
Uchihash
A small utility to deal with malware embedded hashes.

A small utility to deal with malware embedded hashes.

Scriptable binary emulation framework integrating IDA Pro/Radare2 with Unicorn engine for automated malware analysis, string decryption, and code…

MARA is a Mobile Application Reverse engineering and Analysis Framework. It is a toolkit that puts together commonly used mobile application reverse…

A lightweight dynamic instrumentation library

A tool to be used in post exploitation phase for blue and red teams to bypass APPLICATIONCONTROL policies

A decompiler-agnostic plugin for interacting with AI in your decompiler. GPT-4, Claude, and local models supported!

Automated ELF binary analysis tool for CTF/PWN challenges. Extracts security mitigations, ROP gadgets, PLT/GOT tables, and decompiles ASM to C using…

iblessing is an iOS security exploiting toolkit, it mainly includes application information gathering, static analysis and dynamic analysis. It can…

A tool that is used to hunt vulnerabilities in x64 WDM drivers

Polymorphic encryptor that transforms shellcode, PE, and COFF files into obfuscated, position-independent payloads with RC4 and random block cipher…

ML-assisted forensic analysis tool that automates memory, disk, and live system triage on Windows using Volatility 3, autorunsc, and sigcheck to…

Binary String Toolkit (BST). Quickly and easily convert binary strings for all your exploit development needs. 😎

SigFlip is a tool for patching authenticode signed PE files (exe, dll, sys ..etc) without invalidating or breaking the existing signature.

IDA Pro plugin for query based searching within the binary useful mainly for vulnerability research.

Detects process injection and memory manipulation used by malware. Finds RWX regions, shellcode patterns, API hooks, thread hijacking, and process…

Quokka: A Fast and Accurate Binary Exporter

libtalloc is a python script for use with GDB that can be used to analyse the "trivial allocator" (talloc)

This experimetal fuzzer is meant to be used for API in-memory fuzzing.