trape

trape 稳定版 v2.0 互联网上的人员追踪器：学习追踪世界，以避免被追踪。 Trape 是一款 OSINT 分析与研究工具，能够实时追踪并执行智能化的 社会工程学 攻击。它创建的初衷是向世人揭示，大型互联网公司如何能在用户毫不知情的情况下，获取其网站或服务的会话状态等 机密信息 ，并通过浏览器控制用户。然而，该工具也在不断演进，旨在帮助 政府 机构、企业和 研究人员 追踪网络犯罪分子。 2018 年初，它曾在 新加坡 BlackHat Arsenal...

MSMQ-Vulnerability

MSMQ Security Lab This repository documents a controlled lab review of Microsoft Message Queuing security exposure, focusing on defensive validation, detection evidence, and remediation planning. The project is positioned as a portfolio artefact: it shows how vulnerability research can be...

LinusWare-Source-Code-Internal

Linusware 1.2 — Source Code & Engine Architecture Reconstructed, Reverse-Engineered & Documented by tekkenbugatti Target Platform: Linux x8664 / Luau / Roblox Runtime Engine Overview Linusware 1.2 is a native Linux x8664 runtime extension and execution engine for Roblox / Luau. This repository...

Enigma-

Enigma C++ reimplementation of Ghidra's analytical core SoftwareModeling + Utility, stripped of Java/JVM dependencies. Built for AI integration, performance, and embeddability. Part of the Enigma Engine project. Enigma Engine A C++ reimplementation of Ghidra's analytical core — no JVM, no Java,...

ghidra-evm

Ghidra EVM 模块 在过去几年中，针对以太坊区块链上已部署智能合约的攻击因编程错误导致大量资金被盗。由于智能合约一旦编译并部署后，修改和更新较为复杂，不同从业者建议在仅能获取以太坊虚拟机（EVM）字节码的区块链上审查其安全性。在这方面，通过反汇编和反编译进行逆向工程可能很有效。 ghidra-EVM 是一个用于智能合约逆向工程的 Ghidra 模块。它可用于从以太坊区块链下载以太坊虚拟机（EVM）字节码，并对智能合约进行反汇编和反编译。此外，它还能分析创建代码、查找合约方法并定位不安全的指令。...

UninstalledAppCanary

Uninstalled App Canary Prior Work This builds on the deception engineering work around Windows Service Canaries https://research.nccgroup.com/2021/03/04/deception-engineering-exploring-the-use-of-windows-service-canaries-against-ransomware/ Thesis Certain threat actors uninstall a number of...

AlphaGolang

AlphaGolang 作者：Juan Andres Guerrero-Saade JAG-S @ SentinelLabs 描述： AlphaGolang 是一组 IDAPython 脚本，旨在帮助恶意软件逆向工程师掌握 Go 二进制文件。其理念是将脚本拆分为具体的步骤，从而避免脆弱的单体脚本，并模拟分析人员在处理 Go 二进制文件时可能遵循的方法。 脚本根据 GPL 许可发布（感谢 Tim Strazzere 的原始 GolangLoaderAssist，我们对其进行了重构并更新为 Python3，向 Tim 致敬 :）。欢迎并鼓励贡献！ 要求：IDA Pro（理想版本 v7.6+）...

firmware-reverse-engineering

Firmware Reverse Engineering Skills Five agent skills from OrbitCurve for firmware extraction, static analysis, Ghidra reverse engineering, emulation, and security reporting, by Hussein Muhaisen. The collection packages the existing workflows, references, templates, and Ghidra scripts for Claude...

lighthouse

Lighthouse - A Coverage Explorer for Reverse Engineers Overview Lighthouse is a powerful code coverage explorer for IDA Pro and Binary Ninja, providing software researchers with uniquely interactive controls to study execution maps for native applications without requiring symbols or source. This...

BL00DYM4RY

🎭 BloodyMary Trojan Phishing Simulator 📋 Description BloodyMary is an educational tool trojan-virus or Ransomware for training cybersecurity specialists, simulating realistic phishing attacks with social engineering elements. This project was created to raise awareness about cyber threats and...

BlackSnufkin

🎯 Profile Overview You have finally discovered my Github profile. Please feel free to clone/fork projects, raise issues and submit PRs if you think something could be better. Read my blog for write-ups and research - Happy Hacking! 😊 struct OffensiveOperator handle: String, role: String,...

clickfix-simulator-2025

ClickFix Training Tool A lightweight, self-hosted simulation tool for "ClickFix" type social engineering attacks. Disclaimer This tool is for AUTHORIZED SECURITY AWARENESS TRAINING ONLY. Unauthorized use of this tool to target systems or users without explicit permission is illegal and unethical...

ShiningAppMask-ReverseEngineering

ShiningAppMask-ReverseEngineering Intro After recently buying a Shining App Mask, I was curious about the Shining Mask App and mask and how they worked. I decided to reverse engineer it to understand how it worked. The journey started with the hardware. The Android Mobile App can be found here:...

Mailphish

Mailphish 编写者：Pro MCracker Mailphish 将帮助您快速轻松地创建专业的钓鱼邮件 访问我们的网站学习黑客方法 https://crackcodes.xyz 和 https://crackcodes.in 如果你复制了代码并制作自己的版本，别忘了给我点 credit，小子！ 使用此工具不会获取凭据 法律免责声明 我不会说您只能将此工具用于教育目的，不能用于攻击他人， 因为我自己也曾用它攻击过别人。但请记住，这样做是违法的，如果被抓到，后果自负。 不要来找我，也不要怪我。 功能 包含20种不同模板的钓鱼邮件创建器： Instagram Facebook...

Prineo_RE

About PriPara internal name Prineo is an arcade rythm game developed by SynSophia. Goal The goal of this project was to reverse the model format of the arcade series in order to port exclusive characters to the newer version of the game on Nintendo Switch. Screenshots Some interesting screenshots...

powerg-tools

PowerG Analysis Tools A collection of tools for reverse engineering and interacting with the PowerG radio protocol. This release accompanies the research James Chambers and Sultan Qasim Khan presented at REcon and hardwear.io. Please see the presentation recording and slides for more information:...

x86-cpp-reversing-skill

x86-cpp-reversing A Claude Code skill for reverse-engineering 32-bit little-endian x86 IA-32 binaries and disassembly compiled from C++. Recovers class layouts, vtables, virtual dispatch, and RTTI/inheritance hierarchies from ELF or PE binaries, and covers the workflows that come up once you have...

Fracture-

Fracture 🐈‍⬛ WIP Suite for reverse engineering JVM applications :3 Currently has!!! Hooking registernatives with ease ^^...

Astra Linux – Vulnerability in Chromium

Missing authorization in Passwords in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

The confused deputy in Fullscreen mode in Google Chrome before version 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and used social engineering to spoof UI elements through a crafted HTML page. Chromium security severity: Low...