
Detect-It-Easy
Program for determining types of files for Windows, Linux and MacOS.

Program for determining types of files for Windows, Linux and MacOS.


Collection of forensic tools

A collection of my Semgrep rules to facilitate vulnerability research.

Some setup scripts for security research tools.

An extensible, deterministic static‑analysis engine that extracts high‑signal IOCs from PE binaries and text, built for SOC automation and modern…

Composable command-line toolkit for malware triage and binary analysis: decode, decrypt, carve, and extract indicators from malicious files and…

Curated Ghidra scripts to automate reverse engineering and vulnerability analysis: locate insecure functions, extract decompiler pseudocode, fix…

A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on…

Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).

Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness

Reverse engineering the new Datadome VM 🔥

Visually inspect and force decode YARA and regex matches found in both binary and text data with colors. Lots of colors.

Callstack scanner that identifies IOCs of unpacked or injected C2 agents by analyzing thread idle behavior, unbacked memory, module stomping, APCs,…

PrivKit is a simple beacon object file that detects privilege escalation vulnerabilities caused by misconfigurations on Windows OS.

NeuroCore is a native macOS application that visualizes the internal structure of binary files using a Hilbert Curve mapping and Shannon Entropy…

Unpack and deobfuscate VMProtect 2 protected binaries with an emulation-based VM explorer, handler profiler, and experimental LLVM recompiler for…

Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking,…