Welcome
A collection of open-source tools for offensive security research, digital forensics & incident response (DFIR), and malware analysis — built for red teamers, threat hunters, and SOC analysts.DFIR & Malware Analysis
Tools for incident response, forensic artifact extraction, and malware triage.dmpHunter
Hunt indicators inside Windows mini/full process dumps — memory maps, handles, threads, modules, YARA, strings, and network heuristics.Language: Python · Platform: Windows / Linux / macOS
accdu_inspector
Forensic analyzer for Microsoft Access databases — uncovers hidden VBA macros, OLE streams, and binary blobs with YARA scanning and suspicion scoring.Language: Python · Platform: Cross-platform
rarADSExtractor
Safe Python-only RAR5 parser that carves Alternate Data Streams without invoking vulnerable binaries — built for CVE-2025-8088 / CVE-2025-6218 triage.Language: Python · Platform: Cross-platform
AI-Powered Security
Tools that leverage AI for security research and intelligence workflows.triage-llm-lab
Three-VM isolated sandbox combining Claude Code with REMnux, Ghidra, and VirusTotal — orchestrated via custom MCP servers for fully AI-driven malware triage and DFIR workflows.Language: TypeScript / Python · Platform: VMware (macOS / Linux)
TI Agent
Full-stack local app that fetches 97 built-in security RSS/Atom feeds, passes real article content to Claude, and generates structured threat intelligence briefings with inline citations, IOC highlights, CVE tables, MITRE ATT&CK coverage, and 4 export formats.Language: Node.js / React · Platform: macOS / Linux
Offensive Security
Tools for shellcode generation, payload delivery, and process injection research.Apophis
Bash script leveraging DotNetToJScript, ConfuserEx, and Mono to generate shellcode runners in 10+ formats — XOR, Caesar, 3DES, AES, MSI, HTA, JS, XSL, ASPX, and InstallUtil.Language: Bash / C# · Platform: Linux (Kali)
Browser Extension for Code Exec
Chrome/Edge extension that uses the Native Messaging API to bridge the browser and the host OS — demonstrated with Notepad but built for broader command execution scope.Language: Python / JS · Platform: Windows / macOS / Linux
Tool Index
Resources
GitHub
Browse all source repositories, open issues, and contribute.
Twitter / X
Follow for new tool releases and security research updates.
Exploit-DB
Referenced exploit database for vulnerability research context.
All tools are released under open-source licenses. Review each repository’s LICENSE file before use in production or commercial environments. Use responsibly.