Powerful Python tool to analyze PDF documents

Hades is a Host-Based Intrusion Detection System based on both eBPF(kernel) and netlink/cn_proc(userspace).

An IDA processor for eBPF bytecode

Rust bindings to Windows API

A QEMU emulator for legacy Apple devices

Personal fork for testing

OpenCore disk image for running macOS VMs on Proxmox/QEMU

frida dump dex, frida dump so

The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security development, testing and reverse engineering.

Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.

Automating x64dbg using Python, Snapshots:

zer0m0n driver for cuckoo sandbox

Unofficial revival of the well known .NET debugger and assembly editor, dnSpy

Combination of different utilities, have fun!

Dex to Java decompiler

Set of IDA Pro scripts for parsing GoLang types information stored in compiled binary