
neurax
A framework for constructing self-spreading binaries

A framework for constructing self-spreading binaries

DECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope…

Scriptable binary emulation framework integrating IDA Pro/Radare2 with Unicorn engine for automated malware analysis, string decryption, and code…

Multi-engine framework for unpacking and analyzing VM-protected binaries using dynamic taint tracking, symbolic execution, pattern classification,…

SHAREM is a shellcode analysis framework, capable of emulating more than 45,000 WinAPIs and virutally all Windows syscalls. It also contains its own…

A Binary Genetic Traits Lexer Framework

idahunt is a framework to analyze binaries with IDA Pro and hunt for things in IDA Pro

Droidefense: Advance Android Malware Analysis Framework

Linux post-exploitation framework with a UEFI bootkit that persistently and stealthily loads a Rust-based kernel module rootkit on modern Linux…

pyREtic is an extensible framework for in-memory Python 2.x bytecode reverse engineering

CERT Kaiju is a binary analysis framework extension for the Ghidra software reverse engineering suite. This repository is a "mirror" -- please file…

An automatic unpacker and logger for DotNet Framework targeting files

C-based Android static analysis framework for decompilation, secret detection, endpoint discovery, permission analysis, and native library scanning…

Shellcode emulator written with Unicorn Framework With Process Dump Emulation Environment

Rust AMD SVM hypervisor framework with customizable vmexit handlers (MSR, CPUID, RDTSC) and NPT hooking for kernel-level monitoring and research.

A binary analysis framework

Crawlector is a threat hunting framework designed for scanning websites for malicious objects.

NebulaPulsar is a proof-of-concept in-memory implant framework for Java (JSP) and ASP.NET (ASPX/ASHX/ASMX) webshells, originally developed as part of…