reverseame repositories

38 repositories

compilers-benchmark-comparator
Public
Measurement pipeline for the runtime, memory, binary-size, and protection-coverage cost of compiler security hardening (GCC, Clang, Rustc). Docker-based, CSV ou…
rust security benchmarking
rust security benchmarking compiler gcc clang hardening sanitizers
Python
•
GNU General Public License v3.0
•1•0•0•0•Updated Sep 25, 2026Sep 25, 2026
RAMPAGE
Public
RAMPAGE is a framework aimed at training and comparing machine learning models for the detection of Algorithmically Generated Domains.
machine-learning tensorflow malware
machine-learning tensorflow malware keras python3 malware-research dga dga-detection
Python
•
GNU General Public License v3.0
•1•0•0•0•Updated Aug 27, 2026Aug 27, 2026
multi-arch-ir-analysis
Public
Python
•0•0•0•0•Updated Aug 24, 2026Aug 24, 2026
memslicer
Public
A memory acquisition tool that captures process memory snapshots into the MSL (Memory Slice) binary format.
Python
•
Apache License 2.0
•1•0•0•0•Updated Aug 28, 2026Aug 28, 2026
cwe-grottke-trivedi
Public
Reproducible pipeline that maps the MITRE CWE Top-25 (2019-2025) onto the Grottke-Trivedi fault taxonomy (Bohrbug / Mandelbug / Aging-Related Bug). Includes heu…
Python
•
GNU General Public License v3.0
•0•0•0•0•Updated Aug 14, 2026Aug 14, 2026
rop3
Public
A tool to search for gadgets, operations, and ROP chains using a backtracking algorithm in a tree-like structure
windows evaluation rop
windows evaluation rop turing-completeness rop-chain automatic-exploit
Python
•
GNU General Public License v3.0
•1•19•0•0•Updated Oct 5, 2026Oct 5, 2026
APOTHEOSIS
Public
A specialized implementation of the Hierarchical Navigable Small World (HNSW) data structure adapted for efficient nearest neighbor lookup of approximate matchi…
python3 approximate-nearest-neighbor-search approximate-matching
python3 approximate-nearest-neighbor-search approximate-matching hnsw
Python
•
GNU General Public License v3.0
•4•13•1•0•Updated Sep 1, 2026Sep 1, 2026
sdhash
Public
similarity digest hashing tool
Python
•
Apache License 2.0
•32•0•0•0•Updated Jul 27, 2026Jul 27, 2026
sigcheck
Public
Volatility3 plugin to validate Authenticode-signed processes, either with embedded signature or catalog-signed
python openssl authenticode
python openssl authenticode volatility sigcheck volatility-plugins volatility3
Python
•
GNU General Public License v3.0
•4•20•0•0•Updated Jul 3, 2026Jul 3, 2026
automated-ioc-extractor
Public
Automated malware analysis pipeline using Proxmox, CAPE, and Volatility
Python
•
MIT License
•2•0•0•1•Updated Jun 29, 2026Jun 29, 2026
CAPEv2
Public
Malware Configuration And Payload Extraction
Python
•
Other
•606•1•0•0•Updated Jun 24, 2026Jun 24, 2026
adversarial-dga-framework
Public
Python
•
GNU Affero General Public License v3.0
•0•1•0•0•Updated Jun 24, 2026Jun 24, 2026
sum-plugin
Public
Volatility3 plugin to undo modifications done by relocation process on modules
volatility similarity-score memory-forensics
volatility similarity-score memory-forensics volatility-plugins approximate-matching volatility3
Python
•
GNU General Public License v3.0
•0•0•0•0•Updated Jun 14, 2026Jun 14, 2026
similarity-unrelocated-module
Public
Volatility3 plugin to yield and compare similarity digest of modules on execution.
python sum volatility
python sum volatility memory-forensics volatility-plugins approximate-matching fuzzy-hash similarity-digest volatility3
Python
•
GNU General Public License v3.0
•0•1•1•0•Updated Jun 14, 2026Jun 14, 2026
markedPefile
Public
Python
•
GNU General Public License v3.0
•1•0•0•0•Updated Jun 14, 2026Jun 14, 2026
processfuzzyhash
Public
Volatility3 plugin to calculate and compare Windows processes fuzzy hashes
python dcfldd volatility
python dcfldd volatility ssdeep tlsh fuzzy-hashes sdhash volatility-plugins volatility3
Python
•
GNU Affero General Public License v3.0
•1•7•0•0•Updated Jun 14, 2026Jun 14, 2026
residentmem
Public
Volatility3 plugin to obtain the number of the resident memory pages per module (exe or dll) and per driver from a Windows memory dump.
python volatility memory-forensics
python volatility memory-forensics volatility-plugins volatility3
Python
•
GNU General Public License v3.0
•0•2•0•0•Updated Jun 14, 2026Jun 14, 2026
malscan
Public
Volatility3 plugin to detect malicious code thanks to ClamAV (kind of combination of malfind + ClamAV)
python clamav malware-analysis
