
mediator
An extensible, end-to-end encrypted reverse shell that works across networks without port forwarding.

An extensible, end-to-end encrypted reverse shell that works across networks without port forwarding.

RISC-V emulator in Rust that boots Linux with JIT on ARM64/x86_64 and Sv39 virtual memory

A OSINT project that explores how to dump data from React

.NET process monitor that hooks CLR at the native layer, dumps reflective assemblies from memory, and checks AMSI/ETW integrity vs on disk binaries.

Universal Windows extraction tool that detects unknown files and routes them to the right bundled extractor.

ELF anti-reversing tool that overwrites section headers with nullbytes to prevent static analysis by disassemblers and debuggers, rendering functions…

IDA plugin that resolves PPL calls to the actual underlying PPL function.

A Magisk module that simplifies running the Frida server on Android, with easy management commands to download specific versions, enable or disable…

Rogue Binary Model Context Protocol (MCP): a Docker-packaged binary analysis lab for AI agents. It supports reverse engineering, malware triage, and…

Magisk module that auto-packages renef_server (dynamic instrumentation for Android)

A game modding utility that makes injecting C/C++ code easier.

Mobile Helper Framework (mhf) is a tool that automates the process of identifying the framework/technology used to create a mobile application.…

A plugin that provides resources for beginners to learn reverse engineering using Binary Ninja. It automatically installs several other plugins, and…

A PyQt5 frontend to the binjatron plugin for Binary Ninja that includes highlighting features aimed at making it easier for beginners to learn about…

This is a little plugin to copy disassembly in a way that is usable in YARA rules!

libtalloc is a python script for use with GDB that can be used to analyse the "trivial allocator" (talloc)

Tool that can be used to trim useless things from a PE file such as the things a file pumper would add.

JADX plugin that extracts method names, class references, and source file paths from string constants found in DEX files and decompiled Android code.