CVE-2024-7344
themalwareguardian/cve-2024-7344Technical research on a UEFI Secure Boot bypass caused by an unsafe custom PE loader, including root-cause analysis, exploitation workflow, and an…
binary-analysiseducationexploitation+4
themalwareguardian/cve-2024-7344Technical research on a UEFI Secure Boot bypass caused by an unsafe custom PE loader, including root-cause analysis, exploitation workflow, and an…
aaaddress1/skrullGenerates anti-copy malware launchers using Process Ghosting to bypass AV/EDR signature scanning and prevent automatic sample submission. Supports…
perl-code/cve-2026-5000Proof-of-concept demonstrating a Windows Defender bypass technique for CVE-2026-5000, intended for controlled testing and defensive research.
bombadil-systems/zombie-zipMalformed ZIP archive that evades antivirus detection by declaring Method=0 (stored) while containing DEFLATE-compressed payload.
d4rksystem/vboxcloakA PowerShell script that attempts to help malware analysts hide their Windows VirtualBox Windows VM's from malware that may be trying to evade…
user1342/obfu-de-scateFuzzy comparison tool for deobfuscating Android APKs by identifying renamed functions across versions, generating mapping files and interactive HTML…
1rhino2/fnprintmatch functions in binaries by what they do, not what their bytes look like. behavioral function fingerprinting via microexecution.
zxgio/ghidra_stack_stringsA script to detect stack-strings by using emulation (leveraging Unicorn)
nationalsecurityagency/ghidraGhidra is a software reverse engineering (SRE) framework
ashishb/android-security-awesomeA collection of android security related resources
konloch/bytecode-viewerA Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)
maaaaz/androwarnYet another static code analyzer for malicious Android applications
sslab-gatech/avpassTool for leaking and bypassing Android malware detection system
secretsquirrel/recomposerRandomly changes Win32/64 PE Files for 'safer' uploading to malware and sandbox sites.
hasherezade/pesieve-goGolang bindings for PE-sieve
zhengxr930/malevalOfficial code for the ISSTA 2026 paper: Is "Knowing It’s Malicious" Enough? Evaluating LLMs for Fine-Grained Malware Behavior Auditing
benjholla/cve-2012-4681-armoringAn A/V evasion armoring experiment for CVE-2012-4681