
ollytlscatch
OllyDbg plugin that intercepts and dumps TLS/SSL plaintext traffic during debugging sessions, aiding reverse engineering and malware analysis of…

OllyDbg plugin that intercepts and dumps TLS/SSL plaintext traffic during debugging sessions, aiding reverse engineering and malware analysis of…

An Interactive Binary Patching Plugin for IDA Pro

Documentation and reverse engineering of reCAPTCHA

C++ reimplementation of Ghidra's analytical core without JVM dependencies, providing embeddable binary analysis, Pcode/Sleigh foundations, and…

Code written as part of our various malware investigations

Winstrument is a framework of modular scripts to aid in instrumenting Windows software using Frida for reverse engineering and attack surface…

An LLVM-based instrumentation tool for universal taint tracking, dataflow analysis, and tracing.

Runtime instrumentation framework for building dynamic analysis tools: tracing, profiling, code coverage, memory debugging, fuzzing, and disassembly…

Record and replay framework for deterministic debugging of multi-threaded applications, enabling reverse execution, hardware watchpoints, and…

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration…

A collection of my Frida instrumentation scripts to reverse engineer mobile apps and more.

The repo contains a series of challenges for learning Frida for Android Exploitation.

Lightweight fuzzing of a memory snapshot using KVM

CMake build of Ghidra's SLEIGH processor specification library, providing standalone disassembly and p-code lifting engines for reverse engineering…

NebulaPulsar is a proof-of-concept in-memory implant framework for Java (JSP) and ASP.NET (ASPX/ASHX/ASMX) webshells, originally developed as part of…

Extract the managed (.NET) assemblies out of a MAUI Android assembly store.

Sample extensions, scripts, and API uses for WinDbg.

x64 Dynamic Reverse Engineering Toolkit