Tools

philarkwright/dga-detection

DGA Domain Detection using Bigram Frequency Analysis

mdshoaibuddinchanda/zombieguard

ML-based detection of Zombie ZIP archive header evasion attacks (CVE-2026-0866)

rushter/hexora

Static analysis of malicious Python code

symgraph/idassist

AI-Powered Reverse Engineering Plugin for IDA Pro

neuromancer/rats-re

Reconstructs legacy Windows binaries into C source by pairing Ghidra decompiler exports with local LLMs, producing compile-checked candidates and…

lucadibello/network-attack-detection

Advanced detection of port scanning, DoS and malware attacks using Machine Learning techniques

the_quantum_alpha/the-quantum-ad-list

AI-curated blocklist of 3,000,000+ domains for blocking ads, trackers, malware, and cryptojacking. Integrates with hosts files, Pi-hole, and browser…

roxanne_ardary/emailxpose

EmailXpose is an open source AI-powered email security system that detects phishing, spam, scams, malware, and social engineering attacks. It goes…

cyberforce/pesidious

Malware Mutation Using Reinforcement Learning and Generative Adversarial Networks

cyberark/vulnhalla

Automated security analysis pipeline that runs CodeQL queries on GitHub repositories and uses LLMs to classify and filter true vulnerabilities from…

l33tdawg/aether

AI Smart Contract Security Analysis and PoC Generation Framework

cookiengineer/exocomp

Self-hosted multi-agent environment for Go with LLM-powered pentesting agents (exploiter, reverser, threathunter, webscanner) that automate…

vinsontang1/vultriage

The code of VulTriage: Triple-Path Context Augmentation for LLM-Based Vulnerability Detection

gherardofiori/maliciousbrowserextensions

This Repository is created after my own research into malicious browser extensions, by brining the work of many others and news articles into one…

huhusmang/awesome-llms-for-vulnerability-detection

The community's most comprehensive, continuously-updated index of research on Large Language Models for software vulnerability detection — papers…

thuyimingli/backdoor-learning-resources

Curated list of backdoor learning papers, surveys, and toolboxes, organizing poisoning-based attacks and defenses in deep learning for researchers…

poppopjmp/vmdragonslayer

Multi-engine framework for unpacking and analyzing VM-protected binaries using dynamic taint tracking, symbolic execution, pattern classification,…

andrewaeva/dga

The repository that contains the algorithms for generating domain names, dictionaries of malicious domain names. Developed to research the…