple

Converting your AR150 to a Wifi Pineapple NANO

mandiant/flashmingo

Automatic analysis of SWF files based on some heuristics. Extensible via plugins.

openl2d/moc3ingbird

MOC3ingbird Exploit for Live2D (CVE-2023-27566)

mrakovic-org/nashavm

Nasha is a Virtual Machine for .NET files and its runtime was made in C++/CLI

hugsy/recon_2024_windbg_workshop

Workshop materials for mastering WinDbg debugging in kernel and user mode, with KdNet setup, demos, and a Time Travel Debugging challenge for binary…

cmatthewbrooks/r2kit

A set of scripts for a radare-based malware code analysis workflow

0vercl0k/cve-2022-21974

PoC for CVE-2022-21974 "Roaming Security Rights Management Services Remote Code Execution Vulnerability"