wazuh / wazuh

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

x64dbg / x64dbg

An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.

lkimuk / ReArk

An intelligent reverse engineering and AI-assisted analysis tool for HarmonyOS NEXT (HAP/APP/ABC), Android (APK/AAB), iOS (IPA), and native PE/ELF/Mach-O binaries.

lief-project / LIEF

LIEF - Library to Instrument Executable Formats (C++, Python, Rust)

hasherezade / pe-bear

Portable Executable reversing tool with a friendly GUI

tklengyel / drakvuf

DRAKVUF Black-box Binary Analysis

glmcdona / Process-Dump

Windows tool for dumping malware PE files from memory back to disk for analysis.

horsicq / Nauz-File-Detector

Linker/Compiler/Tool detector for Windows, Linux and MacOS.

forrest-orr / moneta

Moneta is a live usermode memory analysis tool for Windows with the capability to detect malware IOCs

JoasASantos / Red-Team-Exercises

—

horsicq / XAPKDetector

APK/DEX detector for Windows, Linux and MacOS.

doxsir / peep

PE file parser in plain C++17 - reading exe headers byte by byte