Tools

kvesel/zipbrk

Zip file format fuzzer and multi-tool.

javascript-obfuscator/javascript-obfuscator

Obfuscates JavaScript and Node.js code with variable renaming, string encryption, control flow flattening, and anti-debugging to protect source code…

signalapp/signal-ios

Open-source iOS messenger providing end-to-end encrypted text, voice, and video calls via the Signal Protocol, with no analytics or telemetry…

z3prover/z3

High-performance SMT solver for automated theorem proving, constraint solving, and program verification. Supports multiple theories and language…

pelock/autoit-obfuscator

Obfuscates AutoIt scripts to protect source code from analysis, reverse engineering, and decompilation using advanced obfuscation and polymorphic…

zardus/ctf-tools

Some setup scripts for security research tools.

redcode-labs/coldfire

Golang malware development library

renich/pyrite

Hardware-bound & Cloud-gated binary execution, cryptographic provenance, and anti-tamper envelope sealing for Crystal.

d78ui98/apkdeeplens

Android security insights in full spectrum.

yadyvazifeh1oz92/ecdsa-private-key-recovery

Perform ECDSA and DSA nonce reuse private key recovery attacks to analyze signature vulnerabilities and recover private keys from blockchain…

v-pun215/tourmaline

Reverse engineering notes, deobfuscated source, IOCs, and YARA rules for the Tourmaline ClickFix Python RAT, covering its DNS tunnel and blockchain…

kazu-yamamoto/pgpdump

A PGP packet visualizer

hiddenillusion/nomorexor

Tool to help guess a files 256 byte XOR key by using frequency analysis

cert-polska/malduck

🦆 Malduck is your ducky companion in malware analysis journeys

smalltown123/details-for-cve-2022-46505

MatrixSSL session resume bug

x86byte/sbox

Compile-time AES string obfuscation for C++

colmmacc/cve-2022-3602

Technical deep-dive and anti-POC for CVE-2022-3602, a punycode buffer overflow in OpenSSL 3.0.x, with reproduction scripts, stack analysis, and…

whatthefuzz/openssl-fuzz

Finding CVE-2022-3786 (openssl) with Mayhem