Tools

hasherezade/mal_unpack

Runs packed malware in a controlled environment, waits for self-unpacking, dumps PE files and shellcodes from memory, and terminates the process.

atlas0fd00m/vivisection

Vivisect plugin enabling function emulation, function recon, and interactive Python CLI for emulation-driven reverse engineering and vulnerability…

microsoft/windbg-samples

Sample extensions, scripts, and API uses for WinDbg.

intellabs/kafl

A fuzzer for full VM kernel/driver targets

epi052/osed-scripts

bespoke tooling for offensive security's Windows Usermode Exploit Dev course (OSED)

airbus-cert/yara-ttd

Use YARA rules on Time Travel Debugging traces

hugsy/bochscpu-python

Python bindings for BochsCPU

rizlmaulanaa/cve-2026-23479-redis-uaf-proof-of-concept

Proof of concept with GDB‑assisted exploitation (educational / lab use only)

skylined/bugid

Detect, analyze and uniquely identify crashes in Windows applications

nccgroup/asadbg

asadbg is a framework of tools to aid in automating live debugging of Cisco ASA devices

nccgroup/libdlmalloc

Heap analysis tooling for dlmalloc

nccgroup/libptmalloc

Heap analysis tooling for ptmalloc

nccgroup/libmempool

Heap analysis tooling for mempool

nccgroup/libtalloc

libtalloc is a python script for use with GDB that can be used to analyse the "trivial allocator" (talloc)