
SigLens
Windows artifact analysis toolkit that maps AV detections to PE offsets, sections, RVA/VA and strings, with YARA, AMSI, capa and multi-engine…

Windows artifact analysis toolkit that maps AV detections to PE offsets, sections, RVA/VA and strings, with YARA, AMSI, capa and multi-engine…

A machine learning tool that ranks strings based on their relevance for malware analysis.

Dynamic unpacker based on PE-sieve

bespoke tooling for offensive security's Windows Usermode Exploit Dev course (OSED)

Heap analysis tooling for mempool

Another RTTI Parsing IDA plugin

Python Command-Line Ghidra MCP

unleash the full power of your BES-based headphones! :)

Static deobfuscator for Themida, WinLicense and Code Virtualizer 3.x's mutation-based obfuscation.

ComfyEngine is a memory exploration toolkit built for people who need to monitor, patch, and script a running process.

Laboratorio de análisis y explotación de la vulnerabilidad CVE-2025-5548 en FreeFloat FTP Server 1.0

Security research and reproduction of CVE-2025-5548: A stack-based buffer overflow in FreeFloat FTP Server 1.0. Includes binary analysis, crash…

MAPS cloud scanner and response parser for Microsoft Defender research.

Tool for solving BPF filters and crafting packets based on these.

AST-based Python code transformation & deobfuscation framework

Brosec - An interactive reference tool to help security professionals utilize useful payloads and commands.

Cosa Nostra, a FOSS graph based malware clusterization toolkit.

Browser-based frontend to gdb (gnu debugger). Add breakpoints, view the stack, visualize data structures, and more in C, C++, Go, Rust, and Fortran.…