
CAPEv2
Malware Configuration And Payload Extraction

Malware Configuration And Payload Extraction

Evidence-focused malware reverse engineering with deep PE/.NET inspection, Ghidra reconstruction, AI cross-checks, YARA, and ELF debugging

Standalone emulation and testing harness for Cobalt Strike Aggressor Scripts (.cna) that validates syntax, mocks Beacon APIs, and executes BOFs via…


MCP server bridging Ghidra's reverse engineering with AI tools: 256 tools for decompilation, P-code emulation, live debugging, data flow analysis,…

☕ GDBFrontend is an easy, flexible and extensible gui debugger.

An Interactive Binary Patching Plugin for IDA Pro

Step-by-step guide to exploit a buffer overflow in FreeFloat FTP Server using Python fuzzing, Immunity Debugger with mona.py, and IDA Free for binary…

Automatic analysis of SWF files based on some heuristics. Extensible via plugins.

bespoke tooling for offensive security's Windows Usermode Exploit Dev course (OSED)

The world's first agentic reverse engineer.

Proof of concept with GDB‑assisted exploitation (educational / lab use only)

Symbolic execution tool

A pure-Python library, app and MCP that lets you inspect, modify and search the memory of any running process in a few lines of Python :snake: .

Headless Binary Ninja MCP server — giving AI agents deep reverse-engineering capabilities via 180 tools.

A Qt Widgets desktop UI for exploring Python bytecode with pycdc/pycdas, inspecting native decompilation, and using AI fallback for unsupported code…

pyREtic is an extensible framework for in-memory Python 2.x bytecode reverse engineering

Collects multi-source security logs from reproducible Docker attack scenarios, builds attack chains, and provides the SecLog-Bench-216 benchmark for…