sleigh
lifting-bits/sleighCMake build of Ghidra's SLEIGH processor specification library, providing standalone disassembly and p-code lifting engines for reverse engineering…
static-analysiscode-analysisdynamic-code-analysis+4
193
lifting-bits/sleighCMake build of Ghidra's SLEIGH processor specification library, providing standalone disassembly and p-code lifting engines for reverse engineering…
llvmparty/strigaExperimental x86-64 to LLVM IR lifter in Python that translates machine code into analyzable IR for reverse engineering, optimization, and VM handler…
revng/revngOpen source binary analysis framework and decompiler built on LLVM and QEMU, lifting binaries to a readable intermediate representation for reverse…
gmh5225/linux-iptables-firewall-ultrafirewallDefensive Linux firewall toolkit combining IPTables rules and kernel configuration to protect hosts and servers against DoS, DDoS, and network…
gmh5225/linux-kernel-debuggerKernel hardware debugger module for dumping rootkit operations and inspecting kernel-level activity for malware analysis and reverse engineering.
tandasat/minivisorpkgThe research UEFI hypervisor that supports booting an operating system.
mrexodia/titanhideWindows kernel driver that hooks Nt* SSDT functions to hide debuggers and processes from anti-debug checks, with an x64dbg plugin for stealth…
googleprojectzero/maccconcToolkit for exploring Linux kernel race conditions using KCOV traces: GUI and terminal viewers for concurrent execution and memory access, plus…
githubsecuritylab/seclab-taskflow-agentMCP-enabled multi-agent framework for declarative YAML-driven agentic workflows, used for AI-assisted code auditing, vulnerability triage, and…
githubsecuritylab/seclab-taskflowsExample AI-agent taskflows and MCP servers for auditing source code, triaging issues, and detecting vulnerabilities across web, Android, and iOS…
deep-jlu/skillpoisonResearch pipeline that constructs verified successful experiences and organizes them into formation records to progressively poison model skills via…
zju-llm-safety/ascentFine-tuning framework that applies first-order optimal safety calibration and periodic recalibration to LLMs, preserving safety-compatible updates…
sleepingbag945/ddddBatch asset collection and vulnerability scanning tool for red teams. Pulls targets from Hunter, Fofa, and Quake, performs fingerprinting, subdomain…
clausing/scriptsCollection of Python and Perl scripts for digital forensics, incident response, and network analysis, including hash signature tooling and packet…
quarkslab/qsynthesisGreybox Synthesizer geared for deobfuscation of assembly instructions.
werew/qsynth-artifactsBenchmark datasets and synthesis artifacts for QSynth, containing Tigress-obfuscated C functions, x86_64 binaries, execution traces, ground truth,…
slowmist/knowledge-baseCurated knowledge base of blockchain security research, audit reports, guides, and translations covering smart contracts, cryptography, and AI…
elnerd/get-netntlmPowershell module to get the NetNTLMv2 hash of the current user