Tools

All Android Security Authentication & Authorization Cloud Infrastructure Security Defensive Tools Disk Forensics Embedded Systems Security General Purpose Utilities Indicator of Compromise (IOC) Management OSINT (Open Source Intelligence)Packet Sniffing & Analysis Password Cracking Penetration Testing Frameworks Phishing Tools Privilege Escalation Reconnaissance Static Analysis Vulnerability Scanners Web Vulnerability Scanners Wi-Fi Auditing Bluetooth Security Container Security Dynamic Analysis (Sandboxing)Encryption/Decryption Tools Exploit Frameworks Identity Management iOS Security IoT Security Memory Forensics Network Mapping OSINT for Social Engineering Password Attacks Payload Generation Persistence Mechanisms Port Scanning Static Code Analysis (SAST)Threat Feeds & Aggregators Vulnerability Analysis Web Proxies & Interception Code Analysis DNS & Subdomain Enumeration Dynamic Code Analysis (DAST)Exploitation Hash Analysis IDS/IPS Evasion Impersonation Tools Lateral Movement Mobile App Pentesting Network Forensics Reverse Engineering RFID/NFC Tools SCADA/ICS Security Scripting & Automation Serverless Security Shellcode Web Application Exploitation API Security Testing Configuration Auditing Data Exfiltration Debuggers Forensics Information Gathering Mobile Forensics Network Access Control Post-Exploitation Security Virtualization Phishing WAF Bypass Web Security Fuzzing Network Security Steganography Wireless Security Data Recovery Malware Analysis Digital Forensics Hardware Hacking Cryptography CTF Penetration Testing Cloud Security DevSecOps Mobile Security Privacy Command and Control Social Engineering Hardware Security Utilities & Frameworks Hardware & IoT Security Secret Detection Binary Analysis Threat Intelligence Identity & Access Management (IAM)Supply Chain Security Authentication Machine Learning Intrusion Detection Papers & Research Misconfiguration Subdomain Enumeration Email Harvesting Learning & Education AI-Assisted Reversing DNS Fuzzing Red Teaming Incident Response Crawler Curated Resources Remote Access Tool Shellcode Generation Payload Development Remote Access Trojan API Security Anti-Bot Fingerprint Spoofing CAPTCHA Bypass Email Security DNS Analysis Chaos Engineering Learning Paths & Courses Container Escape AI Security Database Security Firmware Analysis Anomaly Detection Log Analysis Adversarial Attack Binary Exploitation Labs & Practice

Newest Relevance Most popular Recently updated

38 results

astaroth-deobfuscator

dodo-sec/astaroth-deobfuscator

IDA python script for deobfuscating Astaroth/Guildma injector DLL

binary-analysismalware-analysisreverse-engineering+1

83 years ago

CVE-2023-38831-Exploit-and-Detection

ml-k-eng/cve-2023-38831-exploit-and-detection

This repository has both an attack detection tool and a Proof-of-Concept (PoC) Python script for the WinRAR CVE-2023-38831 vulnerability.

defensive-toolsexploitationincident-response+3

3 years ago

AutoIt-Ripper

nazywam/autoit-ripper

Extract AutoIt scripts embedded in PE binaries

binary-analysisdigital-forensicsmalware-analysis+1

2436 months ago

detect_CVE-2026-21509

decalage2/detect_cve-2026-21509

YARA rule and python script to detect potential exploits for the CVE-2026-21509 vulnerability in MS Office

forensicsmalware-analysisvulnerability-analysis

38 months ago

python-exe-unpacker

withsecurelabs/python-exe-unpacker

A helper script for unpacking and decompiling EXEs compiled from python code.

binary-analysisdynamic-analysis-sandboxingforensics+2

1.0k2 years ago

CVE-2023-21036

infobyte/cve-2023-21036

Detection and sanitization for Acropalypse Now - CVE-2023-21036

data-recoverydigital-forensicsencryption-decryption-tools+3

803 years ago

CVE-2025-20260-POC

alex-acero-security/cve-2025-20260-poc

Proof-of-concept exploit for CVE-2025-20260, a buffer overflow in ClamAV's PDF scanning. Includes a Python script to generate a malicious PDF and…

binary-exploitationexploitationfuzzing+3

4 months ago

CVE-2026-31431-Copy-Fail

recofu/cve-2026-31431-copy-fail

Local privilege escalation exploit for CVE-2026-31431 in the Linux kernel crypto subsystem, providing root access and container breakout with a…

container-escapeexploitationexploit-frameworks+3

5 months ago

Hybrid Submit

kaysec/hybrid-submit

A script that automatically submits files to Hybrid Analysis (API)

api-securitymalware-analysisscripting-automation

3 months ago

PESTO

elevenpaths/pesto

Extracts and analyzes PE file security characteristics (ASLR, DEP, CFG, NO_SEH) from DLLs and EXEs across directories, storing results in a SQLite…

binary-analysismalware-analysisstatic-analysis+1

266 years ago

IATelligence

fr0gger/iatelligence

IATelligence is a Python script that will extract the IAT of a PE file and request GPT to get more information about the API and the ATT&CK matrix…

ai-assisted-reversingbinary-analysismalware-analysis+3

3863 years ago

TinyProcessor

goatmilkkk/tinyprocessor

A post-processing script for TinyTracer

log-analysismalware-analysisreverse-engineering

403 years ago

SuperMem

crowdstrike/supermem

A python script developed to process Windows memory images based on triage type.

digital-forensicsforensicsincident-response+2

2682 years ago

cuckooautoinstall

buguroo/cuckooautoinstall

Auto Installer Script for Cuckoo Sandbox

dynamic-analysis-sandboxingmalware-analysisscripting-automation+1

1648 years ago

loki-parse

r3mrum/loki-parse

A python script that can detect and parse loki-bot (malware) related network traffic. This script can be helpful to DFIR analysts and security…

data-exfiltrationdigital-forensicsforensics+5

139 years ago

pridelocker-analysis

synacktiv/pridelocker-analysis

This repository contains a IDA Python script to recover PrideLocker ESX encryptor strings and a YARA rule

binary-analysismalware-analysisreverse-engineering+2

13 years ago

TuxResponse

la3ar0v/tuxresponse

Automated Linux incident response script with live triage, memory acquisition (LiME), disk imaging, YARA scanning, and HTML report generation.

digital-forensicsdisk-forensicsforensics+5

915 months ago

plugxdecoder

kcreyts/plugxdecoder

Decodes PlugX traffic and encrypted/compressed artifacts

digital-forensicsencryption-decryption-toolsforensics+3

3813 years ago