A pretty (simple) alternative to strace.

Offline desktop app that anonymizes sensitive text before you send it to an AI, then safely restores the originals.

Fileless ELF execution

All-in-One malware analysis tool.

A pure-Python library that lets you inspect, modify and search the memory of any running process in a few lines of Python 🐍 .

Analyze the followers and following accounts that a private (hidden) Instagram account interacts with.

like netcat, but over Tailscale's data plane, without Tailscale's control plane

Maljan: Multi-Agent Malware Analysis Framework

poc it like it's hot

BlueHound - pinpoint the security issues that actually matter

Extract Windows credentials directly from VM memory snapshots and virtual disks

Windows Kernel-Mode Shellcode Development Framework (WKMSDF)

Inspect and unpack InnoSetup archives

Android banker-malware education framework. 4 specimen APKs (0/75 VT), 95 detection rules, 8,300+ lines of red/blue analysis covering 17 banker families.

Flutter SSL Pinning Bypass Tool for Android & iOS — works on any Flutter version without pattern databases

MCP extension for dnSpy.

Windows kernel research tool. Looks like a debugger, but it is not a debugger. It uses a kernel driver to provide a WinDbg-like live kernel debugging experience from a TUI console.

A modern and elegant dashboard for network traffic visualization and analysis.

Network monitoring tool that maps process-to-network connections, identifies cloud providers, and detects beaconing activity. Zero-flag agent binary for deployment, aggregation server, offline ASN …

Reverse Engineering and Malware Analysis Roadmap

Modern Win32 API monitor for Windows security, reverse engineering, debugging, and anti-cheat research.

Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).

rax is a CPU emulator that checks its own work.

DPI detection tool for internet censorship testing. Identifies TLS, TCP, HTTP, DNS blocking and 16-20KB connection drops

T.C. Siber Güvenlik Başkanlığı, yürüttüğü çalışmalarla tespit ettiği tehdit istihbarat verilerini (zararlı ip, domain, url adresleri vb.) siberguvenlik.gov.tr web adresinde paylaşmaktadır.

Self-hosted AI workspace.

A proof-of-concept implementation demonstrating Digital Product Passports using blockchain technology and smart contracts. This project enables secure, transparent tracking of products throughout t…

Another BYOVD process killer. works on all EDR's. fully signed.