Archived
RedWarden
mgeeky/redwardenCobalt Strike C2 Reverse proxy that fends off Blue Teams, AVs, EDRs, scanners through packet inspection and malleable profile correlation
command-and-controlexploit-frameworksids-ips-evasion+8
b3nac/injuredandroidA vulnerable Android application that shows simple examples of vulnerabilities in a ctf style.
claudiugeorgiu/obfuscapkAn automatic obfuscation tool for Android apps that works in a black-box fashion, supports advanced obfuscation features and has a modular…
a0rtega/pafishPafish is a testing tool that uses different techniques to detect virtual machines and malware analysis environments in the same way that malware…
talha-nazeef-ahmed/rpc-triageA zero-symbol static analysis engine that extracts and mathematically ranks the Windows RPC attack surface using an AHP-based risk model.
xcracker000/cve-2024-56426Exploit kit for Exynos 9830 bootROM that delivers signed-boot bypass, custom key injection, and memory-dump payloads for Samsung SM-G985F devices.
gmh5225/anti_suspendShellcode-based process protection that prevents thread suspension, blocks debugger attach, masks hardware breakpoints, and hides threads from…
kaandemir993/redline-stealer-c2-defender-bypass-payload-analysis"Reverse engineering analysis of RedLine Stealer, a .NET-based info-stealer that uses C2 domains (198.46.86.63, tempuri.org), Windows Defender…
lycis/cawdogCAWODOG is a proof-of-concept project demonstrating how to protect Python-based AI models deployed on offline industrial machines. Across three…
skylot/jadxCommand-line and GUI tool for decompiling Android Dex and APK files into readable Java source code, with resource decoding, deobfuscation, and Smali…
pwndbg/pwndbgExploit Development and Reverse Engineering with GDB & LLDB Made Easy
cyrus-and/gdb-dashboardModular GDB interface providing a visual dashboard with customizable panels for inspecting registers, source code, assembly, and program state during…
simoneavogadro/android-reverse-engineering-skillDecompiles Android APK/XAPK/JAR/AAR files and extracts HTTP APIs, authentication patterns, and call flows using jadx, with R8-resistant Kotlin name…
hasherezade/pe-sieveScans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).
google/bindiffQuickly find differences and similarities in disassembled code
jonathansalwan/tritonTriton is a dynamic binary analysis library. Build your own program analysis tools, automate your reverse engineering, perform software verification…
mr-un1k0d3r/edrsRed team tool for EDR evasion: dynamically resolves syscall IDs, patches ntdll stubs, unhooks IAT hooks, and lists hooked APIs from major EDR vendors.