恶意软件分析 / 取证

UNIX-like reverse engineering framework and command-line toolset

Why is this running? Trace any process, port, container, or file back to what started it - CLI + TUI.

eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via MCP and humans via dashboard.

Program for determining types of files for Windows, Linux and MacOS.

A curated collection of publicly available resources on how technology and tech-savvy organizations around the world practice Site Reliability Engineering (SRE)

A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.

Complete open-source monitoring and observability platform.

The FLARE team's open-source tool to identify capabilities in executable files.

An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.

LIEF - Library to Instrument Executable Formats (C++, Python, Rust)

Reverse Engineer's Toolkit

State-of-the-art native debugging tools

Android Reverse-Engineering Workbench for VS Code

SRE Agent - CNCF Sandbox Project

Malware Configuration And Payload Extraction

A curated list of awesome Android Reverse Engineering training, resources, and tools.

All-in-One malware analysis tool.

Advanced RAT written in Python language, fully controllable through Discord with dedicated GUI builder to make preparation easier.