Drltrace is a library calls tracer for Windows and Linux applications.
- dbi
- malware-analysis
- malware-detection
- api-trace
47,133 repositories indexed
193–216 of 363 · Most stars
Drltrace is a library calls tracer for Windows and Linux applications.
teler-waf is a Go HTTP middleware that protects local web services from OWASP Top 10 threats, known vulnerabilities, malicious actors, botnets, unwanted crawlers, and brute force attacks.
Limon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators of Linux malware. It allows one to inspect Linux malware before execution, during execution, and after execution (post-mortem analysis) by performing static, dynamic and memory analysis using open source tools
Paste a wallet or a transaction hash and follow stolen crypto to the exchange that can freeze it. Works across Bitcoin, Ethereum, TRON, BNB Chain and Solana. One-click report.
A framework for automated extraction of static and dynamic features from Android applications
A Tool for Automatic Analysis of Malware Behavior
A Python RESTful API framework for online malware analysis and threat intelligence services.
Simple promise-based session middleware for Next.js, micro, Express, and more
Astral-PE is a low-level mutator (Headers/EP obfuscator) for native Windows PE files (x32/x64)
DC3 Malware Configuration Parser (DC3-MWCP) is a framework for parsing configuration information from malware. The information extracted from malware includes items such as addresses, passwords, filenames, and mutex names.
Evidence-based DSM ransomware recovery: preservation, RAM key recovery, copy decryption, and GitLab validation.
Don't Roll Your Own Crypto: fast, type-safe, pure-Rust cryptography with post-quantum support
Inject OWASP recommended HTTP Headers for increased security in a single line
Compilation of autoexec scripts and mods for Xiaomi Yi camera after reverse engineering of firmware.
Android Malware Sandbox
Python telnet honeypot for catching botnet binaries
🚀AutoRuns is a PowerShell module that will help do live incident response and enumerate autoruns artifacts that may be used by legitimate programs as well as malware to achieve persistence.
Inspektor is a protocol-aware proxy that is used to enforce access policies👮
CVE-2026-109618 / CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.
A Rails 6 boilerplate to create your next Saas product. Preloaded with graphQL, devise, JWT, CanCanCan, RailsAdmin, Rubocop, Rspec, i18n and more.
Generic Capacitor OAuth 2 client plugin. Stop the war in Ukraine!
Who do websites think you are? A privacy self-check: every sniffer any site can run, the portrait they paint, and the contradictions that give away a VPN or proxy
Middleware for adding security headers to an ASP.NET Core application.
🍍Jeff provides the simplest way to manage web sessions in Go.