
sandfly-entropyscan
Entropy scanner for Linux to detect packed or encrypted binaries related to malware. Finds malicious files and Linux processes and gives output with…

Entropy scanner for Linux to detect packed or encrypted binaries related to malware. Finds malicious files and Linux processes and gives output with…

Program for determining types of files for Windows, Linux and MacOS.

Post-exploitation and evasion research toolkit for Linux.

User-mode x86_64 binary emulator for malware analysis and reverse engineering. Supports PE, ELF, memory dumps, and raw binaries with syscall tracing,…

Tools for Linux kernel debugging on Bochs (including symbols, native Bochs debugger and IDA PRO)

Intel Pin-based tracer for API calls, syscalls, and instructions with anti-debug evasion, used for malware analysis and reverse engineering of packed…

DR.CHECKER : A Soundy Vulnerability Detection Tool for Linux Kernel Drivers

Pure Rust x86 hardware emulator and Windows process simulator for malware analysis, shellcode emulation, and payload unpacking. Supports 32/64-bit PE…

AI-powered reverse-engineering of Rosetta (2 for Linux). Disclaimer: due to the user agreement, I will not touch the code. All is done by AI, so…

A Runtime Crypter in C for Linux ELF binaries.

Kernel hardware debugger module for dumping rootkit operations and inspecting kernel-level activity for malware analysis and reverse engineering.

A modern syscall tracer built on eBPF. Think strace, but with a real TUI, smart filters, TLS decryption, and output that's actually readable.

ComfyEngine is a memory exploration toolkit built for people who need to monitor, patch, and script a running process.

PETriage: A symbol-unified PE file reader for triage, built for multi-platform and multi-interface use.

Reverse-engineering toolkit: disassembler, SSA decompiler, C++ class recovery and live-process analysis for PE and ELF. Scriptable CLI, every answer…

Linux kernel 4.1.15 source code with a focus on CVE-2022-45934, providing a reference for vulnerability analysis and exploitation research.


convert ELF/DWARF symbol and type information into vol3's intermediate JSON