Drltrace is a library calls tracer for Windows and Linux applications.
- dbi
- malware-analysis
- malware-detection
- api-trace
47,133 repositories indexed
409–432 of 764 · Most stars
Drltrace is a library calls tracer for Windows and Linux applications.
Easily retargetable and hackable interactive disassembler with IDAPython-compatible plugin API
Keyscope is a key and secret workflow (validation, invalidation, etc.) tool built in Rust
teler-waf is a Go HTTP middleware that protects local web services from OWASP Top 10 threats, known vulnerabilities, malicious actors, botnets, unwanted crawlers, and brute force attacks.
Limon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators of Linux malware. It allows one to inspect Linux malware before execution, during execution, and after execution (post-mortem analysis) by performing static, dynamic and memory analysis using open source tools
Boomerang Decompiler - Fighting the code-rot :)
large hashcat rulesets generated from real-world compromised passwords
A web front-end for password cracking and analytics
Heimdall is a wrapper around the Security framework for simple encryption/decryption operations.
Delphi Detours Library
Discover internet-wide misconfigurations while drinking coffee
tool for generating wordlists or extending an existing one using mutations.
HIBA is a system built on top of regular OpenSSH certificate-based authentication that allows to manage flexible authorization of principals on pools of target hosts without the need to push customized authorized_users files periodically.
A framework for automated extraction of static and dynamic features from Android applications
CrackerJack / Hashcat Web Interface / Context Information Security
A Tool for Automatic Analysis of Malware Behavior
Oath is rails authentication made simple. Previously known as Monban
A Python RESTful API framework for online malware analysis and threat intelligence services.
A patch analysis tool
.NET client for the Auth0 Authentication & Management APIs.
Simple promise-based session middleware for Next.js, micro, Express, and more
Astral-PE is a low-level mutator (Headers/EP obfuscator) for native Windows PE files (x32/x64)
DC3 Malware Configuration Parser (DC3-MWCP) is a framework for parsing configuration information from malware. The information extracted from malware includes items such as addresses, passwords, filenames, and mutex names.
The Cold Disk Quick Response (CDQR) tool is a fast and easy to use forensic artifact parsing tool that works on disk images, mounted drives and extracted artifacts from Windows, Linux, MacOS, and Android devices