Program for determining types of files for Windows, Linux and MacOS.
- debugger
- detect
- unpacker
- disassembler
47,133 repositories indexed
1–24 of 32 · Most stars
Program for determining types of files for Windows, Linux and MacOS.
RetDec is a retargetable machine-code decompiler based on LLVM.
Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.
LIEF - Library to Instrument Executable Formats (C++, Python, Rust)
Android virtual machine and deobfuscator
This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.
Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android
Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte
A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis
A machine learning tool that ranks strings based on their relevance for malware analysis.
Modular file scanning/analysis framework
Machinae Security Intelligence Collector
A Tool for Automatic Analysis of Malware Behavior
The most comprehensive Hack The Box writeup collection - 500+ machines, 400+ challenges, interactive knowledge graph, skill trees, attack path diagrams, ProLabs, Sherlocks, OSCP/CPTS/CRTO prep. Browse: momenbasel.github.io/htb-writeups
inVtero.net: A high speed (Gbps) Forensics, Memory integrity & assurance. Includes offensive & defensive memory capabilities. Find/Extract processes, hypervisors (including nested) in memory dumps using microarchitechture independent Virtual Machiene Introspection techniques
Create adversarial attacks against machine learning Windows malware detectors
Protect your SIP Servers from bad actors at https://sentrypeer.org
Read-only, local-first cloud security scanner for AWS, Azure and GCP. Your scan data stays on your machine.
Open source Windows x64 PE packer and crypter. Compresses and encrypts executables with a custom virtual machine into a self extracting stub.
A tool for quantitative risk analysis of Android applications based on machine learning techniques
The agentic pentesting environment that lives on your machine. AI agent teams, visual workflows and your own tools, 100% local.
Mac browser for Mach-O binaries (macOS, iOS, watchOS, and tvOS)
Machine-learn password mangling rules
Docker image gathering packers and tools for making datasets of packed executables and training machine learning models for packing detection