
pyREtic
pyREtic is an extensible framework for in-memory Python 2.x bytecode reverse engineering

pyREtic is an extensible framework for in-memory Python 2.x bytecode reverse engineering

Reverse engineering framework with disassembly, decompilation, taint analysis, version diffing and semantic search, plus LLM-driven autonomous binary…

An automatic unpacker and logger for DotNet Framework targeting files

CERT Kaiju is a binary analysis framework extension for the Ghidra software reverse engineering suite. This repository is a "mirror" -- please file…

Shellcode emulator written with Unicorn Framework With Process Dump Emulation Environment

C-based Android static analysis framework for decompilation, secret detection, endpoint discovery, permission analysis, and native library scanning…

Simple framework to extract "actionable" data from Android malware (C&Cs, phone numbers etc.)

Rust AMD SVM hypervisor framework with customizable vmexit handlers (MSR, CPUID, RDTSC) and NPT hooking for kernel-level monitoring and research.

A machine learning malware analysis framework for Android apps.

Framework for hashing declared permissions in Chromium extensions and APKs, enabling clustering, hunting, and pivoting across potentially malicious…

amavis is a high-performance email content filter framework written in Perl.

A next generation of ransomware. Fully written using a .Net Framework + C&C System

A binary analysis framework

Modular malware analysis artifact collection and correlation framework

Crawlector is a threat hunting framework designed for scanning websites for malicious objects.

A LSTM based framework for handling multiclass imbalance in DGA botnet detection

NebulaPulsar is a proof-of-concept in-memory implant framework for Java (JSP) and ASP.NET (ASPX/ASHX/ASMX) webshells, originally developed as part of…