kaandemir993/dropper-gcleaner-c2-infrastructure-kernel-driver-powershell-conhost-payload-analysisReverse engineering analysis of Dropper GCleaner, a malware that uses a resilient C2 infrastructure, kernel driver loading, PowerShell/Conhost…
iocx-dev/iocxAn extensible, deterministic static‑analysis engine that extracts high‑signal IOCs from PE binaries and text, built for SOC automation and modern…
loociprian/gc2-sheetGC2 is a Command and Control application that allows an attacker to execute commands on the target machine using Google Sheet or Microsoft SharePoint…
stevenblack/hosts🔒 Consolidating and extending hosts files from several well-curated sources. Optionally pick extensions for porn, social media, and other categories.
bee-san/pywhat🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it…
trailofbits/skillsTrail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows
0xz0f/z0fcourse_reverseengineeringStructured reverse engineering course covering x64 Windows binaries, assembly, debugging, and malware analysis. Designed for beginners to…
volatilityfoundation/volatility3Advanced framework for extracting digital artifacts from volatile memory (RAM) samples, enabling deep forensic analysis of system runtime state…
mandiant/flare-flossFLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
microsoft/procdump-for-linuxA Linux version of the ProcDump Sysinternals tool
aydinnyunus/keyloggerGet Keyboard,Mouse,ScreenShot,Microphone Inputs from Target Computer and Send to your Mail.
bytedance/elkeidElkeid is an open source solution that can meet the security requirements of various workloads such as hosts, containers and K8s, and serverless. It…
sheeki03/tirithTerminal security for developers and AI agents. Intercepts homograph URLs, pipe-to-shell, ANSI injection, obfuscated payloads, data exfiltration, and…
mandiant/flare-idaIDA Pro utilities from FLARE team
cyb3rmx/qu1cksc0peAll-in-One malware analysis tool.
x0rz/eqgrp_lost_in_translationDecrypted content of odd.tar.xz.gpg, swift.tar.xz.gpg and windows.tar.xz.gpg
glmcdona/process-dumpWindows tool for dumping malware PE files from memory back to disk for analysis.
