Tools

trailofbits/fickling

A Python pickling decompiler and static analyzer

kaandemir993/malwareforge---advanced-static-malware-analyzer

Advanced Static malware analyzer that reveals 8 injection techniques, critical API calls, hidden strings, exports PE sections (.text, .rdata) as…

bronils/aotopsy

Static analyzer for Flutter/Dart AOT snapshots — recovers function names, class hierarchies, call graphs, and behavioral signals from libapp.so…

lethal-forensics/memprocfs-analyzer

Automates Windows memory forensics and DFIR workflows with MemProcFS: YARA/ClamAV scanning, process anomaly detection, and artifact/log extraction.

nccgroup/memaddressanalysis

Research project related to memory address analysis

corelight/zeek-elf

A Zeek ELF File Analyzer

corelight/zeek-spicy-facefish

A Zeek protocol analyzer for the Facefish rootkit, based on Spicy.

thehive-project/cortex

Cortex: a Powerful Observable Analysis and Active Response Engine

kernullist/windbg-decompile-ext

WinDbg x64 extension that disassembles live functions and uses an LLM to produce verified pseudocode.

mozillazg/ptcpdump

eBPF-based packet analyzer that captures network traffic with automatic process, container, and Kubernetes pod metadata annotation, supporting…

werwolv/imhex

🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

mhaggis/package-inferno

A Public Package Scanner for The Community

yandex/gixy

Nginx configuration static analyzer

jp/hermes-proxy

Hermes Proxy - HTTP Traffic Analyzer

tejasprasad2008-afk/tracetree

Runtime behavioral analysis tool that sandboxes suspicious packages in Docker, traces syscalls with strace, maps process cascades into directed…

pion/handoff

Start WebRTC in the browser—run it somewhere else

benrich127n/react2shell_analyzer

a dart package to analyze CVE-2025-55182 react2shell