evil-e

sdb-explorer

Tool to view and create Microsoft shim database files (SDB).

js-jsonpath

JavaScript JSON Path helper

aescrypt

Extension of the ATL Server CCryptKey Object for AES encryption.

capstone

Capstone disassembly/disassembler framework: Core (Arm, Arm64, Mips, PPC, Sparc, SystemZ, X86, X86_64, XCore) + bindings (Python, Java, Ocaml)

chopshop

Protocol Analysis/Decoder Framework

ConfuserEx

An open-source, free protector for .NET applications

flare-fakenet-ng

FakeNet-NG - Next Generation Dynamic Network Analysis Tool

flare-vm

Ioncube8-Decoder

Project discontinued, Feel free to fork and contribute. 😉

keystone

Keystone assembler framework: Core (Arm, Arm64, Hexagon, Mips, PowerPC, Sparc, SystemZ & X86) + bindings

MAP

Malcode Analyst Pack - suite of tools useful for malcode analysts, originally released through iDefense

mcsema

x86 to machine code translation framework

metasploit-framework

Metasploit Framework

misc

pefile

pefile is a Python module to read and work with PE (Portable Executable) files

proxy.py

⚡⚡⚡Fast, Lightweight, Pluggable, TLS interception capable proxy server focused on Network monitoring, controls & Application development, testing, debugging

python-sdb

Pure Python parser for Application Compatibility Shim Databases (.sdb files)

pywin32

Fork of pywin32 that compiles with Visual Studio 2015

remill

Machine code to LLVM binary translator

speakeasy

Windows kernel and user mode emulation.

vcpkg

VC++ Packaging Tool

veris

vivisect