Triton is a dynamic binary analysis library. Build your own program analysis tools, automate your reverse engineering, perform software verification or just emulate code.
- reverse-engineering
- symbolic-execution
- binary-analysis
- program-analysis
47,133 repositories indexed
49–72 of 197 · Most stars
Triton is a dynamic binary analysis library. Build your own program analysis tools, automate your reverse engineering, perform software verification or just emulate code.
Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your taylor-made EASM tool, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, ProjectDiscovery tools, etc.
UNIX-like reverse engineering framework and command-line toolset.
Hide secrets with invisible characters in plain text securely using passwords 🧙🏻♂️⭐
Malware Configuration And Payload Extraction
Atomic and non-atomic counters and rate limiting tools. Limit resource access at any scale.
:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:
Automated NoSQL database enumeration and web application exploitation tool.
🔐 Securely share sensitive information with automatic expiration & deletion after a set number of views or duration. Track who, what and when with full audit logs.
A repository of sysmon configuration modules
The Sleuth Kit® (TSK) is a library and collection of command line digital forensics tools that allow you to investigate volume and file system data. The library can be incorporated into larger digital forensics tools and the command line tools can be directly used to find evidence.
A toolset to make a system look as if it was the victim of an APT attack
Patch-level verification for Bundler
Global edition of ARTEX — an LLM multi-agent autonomous penetration-testing framework. English default, switchable to Korean/Chinese/Spanish/Japanese. For authorized, defensive and detection use only. (upstream: Autumn-27/ARTEX, AGPL-3.0)
Security sensor for realtime threat detection and protection
Entity Framework Core Power Tools - reverse engineering, migrations and model visualization in Visual Studio & CLI
LKM rootkit for Linux Kernels 2.6.x-7.x (x86/x86_64 and ARM/ARM64)
A small set of tools to convert packets from capture files to hash files for use with Hashcat or John the Ripper.
Parsing ELF and DWARF in Python
LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices, such as those powered by Android. The tool supports acquiring memory either to the file system of the device or over the network. LiME is unique in that it is the first tool that allows full memory captures from Android devices. It also minimizes its interaction between user and kernel space processes during acquisition, which allows it to produce memory captures that are more forensically sound than those of other tools designed for Linux memory acquisition.
InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable scans, and seamless Burp integration.
Automated static analysis tools for binary programs
Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS
🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 300+ other hashes ☄ Comes with a neat web app 🔥