Repository Index

Modular file scanning/analysis framework

• python
• analytic-machines
• analysis-framework
• python-script

Linker/Compiler/Tool detector for Windows, Linux and MacOS.

• detect
• reverse-engineering
• signature
• malware-analysis

Defanged Indicator of Compromise (IOC) Extractor.

• ioc
• indicators-of-compromise
• library
• ioc-extractor

Samsung Tizen root

• embedded-linux
• firmware-analysis
• hardware-hacking
• mali-gpu

dll injection tool that implements various methods

Sandbox for semi-automatic Javascript malware analysis, deobfuscation and payload extraction. Written for Node.js

• malware-samples
• wscript
• deobfuscation
• angler

MQTT-PWN intends to be a one-stop-shop for IoT Broker penetration-testing and security assessment operations.

• python
• mqtt
• mqtt-broker
• mqtt-client

Open PS5 firmware 14.10 research: Lua userland experiments, syscall and attack-surface analysis. Kernel read/write and a complete exploit are not demonstrated.

• ps5
• ps5-homebrew
• ps5-jailbreak
• ps5-tools

Limon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators of Linux malware. It allows one to inspect Linux malware before execution, during execution, and after execution (post-mortem analysis) by performing static, dynamic and memory analysis using open source tools

large hashcat rulesets generated from real-world compromised passwords

• hashcat
• hashcat-rules
• password-cracking
• security-research

🔐 Library for developing secure, decentralized, anonymous and quantum-resistant networks in Go language

• network
• anonymity
• golang
• library

CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.

• cve-2026-109618
• cve-2026-109619
• exploit
• mod-php

ShowStopper is a tool for helping malware researchers explore and test anti-debug techniques or verify debugger plugins or other solutions that clash with standard anti-debug methods.

• research
• anti-debug
• malware

BINNY: an open source agent harness for reverse engineering. Plug in any model, or a local one.

• ghidra
• llm-agent
• malware-analysis
• ollama

A SDK for the creation of analysis tools without obtaining app source code in order to profile runtime performance, examine code coverage, and track high-risk behaviors of a given app on Android 5.0 and above.

• binary-instrument
• android
• malware-research
• reverse-engineering

Supply Chain Security Research - Living Off The Pipeline tools

• lotp
• supply-chain-security
• living-off-the-pipeline

Python implementation of the Packed Executable iDentifier (PEiD)

• peid
• peid-signature
• pe-file
• pe-files

A Python library and command line tools to provide interactive log visualization.

• cybersecurity
• investigation
• malware-analysis
• malware-research

Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design

• exploit
• php
• php2shell
• php2shell-cve

BluePill: Neutralizing Anti-Analysis Behavior in Malware Dissection (Black Hat Europe 2019, IEEE TIFS 2020)

• malware-analysis
• reverse-engineering
• debugger
• malware

A modular Python application to pull intelligence about malicious files

• malware-analysis
• malware-research
• investigation
• cybersecurity

PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12

• cve-2026-109618
• cve-2026-109619
• exploit
• memory-corruption

This repository contains reverse engineering results and resources for a few specific car models of a very specific car manufacturer. Please don't sue.

• car-hacking
• automotive-security

AI-powered platform for OSINT intelligence analysis. Features archive discovery with hypothesis-driven investigation, GLiNER entity extraction, Mapbox geospatial visualization, network analysis, and document processing. Built with FastAPI, Next.js, Weaviate, and DSPy.

• ai-agents
• document-processing
• dspy
• entity-extraction