DECAF
decaf-project/decafDECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope…
android-securitybinary-analysisdynamic-analysis-sandboxing+2
decaf-project/decafDECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope…
secrary/makinmakin - reveal anti-debugging and anti-VM tricks [This project is not maintained anymore]
onekey-sec/firmware-workshopIn this workshop session, we will extract firmware from an EV charger, dig into the firmware, and eventually emulate it so we can interact with the…
gherardofiori/maliciousbrowserextensionsThis Repository is created after my own research into malicious browser extensions, by brining the work of many others and news articles into one…
koadt/poc-cve-2025-55182This repository contains a POC of CVE-2025-55182, a critical (CVSS score 10.0) pre-authentication remote code execution vulnerability affecting React…
d0c-s4vage/resmack-fuzz-testThis is an experimental project for [resmack](https://gitlab.com/d0c-s4vage/resmack) to figure out the best methods for instrumenting target…
yezzfusl/cve_2023_38831_scannerThis Python application scans for the CVE-2023-38831 vulnerability in WinRAR.
crowdstrike/crowdfmsCrowdStrike Feed Management System. CrowdFMS is a framework for automating collection and processing of samples from VirusTotal, by leveraging the…
androidhooker/hookerHooker is an opensource project for dynamic analyses of Android applications. This project provides various tools and applications that can be use to…
certcc/certfuzzThis project contains the source code for the CERT Basic Fuzzing Framework (BFF) and the CERT Failure Observation Engine (FOE).
andreafioraldi/frida-fuzzerThis experimetal fuzzer is meant to be used for API in-memory fuzzing.
nationalsecurityagency/ghidraGhidra is a software reverse engineering (SRE) framework
kata-containers/kata-containersKata Containers is an open source project and community working to build a standard implementation of lightweight Virtual Machines (VMs) that feel…
anthropic-experimental/sandbox-runtimeA lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container.
strace/straceLinux syscall tracer using ptrace to monitor, debug, and analyze system calls, signal deliveries, and process state changes for diagnostics and…
impact-i/reflutterPatches Flutter engine libraries to enable runtime reverse engineering, traffic interception, and SSL pinning bypass for Android and iOS apps without…
bethington/ghidra-mcpMCP server bridging Ghidra's reverse engineering with AI tools: 256 tools for decompilation, P-code emulation, live debugging, data flow analysis,…
portswigger/http-request-smugglerBurp Suite extension for automated detection and exploitation of HTTP request smuggling vulnerabilities, supporting HTTP/1.1 and HTTP/2-downgrade…