maldev-for-dummies

Malware Development for Dummies In the age of EDR, red team operators cannot get away with using pre-compiled payloads anymore. As such, malware development is becoming a vital skill for any operator. Getting started with maldev may seem daunting, but is actually very easy. This workshop will sho...

xori

Xori - Custom disassembly framework Xori is an automation-ready disassembly and static analysis library that consumes shellcode or PE binaries and provides triage analysis data. Acknowledgements: Xori wouldn't exist without inspiration and ideas from the open source community. We are indebted to...

apkstudio

APK Studio 基于 Qt6 的开源跨平台 IDE，用于逆向工程 Android 应用程序包。提供友好的 IDE 风格布局，包括支持 .smali 代码文件语法高亮的代码编辑器。 特性 跨平台，可在 Linux 、Mac OS X 和 Windows 上运行 反编译/重新编译/签名和安装 APK 自动工具下载与安装 - APK Studio 可自动下载并安装所需工具（Java、Apktool、JADX、ADB、Uber APK Signer） 框架支持 - 安装并使用制造商特定的框架文件（例如 HTC、LG、Samsung），支持可选标签，用于反编译和重新编译 APK 命令行打开...

studio

ShipSec Studio Plataforma de Orquestación de Flujos de Trabajo de Seguridad de Código Abierto. ShipSec se encuentra actualmente en desarrollo activo. Estamos optimizando la plataforma para un uso estable en producción y operaciones de seguridad de alto rendimiento. ShipSec Studio proporciona un D...

blutter

Blutter Flutter Mobile Application Reverse Engineering Tool by Compiling Dart AOT Runtime Currently the application supports only Android libapp.so arm64 only. Also the application is currently work only against recent Dart versions. For high priority missing features, see TODO Environment Setup...

mssqlproxy

mssqlproxy mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse. The client requires impacket and sysadmin privileges on the SQL server. Please read this article carefully before continuing. It consists of...

PSBits

PSBits Soluciones simples relativamente que te permiten profundizar un poco más de lo habitual. Cada carpeta debería tener su propio readme.md explicando los detalles. Si no es así, el código tiene comentarios extensos al principio y en línea. Boletín: https://gtworek.ck.page/ Si quieres compilar...

CVE-2025-34300POC

Sawtooth Lighthouse Studio presenta una vulnerabilidad de inyección de plantillas CVE-2025-34300 Parámetros: options: -h, --help show this help message and exit -u URL, --url URL 请输入待检测的URL -f FILE, --file FILE 请输入一行一个URL的文件地址 Ejemplos: Detección individual: python .\CVE-2025-34300POC.py -u URL...

nray

nray Overview Nray is a free, platform and architecture independent port and application layer scanner. nray runs in a distributed manner to speed up scans and to perform scans from different vantage points. Event-based results allow to further process information during the scan, e.g. using tool...

blackout-public

ZoomInfo GTM Studio: Documentación sobre el seguimiento previo al consentimiento "Puedes bloquear al investigador. No puedes bloquear la evidencia." Lo que sucedió El 25 de noviembre de 2025, el CEO de ZoomInfo, Henry Schuck, publicó una demostración del producto GTM Studio en LinkedIn: su...

pycdc-studio

pycdc-studio 中文说明 Una interfaz gráfica de escritorio con Qt Widgets para explorar bytecode de Python usando pycdc / pycdas, inspeccionar resultados de descompilación nativa, importar la salida de Pyarmor oneshot y reintentar objetos de código no soportados con respaldo de IA. La aplicación es...

systeminformer

System Informer A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc...

tiny_tracer

tinytracer A Pin Tool for tracing: API calls, including input and output of selected functions defined local functions, and functions from statically linked libraries selected instructions: RDTSC, CPUID, INT inline system calls, including parameters of selected syscalls transition between section...

CVE-2025-52385

CVE-2025-52385 Software : Studio 3T v.2025.1.0 Informe de vulnerabilidad : Ejecución remota de comandos en Studio 3T Descripción general Una vulnerabilidad crítica en Studio 3T versión 2025.1.0 y anteriores permite que un atacante remoto ejecute código arbitrario a través de una carga útil...

CVE-2022-40635

CVE-2022-40635: Groovy Sandbox Bypass in CrafterCMS Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass. Vendor Disclosure: The vendor's disclosure and fix for this...

reko

reko - a general purpose decompiler. Reko Swedish: "decent, obliging" is a decompiler for machine code binaries. This project is freely available under the GNU General Public License. The project consists of front ends, core decompiler engine, and back ends to help it achieve its goals. A...

kekeo

kekeo kekeo is a little toolbox I have started to manipulate Microsoft Kerberos in C and for fun ASN.1 library In kekeo, I use an external commercial library to deal with Kerberos ASN.1 structures: OSS ASN.1/C http://www.oss.com/asn1/products/asn1-c/asn1-c.html It was the only code...

CVE-2020-0418

CVE-2020-0418 Proyecto de Android Studio para generar las apks utilizadas para el exploit. Para generar la versión 1 de la apk basta con dejar comentadas las líneas indicadas en el AndroidManifest.xml Para generar la versión 2 de la apk basta con descomentarlas Demostración en...

idacode

IDACode IDACode makes it easy to execute and debug Python scripts in your IDA environment without leaving Visual Studio Code. The VS Code extension can be found on the marketplace. IDACode is still in a very early state and bugs are to be expected. Please open a new issue if you encounter any...

power-pwn

Maintained by: Secure AI Agents Everywhere. Overview Power Pwn is an offensive and defensive security toolset for Microsoft 365 Power Platform and AI services. Key Features, among others: 💾 PowerDump : Comprehensive tenant scanning and data collection 🚪 BackDoor : Deploy backdoor flows for...