
NoMoreXOR
Tool to help guess a files 256 byte XOR key by using frequency analysis

Tool to help guess a files 256 byte XOR key by using frequency analysis


A scanner that files with compromised or untrusted code signing certificates written in python.

Detects PowerShell-based malware artifacts from event logs and performs static analysis on PowerShell scripts to identify malicious activity.

Live memory analysis tool for detecting reflectively loaded .NET DLLs by scanning process memory regions for abnormal flags, page types, and PE…

Detects hidden Linux kernel rootkits (LKM-based) and restores their visibility using kernel-level inspection techniques for forensic analysis and…

Native YARA scanner X-Tension for X-Ways Forensics, enabling in-snapshot file scanning with multi-threaded RVS support, report table output, and no…

A C# based tool for analysing malicious OneNote documents

Headless AI agent for deterministic reverse engineering.

machofile is a module to parse Mach-O binary files

Tool for solving BPF filters and crafting packets based on these.

Shell-based scanner to detect the XZ Backdoor (CVE-2024-3094) vulnerability in files and directories, enabling rapid identification and mitigation of…

Static analysis tool for investigating potentially malicious Microsoft Excel files, extracting metadata, macros, and embedded objects to aid digital…

DriverSentinel is a security tool developed in Go that detects malicious and vulnerable drivers on Windows systems by comparing them against the…

Script to extract malicious payload and decoy document from CVE-2015-1641 exploit documents

AI-driven automated threat analysis pipeline that routes files, URLs, IPs, domains, or images through specialized security analyzers and generates…

Yet Another Memory Analyzer for malware detection

Tools to enumerate Windows Firewall Hook Drivers on Windows 2000, XP and 2003