Process-Dump
glmcdona/process-dumpWindows tool for dumping malware PE files from memory back to disk for analysis.
binary-analysisforensicsmalware-analysis+2
glmcdona/process-dumpWindows tool for dumping malware PE files from memory back to disk for analysis.
decaf-project/decafDECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope…
david942j/seccomp-toolsProvide powerful tools for seccomp analysis
airbus-seclab/bincatBinary code static analyser, with IDA integration. Performs value and taint analysis, type reconstruction, use-after-free and double-free detection
dump-guy/malware-analysis-and-reverse-engineeringSome of my publicly available Malware analysis and Reverse engineering.
perkins-fund/malware-bibleFree educational courses in cybersecurity, reverse engineering, malware analysis, and programming designed to expand access, build practical skills,…
wecooperate/imonitorEndpoint behavior monitoring and analysis system for processes, files, registry, and networks. Supports scripting, extensions, and plugins for…
huskyhacks/pmat-labsLabs for Practical Malware Analysis & Triage
schutzwerk/canalyzat0rSecurity analysis toolkit for proprietary car protocols
guelfoweb/peframePEframe is a open source tool to perform static analysis on Portable Executable malware and malicious MS Office documents.
mcgill-dmas/kam1n0-communityScalable assembly analysis platform for indexing, clone search, and executable classification using static, dynamic, and machine-learning techniques…
smtimesiwndr/gdid-reversalReverse-engineered analysis of Microsoft's Global Device Identifier (GDID) revealing its generation as a server-assigned MSA Device PUID, storage in…
mandiant/stringsifterA machine learning tool that ranks strings based on their relevance for malware analysis.
xtiankisutsa/mara_frameworkMARA is a Mobile Application Reverse engineering and Analysis Framework. It is a toolkit that puts together commonly used mobile application reverse…
llnl/oghidraOGhidra bridges Large Language Models (LLMs) via Ollama with the Ghidra reverse engineering platform, enabling AI-driven binary analysis through…
tothi/pwn-hisilicon-dvrProof-of-concept exploit and vulnerability disclosure for HiSilicon hi3520d DVR/NVR devices. Demonstrates RCE via web interface, backdoor…
indetectables-net/toolkitCurated Windows toolkit for reverse engineering, malware analysis, and password cracking. Includes 101 pre-configured tools with automatic updates…