Qu1cksc0pe

Qu1cksc0pe All-in-One malware analysis tool for analyze many file types, from Windows binaries to E-Mail files. You can get : What DLL files are used. Functions and APIs. Sections and segments. URLs, IP addresses and emails. Android permissions Dangerous/Special/Info. MITRE ATT&CK mappings Window...

r2gopclntabParser

r2gopclntabParser Note: This feature has been implemented directly to radare2's core as gopc analysis plugin A radare2-based Go gopclntab parser for recovering function symbols from Go binaries, including fully stripped ones. Supports ELF, Mach-O, and PE binaries across Go versions 1.2, 1.16, 1.1...

PT-ToolKit

PT-ToolKit Exploits, Powershell Scripts, Executables that are useful during Penetration-Testing or Red Team engagement Most of the Tools and Script are aimed to Active-Directory environment and windows platfform Table of Contents Exploits PowerShell-Scripts Windows-Binary Exploits: Some exploits...

krf

KRF KRF is a K ernelspace R andomized F aulter. It currently supports the Linux and FreeBSD kernels. What? Fault injection is a software testing technique that involves inducing failures "faults" in the functions called by a program. If the callee has failed to perform proper error checking and...

ida-pro-mcp

IDA Pro MCP Simple MCP Server to allow vibe reversing in IDA Pro. https://github.com/user-attachments/assets/6ebeaa92-a9db-43fa-b756-eececce2aca0 The binaries and prompt for the video are available in the mcp-reversing-dataset repository. Prerequisites Python 3.11 or higher Use idapyswitch to...

wrongsecrets-binaries

wrongsecrets-binaries...

caracal

Caracal Caracal is a static analyzer tool over the SIERRA representation for Starknet smart contracts. Features Detectors to detect vulnerable Cairo code Printers to report information Taint analysis Data flow analysis framework Easy to run in Scarb projects Installation Precompiled binaries...

AlphaGolang

AlphaGolang by Juan Andres Guerrero-Saade JAG-S @ SentinelLabs Description: AlphaGolang is a collection of IDAPython scripts to help malware reverse engineers master Go binaries. The idea is to break the scripts into concrete steps, thus avoiding brittle monolithic scripts, and mimicking the...

jfrog-CVE-2022-24675

CVE-2022-24675 tools Usage instructions root@kitploit: cve202224675.sh rootfolder Will recursively walk the specified folder and report Golang binaries which use pem.Decode function, or are stripped in which case function name will be missed and the check will not be effective...

gftrace

gftrace 一个用于 Golang 二进制文件的命令行 Windows API 跟踪工具。 注意： 此工具是一个概念验证和工作进行中的原型，请相应对待。欢迎反馈！ 工作原理？ 尽管 Golang 程序在构建方式和运行时行为方面包含许多细微差别，但它们仍然需要与操作系统层交互，这意味着在某些时候它们确实需要调用 Windows API 的函数。 Go 运行时包包含一个名为 asmstdcall 的函数，该函数是用于与 Windows API 交互的一种“网关”。由于这个函数预计会调用 Windows API...

gftrace

gftrace A command line Windows API tracing tool for Golang binaries. Note: This tool is a PoC and a work-in-progress prototype so please treat it as such. Feedbacks are always welcome! How it works? Although Golang programs contains a lot of nuances regarding the way they are built and their...

LOLBAS

Living Off The Land Binaries and Scripts and now also Libraries All the different files can be found behind a fancy frontend here: https://lolbas-project.github.io thanks @ConsciousHacker for this bit of eyecandy and the team over at https://gtfobins.github.io/. This repo serves as a place where ...

evilqr

Evil QR Toolkit demonstrating another approach of a QRLJacking attack, allowing to perform remote account takeover, through sign-in QR code phishing. It consists of a browser extension used by the attacker to extract the sign-in QR code and a server application, which retrieves the sign-in QR cod...

litefuzz

litefuzz Un fuzzer multiplataforma para probar binarios en espacio de usuario, clientes y servidores. Ha encontrado errores en más de 50 aplicaciones y bibliotecas de empresas importantes y código abierto. Configuración simple para comenzar a fuzzear en Linux, Mac y Windows. litefuzz intro why ho...

xori

Xori - 自定义反汇编框架 Xori 是一个面向自动化的反汇编和静态分析库，可处理 shellcode 或 PE 二进制文件，并提供初步分析数据。 致谢： Xori 的诞生离不开开源社区的启发与创意。我们深深感谢 Capstone 引擎 和 LLVM 项目 的工作。 支持的架构： i386 x86-64 文件格式 PE、PE+ 纯 Shellcode 当前功能 输出 JSON 格式的：1 反汇编结果、2 函数、3 导入表。 管理映像内存和栈内存。 两种模式： 轻模拟 - 旨在穷举所有路径（寄存器、栈、部分指令）。 全模拟 - 仅跟随代码路径（性能较慢）。 模拟 TEB 和 PEB 结...

xori

Xori - Custom disassembly framework Xori is an automation-ready disassembly and static analysis library that consumes shellcode or PE binaries and provides triage analysis data. Acknowledgements: Xori wouldn't exist without inspiration and ideas from the open source community. We are indebted to...

extrude

extrude Analyse binaries for missing security features, information disclosure and more. 🚧 Extrude is in the early stages of development, and currently only supports ELF and MachO binaries. PE Windows binaries will be supported soon. Usage root@kitploit: Usage: extrude flags file Flags: -a, --all...

uniFuzzer

uniFuzzer uniFuzzer is a fuzzing tool for closed-source binaries based on Unicorn and LibFuzzer. Currently it supports fuzzing 32-bits LSB ELF files on ARM/MIPS, which are usually seen in IoT devices. 中文介绍 Features very little hack and easy to build can target any specified function or code snipp...

xsubfind3r

xsubfind3r xsubfind3r is a command-line utility designed to discover subdomains for a given domain in a simple, efficient way. It works by gathering information from a variety of passive sources, meaning it doesn't interact directly with the target but instead gathers data that is already publicl...

shredder-rs

Shredder-RS A polymorphic mutation engine for x8664 binaries. Overview Shredder-RS implements instruction-level shredding to defeat static analysis. By breaking the linear flow of the code and injecting randomized junk nodes, it forces disassemblers to follow a complex graph of JMP-linked...