
miniDumpReader
Parses Windows MiniDump (MDMP) files with Kaitai Struct, extracting memory strings and scanning them against YARA rules for forensic and malware…

Parses Windows MiniDump (MDMP) files with Kaitai Struct, extracting memory strings and scanning them against YARA rules for forensic and malware…

GUI analyzer for deep-diving into PDF files. Detect malicious payloads, understand object relationships, and extract key information for threat…


Python library for parsing CLR/PE metadata in .NET assemblies, exposing streams and hash fingerprints to support malware analysis and threat hunting.

machofile is a module to parse Mach-O binary files


Experimental Windows .text section Patch Detector

Library to access the Windows Shell Item format

Binary and Directory tree comparison tool using Fuzzy Hashing

Tool to help guess a files 256 byte XOR key by using frequency analysis

Scan for files containing the signature from the `xz` backdoor (CVE-2024-3094)

Script to extract malicious payload and decoy document from CVE-2015-1641 exploit documents

C-based library for parsing, editing, and saving EXIF metadata from JPEG images, with a focus on exploiting CVE-2016-6328 for Android 10.

macOS IPC, launchd, Mach-O, and trust relationship explorer — zero-dependency terminal-native forensic tool

An extensible, deterministic static‑analysis engine that extracts high‑signal IOCs from PE binaries and text, built for SOC automation and modern…

Portable Executable reversing tool with a friendly GUI

Static-first research tool for unpacking Nuitka-compiled binaries: extracts constants, modules, recovers .pyc files, and generates analysis reports.

Headless AI agent for deterministic reverse engineering.