Beast code in Giters

Thomza's starred repositories

miasm

Reverse engineering framework in Python

Language:PythonGPL-2.0345700

frinet

Frida-based tracer for easier reverse-engineering on Android, iOS, Linux, Windows and most related architectures.

Language:CMIT45200

Katalina

Katalina is like Unicorn but for Dalvik bytecode. It provides an environment that can execute Android bytecode one instruction at a time.

Language:PythonMIT13600

ved-ebpf

VED-eBPF: Kernel Exploit and Rootkit Detection using eBPF

Language:C++AGPL-3.014900

TEE-reversing

A curated list of public TEE resources for learning how to reverse-engineer and achieve trusted code execution on ARM devices

88000

windiff

Web-based tool that allows comparing symbol, type and syscall information of Microsoft Windows binaries across different versions of the OS.

Language:RustGPL-3.031900

refinery

High Octane Triage Analysis

Language:PythonNOASSERTION63300

The goal of this repo is to archive artifacts from all versions of various OS's and categorizing them by type. This will help with artifact validation processes as well as increase access to artifacts that may no longer be readily available anymore.

Language:HTMLMIT54500

pi-defender

Kernel Security driver used to block past, current and future process injection techniques on Windows Operating System.

Language:C++LGPL-3.014700

de4dot

.NET deobfuscator and unpacker.

Language:C#GPL-3.0691200

usbmuxd2

A socket daemon written in C++ to multiplex connections from and to iOS devices over USB and WIFI

Language:C++LGPL-3.018700

IDAGraphity

IDAGraphity: An Interactive Binary Data Visualization Plugin for IDA Pro

Language:PythonApache-2.0800

multicast_bytecopy

kernel r/w exploit for iOS 15.0 - 15.1.1

Language:C25600

pe_to_shellcode

Converts PE into a shellcode

Language:C++BSD-2-Clause234600

Windows_Malware_Emulator

Emulator for Windows Malware Analysis

Language:PythonApache-2.01200

binlex

A Binary Genetic Traits Lexer Framework

Language:C++Unlicense38500

hollows_hunter

Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).

Language:CBSD-2-Clause200800

karton

Distributed malware processing framework based on Python, Redis and S3.

Language:PythonBSD-3-Clause38600

caldera

Automated Adversary Emulation Platform

Language:PythonApache-2.0553600

sigma

Main Sigma Rule Repository

Language:PythonNOASSERTION819100

pe-sieve

Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).

Language:C++BSD-2-Clause305200

Malware-analysis-and-Reverse-engineering

Some of my publicly available Malware analysis and Reverse engineering.

Language:Python74900

drakvuf

DRAKVUF Black-box Binary Analysis

Language:C++NOASSERTION104700

malware_training_vol1

Materials for Windows Malware Analysis training (volume 1)

Language:Assembly192000

mimikatz

A little tool to play with Windows security

Language:C1929700

mwdb-core

Malware repository component for samples & static configuration with REST API interface.

Language:PythonNOASSERTION32000

DetectionLab

Automate the creation of a lab environment complete with security tooling and logging best practices

Language:HTMLMIT461500

impacket

Impacket is a collection of Python classes for working with network protocols.

Language:PythonNOASSERTION1335000

Apollo-11

Original Apollo 11 Guidance Computer (AGC) source code for the command and lunar modules.

Language:AssemblyNOASSERTION5757200

thyzavard