
unblob
Extract files from any kind of container formats

Extract files from any kind of container formats

Penetration testing utility and antivirus assessment tool.

FLARE floss applied to all unpacked+dumped samples in Malpedia, pre-processed for further use.

Reverse engineering Vidar Stealer: From obfuscated memory strings to Chrome process injection, malicious JS execution, and active session hijacking…

Reproduction of a WebAssembly use-after-free vulnerability in Mozilla's JavaScript engine, demonstrating a deterministic race condition and providing…

Low-level hardware debugging and security assessment tool for ASPEED BMC AHB interfaces. Probes PCIe, LPC, and UART interfaces to read/write…

BYOVD: Use 360 WFP driver to block EDR/XDR network connection.

How to use PiDqSerializationWrite. Introduces how to safely read and write from mapped driver

Build and query a graph database representation of source code

Windows tool for dumping malware PE files from memory back to disk for analysis.

Python Command-Line Ghidra Decompiler

Collection of Offensive C# Tooling

Static analyzer for PE executables with plugin-based detection of packers, compilers, suspicious imports, cryptographic constants, and ClamAV…

A small tool I made to dump the export table of PE files. The primary use case was intended for use within DLL proxying.

Detections for CVE-2021-44228 inside of nested binaries

Collection of some easy of use tools - in powershell.

Cosa Nostra, a FOSS graph based malware clusterization toolkit.

Set of scripts to deal with Cisco ASA firmware [pack/unpack etc.]