Tools

phanhoangkhang/react2shell

Isolated Docker lab and static scanner for CVE-2025-55182, with vulnerable/patched Next.js builds and PoC validation of RSC Flight deserialization.

hydradragonantivirus/hydradragonav-mobile

Android Antivirus which doesn't require root, adb, ca install and cloud with many features and ways to detect more zero-day malware

adam-040/enigma

C++ reverse-engineering IDE with PE/ELF parsing, x86/x64 disassembly, Pcode IR, decompilation, function detection, and a Qt GUI.

cynepmyx/nginx-rift-check

Detects the CVE-2026-42945 rewrite pattern in nginx configs: rewrite with ? in the replacement plus an unnamed capture consumed in the same location

0xdea/rhabdomancer

Vulnerability research assistant that locates calls to potentially insecure API functions in a binary file.

tindersec/gh-workflow-auditor

Script to audit GitHub Action Workflow files for potential vulnerabilities.

neo23x0/yara-performance-guidelines

A guide on how to write fast and memory friendly YARA rules

pietroborrello/customprocessingunit

The first analysis framework for CPU microcode

iilegacyyii/exportdumper

A small tool I made to dump the export table of PE files. The primary use case was intended for use within DLL proxying.

tanprathan/mobileapp-pentest-cheatsheet

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration…

fr0gger/iatelligence

IATelligence is a Python script that will extract the IAT of a PE file and request GPT to get more information about the API and the ATT&CK matrix…

ga1ois/blackhat-europe-2022

Select Bugs From Binary Where Pattern Like CVE-1337-Days