#1Tools for examining malware binaries and code without executing them (e.g., disassemblers, unpackers).
Kitploit recommended
cellebrite-labs/pplorerIDA plugin that resolves PPL calls to the actual underlying PPL function.
splintersfury/autopiffSemantic analysis engine for detecting vulnerability fixes in Windows kernel driver patches — 58 YAML rules, Ghidra decompilation, reachability…
darkarnium/log4j-cve-detectDetections for CVE-2021-44228 inside of nested binaries
n7on/dllspyDiscover input surfaces and security issues in compiled .NET assemblies — without running them.
zypherion-technologies/unconfuserexA ConfuserEx2 deobfuscator with support for anti tamper, compressor, constants, control flow, and resource recovery.
nccgroup/ghidra-nanomipsnanoMIPS module for Ghidra
ga1ois/blackhat-europe-2022Select Bugs From Binary Where Pattern Like CVE-1337-Days
emicoecommerce/magento-apsb22-48-security-patchesThis repository contains potential security patches for the Magento APSB22-48 and CVE-2022-35698 security vulnerability
hackinglz/svg_phishing_toolsSVG Analysis and generation tools for commonly seen SVG attachment phishing
milankovo/yaravmThis repository contains an IDA processor for loading and disassembling compiled yara rules.
dr4k0nia/tooling-playgroundA collection of small scripts and tools for deobfuscation and malware analysis.
mucoze/umayIoT Malware Similarity Analysis Platform
rakosn1cek/oversightA lightweight security auditor and sandbox for shell scripts. Oversight combines a Static Analysis engine (Rust) with Dynamic Enforcement (Linux…
iilegacyyii/exportdumperA small tool I made to dump the export table of PE files. The primary use case was intended for use within DLL proxying.
raoufmaklouf/jsecretFast Go-based static scanner for detecting sensitive data (API keys, tokens, passwords) in JavaScript files and source code using regex patterns.
akatorich/kernelflirtWindows kernel-level debugger with OllyDbg/IDA-style UI, software and hardware breakpoints, PDB symbols, decompiler, and 17 plugins for reverse…
blacksnufkin/checkplzScan files for potential threats while leveraging AMSI (Antimalware Scan Interface) and Windows Defender. By isolating malicious content.
reverserid/juriga fully autonomous AI agent for reverse engineering
