
ghidra
Ghidra is a software reverse engineering (SRE) framework

Ghidra is a software reverse engineering (SRE) framework

Real-time Windows system monitor with advanced process, network, and disk analysis, stack trace debugging, malware detection, and service management.…

Exploit Development and Reverse Engineering with GDB & LLDB Made Easy

Volatility 3 ported to Rust. Same output, much faster.

Advanced framework for extracting digital artifacts from volatile memory (RAM) samples, enabling deep forensic analysis of system runtime state…

Security sensor for realtime threat detection and protection

IPED Digital Forensic Tool. It is an open source software that can be used to process and analyze digital evidence, often seized at crime scenes by…

Direct Memory Access (DMA) Attack Software

Read-only Windows forensic scanner for software traces — persistence, execution artifacts (Prefetch, Shimcache, BAM), user activity and Ghost Tasks…

Integer overflow in FreeType software, which also affects Chrome

A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on…

Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory…

Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).

Software sandbox for storage of sensitive information in memory.

Custom PE loading and manipulation library for manual mapping, IAT hooking, memory dumping, and rebuilding imports for malware analysis and reverse…

An Active Defense and EDR software to empower Blue Teams

CVE-2025-65320 proof-of-concept demonstrating cleartext license key extraction from process memory via debugger attachment, enabling software…
