
Driver-SoulExtraction
SoulExtraction is a windows driver library for extracting cert information in windows drivers

SoulExtraction is a windows driver library for extracting cert information in windows drivers

Tool that can be used to trim useless things from a PE file such as the things a file pumper would add.

Plugin for NOPing instructions in IDA

Automated YARA rule generation from the Cert Central compromised certificate database.

Analysis and PoC exploit for EPS vulnerability CVE-2017-0261, including IDA disassembly, intermediate documents, and original exploit files.

XZ Backdoor Extract(Test on Ubuntu 23.10)

NeuroCore is a native macOS application that visualizes the internal structure of binary files using a Hilbert Curve mapping and Shannon Entropy…

Simple C program to quickly deobfuscate windows executables protected with Arxan.

Static Decryptor for IcedID Malware

Language Model Agent Instructions for Binary Refinery

Universal signature generation for any system function from all Windows Builds using Winbindex

A Zeek ELF File Analyzer

Simple dotnet Native AOT app that uses LibObjectFile to convert shellcode to ELF

Windows kernel driver technique that hides kernel threads by abusing IoCancelIrp and IRP cancel routines, with detection methods for identifying…

ML-based detection of Zombie ZIP archive header evasion attacks (CVE-2026-0866)

Technical Analysis of Bibi-Windows Wiper Targeting Israeli Organizations

IDA python script for deobfuscating Astaroth/Guildma injector DLL

DLL Hijacking in Quickheal Total Security/ Internet Security/ Antivirus Pro (Installers)