polllogamer/sha-256-backdoor-discovery-engineDetects potential backdoors in SHA-256 hashes using cryptographic analysis and pattern recognition. Designed for malware analysis and security…
lcbower33/stegoscanAutomated steganography detection tool that scans websites, web servers, and local directories using AI-driven object/text recognition and deep file…
xkiian/datadome-vmReverse engineering the new Datadome VM 🔥
aflplusplus/aflplusplusAFL++ is a state-of-the-art fuzzer, and #1 in benchmarks. It was originally based on AFL. Today it comes with qemu 5.1, collision-free coverage,…
mandiant/capaRule-based static and dynamic analysis tool that identifies capabilities in PE, ELF, .NET, and shellcode files, mapping them to MITRE ATT&CK…
aflplusplus/libaflAdvanced Fuzzing Library - Slot your Fuzzer together in Rust! Scales across cores and machines. For Windows, Android, MacOS, Linux, no_std, ...
mandiant/speakeasyWindows malware emulation framework that executes binaries, drivers, and shellcode in a modeled runtime, emulating APIs, process/thread behavior,…
christhecoolhut/firmware_slapDiscovering vulnerabilities in firmware through concolic analysis and function clustering.
b2r2-org/b2r2B2R2 is a fully managed binary analysis framework written in F#. It provides a rich set of algorithms, functions, and tools for reverse engineering,…
zeze-zeze/ioctlanceA tool that is used to hunt vulnerabilities in x64 WDM drivers
mrexodia/dumpulatorAn easy-to-use library for emulating memory dumps. Useful for malware analysis (config extraction, unpacking) and dynamic analysis in general…
conscioushacker/wfhFrida-based dynamic analysis tool that automatically identifies DLL sideloading and COM hijacking vulnerabilities in Windows executables through…
strongcourage/uafuzzBinary-level directed fuzzer specialized in detecting Use-After-Free vulnerabilities via ordering-aware input metrics and static analysis, enabling…
concollmic/concollmicLLM-agent-powered concolic execution engine that instruments source code, summarizes path constraints in natural language, and generates test cases…
cert-polska/malduck🦆 Malduck is your ducky companion in malware analysis journeys
ioactive/melkor_elf_fuzzerMelkor is a very intuitive and easy-to-use ELF file format fuzzer to find functional and security bugs in ELF parsers.
boratanrikulu/gobeeWrite your BPF programs in Go, not C. gobee transpiles a Go subset to BPF C and generates typed cilium/ebpf bindings.
onekey-sec/firmware-workshopIn this workshop session, we will extract firmware from an EV charger, dig into the firmware, and eventually emulate it so we can interact with the…
