GTFOBins is a curated list of Unix-like executables that can be used to bypass local security restrictions in misconfigured systems.
Repository Index
47,133 repositories indexed
1–24 of 28 · Most stars
The FLARE team's open-source tool to identify capabilities in executable files.
- malware-analysis
- reverse-engineering
- binary-analysis
- threat-intelligence
An open, sub-millisecond, single-executable Firebase alternative with type-safe APIs, built-in WebAssembly runtime, realtime subscriptions, auth, MCP and admin UI built on Rust, SQLite (PG) & Wasmtime.
LIEF - Library to Instrument Executable Formats (C++, Python, Rust)
- reverse-engineering
- malware-analysis
- binary-analysis
- parser
The parent project for OpenZiti. Here you will find the executables for a fully zero-trust, programmable network @OpenZiti
A curated list of awesome resources related to executable packing
- list
- awesome
- awesome-list
- executable-packing
cwe_checker finds vulnerable patterns in binary executables
- cwe
- binary-analysis
- static-analyzer
- vulnerability-scanner
A static analyzer for PE executables.
- malware
- static
- analysis
- pe
Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking, IOCs collection & PE Backdooring. You feed it with your implant, it does a lot of sneaky things and spits out obfuscated executable.
DECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope dynamic Android malware analysis platform. DroidScope is now an extension to DECAF.
- binary-analysis
- taint-analysis
The PE file analysis toolkit
- binary-analysis
- reverse-engineering
- pe-file
- portable-executable
PEframe is a open source tool to perform static analysis on Portable Executable malware and malicious MS Office documents.
Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness
Open detection-rule standard for AI agent security threats — like Sigma, but for AI agents. Executable, testable rules for prompt injection, tool poisoning, context exfiltration and MCP attacks. Merged into open-source projects at Microsoft, Cisco, Gen Digital, MISP and FINOS. MIT-licensed.
- agent-security
- ai-security
- llm-security
- mcp-security
🗜️ A packer for Windows x86 executable files written in C and Intel x86 Assembly. The new file after packing can obstruct reverse engineering（使用C和Intel x86汇编开发的Windows x86可执行文件打包工具，打包后的新文件可以阻碍逆向工程）
Open source Windows x64 PE packer and crypter. Compresses and encrypts executables with a custom virtual machine into a self extracting stub.
- compression
- packer
- pe-packer
- pe-compress
preflight helps you verify scripts and executables to mitigate chain of supply attacks such as the recent Codecov hack.
Python implementation of the Packed Executable iDentifier (PEiD)
- peid
- peid-signature
- pe-file
- pe-files
A PE (Portable Executable) packer with Huffman Compression and Xor encryption.
- huffman-compression
- huffman-algorithm
- pe-header
- packer
Docker image gathering packers and tools for making datasets of packed executables and training machine learning models for packing detection
- docker-image
- executable-packing
- malware-packers
- research-platform
A curated dataset of malware and benign Windows executable samples for malware researchers
- machine-learning
- deep-learning
- malware-research
- malware-detection
Analysis tool for estimating the likelihood that a binary contains compressed or encrypted bytes
- entropy
- pe-file
- pe-files
- pe-format
Dataset of packed PE samples
- dataset
- pe-files
- upx
- samples
Packing detection tool for PE files
- detector
- pe-file
- pe-format
- peid