ITh4cker

bddisasm

bddisasm is a fast, lightweight, x86/x64 instruction decoder. The project also features a fast, basic, x86/x64 instruction emulator, designed specifically to detect shellcode-like behavior.

zelos

A comprehensive binary emulation and instrumentation platform.

qiling

A True Instrumentable Binary Emulation Framework

go_parser

Yet Another Golang binary parser for IDAPro

Godzilla

哥斯拉

My-Presentation-Slides

Collections of Orange Tsai's public presentation slides.

r77-rootkit

Fileless ring 3 rootkit with installer and persistence that hides processes, files, network connections, etc.

ja3

JA3 is a standard for creating SSL client fingerprints in an easy to produce and shareable way.

Invoke-SocksProxy

Invoke-SocksProxy is a PowerShell script designed to create reverse proxies.

awesome-pentest

A collection of awesome penetration testing resources, tools and other shiny things

Penetration-Testing

List of awesome penetration testing resources, tools and other shiny things

awesome-forensicstools

Awesome list of digital forensic tools

cset

Cybersecurity Evaluation Tool

CHIRP

A DFIR tool written in Python.

malware_training_vol1

Materials for Windows Malware Analysis training (volume 1)

faxhell

A Bind Shell Using the Fax Service and a DLL Hijack

codeql

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

frida-all-in-one

《FRIDA操作手册》by @hluwa @r0ysue

Browser-pwn

Include CVE vulnerability analyze， ctf pwn and documents for Browser-pwn

Hyper-V-Internals

Internals information about Hyper-V

pupy

Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation framework written in python and C

Reverse-Engineering

A FREE comprehensive reverse engineering tutorial covering x86, x64, 32-bit ARM & 64-bit ARM architectures.

open-vm-tools

Official repository of VMware open-vm-tools project

advent-vmpwn

2019 Advent Calendar, vmware pwnables

pcshare

red_team_tool_countermeasures

ImHex

🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

flare-fakenet-ng

FakeNet-NG - Next Generation Dynamic Network Analysis Tool

GDA-android-reversing-Tool

the fastest and most powerful android decompiler(native tool working without Java VM) for the APK, DEX, ODEX, OAT, JAR, AAR, and CLASS file. which supports malicious behavior detection, privacy leaking detection, vulnerability detection, path solving, packer identification, variable tracking, deobfuscation, python&java scripts, device memory extraction, data decryption, and encryption, etc.

ossmalware