Bindings for Microsoft WinDBG TTD

HexRays ctree visualization plugin

Automatically create YARA rules from malicious documents.

oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.

A collection of Tools and Rules for decoding Brute Ratel C4 badgers

A True Instrumentable Binary Emulation Framework

Xori is an automation-ready disassembly and static analysis library for PE32, 32+ and shellcode

arm_now is a qemu powered tool that allows instant setup of virtual machines on arm cpu, mips, powerpc, nios2, x86 and more, for reverse, exploit, fuzzing and programming purpose.

arm_now is a qemu powered tool that allows instant setup of virtual machines on arm cpu, mips, powerpc, nios2, x86 and more, for reverse, exploit, fuzzing and programming purpose.

The current repository contains all the scripts needed to build kernel-mode mac-a-mal malicious activity hooking on macOS.

The current repository contains all the scripts needed to complement kernel-mode mac-a-mal malicious activity hooking on macOS to Cuckoo sandbox.