reverse-engineering-browser

Reverse Engineering Browser See the browser evidence behind fingerprints, requests, scripts, and runtime behavior. A local-first research browser and macOS workspace for inspecting authorized web applications. v0.2.1 released Origin Trace Traffic now has a full-width, DevTools-style request table...

2022

100 Days of YARA Part 2 - Electric Detectaloo Apologies in advance for the terrible naming, but welcome to 100 Days of YARA! This repository will act as the store for all YARA ideas created during this time. Any fun scripts, tools, or rules you write can be committed to this GitHub repository! Fo...

reverse-engineering-workshop

...

ie11_vbscript_exploit

IE11 VBScript Exploit Exploit Generator for CVE-2018-8174 & CVE-2019-0768 RCE via VBScript Execution in IE11 Prerequisite Metasploit msfvenom Usage python ie11vbscript.py Listener IP Listener Port Instruction 1. Use this script to generate "exploit.html" 2. Host the html file on your server 3...

PPLorer

PPLorer PPLorer is an IDA plugin that resolves PPL calls to the actual underlying PPL function. Installation 1. install ida-netnode somewhere IDA can import it 2. clone the repository and symlink /.idapro/plugins/pplorer.py to pplorer.py in the cloned repo Usage Preliminary Analysis 1. open an ID...

CollaRE

CollaRE v1.4 Introduction CollaRE is a tool for collaborative reverse engineering that aims to allow teams that do need to use more then one tool during a project to collaborate without the need to share the files on a separate location. It also contains a very simple user management and as such...

revsync

revsync Realtime sync plugin for IDA Pro, Binary Ninja and Vivisect Syncs: Comments Symbol names Stack var names Structs Code coverage how much time was spent looking at a block IDA Pro Installation First, clone to IDA Data Dir: Windows: %APPDATA%\Hex-Rays\IDA Pro Mac/Linux: /.idapro Now: Make a...

ReverseKit

ReverseKit - Dynamic Reverse Engineering Toolkit ReverseKit is a comprehensive toolkit designed to aid reverse engineers in the process of dynamic RE. With a wide range of features and functionalities, it provides an easy-to-use interface and helps you intercept, analyze, and manipulate code and...

Cybersecurity-Books

Cybersecurity-Books Here you will get awesome collection of mostly all well-known and usefull cybersecurity books from beginner level to expert for all cybersecurity positions 1. CyberSecRoadmap 1.pdf 2. 21 days free CCNA complete videos.pdf 3. 101 Labs - CompTIA Linux+.pdf 4. 7839+ Awesome Deep...

awesome-linux-attack-forensics-purplelabs

awesome-linux-attack-forensics-purplelabs This page is a result of the ongoing hands-on research around advanced Linux attacks, detection and forensics techniques and tools. Due to the fact that I have been practicing the red vs blue approach for years, the material below will allow you to see th...

NOP_Plugin

NOPPlugin Plugin for NOPing instructions in IDA. The creation of the plugin was inspired by Vidar Stealer I was trying to remove the junk bytes / instructions. Before: After: Instructions Paste the NOPPlugin.py file under "plugins" subdirectory of IDA. To NOP the instructions out just select the...

REpsych

REpsych : Psychological Warfare in Reverse Engineering github.com/xoreaxeaxeax/repsych // domas // @xoreaxeaxeax Overview The REpsych toolset is a proof-of-concept illustrating the generation of images through a program's control flow graph CFG. A typical function's CFG| A REpsych generated CFG...

REpsych

REpsych : Psychological Warfare in Reverse Engineering github.com/xoreaxeaxeax/repsych // domas // @xoreaxeaxeax Overview The REpsych toolset is a proof-of-concept illustrating the generation of images through a program's control flow graph CFG. A typical function's CFG| A REpsych generated CFG...

ARTful

Description ARTful is a native Android library the allows developers to modify the Android Runtime ART on Android 13 + 14. With this tool, you can dynamically change the implementation of any static method within your application or the Android Framework to affect methods called from within your...

Firmware-analysis

This repository does not have a README...

cs50-cybersecurity-final-project

Technical Analysis of CVE-2024-3094: XZ Utils Supply Chain Backdoor Video Demo: https://youtu.be/3xBtabSkusE?si=ChN3nBgybK4nqNLz Description: An in-depth technical and architectural breakdown of CVE-2024-3094 CVSS 10.0 Critical, the historic open-source supply chain backdoor embedded into xz-util...

CVE-2026-103626

Incorrect authorization in FileSystem in Google Chrome on on Windows prior to 154.0.8037.97 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-103626

Incorrect authorization in FileSystem in Google Chrome on on Windows prior to 154.0.8037.97 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-91707

Incorrect authorization in FileSystem in Google Chrome on on Windows prior to 154.0.8037.97 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

vmp-devirt

vmp-devirt Trace-assisted VMProtect devirtualization research: version front-ends 1.x gate / 2.x table / 3.x FDJ feeding one shared backend Remill lift → LLVM opt → semantic cards → dataflow → native objects. Validated against self-built VMP 3.9.4 binaries across multiple protection modes. VMP...