#1Tools for decompiling, disassembling, and understanding malware internals and complex binaries.
Kitploit recommended
d0rb/wix-kickstartx-challenge-writeupDetailed write-up of a CTF challenge: reverse engineering a React SPA, parsing SVG images, building an automated solver with greedy matching, and…
supermagnum/gr-qradiolinkGNU Radio out-of-tree (OOT) module for QRadioLink blocks.
raafatabualazm/streambox-cve-2026-28618Redacted notes on CVE-2026-28618 / StreamBox APV lab — heap write into a session object via FRAME height mismatch
pelock/total-commander-ftp-password-recovery-tool-pythonTotal Commander FTP Password Recovery Tool for Python allows you to decrypt the FTP account password information for all Total Commander versions…
pazhanivelmani/av_cve-2020-0162_a10r33Exploit for CVE-2020-0162 targeting a specific vulnerability, implemented in C++ for binary exploitation and security testing.
quasarbinary/cve-2024-43630-pocNtCopyFileChunk stack buffer overflow POC
aliyabuz25/cve-2024-0258Technical analysis, reverse engineering notes, and public documentation for Apple's CVE-2024-0258 (libxpc).
spiralbl0ck/learning-history-of-cff-bug-in-iphoneDive into CFF font and coincidently learn about a bof in cff parsing from some jailbreak. just for fun
valium007/cve-2026-56129Proof-of-concept exploiting the Toshiba qiomem.sys driver to achieve arbitrary physical memory read/write from ring 3, with a companion writeup.
whatswrongandwhy/ptraceLinux ptrace-based process tracing and debugging utility for inspecting system calls, memory, and program execution flow.
gmh5225/ntstracefrida-stalker based system call tracer on windows(x64).
gmh5225/hwid-steamspywareterminatorWork-in-progress library injected into Steam to block the hidden CFillMachineInfoThread that collects HWID, disk, network adapter, and registry…
adem-hosni/mappedimagesdetectorLightweight native Windows memory scanner for AV/EDR platforms, detecting suspicious mapped images and manual DLL injection techniques by IAT thunk
gmh5225/no-access-protection-x86It encrypts the text section and set the protection to NO_ACCESS.
spiralbl0ck/partial-deobfuscated-sc-from-hackingteam-malware.-This repo stores necessary files for the analysis blog which will come soon
faizan-khanx/cve-2024-38063CVE-2024-38063 - Remotely Exploiting The Kernel Via IPv6
spiralbl0ck/sidechannel-cve-2022-38029SIDECHANNEL+CVE-2022-38029
cristhiansm0/txdxcristhian_2023-cve-38831CVE-2023-38831 WinRAR lab: detection with Sysmon/Wazuh, reverse engineering with Ghidra, patch analysis, and remediation.
