Tools

benjeems/packetstrider

Analyzes SSH packet captures using machine learning to predict reverse tunnels, keystrokes, data exfiltration, and authentication methods for…

droidefense/engine

Droidefense: Advance Android Malware Analysis Framework

lt-asset/resym

LLM-powered tool to recover variable names and data structures from stripped binaries, with data prep, training, inference, and evaluation pipelines.

lcbower33/stegoscan

Automated steganography detection tool that scans websites, web servers, and local directories using AI-driven object/text recognition and deep file…

visma-prodsec/columbo

ML-assisted forensic analysis tool that automates memory, disk, and live system triage on Windows using Volatility 3, autorunsc, and sigcheck to…

pr0me/xtride

N-gram-based type recovery tool for binaries, recovering structures and function signatures from decompiled code with high throughput and actionable…

mandiant/stringsifter

A machine learning tool that ranks strings based on their relevance for malware analysis.

pandaadir05/ghost

Detects process injection and memory manipulation used by malware. Finds RWX regions, shellcode patterns, API hooks, thread hijacking, and process…

lucamassarelli/yarasafe

SAFE embeddings to match functions in yara

dkhuuthe/madlira

Malware detection using learning and information retrieval for Android

gyoisamurai/gyoithon

Automated penetration testing tool that gathers web server intelligence, identifies products/versions via pattern matching and machine learning,…

bishopfox/deephack

Proof-of-concept tool for generating adversarial perturbations to exploit weaknesses in deep learning models, based on DEF CON 25 presentation.

spamscanner/spamscanner

Spam Scanner is a Node.js anti-spam, email filtering, and phishing prevention tool and service. Built for @ladjs, @forwardemail, @cabinjs, @breejs,…

bishopfox/brokenhill

A productionized greedy coordinate gradient (GCG) attack tool for large language models (LLMs)

synacktiv/rulesfinder

Machine-learning tool to automatically generate efficient password mangling rulesets for John the Ripper and Hashcat from a dictionary and cleartext…

bishopfox/raink

Document ranking tool using pairwise LLM comparisons, designed for applications like vulnerability fix identification in code diffs.

stratosphereips/manati

A web-based tool to assist the work of the intuitive threat analysts.