Ranked by Attention Score: stars gained over the last 30 complete days
42 repositories by Attention Score · Oct 4, 2026 – Nov 2, 2026 (UTC)
817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains · Apache 2.0
An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.
UNIX-like reverse engineering framework and command-line toolset
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
Program for determining types of files for Windows, Linux and MacOS.
Unofficial revival of the well known .NET debugger and assembly editor, dnSpy
A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.
Exploit Development and Reverse Engineering with GDB & LLDB Made Easy
Defund the Police.
A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.
Malware Configuration And Payload Extraction
The FLARE team's open-source tool to identify capabilities in executable files.
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
Android Reverse-Engineering Workbench for VS Code
GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux
FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
LIEF - Library to Instrument Executable Formats (C++, Python, Rust)
A curated list of awesome YARA rules, tools, and people.
Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android
FakeNet-NG - Next Generation Dynamic Network Analysis Tool
A curated list of awesome resources related to executable packing
Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.
No description provided by the repository host.
Android virtual machine and deobfuscator
DRAKVUF Black-box Binary Analysis
yarGen is a generator for YARA rules
The PE file analysis toolkit
Pafish is a testing tool that uses different techniques to detect virtual machines and malware analysis environments in the same way that malware families do
A machine learning tool that ranks strings based on their relevance for malware analysis.
VirusTotal Wanna Be - Now with 100% more Hipster
30 different honeypots in one package! (dhcp, dns, elastic, ftp, http proxy, https proxy, http, https, imap, ipp, irc, ldap, memcache, mssql, mysql, ntp, oracle, pjl, pop3, postgres, rdp, redis, sip, smb, smtp, snmp, socks5, ssh, telnet, vnc)
Dynamic unpacker based on PE-sieve
Modular file scanning/analysis framework
Linker/Compiler/Tool detector for Windows, Linux and MacOS.
Astral-PE is a low-level mutator (Headers/EP obfuscator) for native Windows PE files (x32/x64)
DC3 Malware Configuration Parser (DC3-MWCP) is a framework for parsing configuration information from malware. The information extracted from malware includes items such as addresses, passwords, filenames, and mutex names.
Python implementation of the Packed Executable iDentifier (PEiD)
Malcom - Malware Communications Analyzer
A Tool for Automatic Analysis of Malware Behavior
Django application that performs SAST and Malware Analysis for Android APKs
Collection of malware persistence and hunting information. Be a persistent persistence hunter!
Docker image gathering packers and tools for making datasets of packed executables and training machine learning models for packing detection