Custom Command and Control (C3). A framework for rapid prototyping of custom C2 channels, while still providing integration with existing offensive toolkits.

Make You Happy!

AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.

GoResolver is a Go analysis tool using both Go symbol extraction and Control Flow Graph (CFG) similarity to identify and resolve the function symbols of an obfuscated Go binary.

YARA malware query accelerator (web frontend)

Very WIP Cpp2IL-style dumper for NativeAOT binaries

Deobfuscate obfuscator.io, unminify and unpack bundled javascript

Library for lifting machine code to LLVM bitcode

StringsAnalyzer is a simple, yet powerful plugin for analyzing string literals in .NET assemblies within dnSpy. It provides a comprehensive view of all string values along with their metadata and l…

Zero-dependency MCP server implementation.

A .NET assembly tracer using Harmony for runtime method interception.

The dragon in the dark. A red team post exploitation framework for testing security controls during red team assessments.

Symbol Recovery Tool for Nuitka Binaries

🎵 Transfer your Spotify playlists to YouTube Music with intelligent track matching and real-time progress tracking. Supports both new playlist creation and direct transfer to liked music.

🏔 Love Freedom - ❌ Block Mass Surveillance

A Gnome extension featuring indicator icons in system tray, serving as meter for Bluetooth device battery levels and providing detailed battery levels via icon/text in the Bluetooth quick settings …

Metamorphic cross-compilation of C++ & C-code to PIC, BOF & EXE.

A little tool to filter the stranger strings from a binary so you can analyze the good ones

A Delphi symbol name recovery tool for reverse engineers.

🪅 Windows User Space Emulator

A golang CLI tool to download malware from a variety of sources.

Python3 utility for creating zip files that smuggle additional data for later extraction

✨ Innovative and open-source visualization application that transforms various data formats, such as JSON, YAML, XML and CSV into interactive graphs.

Deobfuscate and inspect code passed into exec() and eval()

A PoC for Mhyprot2.sys vulnerable driver that allowing read/write memory in kernel/user via unprivileged user process.

Efficient general mixed boolean-arithmetic (MBA) simplifier

Standard collection of rules for capa: the tool for enumerating the capabilities of programs

Public tools, scripts or code snippets that can help when working with our products