radare2
radareorg/radare2UNIX-like reverse engineering framework and command-line toolset
ai-assisted-reversingandroid-securitybinary-analysis+16
radareorg/radare2UNIX-like reverse engineering framework and command-line toolset
capstone-engine/capstoneMulti-architecture disassembly framework providing a lightweight, thread-safe API for binary analysis, reverse engineering, and malware research…
nationalsecurityagency/ghidraGhidra is a software reverse engineering (SRE) framework
mobsf/mobile-security-framework-mobsfAutomated mobile application security testing framework for Android, iOS, and Windows. Performs static and dynamic analysis, malware detection, and…
cert-polska/kartonDistributed malware processing framework based on Python, Redis and S3.
volatilityfoundation/volatility3Advanced framework for extracting digital artifacts from volatile memory (RAM) samples, enabling deep forensic analysis of system runtime state…
mwemuorg/mwemuPure Rust x86 hardware emulator and Windows process simulator for malware analysis, shellcode emulation, and payload unpacking. Supports 32/64-bit PE…
mandiant/speakeasyWindows malware emulation framework that executes binaries, drivers, and shellcode in a modeled runtime, emulating APIs, process/thread behavior,…
syscallx-18113/apkx-hunterC-based Android static analysis framework for decompilation, secret detection, endpoint discovery, permission analysis, and native library scanning…
amavis/amavisamavis is a high-performance email content filter framework written in Perl.
daffainfo/vol-rsVolatility 3 ported to Rust. Same output, much faster.
zjuwyh/shadowmemDefensive framework that maintains a safety-focused shadow memory to detect and block prompt-injection and long-horizon threats against LLM agents…
qilingframework/qilingA True Instrumentable Binary Emulation Framework
zhengxr930/malevalOfficial code for the ISSTA 2026 paper: Is "Knowing It’s Malicious" Enough? Evaluating LLMs for Fine-Grained Malware Behavior Auditing
0p4n1k/noctyraAST-based Python code transformation & deobfuscation framework
iss4cf0ng/nebulapulsarNebulaPulsar is a proof-of-concept in-memory implant framework for Java (JSP) and ASP.NET (ASPX/ASHX/ASMX) webshells, originally developed as part of…
iqsec-lab/freemocaMemory-free continual learning framework for malware classification using mode connectivity-based interpolation. Supports class-incremental and…
kaisonox/apiscopeAn API hooking framework for intercepting and monitoring Windows applications