burningcyclebike Goto Github PK

autoit-ripper

Extract AutoIt scripts embedded in PE binaries

blacklotus

BlackLotus UEFI Windows Bootkit

blackout

kill anti-malware protected processes (BYOVD)

cursed.reactor

Full .Net Reactor UnPacker 🙂 Except VM & NecroBit

cve-2022-21894

baton drop (CVE-2022-21894): Secure Boot Security Feature Bypass Vulnerability

dna

.NET framework for analysis of native binaries

emotetcfu

WIP Emotet Control Flow Unflattening using miasm and radare2

flare-emu

flirtdb

A community driven collection of IDA FLIRT signature files

follinaextractor

Extract payload URLs from Follina (CVE-2022-30190) docx and rtf files

go_parser

Yet Another Golang binary parser for IDAPro

golang_loader_assist

Making GO reversing easier in IDA Pro

hexraycodeexplorer-ida-7.5

hexrayscodexplorer

Hex-Rays Decompiler plugin for better code navigation

hiddendesktop

HVNC for Cobalt Strike

indicator

kernel-exploit-factory

Linux kernel CVE exploit analysis report and relative debug environment. You don't need to compile Linux kernel and configure your environment anymore.

lockbit-black-builder

malware

malwaresourcecode

Collection of malware source code for a variety of platforms in an array of different programming languages.

manalyze

A static analyzer for PE executables.

netreactorslayer

An open source (GPLv3) deobfuscator and unpacker for Eziriz .NET Reactor

novmp

A static devirtualizer for VMProtect x64 3.x. powered by VTIL.

pcodedmp

A VBA p-code disassembler

phnt

Native API header files for the System Informer project.

pplkiller

Tool to bypass LSA Protection (aka Protected Process Light)

pyfsig

python file signature identifier - Use this to identify files from their headers

qiling

Qiling Advanced Binary Emulation Framework

relocrebuilder

scripts

A collection of x64dbg scripts. Feel free to submit a pull request to add your script.