FlowerCode

tantivy

Tantivy is a full-text search engine library inspired by Apache Lucene and written in Rust

bloop

bloop is a fast code search engine written in Rust.

ZLUDA

CUDA on ??? GPUs

magika

Detect file content types with deep learning

edk2

EDK II

LLM4Decompile

Reverse Engineering: Decompiling Binary Code with Large Language Models

maestro

Unix-like kernel written in Rust

unblob

Extract files from any kind of container formats

reko

Reko is a binary decompiler.

bincat

Binary code static analyser, with IDA integration. Performs value and taint analysis, type reconstruction, use-after-free and double-free detection

wasmi

WebAssembly (Wasm) interpreter.

EDR-Telemetry

This project aims to compare and evaluate the telemetry of various EDR products.

drakvuf-sandbox

DRAKVUF Sandbox - automated hypervisor-level malware analysis system

dissect

Dissect is a digital forensics & incident response framework and toolset that allows you to quickly access and analyse forensic artefacts from various disk and file formats, developed by Fox-IT (part of NCC Group).

skCrypter

Compile-time, Usermode + Kernelmode, safe and lightweight string crypter library for C++11+

chnroutes2

Better aggregated chnroutes

ocsf-schema

OCSF Schema

native_db

Drop-in embedded database in Rust

xwin

A utility for downloading and packaging the Microsoft CRT & Windows SDK headers and libraries needed for compiling and linking programs targeting Windows.

rebuilderd

Independent verification of binary packages - reproducible builds

lolcerts

A repository of code signing certificates known to have been leaked or stolen, then abused by threat actors

dbsc

resym

Cross-platform tool that allows browsing and extracting C and C++ type declarations from PDB files.

matrix-rs

Rusty Hypervisor - Windows Kernel Blue Pill Type-2 Hypervisor in Rust (Codename: Matrix)

yagooglesearch

Yet another googlesearch - A Python library for executing intelligent, realistic-looking, and tunable Google searches.

sandblaster

Reversing the Apple sandbox

ioctlance

A tool that is used to hunt vulnerabilities in x64 WDM drivers

libbs

A library for writing plugins in any decompiler: includes API lifting, common data formatting, and GUI abstraction!

volatility_symbols

Volatility Symbol Generator for Linux Kernels

DeltaDownloader

Given delta compressed PE files, find download links for them on the Microsoft Symbol Server. No source PE file or VirusTotal access required.