


Cybersecurity oriented awesome list

Native Delphi implementation of PE-sieve functionality with a reusable library, CLI, and PE-sieve-compatible DLL for HollowsHunter integration.

IDA Pro processor modules adding disassembly support for uncommon CPU, DSP, and GPU architectures including XMOS xCORE, TI C7x/PRU, MicroBlaze, and…

Some setup scripts for security research tools.

Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness

A collection of my Frida instrumentation scripts to reverse engineer mobile apps and more.

Curated Ghidra scripts to automate reverse engineering and vulnerability analysis: locate insecure functions, extract decompiler pseudocode, fix…

A collection of my Semgrep rules to facilitate vulnerability research.

Toolkit for decoding, inspecting, and modifying UEFI firmware volumes and variable stores. Supports secure boot certificate enrollment, PE binary…

A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on…

Windows tool for dumping malware PE files from memory back to disk for analysis.

Curated collection of LLVM security resources covering binary lifting, code obfuscation, static analysis, symbolic execution, sanitizers, and…

An extensible, deterministic static‑analysis engine that extracts high‑signal IOCs from PE binaries and text, built for SOC automation and modern…

Collection of forensic tools

Collection of scripts for malware analysis, deobfuscation, and configuration extraction. Supports static analysis, unpacking, shellcode conversion,…

Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).

Reverse engineering the new Datadome VM 🔥