Repository Index

UNIX-like reverse engineering framework and command-line toolset

• radare2
• c
• commandline
• reverse-engineering

Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software protection .

• thefatrat
• bypass
• linux
• autorun

eBPF-based Security Observability and Runtime Enforcement

• bpf
• ebpf
• kernel
• kubernetes

Optimized C library for EC operations on curve secp256k1

Hardened allocator designed for modern systems. It has integration into Android's Bionic libc and can be used externally with musl and glibc as a dynamic library for use on other Linux-based platforms. It will gain more portability/integration over time.

• malloc
• security
• memory-allocation
• malloc-library

A Linux eBPF rootkit with a backdoor, C2, library injection, execution hijacking, persistence and stealth capabilities.

• backdoor
• ebpf
• kernel
• rootkit

BitCracker is the first open source password cracking tool for memory units encrypted with BitLocker

• bitlocker
• password-cracker
• cuda
• cryptography

DECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope dynamic Android malware analysis platform. DroidScope is now an extension to DECAF.

• binary-analysis
• taint-analysis

The PE file analysis toolkit

• binary-analysis
• reverse-engineering
• pe-file
• portable-executable

Sigma Rules Engine inside the Linux Kernel using eBPF. Focusing on prevention capabilities

• ebpf
• security
• linux-kernel
• linux-security-module

A mysqldump anonymizer

• mysqldump
• anonymizer
• database-anonymizer
• rgpd

Run basic functions from stripped binaries cross platform

Tool used for dumping memory from Android devices

Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.

• bpf
• ebpf
• forensics
• golang

Encrypts 64-bit elf files that decrypt at runtime.

• elf64
• linux
• elf-binaries
• elf-parser

ELF packer - encrypt and inject self-decryption code into executable ELF binary target

• 42
• elf
• injection
• shellcode

Reducing Bias in Modeling Real-world Password Strength via Deep Learning and Dynamic Dictionaries