
SigLens
Windows artifact analysis toolkit that maps AV detections to PE offsets, sections, RVA/VA and strings, with YARA, AMSI, capa and multi-engine…

Windows artifact analysis toolkit that maps AV detections to PE offsets, sections, RVA/VA and strings, with YARA, AMSI, capa and multi-engine…

Linux system-call monitor using ptrace to trace file, process, network, and memory activity, with namespace isolation and machine learning…

A machine learning tool that ranks strings based on their relevance for malware analysis.

Dynamic unpacker based on PE-sieve

Strelka Web UI for File Submission and Analysis

A python script developed to process Windows memory images based on triage type.

Image-based Android malware detection framework tackling obfuscation and concept drift. Includes curated datasets and Python code for training…

ParanoiDF - PDF Analysis Suite based on PeePDF by Jose Miguel Esparza (http://peepdf.eternal-todo.com/). Tools added: Password cracking, redaction…

🐍 🔍 GuardDog is a CLI tool to Identify malicious PyPI and npm packages

Python Command-Line Ghidra MCP

Python-based scanner for CVE-2025-55182 indicators of compromise. Checks filesystem paths, processes, systemd services, cron persistence, and…

Static deobfuscator for Themida, WinLicense and Code Virtualizer 3.x's mutation-based obfuscation.

A lightweight security auditor and sandbox for shell scripts. Oversight combines a Static Analysis engine (Rust) with Dynamic Enforcement (Linux…

Python based tool for generating Shellcode from PIC C

MAPS cloud scanner and response parser for Microsoft Defender research.

Tool for solving BPF filters and crafting packets based on these.

AST-based Python code transformation & deobfuscation framework

Cosa Nostra, a FOSS graph based malware clusterization toolkit.