recomposer
secretsquirrel/recomposerRandomly changes Win32/64 PE Files for 'safer' uploading to malware and sandbox sites.
anti-botbinary-analysisids-ips-evasion+2
13112 years ago
secretsquirrel/recomposerRandomly changes Win32/64 PE Files for 'safer' uploading to malware and sandbox sites.
rin449/bhpaiMulti-format malware analysis platform combining a stealth Ring-3 Windows sandbox, static PE/PDF analyzers, ransomware key recovery, and an AI…
mrexodia/dumpulatorAn easy-to-use library for emulating memory dumps. Useful for malware analysis (config extraction, unpacking) and dynamic analysis in general…
advdebug/brovanUser-mode x86_64 binary emulator for malware analysis and reverse engineering. Supports PE, ELF, memory dumps, and raw binaries with syscall tracing,…
struppigel/hedgehog-toolsCollection of scripts for malware analysis, deobfuscation, and configuration extraction. Supports static analysis, unpacking, shellcode conversion,…
hzqst/unicorn_peEmulates Windows PE execution using Unicorn engine for malware analysis, unpacking packed binaries, and decrypting VMProtect strings and imports.
division-36/z-jailA lightweight, multi-layer Linux sandbox combining namespaces, pivot_root, seccomp-bpf, capability dropping, and an evidence-based verdict engine…
coldzer0/cmulatorCmulator is ( x86 - x64 ) Scriptable Reverse Engineering Sandbox Emulator for shellcode and PE binaries . Based on Unicorn & Zydis Engine &…
mandiant/flare-emuScriptable binary emulation framework integrating IDA Pro/Radare2 with Unicorn engine for automated malware analysis, string decryption, and code…
aflplusplus/libaflAdvanced Fuzzing Library - Slot your Fuzzer together in Rust! Scales across cores and machines. For Windows, Android, MacOS, Linux, no_std, ...
mandiant/speakeasyWindows malware emulation framework that executes binaries, drivers, and shellcode in a modeled runtime, emulating APIs, process/thread behavior,…
0vercl0k/wtfDistributed, code-coverage guided snapshot-based fuzzer for user and kernel-mode targets on Windows and Linux, with emulator and hypervisor backends.
withsecurelabs/python-exe-unpackerA helper script for unpacking and decompiling EXEs compiled from python code.
ergrelet/unlicenseDynamic unpacker and import fixer for Themida/WinLicense 2.x and 3.x.
qmonnet/rbpfRust virtual machine and JIT compiler for eBPF programs
bishopfox/bfinjectDylib injection for iOS 11.0 - 11.1.2 with LiberiOS and Electra jailbreaks
b2r2-org/b2r2B2R2 is a fully managed binary analysis framework written in F#. It provides a rich set of algorithms, functions, and tools for reverse engineering,…
trailofbits/maatDynamic symbolic execution and binary analysis framework with taint analysis, constraint solving, multi-arch emulation via Ghidra's Sleigh, and…