Starred repositories
Workshop materials for “Step-by-Step Malware Development: Evading EDR from Loaders to the Kernel” presented at DEF CON 34 and BSidesLV 2026. Covers malware development, EDR Architecture, EDR evasio…
A curated list of plugins for DeepSeek Harness (dsh) · DeepSeek Harness 插件精选列表
Mythic C2 agent with a full in-memory BOF loader for macOS and Linux
DeepSeek Harness: Everything is a Plugin.
x86-64 Symbolic Execution & LLVM IR Lifting Framework for Deobfuscation
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
一个windows反汇编工具，界面风格防OllyDbg 利用业余开发了一款类似仿OLlyDbg界面的 IDA静态反编译工具，目前是1.0版本，功能不是很强大但是基本功能有了
⌥ AI Coding agent for the terminal — hash-anchored edits, optimized tool harness, LSP, Python, browser, subagents, and more
Live USB device tree in your terminal. Rust TUI, no root, no libusb. Full activity metrics on Linux; device tree on macOS/Windows.
r0crawl_skills is a massive reverse-engineering skill arsenal for web, Android, iOS, Frida, native binaries, protocols, malware, firmware, and anti-analysis—built for beginners, tuned for pros, and…
A Windows userland tool to enumerate and classify ALPC ports, including PPL-protected processes.
A self-improving RLM agent for coding workflows and long-running autonomous tasks.
ANIMO Azure Network Intel & Mission Ops a C2 based on Azure/Entra assessments
The system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every operation improves the next.
Open-source AI-augmented offensive security harness. 13+ autonomous agents, 150+ LLM providers, 5,300+ models, 7,600+ Ed25519-signed attack skills, 56+ built-in tools, 176+ MCP tools. MITRE ATT&CK,…
.NET deobfuscator and unpacker.
The AI-friendly C23 compiler for security research, built on LLVM [WIP]
A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more
The Native Reverse Engineering IDE. Zero-overhead binary analysis, full CPU emulation (PE/ELF), and headless automation. Powered by Capstone, Unicorn, LLVM & Remill via N-API.
OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-security
Automated Proton-GE and Proton-CachyOS builds patched with LinUwUx.patch.
Preview-first Grok Build instruction deployment with compat and hook isolation, durable recovery, and layered uninstall.
Managed Claude Code instruction deployment with safe CLI recovery and an unsigned macOS/Windows desktop beta.