
flare-qdb
Command-line and Python debugger for instrumenting and modifying native software behavior on Windows and Linux.

A comprehensive binary emulation and instrumentation platform.

Another RTTI Parsing IDA plugin

Tool for solving BPF filters and crafting packets based on these.

An python vm injector with debug tools, based on gdb.

Security research and reproduction of CVE-2025-5548: A stack-based buffer overflow in FreeFloat FTP Server 1.0. Includes binary analysis, crash…

AST-based Python code transformation & deobfuscation framework

Python scriptable Reverse Engineering Sandbox, a Virtual Machine instrumentation and inspection framework based on QEMU

bespoke tooling for offensive security's Windows Usermode Exploit Dev course (OSED)

Python Command-Line Ghidra MCP

Cosa Nostra, a FOSS graph based malware clusterization toolkit.

Static deobfuscator for Themida, WinLicense and Code Virtualizer 3.x's mutation-based obfuscation.

Define and match user-defined graph patterns against binary control flow graphs using a Capstone-based disassembler, with CLI, Python bindings, and…

RetDec is a retargetable machine-code decompiler based on LLVM.

Open-source code analysis platform for C/C++/Java/Binary/Javascript/Python/Kotlin based on code property graphs. Discord https://discord.gg/vv4MH284Hc

Browser-based frontend to gdb (gnu debugger). Add breakpoints, view the stack, visualize data structures, and more in C, C++, Go, Rust, and Fortran.…

Tiny cute emulator plugin for IDA based on unicorn.

A machine learning tool that ranks strings based on their relevance for malware analysis.