
bindiff
Quickly find differences and similarities in disassembled code

Quickly find differences and similarities in disassembled code

NØW is a word-based shellcode encoding and obfuscation tool that transforms raw shellcode bytes into natural-looking English prose.

Python based tool for generating Shellcode from PIC C

Comprehensive analysis of CVE-2022-30190 (Follina MSDT vulnerability) with IOCs, detection rules for SIEMs/EDR, YARA signatures, mitigation scripts,…

Tool that gathers a customizable set of ETW telemetry and generates user-defined detections

Multi-Ecosystem Malicious Package Detection and Supply Chain Security Scanner

Bash-based Linux persistence detection tool for DFIR investigations. Scans 15+ persistence mechanisms (systemd, cron, kernel modules, SSH,…

Rogue Access Point framework for red team engagements and Wi-Fi security testing. Performs Evil Twin, KARMA, and Known Beacons attacks to achieve…

Automated static analysis tools for binary programs

A cross-platform assistant for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse macro analysis…

Chepy is a python lib/cli equivalent of the awesome CyberChef tool.

EXOCET - AV-evading, undetectable, payload delivery tool

Agent-based tool that collects OS, hardware, file, and hook data from internet-connected sandboxes via HTTPS exfiltration, aiding Red Team artifact…

Online Reverse Enginerring viewer

Safe ransomware simulation tool for testing antivirus detection. Simulates macro staging, volume shadow copy deletion, document encryption, and note…

Practical labs, notes, and reports for CEH v13 modules — covering web hacking, network pentesting, malware analysis, social engineering, and security…