0x0allenace/windows-malware-behavioral-analysisBehavioral Malware Analysis of a Simulated Multi-Stage Windows Malware Sample using FLARE-VM and REMnux. Evidence-driven DFIR investigation with IOC…
phanhoangkhang/react2shellIsolated Docker lab and static scanner for CVE-2025-55182, with vulnerable/patched Next.js builds and PoC validation of RSC Flight deserialization.
hydradragonantivirus/hydradragonav-mobileAndroid Antivirus which doesn't require root, adb, ca install and cloud with many features and ways to detect more zero-day malware
hasherezade/mal_unpackRuns packed malware in a controlled environment, waits for self-unpacking, dumps PE files and shellcodes from memory, and terminates the process.
pr0v3rbs/firmaeTowards Large-Scale Emulation of IoT Firmware for Dynamic Analysis
intellabs/kaflA fuzzer for full VM kernel/driver targets
airbus-cert/yara-ttdUse YARA rules on Time Travel Debugging traces
ghapvharmo/gha-lab-7ccf56a2a4GitHub Actions workflow sandbox for CVE-2025-55192 reproduction
nccgroup/ebpfeBPF - extended Berkeley Packet Filter tooling
nccgroup/lazydroidbash script to facilitate some aspects of an Android application assessment
nccgroup/mnemosyneA Generic Windows Memory Scraping Tool
corelight/zeek-xor-exe-pluginZeek plugin to detect and decrypt XOR-encrypted EXEs
patriksimek/vm2Isolated JavaScript sandbox for Node.js that runs untrusted code with restricted access to built-in modules and host resources via Proxy-based…
hackinglz/svg_phishing_toolsSVG Analysis and generation tools for commonly seen SVG attachment phishing
openrce/sulleyA pure-python fully automated and unattended fuzzing framework.
isecpartners/introspy-iosSecurity profiling for blackbox iOS
canyonroad/agentshExecution-Layer Security (ELS) for AI agents — policy-enforced shell with audit.
