Tools

talha-nazeef-ahmed/rpc-triage

A zero-symbol static analysis engine that extracts and mathematically ranks the Windows RPC attack surface using an AHP-based risk model.

cpkt9762/ida-cli

Headless IDA Pro MCP server for AI-assisted binary analysis, powered by idalib

eset/wslink-vm-analyzer

WslinkVMAnalyzer is a tool to facilitate analysis of code protected by a virtual machine featured in Wslink malware

endermanch/xpkeygen

Windows XP Keygen

nccgroup/datajackproxy

Datajack Proxy allows you to intercept TLS traffic in native x86 applications across platforms

synacktiv/appledb_rs

Curated database of Apple internal artifacts (entitlements, frameworks, device versions) with API, CLI, and WebUI for iOS/macOS security research and…

synacktiv/lumina_server

Local server for IDA Lumina feature

cryptomachio/cve-2025-5548

Estudio técnico de la vulnerabilidad CVE-2025-5548

lauriewired/ghidramcp

MCP Server for Ghidra

bizdak/silverboxcc

Reverse engineered android malware, and this is a C&C server for it

theqmaks/phantom-frida

Build anti-detection Frida server from source. ~90 patches covering 16 detection vectors, weekly auto-builds with random names.

clearbluejar/pyghidra-mcp

Python Command-Line Ghidra MCP

jarm222/cve-2025-26244

The graph functionality of DeimosC2 v1.1.0-Beta is vulnerable to Stored Cross-Site Scripting (XSS), allowing the theft of session cookie and…

sudoand3rs0n/cve-2025-5548

Educational repository documenting the analysis and exploitation of CVE-2025-5548 (FreeFloat FTP Server buffer overflow). Includes a reusable…