
CobaltStrikeParser
Python parser for extracting CobaltStrike Beacon configurations from PE files, memory dumps, and C2 URLs using heuristic XOR decryption and…

Python parser for extracting CobaltStrike Beacon configurations from PE files, memory dumps, and C2 URLs using heuristic XOR decryption and…

A library for creating, reading and editing PE files and .NET modules.


XMachOViewer is a Mach-O viewer for Windows, Linux and MacOS

Xori is an automation-ready disassembly and static analysis library for PE32, 32+ and shellcode

Radare2 AI plugin using local or remote LLMs for decompilation, function explanation, vulnerability detection, renaming, and scripted reverse…

Red Team C code repo

A machine learning tool that ranks strings based on their relevance for malware analysis.

Binary Ninja plugin to identify obfuscated code and other interesting code constructs

PE-bear (builds only)

PE loader with various shellcode injection techniques

Decompiles serialized V8 bytecode (JSC files) into high-level readable JavaScript-like code, with support for multiple V8 versions, tree output, and…

metame is a metamorphic code engine for arbitrary executables

IFL - Interactive Functions List (plugin for IDA Pro)

An open source script to perform malware static analysis on Portable Executable

Excel Macro Document Reader/Writer for Red Teamers & Analysts

Post-exploitation and evasion research toolkit for Linux.

IATelligence is a Python script that will extract the IAT of a PE file and request GPT to get more information about the API and the ATT&CK matrix…