
efiSeek
Ghidra plugin that automates UEFI firmware analysis by identifying known GUIDs, protocols, SMI handlers, and interrupt functions, with headless…

Ghidra plugin that automates UEFI firmware analysis by identifying known GUIDs, protocols, SMI handlers, and interrupt functions, with headless…

an iOS kernel function hooking framework for checkra1n'able devices

pefile is a Python module to read and work with PE (Portable Executable) files

Simple Anti-cheat library for applications that use C++ on windows. #PastedProtection

Ghidra module for disassembling, decompiling, and analyzing Ethereum smart contract bytecode. Detects insecure instructions, extracts hidden methods,…

Automated scanner for discovering DLL search order hijacking candidates in Windows executables, featuring import table parsing, runtime module…

This module fixes an issue in the kernels filesystem layer (CVE-2021-33909) by kprobe-replacing vulnerable functions during runtime

A PowerShell Module Dedicated to Reverse Engineering

Python module for viewing Portable Executable (PE) files in a tree-view using pefile and PyQt5. Can also be used with IDA Pro and Rekall to dump…

Security Analysis tool for WebAssembly module (wasm) and Blockchain Smart Contracts (BTC/ETH/NEO/EOS)

Parse BIOS/Intel ME/UEFI firmware related structures: Volumes, FileSystems, Files, etc

Callstack scanner that identifies IOCs of unpacked or injected C2 agents by analyzing thread idle behavior, unbacked memory, module stomping, APCs,…

An IDAPython module for enhancing c++ support on top of ida_kernelcache

In-memory stealth detection tool that identifies process hollowing, module stomping, unbacked executable regions, and anomalous CONTEXT structures…

PowerShell module for automatic detection of P/Invoke, Dynamic P/Invoke, and D/Invoke in .NET assemblies. Reveals unmanaged API calls, MDTokens, and…

Adaptix C2 agent using Crystal Palace PIC linker and PICO module system

Ghidra processor description module for NEC/Renesas v810 and v830 families

Magisk module that auto-packages renef_server (dynamic instrumentation for Android)