nicolaipre

auto-enum

IDA Plugin to automatically identify and set enums for standard functions

BlackSheep

Fast ASGI web framework for Python

gef

GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux

pwndbg

Exploit Development and Reverse Engineering with GDB Made Easy

flare-emu

decomp2dbg

A plugin to introduce interactive symbols into your debugger from your decompiler

binsync

A reversing plugin for cross-decompiler collaboration, built on git.

Proxy-DLL-Loads

The code is a pingback to the Dark Vortex blog:

HexType

HexType: Efficient Detection of Type Confusion Errors for C++

awesome-malware-development

Organized list of my malware development resources

TweetFeed

TweetFeed collects Indicators of Compromise (IOCs) shared by the infosec community at Twitter. Here you will find malicious URLs, domains, IPs, and SHA256/MD5 hashes.

DriverBuddyReloaded

Driver Buddy Reloaded is an IDA Pro Python plugin that helps automate some tedious Windows Kernel Drivers reverse engineering tasks

TamperingSyscalls

syringe

Random tools and things for creating+injecting complex organisms into a process on both the posix and windows platforms. Includes support for decomposing a ton of file formats and in-memory data structures. Just a container repository for now until I finally separate the modules into their own individual projects.

ImHex-Patterns

Hex patterns, include patterns and magic files for the use with the ImHex Hex Editor

fauxpilot

FauxPilot - an open-source alternative to GitHub Copilot server

protections-artifacts

Elastic Security detection content for Endpoint

ida_vmware_windows_gdb

Helper script for Windows kernel debugging with IDA Pro on VMware + GDB stub (including PDB symbols)

biodiff

Hex diff viewer using alignment algorithms from biology

notcurses

blingful character graphics/TUI library. definitely not curses.

elfparser

Cross Platform ELF analysis

ExAndroidNativeEmu

An improved version of AndroidNativeEmu,Allow running android elf on PC

unlicense

Dynamic unpacker and import fixer for Themida/WinLicense 2.x and 3.x.

roach

Cockroach is your primitive & immortal swiss army knife.

cosign

Code signing and transparency for containers and binaries

LL-Java-Zip

Lower level ZIP support for Java

JFXDevTools

Lots of helpful classes to streamline JFX development.

Invoke-Obfuscation

PowerShell Obfuscator

gdi-palettes-exp

DC25 5A1F - Demystifying Windows Kernel Exploitation by Abusing GDI Objects

Windows-Non-Paged-Pool-Overflow-Exploitation

Techniques based on named pipes for pool overflow exploitation targeting the most recent (and oldest) Windows versions demonstrated on CVE-2020-17087 and an off-by-one overflow