tiny_tracer
hasherezade/tiny_tracerIntel Pin-based tracer for API calls, syscalls, and instructions with anti-debug evasion, used for malware analysis and reverse engineering of packed…
api-securitybinary-analysisdynamic-analysis-sandboxing+2
1.7k
hasherezade/tiny_tracerIntel Pin-based tracer for API calls, syscalls, and instructions with anti-debug evasion, used for malware analysis and reverse engineering of packed…
payloadsecurity/sandbox_scryerParses public sandbox detonation reports to produce threat hunting intelligence, organizes findings via MITRE ATT&CK, assembles IOCs, and generates…
ossillate-inc/packjStatic and dynamic analysis tool that audits open-source packages for malicious, vulnerable, and risky attributes, with sandboxed installation to…
withsecurelabs/amsidetectionProof-of-concept tool for detecting AMSI (Antimalware Scan Interface) bypasses and malicious in-memory script activity on Windows endpoints.
helixo32/crimsonedrSimulate the behavior of AV/EDR for malware development training.
0x742/noiaWeb-based tool for browsing mobile application sandboxes, previewing SQLite databases and binary files, and downloading app data via Frida…
0xsp-srd/aetherWindows memory-forensics and threat hunting tool that scans live process memory for malicious patterns, injection techniques, and reflectively loaded…
brandon7cc/mac-monitorAdvanced macOS system monitor leveraging Apple Endpoint Security to collect, enrich, and display process, file, memory, and XPC events for malware…
guardicore/ipcdumpBPF-based Linux IPC tracer for pipes, signals, Unix sockets, loopback, and pseudoterminals with metadata and content capture, filtering, and JSON…
hackinglz/maps_scannerMAPS cloud scanner and response parser for Microsoft Defender research.
charles2gan/gda-android-reversing-toolthe fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which…
redcanaryco/ebpfmonTerminal UI for real-time monitoring and inspection of eBPF programs and maps using bpftool, enabling live debugging and analysis of kernel-level…
saadahla/anti-sandboxC++ tool for detecting AnyRun sandbox environments, enabling malware to evade dynamic analysis and automated sandboxing systems.
renukaselvar/expat_cve-2024-28757C library for stream-oriented XML parsing with handler registration, supporting UTF-8/UTF-16 encoding, and autoconf-based build system. Includes…
claudiugeorgiu/obfuscapkAn automatic obfuscation tool for Android apps that works in a black-box fashion, supports advanced obfuscation features and has a modular…
0xgalz/virtuailorIDAPython tool for creating automatic C++ virtual tables in IDA Pro
nowsecure/fsmonFilesystem monitor tool for Linux/Android iOS/macOS
k2/ehtraceATrace is a tool for tracing execution of binaries on Windows.