Open-source alternatives to Aa Tools

RetDec plugin for IDA (Interactive Disassembler).

ret-sync is a set of plugins that helps to synchronize a debugging session (WinDbg/GDB/LLDB/OllyDbg2/x64dbg) with IDA/Ghidra/Binary Ninja disassemblers.

BeaconEye scans running processes for active CobaltStrike beacons. When processes are found to be running beacon, BeaconEye will monitor each process for C2 activity.

A list of JARM hashes for different ssl implementations used by some C2 tools. Also adding other useful red team tools that use ssl (ex: EvilGinx2). Though I work on the red team side, I thought this would be a good thing to gather both to help blue teams who have the appropriate visibility with…

Karta - source code assisted fast binary matching plugin for IDA

GhIDA is an IDA Pro plugin that integrates the Ghidra decompiler in IDA.

This project is a binary static analysis tool designed to recover hidden and non-standard encoded strings from compiled binaries. It functions as a malware analysis utility and string decryptor, extracting obfuscated text to reveal concealed program behavior without executing the code. The tool automates the recovery of embedded strings through a combination of emulated instruction execution and abstract syntax tree evaluation. It utilizes pattern-based heuristic detection to identify obfuscation routines and employs cross-platform binary parsing to process multiple executable formats. The s

https://research.nccgroup.com/2022/03/25/mining-data-from-cobalt-strike-beacons/

A curated list of IDA x64DBG, Ghidra and OllyDBG plugins.

A Coverage Explorer for Reverse Engineers

Export disassemblies into Protocol Buffers

BinNavi is a binary analysis IDE that allows to inspect, navigate, edit and annotate control flow graphs and call graphs of disassembled code.

Tool based on CobaltStrikeParser from SentinelOne which can be used to spam a CobaltStrike server with fake beacons

IDAPython project for Hex-Ray's IDA Pro

IDAPython tool for creating automatic C++ virtual tables in IDA Pro