Tools

0x0allenace/windows-malware-behavioral-analysis

Behavioral Malware Analysis of a Simulated Multi-Stage Windows Malware Sample using FLARE-VM and REMnux. Evidence-driven DFIR investigation with IOC…

phanhoangkhang/react2shell

Isolated Docker lab and static scanner for CVE-2025-55182, with vulnerable/patched Next.js builds and PoC validation of RSC Flight deserialization.

hydradragonantivirus/hydradragonav-mobile

Android Antivirus which doesn't require root, adb, ca install and cloud with many features and ways to detect more zero-day malware

xoreaxeaxeax/schrodingers-toctou

Detect compiler-invented memory loads that turn secure C into TOCTOU vulnerabilities. Includes automated source audits, Unicorn-based binary…

gsadagopan/cve-2026-22747-sandbox

Sandboxed reproduction environment for CVE-2026-22747, enabling controlled testing and analysis of the vulnerability and potential exploits in an…

ergrelet/unlicense

Dynamic unpacker and import fixer for Themida/WinLicense 2.x and 3.x.

seal9055/sfuzz

High performance fuzzing using riscv to x86 binary translations and modern fuzzing techniques

hasherezade/mal_unpack

Runs packed malware in a controlled environment, waits for self-unpacking, dumps PE files and shellcodes from memory, and terminates the process.

cy-clon3/awesome-ios-security

A curated list of awesome iOS application security resources.

atlas0fd00m/vivisection

Vivisect plugin enabling function emulation, function recon, and interactive Python CLI for emulation-driven reverse engineering and vulnerability…

sinakarvandi/hypervisor-from-scratch

Source code of a multiple series of tutorials about the hypervisor. Available at: https://rayanfam.com/tutorials

slyd0g/dylibhijacktest

Discover DYLD_INSERT_LIBRARIES hijacks on macOS

fuzzysecurity/fermion

Fermion, an electron wrapper for Frida & Monaco.

quarkslab/rewind

Snapshot-based coverage-guided windows kernel fuzzer

impalabs/hyperpom

AArch64 fuzzer based on the Apple Silicon hypervisor