#1Tools for examining malware binaries and code without executing them (e.g., disassemblers, unpackers).
Kitploit recommended
dkhuuthe/madliraMalware detection using learning and information retrieval for Android
quosecgmbh/grapDefine and match user-defined graph patterns against binary control flow graphs using a Capstone-based disassembler, with CLI, Python bindings, and…
maldroid/maldrolyzerSimple framework to extract "actionable" data from Android malware (C&Cs, phone numbers etc.)
volexity/donut-decryptorExtracts and decrypts inner payloads from Donut obfuscator samples by detecting loader shellcode signatures, parsing the DONUT_INSTANCE structure,…
blacknbunny/peanalyzerAdvanced Portable Executable File Analyzer And Disassembler 32 & 64 Bit
idiom/pftriagePython tool and library to help analyze files during malware triage and analysis.
radareorg/r2webAccess radare2 from anywhere, anytime.
avito-tech/deepsecretsStatic analysis tool that scans source code for hardcoded secrets, API keys, and credentials using semantic understanding of code context.
rasetsuu/vmp-devirtTrace-assisted VMProtect devirtualization research platform: version front-ends feed a shared Remill/LLVM backend to lift handlers, recover dataflow,…
0xdsm/apepeExtracts app settings, permissions, deeplinks, and SSL pinning bypass suggestions from Android APK files via static analysis of AndroidManifest.xml,…
ricardoquesada/regenerator2000An interactive disassembler for the CPU 6502, focused on Commodore 8-bit computers. Features a TUI with modern features like x-ref, undo/redo, flow…
cellebrite-labs/ida_kcppAn IDAPython module for enhancing c++ support on top of ida_kernelcache
synacktiv/bipObject-oriented Python API to simplify interaction with IDA for reverse engineering, enabling plugin development and automation of disassembly…
patrickdw123/paranoidfParanoiDF - PDF Analysis Suite based on PeePDF by Jose Miguel Esparza (http://peepdf.eternal-todo.com/). Tools added: Password cracking, redaction…
ultrasina/androidreverseAndroid reverse engineering entirely on-device. Radare2 binary analysis, 8 Java decompilers, Flutter & Unity il2cpp support.
kvesta/vestaA static analysis of vulnerabilities, Docker and Kubernetes cluster configuration detect toolkit based on the real penetration of cloud computing
owasp/owasp-scsOWASP Smart Contract Security (SCS) Project
tindersec/gh-workflow-auditorScript to audit GitHub Action Workflow files for potential vulnerabilities.
