corelight/detect-ransomware-filenamesZeek script that monitors SMB traffic and alerts on known ransomware filenames using the Anti-Ransomware File System Resource Manager list.
mhicairo-hue/cs50-cybersecurity-final-projectTechnical analysis of the XZ Utils backdoor (CVE-2024-3094), explaining the supply chain attack, obfuscation techniques, and impact on OpenSSH via…
techgaun/cve-2025-55182-scannerPython-based scanner for CVE-2025-55182 indicators of compromise. Checks filesystem paths, processes, systemd services, cron persistence, and…
mranv/honeypot.rsCVE-2023-46604 (Apache ActiveMQ RCE Vulnerability) and focused on getting Indicators of Compromise.
mandiant/flare-qdbCommand-line and Python debugger for instrumenting and modifying native software behavior on Windows and Linux.
mentebinaria/retoolkitPre-configured bundle of reverse engineering and malware analysis tools for x86/x64 Windows systems, with desktop integration and plugin-ready…
emproof-com/workshop_firmware_reverse_engineeringWorkshop on firmware reverse engineering
secrary/drsemuDrSemu - Sandboxed Malware Detection and Classification Tool Based on Dynamic Behavior
sandflysecurity/sandfly-entropyscanEntropy scanner for Linux to detect packed or encrypted binaries related to malware. Finds malicious files and Linux processes and gives output with…
awrped/splinterRuntime JVM analysis toolkit for inspecting classes, methods, fields, constant pool, and bytecode
synacktiv/pridelocker-analysisThis repository contains a IDA Python script to recover PrideLocker ESX encryptor strings and a YARA rule
synacktiv/krustyloader-analysisKrustyLoader Analysis
synacktiv/hexalocker-analysisHexaLocker ransomware analysis
bitsalv/toolshell-honeypotHoneypot for CVE-2025-53770 aka ToolShell
mandiant/flare-learning-hubFree educational content on reverse engineering and malware analysis from the FLARE team
cert-polska/kartonDistributed malware processing framework based on Python, Redis and S3.
struppigel/portexJava library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness
longwayhomie/polyenginePolyEngine is an evasive PE packer designed for CTF challenges and low-level Windows security education. It focuses on bypassing EDR and AV…
