
Brovan
User-mode x86_64 binary emulator for malware analysis and reverse engineering. Supports PE, ELF, memory dumps, and raw binaries with syscall tracing,…

User-mode x86_64 binary emulator for malware analysis and reverse engineering. Supports PE, ELF, memory dumps, and raw binaries with syscall tracing,…

An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.

A stealthy, fully syscalled C/C++ userland anti-debugging library for Windows, designed to protect software from reverse engineering

Distributed, code-coverage guided snapshot-based fuzzer for user and kernel-mode targets on Windows and Linux, with emulator and hypervisor backends.

Automated hypervisor-level malware analysis sandbox with agentless guest introspection, web-based result exploration, and guided installer for…

Runtime JVM analysis toolkit for inspecting classes, methods, fields, constant pool, and bytecode

Frida-based runtime API monitor for Android apps that logs invoked APIs, parameters, return values, and call origins across predefined or custom…

Incarcero is a tool that creates Virtual Machines (VMs) preconfigured with malware analysis tools and security settings tailored for malware analysis…

The Manticore User Interface with plugins for Binary Ninja and Ghidra

Traces user inputs to detect injection vulnerabilities in Java methods via JDWP and Frida, identifying potential command and SQL injection points.

Virtual Machine Introspection, Tracing & Debugging

Stage two containers

Drltrace is a library calls tracer for Windows and Linux applications.

Ruby In The Middle (HTTP/HTTPS interception proxy)

Modular file scanning/analysis framework