
LIEF
Cross-platform library to parse, modify, and abstract ELF, PE, and MachO executable formats. Supports C++, Python, and Rust APIs with disassembler,…

Cross-platform library to parse, modify, and abstract ELF, PE, and MachO executable formats. Supports C++, Python, and Rust APIs with disassembler,…

Chase H.Q. for ZX Spectrum — reverse-engineered and reconstructed in portable C

Automated hypervisor-level malware analysis sandbox with agentless guest introspection, web-based result exploration, and guided installer for…

Apple Silicon device emulator.

Unofficial revival of the well known .NET debugger and assembly editor, dnSpy

AirPods liberated from Apple's ecosystem.

End-to-end exploitation lab for CVE-2025-5548 (FreeFloat FTP Server stack buffer overflow). Includes static analysis with IDA/Ghidra, binary fuzzing,…

Advanced EDR Evasion via AI Telemetry Spoofing & WASM Sandboxing. Project Onyx is a PoC Red Team pipeline designed to demonstrate advanced evasion…

A tool that is used to hunt vulnerabilities in x64 WDM drivers

A Proof-of-Concept bootkit inspired by Petya ransomware, written in Assembly, C, and C++

RetDec is a retargetable machine-code decompiler based on LLVM.

Project Date : Oct 2025 / PoC implementation for CVE-2025-54110 a Kernel-Level Integer Overflow Vulnerability in the Windows `NtQueryDirectoryObject`…

Themida Devirt Results

FPGA based microcomputer sandbox for software and RTL experimentation

A MCP Debugger Server for Windows executables (x86 and x64). Exposes debugger functionality as MCP Tools for static / dynamic analysis of the…

ShowStopper is a tool for helping malware researchers explore and test anti-debug techniques or verify debugger plugins or other solutions that clash…

Disassemble ANY files including .so (NDK, JNI), Windows PE(EXE, DLL, SYS, etc), linux binaries, libraries, and any other files such as pictures,…

Windows named pipe hooking toolkit