Tools

mandiant/strace

A DTrace on Windows Reimplementation

chichou/vscode-frida

VSCode extension for Frida-based mobile reverse engineering: runtime class/module inspection, Java/ObjC/native hook generation, autocomplete, and…

gagaltotal/cve-2026-60004-poc-gitea

CVE-2026-60004 — Gitea Pre-Auth RCE via diffpatch hook injection

zer0condition/reversekit

x64 Dynamic Reverse Engineering Toolkit

hunt-benito/one-multiply-too-many-cve-2026-70638-llama-cpp-android-jni-integer-overflow

Reproduces the CVE-2026-70638 integer overflow in llama.cpp Android JNI with a safe arithmetic demo, malicious GGUF generator, and Frida hook for…

rweijnen/createdump

Leverage WindowsApp createdump tool to obtain an lsass dump

shinthink/cve-2026-60004

CVE-2026-60004 — Gitea/Forgejo Diffpatch Git Hook RCE. Bare clone → post-index-change hook injection. CVSS 9.8 | CWE-94 | Gitea < 1.27.1

imbas007/cve-2026-60004-poc

CVE-2026-60004 Pre-Auth RCE Exploit — Gitea <= 1.27.0 diffpatch git hook injection (CVSS 9.8)

al1ex/hook-passwordchangenotify

Hook PasswordChangeNotify

nccgroup/windowsfirewallhookdriverenumeration

Tools to enumerate Windows Firewall Hook Drivers on Windows 2000, XP and 2003

eqstlab/hook

submodule for git_rce

0xblackash/cve-2026-60004

CVE-2026-60004

malwaretech/edrception

A proof of concept for abusing exception handlers to hook and bypass user mode EDR hooks.

dsnezhkov/octohook

Git Web Hook Tunnel for C2

rofl0r/proxychains-ng

proxychains ng (new generation) - a preloader which hooks calls to sockets in dynamically linked programs and redirects it through one or more…

alex3434/wmi-static-spoofer

Spoofing the Windows 10 HDD/diskdrive serialnumber from kernel without hooking