Tools

cyb3rmx/qu1cksc0pe

All-in-One malware analysis tool.

iamsopotatoe-coder/tinyload

Open source Windows x64 PE packer and crypter. Compresses and encrypts executables with a custom virtual machine into a self extracting stub.

0xrootpls/fritter

Polymorphic shellcode generator for in-memory execution of EXE, DLL, .NET, VBScript, and JScript with per-output and per-build randomization for…

0x574r/darkcloak

Linux process identity cloaking tool that spoofs comm, argv, cmdline, environ, exe path, and VMAs via an 11-phase prctl pipeline to impersonate…

fatmike-gh/mcpdebugger

A MCP Debugger Server for Windows executables (x86 and x64). Exposes debugger functionality as MCP Tools for static / dynamic analysis of the…

yhs0602/android-disassembler

Disassemble ANY files including .so (NDK, JNI), Windows PE(EXE, DLL, SYS, etc), linux binaries, libraries, and any other files such as pictures,…

anylnk/stprocessmonitorbyovd

The PoC for CVE-2025-70795 / CVE-2026-0828 and updated driver

moisestapia/cve-2022-3218

Python exploit for CVE-2022-3218 that generates a reverse TCP payload via msfvenom and delivers it over HTTP to a target Windows host.

hasherezade/exe_to_dll

Converts a EXE into DLL

decoder-it/newmachineaccount

Creates Active Directory machine accounts with custom passwords, supporting optional OU placement, explicit credentials, and UAC flag configuration.

mastercodeon314/ksdumper-11

A revival of the classic and legendary KsDumper

sec13b/ms09-050_cve-2009-3103

CVE-2009-3103 ms09-050

senzee1984/inflativeloading

Dynamically convert an unmanaged EXE or DLL file to PIC shellcode by prepending a shellcode stub.

pawlokk/mindmanager-poc

public disclosure

duck-sec/cve-2023-28252-compiled-exe

A modification to fortra's CVE-2023-28252 exploit, compiled to exe

naksyn/pythonmemorymodule

pure-python implementation of MemoryModule technique to load dll and unmanaged exe entirely from memory

gtgalaxi/electronvulnerableversion

Find Electron Apps Vulnerable to CVE-2023-4863 / CVE-2023-5129