#1Tools for examining malware binaries and code without executing them (e.g., disassemblers, unpackers).
Kitploit recommended
alexmyg/andropytoolA framework for automated extraction of static and dynamic features from Android applications
pandare9x/configuration_extractorsConfiguration Extractors for Malware
mynameismeerkat/pyreticpyREtic is an extensible framework for in-memory Python 2.x bytecode reverse engineering
owasp/secure-agent-playbookOWASP Secure Agent Playbook Project
mandatoryprogrammer/tarnishA Chrome extension static analysis tool to help aide in security reviews.
ernw/androticklerPenetration testing and auditing toolkit for Android apps.
trailofbits/cobraCoefficient-Based Reconstruction of Arithmetic — a Mixed Boolean-Arithmetic (MBA) expression simplifier for deobfuscation
ubfx/bindiffhelperGhidra Extension to integrate BinDiff for function matching
joxeankoret/cosa-nostraCosa Nostra, a FOSS graph based malware clusterization toolkit.
sourcecode-ai/auraPython source code auditing and static analysis on a large scale
splunk/shellsweepShellSweeping the evil.
4w4k3/repy2exeA Reverse Engineering Tool for py2exe applications.
trailofbits/testing-handbookTrail of Bits Testing Handbook - appsec.guide
dmaivel/covirtAn x86-64 code virtualizer for VM based obfuscation
cellebrite-labs/ida_kernelcacheAn IDA Toolkit for analyzing iOS kernelcaches.
rovellipaolo/ninjadroidNinja Reverse Engineering on Android APK packages
praetorian-inc/trajanA multi-platform CI/CD vulnerability detection and attack automation tool for identifying security weaknesses in pipeline configurations.
shinthink/blitzstrikeMCP server packaging a three-tier penetration-testing methodology: attack-surface reconnaissance, source-to-sink static analysis, and live finding…
