
javascript-deobfuscator
Deobfuscator for javascript-obfuscator 5.x output (string arrays, control-flow flattening, self-defending, RC4/base64)

Deobfuscator for javascript-obfuscator 5.x output (string arrays, control-flow flattening, self-defending, RC4/base64)

Reverse bytenode .jsc (V8 code cache) to JavaScript — static, pure Rust, no patched V8/Node. Node 8→26 / V8 5.8–14.6; 25k .jsc tested, 0 fail.

0-day malware detection for binaries, source & scripts (that doesn't suck)

Automated mobile application security testing framework for Android, iOS, and Windows. Performs static and dynamic analysis, malware detection, and…

match functions in binaries by what they do, not what their bytes look like. behavioral function fingerprinting via microexecution.

NebulaPulsar is a proof-of-concept in-memory implant framework for Java (JSP) and ASP.NET (ASPX/ASHX/ASMX) webshells, originally developed as part of…

ExportHider: Generating Export Table during Runtime to Hide the Exported Functions from the DLL File.

Python Wheel File Security Scanner — scan .whl files for security issues before installation. Detects path traversal (CVE-2026-24049), RECORD…

A script to detect stack-strings by using emulation (leveraging Unicorn)

Unpack and deobfuscate VMProtect 2 protected binaries with an emulation-based VM explorer, handler profiler, and experimental LLVM recompiler for…

Static and dynamic Android application security analysis

Golang bindings for PE-sieve

x64 Dynamic Reverse Engineering Toolkit

Anteater - CI/CD Gate Check Framework

VMUnprotect.Dumper can dynamically untamper VMProtected Assembly.

Do You Know What's In Your Python Packages? A Tool for Visualizing Python Package Registry Security Audit Data

.NET deobfuscator and unpacker.

Endpoint detection & Malware analysis software