oalabs/hashdb-idaHashDB API hash lookup plugin for IDA Pro
pan-unit42/dotnetfilePython library for parsing CLR/PE metadata in .NET assemblies, exposing streams and hash fingerprints to support malware analysis and threat hunting.
justicerage/manalyzeStatic analyzer for PE executables with plugin-based detection of packers, compilers, suspicious imports, cryptographic constants, and ClamAV…
aaron-kidwell/gololgoLoL is a Windows host scanner with dual support for LOLBAS binaries and LOLDrivers. It lists LOLBAS techniques runnable at your current privilege…
decalage2/collisionsHash collisions and their exploitations
abraxas/sqlite-rtree-rowid0SQLite 3.53.4 - High - Local - UAF - rtree last_insert_rowid 0 node hash
n1ght-w0lf/uchihashA small utility to deal with malware embedded hashes.
leon406/toolsfx跨平台密码学工具箱。包含编解码，编码转换，加解密， 哈希，MAC，签名，大数运算，压缩，二维码功能，CTF等功能。
med0x2e/sigflipSigFlip is a tool for patching authenticode signed PE files (exe, dll, sys ..etc) without invalidating or breaking the existing signature.
onhexgroup/tabpeA monthly Windows PE baseline dataset for Cyber security researchers
malwaretech/phasedumpPython tool for decrypting W32/Phase modules
struppigel/portexJava library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness
oalabs/hashdbAssortment of hashing algorithms used in malware
c3rb3ru5d3d53c/binlexA Binary Genetic Traits Lexer Framework
mr-un1k0d3r/windows-signedbinaryMutates signed Windows binaries to retain valid catalog signatures while changing file hashes, bypassing hash-based endpoint blocks and exposing…
struppigel/portexanalyzerguiGraphical interface for PortEx, a Portable Executable and Malware Analysis Library