DC3 Malware Configuration Parser (DC3-MWCP) is a framework for parsing configuration information from malware. The information extracted from malware includes items such as addresses, passwords, filenames, and mutex names.
A plugin for Microsoft.EntityFrameworkCore to add support of encrypted fields using built-in or custom encryption providers.
Evidence-based DSM ransomware recovery: preservation, RAM key recovery, copy decryption, and GitLab validation.
The most comprehensive Hack The Box writeup collection - 500+ machines, 400+ challenges, interactive knowledge graph, skill trees, attack path diagrams, ProLabs, Sherlocks, OSCP/CPTS/CRTO prep. Browse: momenbasel.github.io/htb-writeups
🚀AutoRuns is a PowerShell module that will help do live incident response and enumerate autoruns artifacts that may be used by legitimate programs as well as malware to achieve persistence.
File Scanning Framework
ROPMEMU is a framework to analyze, dissect and decompile complex code-reuse attacks.
Pakkero is a binary packer written in Go made for fun and educational purpose. Its main goal is to take in input a program file (elf binary, script, even appimage) and compress it, protect it from tampering and intrusion.
The Volatility Collaborative GUI
- volatility-gui
- volatility-framework
- volatility
- memory-dump
🍍Jeff provides the simplest way to manage web sessions in Go.
- golang
- sessions
- http
- session-management
Web interface for the Volatility Memory Forensics Framework
Django application that performs SAST and Malware Analysis for Android APKs
HTTP/2 Last Frame Synchronization (also known as Single Packet Attack) low Level Library / Tool based on Scapy + Exploit Timing Attacks
- http2
- race-condition
- race-conditions
- scapy
A framework for the JOSE standards JWS, JWE, and JWK written in Swift.
Chiron - An IPv6 Security Assessment framework with advanced IPv6 Extension Headers manipulation capabilities.
Android Framework for Exploitation, is a framework for exploiting android based devices
A malware/botnet analysis framework written in Ruby.
PHP2Shell exploit framework — CVE-2026-109618/619 PHP session.upload_progress UAF to RCE
Delphi debug framework
- debug
- stacktrace
- disassembler
- portable-executable
collection of C/C++ programs that try to get compilers to exploit undefined behavior
:mailbox: The Phishing Intelligence Engine - An Active Defense PowerShell Framework for Phishing Defense with Office 365
🔍A cutting edge context aware GraphQL API fuzzing tool!
The Redexer binary instrumentation framework for Dalvik bytecode
- dex
- dynamic-analysis
- bytecode-manipulation
- dalvik
quick and dirty canbus h4xing framework
- automotive-security
- canbus
- car-hacking