
moria
IoT firmware identification and extraction

IoT firmware identification and extraction

Repository to index useful tools for CTF's

Linux post-exploitation framework with a UEFI bootkit that persistently and stealthily loads a Rust-based kernel module rootkit on modern Linux…

Golang malware development library

Automated Linux incident response script with live triage, memory acquisition (LiME), disk imaging, YARA scanning, and HTML report generation.

A curated list of cybersecurity tools and resources.

A framework that create an advanced stealthy dropper that bypass most AVs and have a lot of tricks

XZ-Utils工具库恶意后门植入漏洞(CVE-2024-3094)

Multi-engine Linux malware scanner with five detection stages (MD5, HEX pattern, YARA, ClamAV, statistical), real-time inotify monitoring,…

Technical dossier on the DPRK-linked PolinRider supply-chain attack, documenting obfuscated JS payload injection, git history manipulation, C2…

Sorry ransomware (.sorry) IOCs, YARA rules and forensic analysis - CVE-2026-41940 cPanel campaign

LKM rootkit for Linux Kernels 2.6.x-7.x (x86/x86_64 and ARM/ARM64)

CyberChef-style recipe toolkit for IDA Pro: chain 289 encoding, cipher, compression, and hashing operations on database bytes, then patch results…

Platform independent peCloak fork based on Capstone

A framework for constructing self-spreading binaries

c++ fully undetected shellcode launcher ;)

Toolkit for implant attack of IoT devices