
DrSemu
DrSemu - Sandboxed Malware Detection and Classification Tool Based on Dynamic Behavior

DrSemu - Sandboxed Malware Detection and Classification Tool Based on Dynamic Behavior

A machine learning tool that ranks strings based on their relevance for malware analysis.

Windows artifact analysis toolkit that maps AV detections to PE offsets, sections, RVA/VA and strings, with YARA, AMSI, capa and multi-engine…

RetDec is a retargetable machine-code decompiler based on LLVM.

Unicorn CPU emulator framework (ARM, AArch64, M68K, Mips, Sparc, PowerPC, RiscV, S390x, TriCore, X86)

Automatic analysis of SWF files based on some heuristics. Extensible via plugins.

Python Command-Line Ghidra MCP

Open-source code analysis platform for C/C++/Java/Binary/Javascript/Python/Kotlin based on code property graphs. Discord https://discord.gg/vv4MH284Hc

bespoke tooling for offensive security's Windows Usermode Exploit Dev course (OSED)

Python scriptable Reverse Engineering Sandbox, a Virtual Machine instrumentation and inspection framework based on QEMU

unleash the full power of your BES-based headphones! :)

Cmulator is ( x86 - x64 ) Scriptable Reverse Engineering Sandbox Emulator for shellcode and PE binaries . Based on Unicorn & Zydis Engine &…

Browser-based frontend to gdb (gnu debugger). Add breakpoints, view the stack, visualize data structures, and more in C, C++, Go, Rust, and Fortran.…

Dynamic unpacker based on PE-sieve

A comprehensive binary emulation and instrumentation platform.

Command-line and Python debugger for instrumenting and modifying native software behavior on Windows and Linux.

Tiny cute emulator plugin for IDA based on unicorn.

Static deobfuscator for Themida, WinLicense and Code Virtualizer 3.x's mutation-based obfuscation.