call_map

========== Call Map .. default-role:: code About Call Map is a tool for navigating call graphs in Python, with plans to support other languages. Below is a screen shot after running callmap -m toolz, then clicking on some functions. .. figure:: docs/UI-clicked-on-function.png While Call Map is...

CVE-2025-5548

🛠️ Environment Setup Target platform: Windows This guide details all the tools required to perform vulnerability analysis and fuzzing of the binary. Follow the steps in order to ensure everything is set up correctly. 🐍 Python 3 Download: python.org/downloads/windows Python 3 is the language we wil...

C0deVari4nt

C0deVari4nt Description C0deVari4nt is a variant analysis and visualisation tool that inspects codebases for similar vulnerabilities. It leverages CodeQL, a semantic code analysis engine, to query code based on user-controlled CodeQL query templates and passes the results to our client interface...

caracal

Caracal Caracal is a static analyzer tool over the SIERRA representation for Starknet smart contracts. Features Detectors to detect vulnerable Cairo code Printers to report information Taint analysis Data flow analysis framework Easy to run in Scarb projects Installation Precompiled binaries...

sgxray

SGXRay: Automating Vulnerability Detection for SGX Apps Intel SGX protects isolated application logic and sensitive data inside an enclave with hardware-based memory encryption. To use such hardware-based security mechanism requires a strict programming model on memory usage， with complex APIs in...

trommel

TROMMEL TROMMEL sifts through embedded device files to identify potential vulnerable indicators. TROMMEL identifies the following indicators related to: Secure Shell SSH key files Secure Socket Layer SSL key files Internet Protocol IP addresses Uniform Resource Locator URL email addresses shell...

mininode

Mininode Mininode is a CLI tool to reduce the attack surface of the Node.js applications by using static analysis of source code. It supports two modes of reduction 1 coarse, 2 fine. Mininode constructs the dependency graph modules and functions used of the application starting from main file, i....

fastfluxanalysis

DNS Analysis Scripts A collection of scripts used to detect Fast-Flux domains and DGA domains. Based on research conducted for MSc thesis, related research papers are available from the following locations: ISSA 2011 ISSA 2012 Botconf 2013 Basic Usage To analyse a single domain: python FFAnalyse....

glasgo

Glasgo Static Analysis Tool This project's official repository has been moved to Github-ttarvis/glasgo. Project This is a static analysis tool written in Go for Go code. It will find security and some correctness issues that may have a security implication. Compiling To compile the tool, be sure ...

jspanda

JSPanda JSpanda is client-side prototype pollution vulnerability scanner. It has two key features, scanning vulnerability the supplied URLs and analyzing the JavaScript libraries' source code. However, JSpanda cannot detect advanced prototype pollution vulnerabilities. How JSPanda works? Uses...

ripVT

ripVT Maltego Canari transforms for Virus Total private API. Provided AS-IS, no warranties, no guarantees. No jokes in this repo. It's as serious as you are. Installation 1. Requires Canari, specifically this branch/version 2. Install Malformity 3. sudo python setup.py install canari create-profi...

FileWatchTower

FileWatchTower - FWT NOTE: This project is no longer maintained and has been published from archived projects for reference. It is available for anyone interested in developing file analysis software. FWT is a security analysis and file monitoring tool that utilizes Sysmon events. It tracks files...

elastic-peak-dashboards

PEAK Baseline Threat Hunt Dashboards Kibana / Security Onion 3.0 — Tier 1 & ICS Protocol Analysis Importable Kibana saved-object dashboards implementing the Splunk PEAK Baseline Threat Hunt methodology for cyber threat hunt CTH and incident response IR operations. Built and validated against...

HiddenNetworks-Python

HiddenNetworks-Python v0.9 May 2020 Hidden Networks is a new concept test based on the paper of the same name, that is programmed using Python 3.4. It facilitates the task of analysing local and remote machines within a domain, using WMI in searching for traces of connections by USB devices. With...

RCLocals

RCLocals Inspired by 'Autoruns' from Sysinternals, RCLocals analyzes all Linux startup possibilities to find backdoors, also performs process integrity verification, scan for DLL injected processes and much more Things covered: ·List GPG keys trusted by the system ·Installed Packages ·File...

squidmagic

Squidmagic is a tool designed to analyze a web-based network traffic to detect central command and control C&C servers and Malicious site, using Squid proxy server and Spamhaus. Install dependencies pip install -r requirements.txt Usage python squidmagic.py /squid/access.log | | | | / |/ | | | | ...

Enigma

Enigma Engine A native C++ reverse-engineering engine inspired by Ghidra's analysis pipeline. Enigma removes the JVM dependency and provides a standalone analysis core that can be embedded, extended, and integrated directly with native tools and AI systems. Current State Enigma is under active...

DarkSword_analysis

DarkSwordanalysis Static analysis of the DarkSword iOS WebKit exploit chain — delivery, staging, and CVE breakdown CVE-2025-31277, CVE-2025-43529 I'm a freshman Information Systems student working through this exploit chain as I build my reverse engineering and malware analysis skills. I'll updat...

CVE-2023-4220

autopwn...

CVE-2022-29622

CVE-2022–29622: Invulnerability Analysis This codebase was created to help security professionals and developers to understand why I think Formidable was not vulnerable to CVE-2022-29622. I have written up my analysis here: CVE-2022–29622: Invulnerability Analysis As some did not understand it, I...