Modular file scanning/analysis framework
- python
- analytic-machines
- analysis-framework
- python-script
Repository Index
47,133 repositories indexed
49–72 of 93 · Most stars
Linker/Compiler/Tool detector for Windows, Linux and MacOS.
- detect
- reverse-engineering
- signature
- malware-analysis
Defanged Indicator of Compromise (IOC) Extractor.
- ioc
- indicators-of-compromise
- library
- ioc-extractor
Samsung Tizen root
- embedded-linux
- firmware-analysis
- hardware-hacking
- mali-gpu
dll injection tool that implements various methods
Sandbox for semi-automatic Javascript malware analysis, deobfuscation and payload extraction. Written for Node.js
- malware-samples
- wscript
- deobfuscation
- angler
MQTT-PWN intends to be a one-stop-shop for IoT Broker penetration-testing and security assessment operations.
- python
- mqtt
- mqtt-broker
- mqtt-client
Open PS5 firmware 14.10 research: Lua userland experiments, syscall and attack-surface analysis. Kernel read/write and a complete exploit are not demonstrated.
- ps5
- ps5-homebrew
- ps5-jailbreak
- ps5-tools
Investigate suspicious activity by visualizing Sysmon's event log
- security
- kibana
- elasticsearch
- sysmon
Limon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators of Linux malware. It allows one to inspect Linux malware before execution, during execution, and after execution (post-mortem analysis) by performing static, dynamic and memory analysis using open source tools
large hashcat rulesets generated from real-world compromised passwords
- hashcat
- hashcat-rules
- password-cracking
- security-research
🔐 Library for developing secure, decentralized, anonymous and quantum-resistant networks in Go language
- network
- anonymity
- golang
- library
CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.
- cve-2026-109618
- cve-2026-109619
- exploit
- mod-php
ShowStopper is a tool for helping malware researchers explore and test anti-debug techniques or verify debugger plugins or other solutions that clash with standard anti-debug methods.
BINNY: an open source agent harness for reverse engineering. Plug in any model, or a local one.
- ghidra
- llm-agent
- malware-analysis
- ollama
A SDK for the creation of analysis tools without obtaining app source code in order to profile runtime performance, examine code coverage, and track high-risk behaviors of a given app on Android 5.0 and above.
- binary-instrument
- android
- malware-research
- reverse-engineering
A Simple Elasticsearch Honeypot
TranslatedA domain searcher named GoogleSSLdomainFinder - a subdomain lookup tool based on Google SSL certificate transparency
- domain-scanner
- subdomain
hackers-grep is a utility to search for strings in PE executables including imports, exports, and debug symbols
Supply Chain Security Research - Living Off The Pipeline tools
- lotp
- supply-chain-security
- living-off-the-pipeline
Check a seller, recruiter or landlord against 3,400+ public sources before you trust them. A verdict in plain words and a saved receipt behind every finding. Runs on your PC.
Python implementation of the Packed Executable iDentifier (PEiD)
- peid
- peid-signature
- pe-file
- pe-files
A Python library and command line tools to provide interactive log visualization.
- cybersecurity
- investigation
- malware-analysis
- malware-research
unXOR will search a XORed file and try to guess the key using known-plaintext attacks.