nadrojisk

Jordan Sosnowski's starred repositories

phnt-single-header

Single header version of System Informer's phnt library.

Language:CMakeMIT12700

A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc. @ http://www.windows-internals.com

Language:CMIT1067700

binaryninja-api

Public API, examples, documentation and issues for Binary Ninja

Language:C++MIT86700

lighthouse

A Coverage Explorer for Reverse Engineers

Language:PythonMIT220400

SysWhispers

AV/EDR evasion via direct system calls.

Language:AssemblyApache-2.0175900

TerrariumPI

Home automated terrarium/aquarium or other enclosed environment with a Raspberry Pi

Language:PythonGPL-3.040500

VX-API

Collection of various malicious functionality to aid in malware development

Language:C++MIT138500

MalwareSourceCode

Collection of malware source code for a variety of platforms in an array of different programming languages.

Language:Assembly1547900

rust-malware-gallery

A collection of malware families and malware samples which use the Rust programming language.

11700

rustbinsign

Rust symbol recovery tool

Language:PythonApache-2.01700

LnkParse3

Windows Shortcut file (LNK) parser

Language:PythonMIT6300

Gepetto

IDA plugin which queries uses language models to speed up reverse-engineering

Language:PythonGPL-3.0274800

Organizr

HTPC/Homelab Services Organizer - Written in PHP

Language:PHPGPL-3.0504200

malduck

:duck: Malduck is your ducky companion in malware analysis journeys

Language:PythonGPL-3.031000

al-khaser

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

Language:C++GPL-2.0572400

dnSpy

Unofficial revival of the well known .NET debugger and assembly editor, dnSpy

Language:C#GPL-3.0639300

MSVC_STL_Decompile_Guide

A small guide on how to recognize and decompile Microsoft STL types in disassemblies

Language:C++700

dotnetfile

Language:PythonMIT9900

mac-setup

A very brief and basic list related to the the mac computer setup I like to work with.

21500

unlicense

Dynamic unpacker and import fixer for Themida/WinLicense 2.x and 3.x.

Language:PythonGPL-3.096300

fame

FAME Automates Malware Evaluation

Language:PythonGPL-3.084500

jsdetox

A Javascript malware analysis tool

Language:Ruby58800

runsc

runsc loads 32/64 bit shellcode (depending on how runsc is compiled) in a way that makes it easy to load in a debugger. This code is based on the code from https://github.com/Kdr0x/Kd_Shellcode_Loader by Gary "kd" Contreras.

Language:CMIT3400