
KoodousFinder
A simple tool to allows users to search for and analyze android apps for potential security threats and vulnerabilities

A simple tool to allows users to search for and analyze android apps for potential security threats and vulnerabilities

Breakdown of a c2-network of chinese beamers - SilentSDK-Analysis

Patches and hooks the Linux kernel using only a stripped kernel image, extracting symbols and injecting code for inline and syscall hooking on arm64.

A simple and efficent script to obfuscate python payloads to make it completely FUD

a fully autonomous AI agent for reverse engineering

Scripts for communication with Bunitu Trojan C&Cs

A simple and scalable Android bot emulation framework, as presented at Black Hat Europe 2021's Arsenal, as well as atHack 2021's Arsenal

Open-source Android client for VirusTotal. Scan files, URLs, and installed apps against 70+ antivirus engines. View detailed reports with hashes,…

Android Malware Tracker

Python-based tool to detect ransomware infections and malicious code in MySQL instances. Performs reconnaissance, user enumeration, and deep scans…

PoC C&C for the Industroyer malware

Android Antivirus which doesn't require root, adb, ca install and cloud with many features and ways to detect more zero-day malware

An API hooking framework for intercepting and monitoring Windows applications

Python-based crypter that obfuscates payloads to bypass antivirus and EDR, generating FUD stubs for red team operations.

A Android malware analysis tool that creates comprehensive runtime profiles by hooking into application behavior across cryptography, file systems,…

Know what changed inside your Electron release: diff two builds for IPC, preload, windows, fuses and hosts, with file:line. CLI, CI gate, MCP server.

Analysis and cleanup guide for BadBox malware on Allwinner H713 Android projectors: ADB access, infection proof, firmware backup, dropper removal,…

This is part of a module for the framework that i'm constantly developing. Currently only information of the C2 are disclosed here.