Stars
✨ Innovative and open-source visualization application that transforms various data formats, such as JSON, YAML, XML, CSV and more, into interactive graphs.
Deobfuscate obfuscator.io, unminify and unpack bundled javascript
Library for lifting machine code to LLVM bitcode
A library for creating, reading and editing PE files and .NET modules.
Advanced JavaScript Deobfuscation via Partial Evaluation
Standard collection of rules for capa: the tool for enumerating the capabilities of programs
Metamorphic cross-compilation of C++ & C-code to PIC, BOF & EXE.
Dump lsass using only NTAPI functions creating 3 JSON and 1 ZIP file... and generate the MiniDump file later!
The dragon in the dark. A red team post exploitation framework for testing security controls during red team assessments.
YARA malware query accelerator (web frontend)
Hijacking valid driver services to load arbitrary (signed) drivers abusing native symbolic links and NT paths
A PoC for Mhyprot2.sys vulnerable driver that allowing read/write memory in kernel/user via unprivileged user process.
A Gnome extension featuring indicator icons in system tray, serving as meter for Bluetooth device battery levels and providing detailed battery levels via icon/text in the Bluetooth quick settings …
Python3 utility for creating zip files that smuggle additional data for later extraction
A golang CLI tool to download malware from a variety of sources.
Efficient general mixed boolean-arithmetic (MBA) simplifier
Retrieve inner payloads from Donut samples
StringsAnalyzer is a simple, yet powerful plugin for analyzing string literals in .NET assemblies within dnSpy. It provides a comprehensive view of all string values along with their metadata and l…
Symbol Recovery Tool for Nuitka Binaries
A little tool to filter the stranger strings from a binary so you can analyze the good ones
A .NET assembly tracer using Harmony for runtime method interception.
Public tools, scripts or code snippets that can help when working with our products
A Delphi symbol name recovery tool for reverse engineers.
A modern and open source .NET obfuscation engine for everyone.