Stars
aria2 is a lightweight multi-protocol & multi-source, cross platform download utility operated in command-line. It supports HTTP/HTTPS, FTP, SFTP, BitTorrent and Metalink.
Free and Open Source Reverse Engineering Platform powered by rizin
A cross-platform, reimplementation of Notepad++
FlashMLA: Efficient Multi-head Latent Attention Kernels
RetDec is a retargetable machine-code decompiler based on LLVM.
🚀 The best real-time interactive AI avatar(digital human) with on-premise deployment and <1.5 s latency.
Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.
Detours is a software package for monitoring and instrumenting API calls on Windows. It is distributed in source code form.
LIEF - Library to Instrument Executable Formats (C++, Python, Rust)
Cross-platform GUI management tools for OpenCore（OCAT）
Advanced usermode anti-anti-debugger. Forked from https://bitbucket.org/NtQuery/scyllahide
Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).
This is a collection of #botnet source codes, unorganized. For EDUCATIONAL PURPOSES ONLY
Hook system calls, context switches, page faults and more.
Keystone assembler framework: Core (Arm, Arm64, Hexagon, Mips, PowerPC, Sparc, SystemZ & X86) + bindings
Disable PatchGuard and Driver Signature Enforcement at boot time
A static devirtualizer for VMProtect x64 3.x. powered by VTIL.
Intel VT-x based hypervisor aiming to provide a thin VM-exit filtering platform on Windows.
Automated static analysis tools for binary programs
IDA Pro plugin with a rich set of features: decryption, deobfuscation, patching, lib code recognition and various pseudocode transformations
Obfuscation library based on C++20 and metaprogramming
Hypervisor based anti anti debug plugin for x64dbg
lightweight hypervisor SDK written in C++ with support for Windows, Linux and UEFI
Monitoring and controlling kernel API calls with stealth hook using EPT