
radare2
UNIX-like reverse engineering framework and command-line toolset

UNIX-like reverse engineering framework and command-line toolset

Ghidra is a software reverse engineering (SRE) framework

Open source binary analysis framework and decompiler built on LLVM and QEMU, lifting binaries to a readable intermediate representation for reverse…

A fileless reverse shell and C2 framework leveraging direct syscalls, proxy tunneling, and ChaCha20 encryption for AV evasion.

A True Instrumentable Binary Emulation Framework

C-based Android static analysis framework for decompilation, secret detection, endpoint discovery, permission analysis, and native library scanning…

Rogue Access Point framework for red team engagements and Wi-Fi security testing. Performs Evil Twin, KARMA, and Known Beacons attacks to achieve…

Multi-architecture disassembly framework providing a lightweight, thread-safe API for binary analysis, reverse engineering, and malware research…

Linux post-exploitation framework with a UEFI bootkit that persistently and stealthily loads a Rust-based kernel module rootkit on modern Linux…

Adversary emulation and C2 framework for security research

Scriptable binary emulation framework integrating IDA Pro/Radare2 with Unicorn engine for automated malware analysis, string decryption, and code…

Shellcode emulator written with Unicorn Framework With Process Dump Emulation Environment

Composable research-contract and YAML-recipe framework for agent-operated security experiments on disposable compute

An advanced memory forensics framework

idahunt is a framework to analyze binaries with IDA Pro and hunt for things in IDA Pro

A framework that create an advanced stealthy dropper that bypass most AVs and have a lot of tricks


Crawlector is a threat hunting framework designed for scanning websites for malicious objects.