
scan
0-day malware detection for binaries, source & scripts (that doesn't suck)

0-day malware detection for binaries, source & scripts (that doesn't suck)

UNIX-like reverse engineering framework and command-line toolset


Virus Total API Maltego Transform Set For Canari

Incident Response & Digital Forensics Debugging Extension

GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux


Full static & memory analysis of Overlord RAT: Go agent architecture, HTTP/2 + WebSocket C2, reflective DLL injection, browser keylogging, and IOCs.…

Modular file scanning/analysis framework

Telegram Desktop Session Stealer

IDA python scripts to decrypt strings from KPOT and set those as comments

TeleShadow - Telegram Desktop Session Stealer (Windows)

GarbageMan is a set of tools for analyzing .NET binaries through heap analysis.

A curated set of NSO Group internal documents, product materials and sworn testimony that entered the public record in WhatsApp Inc. and Meta…

A python2 script for sweeping a network to find windows systems compromised with the DOUBLEPULSAR implant.

A set of scripts for a radare-based malware code analysis workflow

Windows kernel driver technique that hides kernel threads by abusing IoCancelIrp and IRP cancel routines, with detection methods for identifying…

A fully functional DanderSpritz lab in 2 commands