mantvydasb/redteaming-tactics-and-techniquesComprehensive red teaming notes covering offensive security techniques including code injection, defense evasion, lateral movement, and persistence,…
amd2g2zz/kunglao-agentThe reverse-engineering expert agent: plans its own analysis path, derives every fact from raw evidence, and converges under mechanical verification…
ercihan/cve-2026-34621_pdf_sampleTechnical analysis of a multi-stage Adobe Acrobat PDF JavaScript sample, detailing environment triage, Acrobat API abuse, and in-memory payload…
stonelinks/react-cve-2025-55182Analysis of malware found on a server compromised via CVE-2025-55182, including obfuscated dropper, C2 communication, persistence mechanisms, and…
withsecurelabs/modulestompingResearch and proof-of-concept for module stomping, a technique to hide malicious code in legitimate Windows modules, with documentation and…
lisinan988/cve-2021-40444-expGenerates malicious DOCX documents exploiting CVE-2021-40444 (Microsoft Office Word RCE) with a built-in HTTP server for payload delivery and…
radareorg/r2aiRadare2 AI plugin using local or remote LLMs for decompilation, function explanation, vulnerability detection, renaming, and scripted reverse…
0x0be/pepperAn open source script to perform malware static analysis on Portable Executable
we5ter/flerkenA Solution For Cross-Platform Obfuscated Commands Detection presented on CIS2019 China. 动静态Bash/CMD/PowerShell命令混淆检测框架 - CIS 2019大会
opensourcemalware/polinriderTechnical dossier on the DPRK-linked PolinRider supply-chain attack, documenting obfuscated JS payload injection, git history manipulation, C2…
sh1n0g1/z9Detects PowerShell-based malware artifacts from event logs and performs static analysis on PowerShell scripts to identify malicious activity.
mathiasreker/blmvulnMajor Security Vulnerability on PrestaShop Websites - CVE-2022-31101
mo200909/office-malware-forensics-lab-remnux-static-analysisStatic analysis of 2 malicious Office documents on REMnux using oletools; identified CVE-2017-11882 and obfuscated macros.
dump-guy/powershell-toolsCollection of some easy of use tools - in powershell.
target/halogenAutomatically create YARA rules from malicious documents.
whatishope/bidoImage-based Android malware detection framework tackling obfuscation and concept drift. Includes curated datasets and Python code for training…