python clamav malware-analysis volatility volatility-plugins volatility3
Python
•
GNU Affero General Public License v3.0
•1•3•0•0•Updated Jun 14, 2026Jun 14, 2026
winesap
Public
Volatility plugin to search for all Autostart Extensibility Points (AESPs)
python malware-analysis volatility
python malware-analysis volatility volatility-plugins malware-persistence autostar-extensibility-points aesp
Python
•
GNU Affero General Public License v3.0
•0•10•0•0•Updated Jun 13, 2026Jun 13, 2026
BinTopsy
Public
A lightweight Python toolkit for static malware analysis, binary entropy visualization, and threat intelligence gathering. Includes tools for disassembly, YARA …
Python
•
GNU General Public License v3.0
•0•3•0•0•Updated May 7, 2026May 7, 2026
MARISSA
Public
MessAge foRmat Inference with Similarity digeSt Algorithms
network reverse-engineering protocols
network reverse-engineering protocols pre
Python
•
GNU General Public License v3.0
•0•4•0•0•Updated Apr 12, 2026Apr 12, 2026
synoptic
Public
Synoptic: Concolic execution for network protocol inference
python symbolic-execution finite-state-machine
python symbolic-execution finite-state-machine pintool network-analysis network-protocols concolic-execution dynamic-control-flow-graph
Python
•
GNU General Public License v3.0
•0•0•0•0•Updated Apr 11, 2026Apr 11, 2026
heaplist
Public
Volatility 3 plugin to extract the heap from Windows memory images
windows incident-response dfir
windows incident-response dfir heap digital-forensics digital-forensics-incident-response volatility3
Python
•
GNU General Public License v3.0
•0•1•0•0•Updated Dec 20, 2025Dec 20, 2025
Characterizing-TTPs-in-the-macOS-Threat-Landscape
Public
Source data and Scripts used for the paper: Characterizing Tactics, Techniques, and Procedures in the macOS Threat Landscape
Python
•0•0•0•0•Updated Nov 12, 2025Nov 12, 2025
MalGraphIQ
Public
Transform your malware sandbox reports and execution traces into behavior and category graphs and plot their Windows Behavior Catalog (WBC) behavior identificat…
visualization windows behavior
visualization windows behavior graphs sandbox malware backtracking malware-analysis malware-research malware-detection
Python
•
GNU General Public License v3.0
•1•4•0•0•Updated Oct 22, 2025Oct 22, 2025
rme-Python-toolkit
Public
A collection of Python tools developed and maintained by the Reverseame research group.
cli-tools
cli-tools
Python
•0•0•0•0•Updated Sep 1, 2025Sep 1, 2025
exploring-ZeroShot-LLM-DGA
Public
A framework for evaluating Large Language Models in zero-shot detection of Algorithmically Generated Domains (AGDs) used by malware for Command and Control comm…
dga agd llm
dga agd llm
Python
•
GNU General Public License v3.0
•0•1•0•0•Updated Jul 18, 2025Jul 18, 2025
LLM-DGA-lab
Public
Framework for evaluating Large Language Models in zero-shot detection of Algorithmically Generated Domains (AGDs). Supports 9 LLMs across 4 vendors with binary/…
Python
•
GNU General Public License v3.0
•0•0•0•0•Updated Jul 18, 2025Jul 18, 2025
MALVADA
Public
MALVADA: Malware Execution Traces Dataset generation.
malware dataset malware-analysis
malware dataset malware-analysis malware-research datasets dataset-generation malware-samples malware-dataset datasets-preparation malware-execution
Python
•
GNU General Public License v3.0
•2•9•0•0•Updated Jul 12, 2025Jul 12, 2025
winapi-categories
Public
Windows API (WinAPI) functions and system calls with categories in JSON format, including arguments (SAL notation) and more.
windows winapi syscalls
windows winapi syscalls windows-api system-calls native-api ntapi windows-syscalls windows-functions
Python
•
GNU General Public License v3.0
•2•29•1•0•Updated Jun 11, 2025Jun 11, 2025

ProTip! When viewing an organization's repositories, you can use the props. filter to filter by custom property.

Navigation Menu

RME-DisCo Research Group

All

38 repositories

compilers-benchmark-comparator

RAMPAGE

multi-arch-ir-analysis

memslicer

cwe-grottke-trivedi

rop3

APOTHEOSIS

sdhash

sigcheck

automated-ioc-extractor

CAPEv2

adversarial-dga-framework

sum-plugin

similarity-unrelocated-module

markedPefile

processfuzzyhash

residentmem

malscan

winesap

BinTopsy

MARISSA

synoptic

heaplist

Characterizing-TTPs-in-the-macOS-Threat-Landscape

MalGraphIQ

rme-Python-toolkit

exploring-ZeroShot-LLM-DGA

LLM-DGA-lab

MALVADA

winapi-categories

Repositories list

38 repositories