Centralized resource for listing and organizing known injection techniques and POCs

A binary analysis framework written in Rust.

Load/Inject .NET assemblies by; reusing the host (spawnto) process loaded CLR AppDomainManager, Stomping Loader/.NET assembly PE DOS headers, Unlinking .NET related modules, bypassing ETW+AMSI, avo…

The Red-book: The Art of Offensive CyberSecurity

A variation of ProcessOverwriting to execute shellcode on an executable's section

Windows x64 PE process memory dumper to disk

Lightweight, memory-safe, zero-allocation library for reading and navigating PE binaries.

cargo subcommand showing the assembly, LLVM-IR and MIR generated for Rust code

Win32 and Kernel abusing techniques for pentesters

Put an end to code hallucinations! GitMCP is a free, open-source, remote MCP server for any GitHub project

Athena Cybersecurity Platform is a SaaS-based digital risk management solution that leverages AI/ML to monitor and mitigate cyber threats. It includes modules for Digital Risk Monitoring, Dark Web …

yara detection rules for hunting with the threathunting-keywords project

Threat Hunting & Incident Investigation with Osquery

All-in-One malware analysis tool.

Course materials for Malware Analysis by RPISEC

APTnotes data

Retired beginner/intermediate malware analysis training materials from @pedramamini and @erocarrera.

A collection of my weggli patterns to facilitate vulnerability research.

Idiomatic Rust bindings for the IDA SDK, enabling the development of standalone analysis tools using IDA v9.x’s idalib

headless-ida-mcp-server

Run IDA scripts headlessly.

AV EVASION TECHNIQUES

Notes for hunting vulnerabilities in C-Family software.

Reverse engineering assistant that extracts strings and related pseudo-code from a binary file.

weggli ruleset scanner for source code and binaries

An MCP server to create secure code sandbox environment for executing code within Docker containers. This MCP server provides AI applications with a safe and isolated environment for running code w…

Command line interface for MCP clients with secure execution and customizable security policies

This AI agent analyzes code repositories, detects potential security vulnerabilities, reviews code quality, and suggests fixes based on Sentry error logs using Sentry and GitHub MCP servers!