
systeminformer
Real-time Windows system monitor with advanced process, network, and disk analysis, stack trace debugging, malware detection, and service management.…

Real-time Windows system monitor with advanced process, network, and disk analysis, stack trace debugging, malware detection, and service management.…

Static-first research tool for unpacking Nuitka-compiled binaries: extracts constants, modules, recovers .pyc files, and generates analysis reports.

A list of Capture The Flag (CTF) frameworks, libraries, resources and software for started/experienced CTF players 🚩

Software to identify the different types of hashes -

A package for capturing and analyzing network flow data and intraflow data, for network research, forensics, and security monitoring.

Volatility 3 ported to Rust. Same output, much faster.

Advanced framework for extracting digital artifacts from volatile memory (RAM) samples, enabling deep forensic analysis of system runtime state…


Headless AI agent for deterministic reverse engineering.

Security sensor for realtime threat detection and protection

A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on…

IPED Digital Forensic Tool. It is an open source software that can be used to process and analyze digital evidence, often seized at crime scenes by…

An advanced memory forensics framework

Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).

A blazingly fast, multi-threaded TUI malware analysis tool built in Rust. Features deep PE parsing, YARA scanning, and heuristic risk scoring.

Tool to help guess a files 256 byte XOR key by using frequency analysis

pefile is a Python module to read and work with PE (Portable Executable) files

Generates YARA rules from installed software on a running OS to baseline known software and find similar installations across digital forensic…