#1Tools for examining malware binaries and code without executing them (e.g., disassemblers, unpackers).
Kitploit recommended
whatishope/bidoImage-based Android malware detection framework tackling obfuscation and concept drift. Includes curated datasets and Python code for training…
nccgroup/formal_np1secFormalizing np1sec using Tamarin and other FM (see https://github.com/equalitie/np1sec)
legit-labs/gh-legitifyGitHub CLI extension for running "legitify"
iqsec-lab/freemocaMemory-free continual learning framework for malware classification using mode connectivity-based interpolation. Supports class-incremental and…
themalwareguardian/cve-2025-70330Easy Grade Pro 4.1 file parsing bug used as an educational example to show how beginners can start vulnerability research through reverse engineering.
mouadk/cve-2024-38821cve-2024-38821
sexyshoelessgodofwar/cve-2025-47256Stack overflow in LibXMP
dn9uy3n/check-cve-2021-23383Check the conditions for exploiting CVE-2021-23383 through the handlebars library version assessment.
shivang0/guardmodelGitHub Action that scans ML model files for malicious code and security vulnerabilities
embee-research/asyncrat-venom-dcrat-config-extractorConfig Extractor for Asyncrat/Dcrat/VenomRat
kkaanozturk/hyperos-directory-traversal-analysisXiaomi HyperOS AVCodec Medya Framework'ündeki Use-After-Free (CVE-2025-21082) Zafiyetinin Derinlemesine Analizi, Rust Simülasyonu ve İnteraktif Web…
vesjolyjd/kaspersky_cve-2024-3094Security review of CVE-2024-3094 (XZ Utils backdoor) including threat modeling, static/dynamic code analysis, fuzzing with AFL++, and a…
fkshield/cve-2025-5548End-to-end exploitation lab for CVE-2025-5548 (FreeFloat FTP Server stack buffer overflow). Includes static analysis with IDA/Ghidra, binary fuzzing,…
seqra/cve-2026-58138Reproduction kit for CVE-2026-58138, an unauthenticated RCE in Conductor. Includes OpenTaint static analysis rules, isolated tests, SARIF results,…
oscerd/cve-2026-40048Reproducer for CVE-2026-40048: Apache Camel camel-pqc FileBasedKeyLifecycleManager unsafe deserialization (RCE)
gmh5225/ida-sdkOfficial IDA Pro SDK headers and libraries for building plugins that disassemble, decompile, and analyze binaries within the IDA reverse engineering…
idanshechter/cve-2017-13208-scannerPython script using r2pipe to detect CVE-2017-13208 in Android libnetutils.so by checking for missing dhcp_size validation via static binary analysis.
filipsedivy/cve-2020-15227Python-based checker for CVE-2020-15227 that tests Nette applications for remote code execution vulnerabilities via file_put_contents and shell_exec…
