🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.

Free and Open Source Reverse Engineering Platform powered by rizin

The Z3 Theorem Prover

Record and Replay Framework

The WebAssembly Binary Toolkit

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

Reverse engineering focusing on x64 Windows.

📝 File hashing and checking shell extension

Ultra fast JSON decoder and encoder written in C with Python bindings

Triton is a dynamic binary analysis library. Build your own program analysis tools, automate your reverse engineering, perform software verification or just emulate code.

Advanced usermode anti-anti-debugger. Forked from https://bitbucket.org/NtQuery/scyllahide

Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).

Portable Executable reversing tool with a friendly GUI

A Pin Tool for tracing API calls etc

Converts a EXE into DLL

Guaranteed compile-time string literal obfuscation header-only library for C++14

A set of fully-undetectable process injection techniques abusing Windows Thread Pools

DRAKVUF Black-box Binary Analysis

Malware Samples. Uploaded to GitHub for those want to analyse the code. Code mostly from: http://www.malwaretech.com

Advanced VM detection library and tool

Game Boy / Game Boy Color / Super Game Boy emulator, debugger and embedded MCP server for macOS, Windows, Linux, BSD and RetroArch.

Hex-Rays microcode API plugin for breaking an obfuscating compiler

x64 Dynamic Reverse Engineering Toolkit

Checksec, but for Windows: static detection of security mitigations in executables

Malware sample library.

InviZzzible is a tool for assessment of your virtual environments in an easy and reliable way. It contains the most recent and up to date detection and evasion techniques as well as fixes for them.

Virtualbox, VirtualMachine, Cuckoo, Anubis, ThreatExpert, Sandboxie, QEMU, Analysis Tools Detection Tools

This repo contains : simple shellcode Loader , Encoders (base64 - custom - UUID - IPv4 - MAC), Encryptors (AES), Fileless Loader (Winhttp, socket)

This comprehensive process injection series is crafted for cybersecurity enthusiasts, researchers, and professionals who aim to stay at the forefront of the field. It serves as a central repository…