Capstone disassembly/disassembler framework for ARM, ARM64 (ARMv8), Alpha, BPF, Ethereum VM, HPPA, LoongArch, M68K, M680X, Mips, MOS65XX, PPC, RISC-V(rv32G/rv64G), SH, Sparc, SystemZ, TMS320C64X, TriCore, Webassembly, XCore and X86.
RetDec is a retargetable machine-code decompiler based on LLVM.
The modern Java bytecode editor
Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.
- anti-analysis
- anti-debugging
- anti-sandbox
- anti-vm
Create randomly insecure VMs
AVML - Acquire Volatile Memory for Linux
- rust
- memory-forensics
- linux-security
SIPVicious OSS is a VoIP security testing toolset. It helps security teams, QA and developers test SIP-based VoIP systems and applications. This toolset is useful in simulating VoIP hacking attacks against PBX systems especially through identification, scanning, extension enumeration and password cracking.
- sip
- voip
- password-cracker
- svwar
Disassembler Library for x86 and x86-64
🔐 A CLI tool to extract server certificates
Script to create templates to use with VirtualBox to make vm detection harder
Win Application Framework (WAF) is a lightweight Framework that helps you to create well structured XAML Applications.
Java cryptographic library that supports Argon2, bcrypt, scrypt and PBKDF2 aimed to protect passwords in databases. Easy to use by design, highly customizable, secure and portable. All the implementations follow the standards and have been reviewed to perform better in the JVM.
A library designed to generate cryptographically strong random numbers suitable for managing data such as passwords, account authentication, security tokens, and related secrets.
CLI tool for running coding agents inside hardware-isolated microVMs
Bundle allows you to create doctrine entities with fields that will be protected by encryption algorithms such as AES
Configuration powertool with `metosin/malli`
Open-source eBPF compatibility evidence and CI gate
One isolated Lima VM per GitHub project — sandboxed Claude Code/Codex, Docker, Node, signed git
A production-ready Go SDK for TRON: gRPC client with connection pooling, HD wallets, TRC-10/TRC-20, event decoding, transaction simulation, and shielded TRC-20 (Sapling) support. 85% test coverage.
MCP server that channels JVM forensics into structured leak verdicts — for Claude Code.
Unified Java API for multiple decompilers (Fernflower, Vineflower, Procyon, CFR, JD-Core, JADX)