
Capsulith
Run preserved ARM64 code in Node or a browser; inspect decoded image pixels and initialized memory.

Run preserved ARM64 code in Node or a browser; inspect decoded image pixels and initialized memory.
Use Prolog to analyze memory dumps and stopped live processes in WinDbg.

Binary, coverage-guided fuzzer for Windows, macOS, Linux and Android

Standalone emulation and testing harness for Cobalt Strike Aggressor Scripts (.cna) that validates syntax, mocks Beacon APIs, and executes BOFs via…

Disassembler, decompiler and x64dbg-style debugger for PE/ELF binaries with IDA-style listing, function graphs, Lua plugins, CLI, and a built-in MCP…

Inspect, debug, and visually test Model Context Protocol (MCP) servers from a web UI, CLI, or TUI, with tool/resource exploration, request logging,…

Sample extensions, scripts, and API uses for WinDbg.

asadbg is a framework of tools to aid in automating live debugging of Cisco ASA devices

Security research on Liferay CE 7.0.3 GA4: pre-auth RCE as root (CVE-2020-7961 class) reproduced end-to-end, plus 16 more findings — 8+ with no known…

A pure-python fully automated and unattended fuzzing framework.



Auto Installer Script for Cuckoo Sandbox

Python Decoders for Common Remote Access Trojans

Native multi-arch disassembler & decompiler - PE/ELF/Mach-O, x86/x64/ARM64, Lua scripting, RTTI recovery

Easily create full virtual machines that are sandboxed for development or computer use models.

ComfyEngine is a memory exploration toolkit built for people who need to monitor, patch, and script a running process.

Runtime tracer for Node.js malware analysis that hooks core modules, logs calls, spoofs anti-analysis checks, and captures file writes and HTTP…