#1Tools for examining malware binaries and code without executing them (e.g., disassemblers, unpackers).
Kitploit recommended
ejfkdev/jscdReverse bytenode .jsc (V8 code cache) to JavaScript — static, pure Rust, no patched V8/Node. Node 8→26 / V8 5.8–14.6; 25k .jsc tested, 0 fail.
purs3lab/argusStaged static taint analysis framework for GitHub Actions workflows. Detects code injection vulnerabilities using taint-tracking and an impact…
malgamy/yara_rulesCurated signature-rule collection for detecting and classifying malicious files via pattern matching, with CLI instructions for scanning files and…
jfrog/jfrog-cve-2022-21449Scans compiled Java archives (JAR/WAR) for ECDSA algorithm usage to detect CVE-2022-21449 vulnerability. Recursively examines .class files with…
blacksnufkin/cheshireAdaptix C2 service plugin that drives LitterBox payload analysis from the operator UI.
munshi007/aura-statePython framework for building LLM workflows as state machines with formal verification via Z3 theorem proving, CTL model checking, and conformal…
alipay/ios-malicious-bithunteriOS Malicious Bit Hunter is a malicious plug-in detection engine for iOS applications. It can analyze the head of the macho file of the injected…
gherardofiori/maliciousbrowserextensionsThis Repository is created after my own research into malicious browser extensions, by brining the work of many others and news articles into one…
nautilusbits/retrokitHeadless-Ghidra toolkit for reverse engineering 32-bit DOS and Win32 games (1993-2010): own LE/LX loader, Watcom calling conventions, library…
xoreaxlmbdx/die-in-browserStatic binary analysis with Detect It Easy — 100% in your browser, no uploads.
liamg/extrude:detective: Analyse binaries for missing security features, information disclosure and more...
seifreed/yaraastA powerful Python library and CLI tool for parsing, analyzing, and manipulating YARA rules through Abstract Syntax Tree (AST) representation
sharif-dev/androidkernelvulnerabilityTriggering and Analyzing Android Kernel Vulnerability CVE-2019-2215
svdwi/blueboxOpen-source threat intelligence platform for malware and observable analysis. Enriches IPs, domains, URLs, and hashes with external sources, performs…
dmdhrumilmistry/security-harnessMulti-agent static application-security review harness for AI coding agents: maps codebases, hunts vulnerability classes, chains and verifies…
josue87/wp_hunterStatic analysis of wordpress plugins
fergarrui/custom-bytecode-analyzerJava bytecode analyzer customizable via JSON rules
bronils/aotopsyStatic analyzer for Flutter/Dart AOT snapshots — recovers function names, class hierarchies, call graphs, and behavioral signals from libapp.so…
