
seer
Seer - a gui frontend to gdb

Seer - a gui frontend to gdb

Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).

IOC and YARA-based scanner for detecting indicators of compromise via file name regex, YARA signatures, hash matching, and C2 back-connect checks on…

A search-first, profile-aware reverse-engineering workspace for AI agents — 735 tools across 36 domains in one MCP server.

Windows tool for dumping malware PE files from memory back to disk for analysis.

QCSuper is a tool communicating with Qualcomm-based phones and modems, allowing to capture raw 2G/3G/4G radio frames, among other things.

This is the development tree. Production downloads are at:

Mimikatz implementation in pure Python

A post-exploitation powershell tool for extracting juicy info from memory.

Cross-platform instrumentation and introspection library written in C

Memory Debugger for Windows, Linux, Mac, and Android

Hybrid kernel combining Mach, FreeBSD, and IOKit for macOS and iOS. Provides core OS services, driver framework, and security policy enforcement on…

The swiss army knife of LSASS dumping


Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory…

Extract Windows credentials directly from VM memory snapshots and virtual disks

Software sandbox for storage of sensitive information in memory.

Custom PE loading and manipulation library for manual mapping, IAT hooking, memory dumping, and rebuilding imports for malware analysis and reverse…