Repository Index

UNIX-like reverse engineering framework and command-line toolset

• radare2
• c
• commandline
• reverse-engineering

OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.

• hids
• security
• pci-dss
• nist800-53

UNIX-like reverse engineering framework and command-line toolset.

• reverse-engineering
• program-analysis
• security
• exploitation

Platform for Architecture-Neutral Dynamic Analysis

• reverse-engineering
• dynamic-analysis
• qemu
• pandare

Dynamic unpacker based on PE-sieve

• libpeconv
• pe-sieve
• memory-forensics
• malware-unpacker

DECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope dynamic Android malware analysis platform. DroidScope is now an extension to DECAF.

• binary-analysis
• taint-analysis

The PE file analysis toolkit

• binary-analysis
• reverse-engineering
• pe-file
• portable-executable

A Linux packet crafting tool.

• packet-crafting
• networking
• hacking-tool
• intrusion-prevention

A Tool for Automatic Analysis of Malware Behavior

• machine-learning
• clustering
• classification
• malware-analysis

Reverse engineering tool for automatic structure recovering and memory use analysis based on DynamoRIO and Capstone

🪓 High-Speed Log Analysis & Forensics Tool - Part of NullSec Toolkit

• c
• forensics
• log-analysis
• security

Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.

• bpf
• ebpf
• forensics
• golang

Encrypts 64-bit elf files that decrypt at runtime.

• elf64
• linux
• elf-binaries
• elf-parser