Search awesome repositories

Malicious traffic detection system

An advanced memory forensics framework

Android virtual machine and deobfuscator

Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, IPInfo, Shodan, AbuseIPDB, GreyNoise, URLScan.io, Whois/RDAP, NIST, and VulnCheck. Supports LLM enrichment, IOC extraction, YARA scanning, and Android analysis.

Pafish is a testing tool that uses different techniques to detect virtual machines and malware analysis environments in the same way that malware families do

Malware Configuration And Payload Extraction

ThePhish: an automated phishing email analysis tool

IntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.

ClamAV antivirus scanning for Node.js — scan file uploads with a single function call. Zero dependencies. Typed Symbol verdicts. Local or Docker/clamd.

A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.

Advanced anti-reverse-engineering library made in C++26

Kernel-Mode Driver that loads a dll into every new created process that loads kernel32.dll module

Updated version of System Management Mode backdoor for UEFI based platforms: old dog, new tricks

Bug Bounty writeups, Vulnerability Research, Tutorials, Tips&Tricks

Run Windows and Linux programs on Windows, Linux and Android. A user-mode NT and Linux kernel emulator with WHP/KVM acceleration.

Statically unpacking common android banker malware.

Malware Behavior Analyzer

your ai debugger, vibe hacking tool

Android Malware Behavior Deleter