DRAKVUF Black-box Binary Analysis
- malware-analysis
- virtualization
- xen
- introspection
Repository Index
58,136 visible repositories in the index
49–72 of 100 · Most stars
Reverse engineer anything with agents, from app behavior down to native binaries.
The Artillery Project is an open-source blue team tool designed to protect Linux and Windows operating systems through multiple methods.
Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.
- golang
- http-server
- https-server
- ctf
Agent-first reverse engineering for macOS, Windows and Linux: any ACP agent reads, renames and patches binaries, Android apps and GPU kernels next to you.
:camera: PictShare is an open source image, mp4, pastebin hosting service with a simple resizing and upload API that you can host yourself. :rice_scene:
- docker
- images
- selfhosted
- picture
DECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope dynamic Android malware analysis platform. DroidScope is now an extension to DECAF.
- binary-analysis
- taint-analysis
The PE file analysis toolkit
- binary-analysis
- reverse-engineering
- pe-file
- portable-executable
Automatic and platform-independent unpacker for Windows binaries based on emulation
- reverse-engineering
- unpacker
- pefile
- windows
A work-in-progress deobfuscator for movfuscated binaries
Andromeda - Interactive Reverse Engineering Tool for Android Applications
- android
- reverse-engineering
- binary-analysis
- static-analysis
A "malicious" DNS server for executing DNS Rebinding attacks on the fly (public instance running on rebind.network:53)
Tool to gather Threat Intelligence indicators from publicly available sources
🔐 An SSL library for configuring http client or server. Rich with features such as hot reloading ssl and trusting additional certificates during runtime, combining multiple keystores, loading pem files and os/jdk certificates, logging certificate information during ssl handshake, bypassing ssl configuration from other libraries and more
Paaster is a secure and user-friendly pastebin application that prioritizes privacy and simplicity. With end-to-end encryption and paste history, Paaster ensures that your pasted code remains confidential and accessible.
- pastebin
- paaster
- e2ee
- paste
A front-end JavaScript toolkit for creating DNS rebinding attacks.
Open-source, auditable network gateway for homelabs, NAS and servers: DDNS, STUN traversal, port forwarding with SNI routing, reverse proxy and web server, ACME certificates, WAF, Tailscale, frp, Cloudflare Tunnel, Docker and web terminal in one binary. Runs on Docker, fnOS, OpenWrt, Linux, macOS and Windows.
- acme
- ddns
- frp
- golang
DNS Rebinding Exploitation Framework
Python telnet honeypot for catching botnet binaries
Pakkero is a binary packer written in Go made for fun and educational purpose. Its main goal is to take in input a program file (elf binary, script, even appimage) and compress it, protect it from tampering and intrusion.
- launcher
- payload
- elf
- elf-binaries
High-performance pure-javascript SHA1 implementation suitable for large binary data, reaching up to half the native speed.
Encrypted pastebin using IPFS
BINNY: an open source agent harness for reverse engineering. Plug in any model, or a local one.
- ghidra
- llm-agent
- malware-analysis
- ollama
EVTXtract recovers and reconstructs fragments of EVTX log files from raw binary data, including unallocated space and memory images.