x64dbg / x64dbg
An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.
x64dbg / x64dbg
forkhelpburn / rpocket-Shellcode-Memory-Fluctuation
Advanced memory evasion PoC that cyclically encrypts shellcode and fluctuates between RW/NoAccess and RX memory protections to bypass memory scanners like Moneta and PE-Sieve.
SelfGeckoBoiler / rpocket-team-Python-Memory-Forge
Far Cry 3 Memory Editor Python Script 2026: Modify Health, Money, Ammo and Items
SilentisVox / SyscallRevenant
Clean Indirect Syscalls with Syscall Tampering.
vxunderground / MalwareSourceCode
Collection of malware source code for a variety of platforms in an array of different programming languages.
JoasASantos / Malvex
AI-driven malware analysis framework with 30+ integrated tools, web REPL, and MCP server
THREATBYTES / Malware-Analysis-Report-Template
A standardised malware analysis report template with a JSON Schema and Markdown format mapped to MITRE ATT&CK. Validate, share and compare reports consistently. Part of ThreatBytes.
StevenBlack / hosts
๐ Consolidating and extending hosts files from several well-curated sources. Optionally pick extensions for porn, social media, and other categories.
hagezi / dns-blocklists
DNS-Blocklists: For a better internet - keep the internet clean!
radareorg / radare2
UNIX-like reverse engineering framework and command-line toolset
MobSF / Mobile-Security-Framework-MobSF
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
wazuh / wazuh
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
winsiderss / systeminformer
A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc. @ https://windows-internals.com
mytechnotalent / Reverse-Engineering
A FREE comprehensive reverse engineering tutorial covering x86, x64, 32-bit/64-bit ARM, 8-bit AVR and 32-bit RISC-V architectures.
horsicq / Detect-It-Easy
Program for determining types of files for Windows, Linux and MacOS.
pwndbg / pwndbg
Exploit Development and Reverse Engineering with GDB & LLDB Made Easy
malwaredllc / byob
An open-source post-exploitation framework for students, researchers and developers.
mandiant / flare-vm
A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.
We5ter / Scanners-Box
The Ultimate Open-Source Security Arsenal for Hackers, Enterprises, and AI Agentsโโ้ขๅๆๅฎขใไผไธไธ AI ๆบ่ฝไฝ็ๅ จๅๅผๆบ็ฝ็ปๅฎๅ จๅทฅๅ ท็ฉ้ต
stamparm / maltrail
Malicious traffic detection system
nomi-sec / PoC-in-GitHub
๐ก PoC auto collect from GitHub. โ ๏ธ Be careful Malware.
bee-san / pyWhat
๐ธ Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it is! ๐งโโ๏ธ
MISP / MISP
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
mandiant / capa
The FLARE team's open-source tool to identify capabilities in executable files.
qilingframework / qiling
A True Instrumentable Binary Emulation Framework
lief-project / LIEF
LIEF - Library to Instrument Executable Formats (C++, Python, Rust)
mitchellkrogza / nginx-ultimate-bad-bot-blocker
Nginx Block Bad Bots, Spam Referrer Blocker, Vulnerability Scanners, User-Agents, Malware, Adware, Ransomware, Malicious Sites, with anti-DDOS, Wordpress Theme Detector Blocking and Fail2Ban Jail for Repeat Offenders
intelowlproject / IntelOwl
IntelOwl: manage your Threat Intelligence at scale
volatilityfoundation / volatility3
Volatility 3.0 development
mandiant / flare-floss
FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
HyperDbg / HyperDbg
State-of-the-art native debugging tools
alexandreborges / malwoverview
Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, IPInfo, Shodan, AbuseIPDB, GreyNoise, URLScan.io, Whois/RDAP, NIST, and VulnCheck. Supports LLM enrichment, IOC extraction, YARA scanning, and Android analysis.
jekil / awesome-hacking
Awesome hacking is an awesome collection of hacking tools.
AdventDevInc / kudu
Free Windows, Mac and Linux cleaner, scanner, and more.
firehol / blocklist-ipsets
ipsets dynamically updated with firehol's update-ipsets.sh script
hasherezade / pe-bear
Portable Executable reversing tool with a friendly GUI
Cats-Team / AdRules
List for blocking ads in the Chinese region. Block Ads, Trackers, Malware, HTTPDNS, PCDN.
kevoreilly / CAPEv2
Malware Configuration And Payload Extraction
blackorbird / APT_REPORT
Interesting APT Report Collection And Some Special IOCs
EnergizedProtection / block
Let's make an annoyance free, better open internet, altogether!
rednaga / APKiD
Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android
duty1g / x64dbg-mcp-server
x64dbg-MCP Server is a native MCP (Model Context Protocol) plugin for x64dbg that exposes the debugger's full functionality over HTTP. Connect any MCP-compatible AI assistant and control x64dbg programmatically: set breakpoints, step through code, read memory, dump registers, and more. Built with Zig โ zero dependencies, single-binary output, cros
rabbitstack / fibratus
Security sensor for realtime threat detection and protection
Ch0pin / medusa
Mobile Edge-Dynamic Unified Security Analysis
phishdestroy / destroylist
Real-time phishing & scam domain blocklist - 205k+ curated threats, 1M+ community, free API, multiple formats
mandiant / speakeasy
Windows kernel and user mode emulation.
eset / malware-ioc
Indicators of Compromises (IOC) of our various investigations
iliyami / MacSai
Mac Sai: the open-source Mac cleaner, optimizer, and malware scanner. A free, Apple-notarized alternative to CleanMyMac, built with Swift 6 and SwiftUI.
glmcdona / Process-Dump
Windows tool for dumping malware PE files from memory back to disk for analysis.
rootkit-io / awesome-malware-development
Curated resources for malware dev, reverse engineering, and defensive security research.
jm33-m0 / emp3r0r
Selfโhealing Gossip Mesh C2 with Assisted Peer Discovery, Cross-Platform BOF Execution, and Scriptable Agents.
ev-flow / quark-engine
โ
collinbarrett / FilterLists
:shield: The independent, comprehensive directory of filter and host lists for advertisements, trackers, malware, and annoyances.
packing-box / awesome-executable-packing
A curated list of awesome resources related to executable packing
Ultimate-Hosts-Blacklist / Ultimate.Hosts.Blacklist
The Ultimate Unified Hosts file for protecting your network, computer, smartphones and Wi-Fi devices against millions of bad web sites. Protect your children and family from gaining access to bad web sites and protect your devices and pc from being infected with Malware or Ransomware.
Phishing-Database / Phishing.Database
Phishing Domains, urls websites and threats database. We use the PyFunceble testing tool to validate the status of all known Phishing domains and provide stats to reveal how many unique domains used for Phishing are still active.
pass-with-high-score / universal-installer
A modern Android app for installing and managing APK packages with split APK support, silent install via Shizuku, and VirusTotal malware scanning.
CERT-Polska / drakvuf-sandbox
DRAKVUF Sandbox - automated hypervisor-level malware analysis system
2akouwu / reverify
Stop your AI from making things up โ it proposes, deterministic tools decide, every claim checked against ground truth with evidence. Grounded facts and context survive resets. Reverse engineering is the proving ground. MCP server + CLI.
LING71671 / open-reverselab
Open-source AI reverse-engineering agent platform and MCP server for Ghidra, Frida, x64dbg and Rizin โ automated PE/APK/binary analysis, CTF and malware research, with 100+ MCP tools and a 194-article runnable knowledge base.