mobsf/mobile-security-framework-mobsfAutomated mobile application security testing framework for Android, iOS, and Windows. Performs static and dynamic analysis, malware detection, and…
capstone-engine/capstoneMulti-architecture disassembly framework providing a lightweight, thread-safe API for binary analysis, reverse engineering, and malware research…
qilingframework/qilingA True Instrumentable Binary Emulation Framework
radareorg/radare2UNIX-like reverse engineering framework and command-line toolset
ohjeongwook/shellcodeemulatorShellcode emulator written with Unicorn Framework With Process Dump Emulation Environment
danielbohannon/revoke-obfuscationPowerShell Obfuscation Detection Framework
nccgroup/idahuntidahunt is a framework to analyze binaries with IDA Pro and hunt for things in IDA Pro
daffainfo/vol-rsVolatility 3 ported to Rust. Same output, much faster.
volatilityfoundation/volatilityAn advanced memory forensics framework
idov31/silversealLinux post-exploitation framework with a UEFI bootkit that persistently and stealthily loads a Rust-based kernel module rootkit on modern Linux…
wifiphisher/wifiphisherRogue Access Point framework for red team engagements and Wi-Fi security testing. Performs Evil Twin, KARMA, and Known Beacons attacks to achieve…
syscallx-18113/apkx-hunterC-based Android static analysis framework for decompilation, secret detection, endpoint discovery, permission analysis, and native library scanning…
guibacellar/nxransomwareA next generation of ransomware. Fully written using a .Net Framework + C&C System
mandiant/flare-emuScriptable binary emulation framework integrating IDA Pro/Radare2 with Unicorn engine for automated malware analysis, string decryption, and code…
nationalsecurityagency/ghidraGhidra is a software reverse engineering (SRE) framework
volatilityfoundation/volatility3Advanced framework for extracting digital artifacts from volatile memory (RAM) samples, enabling deep forensic analysis of system runtime state…
mfmokbel/crawlectorCrawlector is a threat hunting framework designed for scanning websites for malicious objects.
bkcs-hust/lstm-miA LSTM based framework for handling multiclass imbalance in DGA botnet detection
