Tools

torvalds/linux

Linux kernel source tree

ph4l4nx/ctf-s-tools

Repository to index useful tools for CTF's

h3raklez/cve-2024-3094

Educational lab replicating the XZ Utils backdoor (CVE-2024-3094) with a custom Ed448 key pair. Includes a patched liblzma, systemd service, and…

exporx/idachef

CyberChef-style recipe toolkit for IDA Pro: chain 289 encoding, cipher, compression, and hashing operations on database bytes, then patch results…

bst04/cybersources

A curated list of cybersecurity tools and resources.

redcode-labs/coldfire

Golang malware development library

habibkaratas/sorry-ransomware-analysis

Sorry ransomware (.sorry) IOCs, YARA rules and forensic analysis - CVE-2026-41940 cPanel campaign

tanc7/exocet-av-evasion

EXOCET - AV-evading, undetectable, payload delivery tool

concinnity-risks/ransomcoinpublic

A DFIR tool to extract cryptocoin addresses and other indicators of compromise from binaries.

redcode-labs/neurax

A framework for constructing self-spreading binaries

machine1337/fudcrypt

Python-based crypter that obfuscates payloads to bypass antivirus and EDR, generating FUD stubs for red team operations.

terribledactyl/cve-2025-55891

Proof-of-concept for CVE-2025-55891: heap corruption in TIFFCP.EXE via malformed TIFF file, triggering segmentation fault during LZW decompression in…

cy83rr0h1t/cve-2023-20052

CVE-2023-20052 information leak vulnerability in the DMG file parser of ClamAV

mrbuglf/xz-utils_cve-2024-3094

XZ-Utils工具库恶意后门植入漏洞(CVE-2024-3094)

joydragon/detect-cve-2018-20250

Herramienta para revisar si es que un payload tiene componente malicioso de acuerdo a CVE-2018-20250

corelight/zeek-spicy-facefish

A Zeek protocol analyzer for the Facefish rootkit, based on Spicy.

arthastang/iot-implant-toolkit

Toolkit for implant attack of IoT devices

nmatt0/moria

IoT firmware identification and extraction