jstrosch

magika

Detect file content types with deep learning

flare-vm

A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.

dnSpy

Unofficial revival of the well known .NET debugger and assembly editor, dnSpy

lensm

Go assembly and source viewer

malware-samples

Malware samples, analysis exercises and other interesting resources.

awesome-ida-x64-olly-plugin

A curated list of IDA x64DBG, Ghidra and OllyDBG plugins.

RATDecoders

Python Decoders for Common Remote Access Trojans

StalkPhish

StalkPhish - The Phishing kits stalker, harvesting phishing kits for investigations.

learning-malware-analysis

This repository contains sample programs that mimick behavior found in real-world malware. The goal is to provide source code that can be compiled and used for learning purposes, without having to worry about handling live malware.

ttddbg

Time Travel Debugging IDA plugin

GoReSym

Go symbol recovery tool

learning-reverse-engineering

This repository contains sample programs written primarily in C and C++ for learning native code reverse engineering.

dalton

Suricata and Snort IDS rule and pcap testing system

evebox

Web Based Event Viewer (GUI) for Suricata EVE Events in Elastic Search

STrace

A DTrace on Windows Reimplementation

what_is_this_c2

For all these times you're asking yourself "what is this panel again?"

Beta

Beta versions of my software

c2db

c2 traffic

RETools

My reversing tools. Some custom, some not.

PhishingKit-Yara-Rules

Repository of Yara rules dedicated to Phishing Kits Zip files

pcasm

PC Assembly language book

sclauncher

A small program written in C that is designed to load 32/64-bit shellcode and allow for execution or debugging. Can also output PE files from shellcode.

hedgehog-tools

subparse

Modular malware analysis artifact collection and correlation framework

subcrawl

SubCrawl is a modular framework for discovering open directories, identifying unique content through signatures and organizing the data with optional output modules, such as Elastic.

Configuration_extractors

Configuration Extractors for Malware

suricata-4-analysts

The Security Analyst’s Guide to Suricata

yaradbg-frontend

idapython

My IDA Python scripts.

Nightcap