
malwinx
Just a normal flask web app to understand win32api with code snippets and references.

Just a normal flask web app to understand win32api with code snippets and references.

Revenge-RAT C# Stub - Fixed

Source code for the book "Black Hat Python" by Justin Seitz. The code has been fully converted to Python 3, reformatted to comply with PEP8 standards…

Code written as part of our various malware investigations

Automated supply chain security monitor that polls PyPI and npm registries, diffs new releases against predecessors, and uses LLM analysis to detect…

metame is a metamorphic code engine for arbitrary executables

Vba2Graph - Generate call graphs from VBA code, for easier analysis of malicious documents.

Python source code auditing and static analysis on a large scale

An x86-64 code virtualizer for VM based obfuscation

Static analysis of malicious Python code


Binary Ninja plugin to analyze and simplify obfuscated code

IDA 6.8 plugin that devirtualizes Themida's FISH virtual machine (2.2.5.0-2.2.7.0), restoring native code from protected binaries for reverse…

Static and dynamic analysis tool for detecting malicious code, suspicious binaries, and privacy violations

A scanner that files with compromised or untrusted code signing certificates written in python.

The Web Exploit Detector is a Node.js application used to detect possible infections, malicious code and suspicious files in web hosting environments

Reverse bytenode .jsc (V8 code cache) to JavaScript — static, pure Rust, no patched V8/Node. Node 8→26 / V8 5.8–14.6; 25k .jsc tested, 0 fail.

All-in-one macOS binary analysis: Mach-O parsing, ARM64 disassembly, code signatures, and debugging.