
anticuckoo
A tool to detect and crash Cuckoo Sandbox

A tool to detect and crash Cuckoo Sandbox

A script to detect stack-strings by using emulation (leveraging Unicorn)

An eBPF program to detect attacks on CVE-2022-0847

Zeek plugin to detect and decrypt XOR-encrypted EXEs

Fuzzes CPU implementations by generating test inputs from software proxies, then executes them on real hardware to detect microarchitecture defects…

Karonte is a static analysis tool to detect multi-binary vulnerabilities in embedded firmware

eBPF-based Linux rootkit detector using multi-channel cross-view analysis (sched_switch, NMI, /proc) to detect DKOM, tracepoint tampering, and…

Entropy scanner for Linux to detect packed or encrypted binaries related to malware. Finds malicious files and Linux processes and gives output with…

ML-assisted forensic analysis tool that automates memory, disk, and live system triage on Windows using Volatility 3, autorunsc, and sigcheck to…

A tool that is used to hunt vulnerabilities in x64 WDM drivers

Detection and restoration of Windows Snipping Tool PNG captures vulnerable to CVE-2023-28303

Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).

Binary Ninja plugin to identify obfuscated code and other interesting code constructs

A dynamic unpacking tool

Detection of malicious VHD files for CVE-2025-24985

Anti Virtulization, Anti Debugging, AntiVM, Anti Virtual Machine, Anti Debug, Anti Sandboxie, Anti Sandbox, VM Detect package. Windows ONLY.

Linux Kernel Runtime Integrity with eBPF