gef

GEF pronounced ʤɛf - "Jeff" is a set of commands for x86/64, ARM, MIPS, PowerPC and SPARC to assist exploit developers and reverse-engineers when using old school GDB. It provides additional features to GDB using the Python API to assist during the process of dynamic analysis and exploit...

AndroTickler

AndroTickler A java tool that helps to pentest Android apps faster, more easily and more efficiently. AndroTickler offers many features of information gathering, static and dynamic checks that cover most of the aspects of Android apps pentesting. It also offers several features that pentesters ne...

Mobile-Security-Framework-MobSF

Mobile Security Framework MobSF Mobile Security Framework MobSF is a security research platform for mobile applications in Android, iOS and Windows Mobile. MobSF can be used for a variety of use cases such as mobile application security, penetration testing, malware analysis, and privacy analysis...

cerberus-re-skill

Cerberus RE cerberus-re is a local Apple-focused reverse-engineering workbench for building a repeatable three-headed static/dynamic/instrumentation loop around Ghidra, LLDB, and Frida. It is designed for analysts and coding agents that need durable artifacts instead of terminal-only notes: Ghidr...

aparoid

Aparoid Aparoid is a framework designed for Android application analysis. It offers an automated set of tools to discover vulnerabilities and other risks in mobile applications. It is built using the Flask framework and offers a web GUI to upload APK files and explore the contents / results. The...

Android-Security-Teryaagh

AST - Android Security Teryaagh 🔥 Android security guides, roadmap, tools, docs, courses, write-ups and teryaagh. 📚Check out the full Documentation Website here! Auto-generated using MkDocs Buy me a coffee ☕ USDTERC20 : 0x36811c0544E09b48Fe491f67C5743a43067b280B Contents 📜 0. Roadmap Programing...

RESim

RESim Reverse engineering using a full system simulator. Dynamic analysis by instrumenting simulated hardware using Simics1 Trace process trees, system calls and individual programs Reverse execution to selected breakpoints and events Integrated with IDA Protm debugging client Ghidra plugins for...

WFH

Windows Feature Hunter WFH Windows Feature Hunter WFH is a proof of concept python script that uses Frida, a dynamic instrumentation toolkit, to assist in potentially identifying common “vulnerabilities” or “features” within Windows executables. WFH currently has the capability to automatically...

ghidra2frida

ghidra2frida ghidra2frida is a Ghidra Extension that, working as a bridge between Ghidra and Frida, lets you create powerful Ghidra scripts that take advantage of Frida's dynamic analysis engine to improve Ghidra statical analysis features. It supports all platforms supported by Frida Windows,...

lupo

For instructions on how to use Lupo, visit https://github.com/malienist/lupo/wiki/Lupo-Wiki Lupo — Malware IOC Extractor Debugging module for Malware Analysis Automation For a step by step post on how to use Lupo, with images and instructions, please see this post:...

apkstudio

APK Studio Open-source, cross platform Qt6 based IDE for reverse-engineering Android application packages. It features a friendly IDE-like layout including code editor with syntax highlighting support for .smali code files. Features Cross platform, run on Linux , Mac OS X & Windows...

FirmAE

FirmAE FirmAE is a fully-automated framework that performs emulation and vulnerability analysis. FirmAE significantly increases the emulation success rate From Firmadyne's 16.28% to 79.36% with five arbitration techniques. We tested FirmAE on 1,124 wireless-router and IP-camera firmware images fr...

Squalr

Squalr Squalr Official Website Join us on our Discord Channel Squalr is a highly performant dynamic analysis reverse-engineering tool written in Rust. First and foremost, Squalr is a lightning fast memory scanner, allowing the user to search for and modify running process memory. Fast scans are...

Inspeckage

Inspeckage - Android Package Inspector Inspeckage is a tool developed to offer dynamic analysis of Android applications. By applying hooks to functions of the Android API, Inspeckage will help you understand what an Android application is doing at runtime. http://ac-pm.github.io/Inspeckage...

emba

EMBA El analizador de seguridad para firmware de dispositivos embebidos EMBA está diseñado como la herramienta central de análisis de firmware y SBOM para testers de penetración, equipos de seguridad de producto, desarrolladores y gestores de producto responsables. Apoya el proceso completo de...

detux

Detux: The Multiplatform Linux Sandbox Introduction: Detux is a sandbox developed to do traffic analysis of the Linux malwares and capture the IOCs by doing so. QEMU hypervisor is used to emulate Linux Debian for various CPU architectures. The following CPUs are currently supported: x86 x86-64 AR...

tracee

Before moving on, please consider giving us a GitHub star ⭐️. Thank you! About Tracee Tracee is a runtime security and observability tool that helps you understand how your system and applications behave. It is using eBPF technology to tap into your system and expose that information as events tha...

gef

GEF pronunciado ʤɛf - "Jeff" es un conjunto de comandos para x86/64, ARM, MIPS, PowerPC y SPARC para ayudar a desarrolladores de exploits e ingenieros inversos cuando usan el clásico GDB. Proporciona funcionalidades adicionales a GDB mediante la API de Python para asistir durante el proceso de...

malware-check

Install - Usage - Dynamic Analysis - YARA Rules - CI/CD Docs: English | Tiếng Việt Static and dynamic analysis tool for detecting malicious code, suspicious binaries, and privacy violations. Analyzes source code, compiled executables .exe, .dll, .elf, macOS bundles .app, .dmg, .pkg, mobile apps...

Limon

Limon - Sandbox for Analyzing Linux Malwares Limon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators of Linux malware. It allows one to inspect the Linux malware before execution, during execution, and...