Magdy Moustafa

voxelsrv. Voxel browser game inspired by Minecraft

auto-unlocker. Unlocker for VMWare macOS

MFT_Browser. $MFT directory tree reconstruction & FILE record info

wtf. wtf is a distributed, code-coverage guided, customizable, cross-platform snapshot-based fuzzer designed for attacking user and / or kernel-mode targets running on Microsoft Windows and Linux user-mode (experimental!).

dumpulator. An easy-to-use library for emulating memory dumps. Useful for malware analysis (config extraction, unpacking) and dynamic analysis in general (sandboxing).

reFlutter. Flutter Reverse Engineering Framework

flutter-beginners-tutorial. All course files for the Flutter Beginners playlist on The Net Ninja YouTube channel.

sliver. Adversary Emulation Framework

openmsvbvm. Open source version of MSVBVM60 library.

wifipumpkin3. Powerful framework for rogue access point attack.

PKCS11-SPECS. All versions of PKCS#11 specification in one place

lumen. A private Lumina server for IDA Pro

Autopsy-Registry-Explorer. Autopsy Module to analyze Registry Hives

Phant0m. Windows Event Log Killer

retoolkit. Reverse Engineer's Toolkit

RunPE. Code that allows running another windows PE in the same address space as the host process.

VBA-RunPE. A VBA implementation of the RunPE technique or how to bypass application whitelisting.

Antivirus-Artifacts. Anti-virus artifacts. Listing APIs hooked by: Avira, BitDefender, F-Secure, MalwareBytes, Norton, TrendMicro, and WebRoot.

red_team_tool_countermeasures. YARA

kotlin-jupyter. Kotlin kernel for Jupyter/IPython

ghidra-jupyter-kotlin. Java

ImHex. 🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

thug. Python low-interaction honeyclient

GhidraWideGraphLayout. Alternative function graph layout

woothee-python. Woothee python implementation

ghidra-dark. Dark theme installer for Ghidra

ANBU. ANBU (Automatic New Binary Unpacker) a tool for me to learn about PIN and about algorithms for generic unpacking.

srum-dump. A forensics tool to convert the data in the Windows srum (System Resource Usage Monitor) database to an xlsx spreadsheet.

askmrcalculus.github.io. The source code for the new Ask Mr. Calculus Website, based on Github Pages.

MalwareWorld. System based on +500 blacklists to detect internet potencialy malicious hosts

rgat. An instruction trace visualisation tool for dynamic program analysis

IDA-For-Delphi. IDA Python Script to Get All function names from Event Constructor (VCL)

sysmon-config. Sysmon configuration file template with default high-quality event tracing

bncov. Scriptable Binary Ninja plugin to enable automated coverage analysis and visualization

BinDiffHelper. Ghidra Extension to integrate BinDiff for function matching

redress. Redress - A tool for analyzing stripped Go binaries

sandboxie. The Sandboxie application

Cmulator. Cmulator is ( x86 - x64 ) Scriptable Reverse Engineering Sandbox Emulator for shellcode and PE binaries . Based on Unicorn & Zydis Engine & javascript

peresources. Go

ghidra_scripts. Port of devttyS0's IDA plugins to the Ghidra plugin framework, new plugins as well.

ghidra-data. Supporting Data Archives for Ghidra

X-RSA. Cryptography Tool | RSA Attacks

EVTX-ATTACK-SAMPLES. Windows Events Attack Samples

KeySpark. Get a reverse shell within 15 seconds on both Windows or Unix based systems, using the Digispark developement board.

SMUC. Simplified MITRE Use Cases, it describes the Attack and Detection

rtlstackedit. An elegant, Fast and simple right to left mark down editor. This is the right to left version of stackedit.io website

SimplifyGraph. IDA Pro plugin to assist with complex graphs

guess-words. Simple word guessing program

atom-js-debug. A JavaScript / Node.js debug client for Atom.

PINCE. Reverse engineering tool for Linux

game-hacking. Tutorials, tools, and more as related to reverse engineering video games.

awesome-radare2. A curated list of awesome projects, articles and the other materials powered by Radare2

r2dec-js. r2dec-js is a JavaScript-based decompiler that converts assembly code into pseudo-C. It aids users in understanding assembly by providing readable high-level explanations, making low-level programming more accessible and facilitating debugging across diverse hardware platforms.

hate_crack. A tool for automating cracking methodologies through Hashcat from the TrustedSec team.

venom. venom - C2 shellcode generator/compiler/handler

bugcrowd_university. Open source education content for the researcher community

CapTipper. Malicious HTTP traffic explorer

AndroPyTool. A framework for automated extraction of static and dynamic features from Android applications

v0lt. Security CTF Toolkit (Not maintained anymore)

awesome-malware-analysis. Defund the Police.

retdec. RetDec is a retargetable machine-code decompiler based on LLVM.

ctf-writeups. CTF write-ups from the VulnHub CTF Team

ringzer0-challenges. ringzer0team challange solutions

solved-hacking-problem. :heavy_check_mark: My solutions for CTF & wargame challenges

compiler-explorer. Run compilers interactively from your web browser and interact with the assembly

pwntools-write-ups. A colleciton of CTF write-ups all using pwntools

pwntools. CTF framework and exploit development library

dnSpy. .NET debugger and assembly editor

Malware. Course materials for Malware Analysis by RPISEC

reverse-engineering. List of awesome reverse engineering resources

ctf. Ctf solutions from p4 team

awesome-reversing. A curated list of awesome reversing resources

radare2. UNIX-like reverse engineering framework and command-line toolset

binja_explain_instruction. A plugin that adds a popup window to Binary Ninja that explains in simple English what an assembly instruction does

peda. PEDA - Python Exploit Development Assistance for GDB

makin. makin - reveal anti-debugging and anti-VM tricks [This project is not maintained anymore]

linux-re-101. A collection of resources for linux reverse engineering

windows-kernel-exploits. windows-kernel-exploits Windows平台提权漏洞集合

WHP. Micro$oft Windows Hacking Pack

ghiro. Automated image forensics tool

swap_digger. swap_digger is a tool used to automate Linux swap analysis during post-exploitation or forensics. It automates swap extraction and searches for Linux user credentials, web forms credentials, web forms emails, http basic authentication, Wifi SSID and keys, etc.

awesome-incident-response. A curated list of tools for incident response

vuls. Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

Uniscan. Uniscan web vulnerability scanner

php-webshells. Common PHP webshells you might need for your Penetration Testing assignments or CTF challenges. Do not host the file(s) on your server!

Scanners-Box. A powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑

spidy. The simple, easy to use command line web crawler.

ATSCAN. Advanced dork Search & Mass Exploit Scanner

CTF-Writeup. Python

TheFatRat. Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software protection .

cutter. Free and Open Source Reverse Engineering Platform powered by rizin

howto. My howtos and tuning for a lot of things that I've worked in my 20 years of *nix environment. - linux - solaris - freebsd - firewall - mail server - router, AS, BGP - DNS - mySQL - noSQL (aerospike, memcached, redis) - webserver ( nginx , lighttpd, apache ) - python - perl - PHP ( everyone has a dark side )