team-atlanta/aixcc-afc-atlantisAutomated cyber reasoning system that discovers and analyzes software vulnerabilities through fuzzing, binary analysis, and program reasoning for…
noobpk/frida-ios-hookA tool that helps you easy trace classes, functions, and modify the return values of methods on iOS platform
danigargu/dereferencingIDA Pro plugin that implements more user-friendly register and stack views
voidsec/driverbuddyreloadedDriver Buddy Reloaded is an IDA Pro Python plugin that helps automate some tedious Windows Kernel Drivers reverse engineering tasks
theflink/hunt-sleeping-beaconsCallstack scanner that identifies IOCs of unpacked or injected C2 agents by analyzing thread idle behavior, unbacked memory, module stomping, APCs,…
zeze-zeze/ioctlanceA tool that is used to hunt vulnerabilities in x64 WDM drivers
mandiant/stringsifterA machine learning tool that ranks strings based on their relevance for malware analysis.
mertdas/privkitPrivKit is a simple beacon object file that detects privilege escalation vulnerabilities caused by misconfigurations on Windows OS.
tandasat/minivisorpkgThe research UEFI hypervisor that supports booting an operating system.
smackers/smackModular software verification toolchain that translates LLVM IR into Boogie intermediate verification language for bounded and experimental unbounded…
ergrelet/windiffTool that allows comparing symbol, type and syscall information of Microsoft Windows binaries across different versions of the OS, using a Web UI…
conscioushacker/wfhFrida-based dynamic analysis tool that automatically identifies DLL sideloading and COM hijacking vulnerabilities in Windows executables through…
patois/dsyncIDAPython plugin that synchronizes disassembler and decompiler views
phith0n/zkarGo-based Java serialization protocol analyzer that parses, dumps, and generates deserialization payloads with ysoserial gadget support and a library…
dsecurity/efiseekGhidra plugin that automates UEFI firmware analysis by identifying known GUIDs, protocols, SMI handlers, and interrupt functions, with headless…
xyrem/hyperdeceitHyperDeceit is the ultimate all-in-one library that emulates Hyper-V for Windows, giving you the ability to intercept and manipulate operating system…
ex0dus-0x/fuzzableStatic analysis framework that identifies fuzzable function targets in source code and binaries, generates harness templates, and integrates with…
jeanextreme002/pymemoryeditorA pure-Python library, app and MCP that lets you inspect, modify and search the memory of any running process in a few lines of Python :snake: .
