pe-analysis

Open-source AI reverse-engineering agent platform and MCP server for Ghidra, Frida, x64dbg and Rizin — automated PE/APK/binary analysis, CTF and malware research, with 100+ MCP tools and a 194-article runnable knowledge base.

HydraSoft: dependency-free Windows DLL hijack scanner with centralized remote management — HydraAgent, PHP API, and a web console for endpoint security checks across your fleet.

Windows memory scanner for call stack spoofing detection, unbacked shellcode, injected DLLs and in-memory C2 implants.

Packer detection and unpacking workflow for malware analysis: UPX, ASPack, Themida, VMProtect, PE and ELF.

Headless CLI reflection debugger for .NET assemblies with MCP server support

A malware analysis platform built in Rust

🛡️ Free open-source antivirus & malware removal tool for Windows. Repairs infected EXE/DLL files instead of deleting them. Multi-engine threat detection with smart PE repair engine.

A learning-focused PE analysis engine with modular detectors, heuristic analysis, and HTML reporting.

Single-file Windows malware triage: PE static analysis, case investigation, and opt-in IOC enrichment. No runtime dependencies.

Check your system integrity and scan for malicious files and registry keys

Malware sandbox for automated PE/ELF analysis with EDR integration and behavioral monitoring. Open-source alternative to CAPE sandbox.

AI-Driven Malware Triage & Deep Swarm Inspection Platform

This script analyzes MZ-PE (MS-DOS) executable file

Local-first hex editor, binary forensics, threat triage, PE analysis, and forensic PDF reporting.

Static malware triage orchestrator for strings, PE imports, unpacking notes, IOC context, and LLM-ready reports.

AI-powered PE malware detector - static analysis, YARA rules, Random Forest + EMBER 2381-feature ML, SHAP explainability

memdump-toolkit

PE import-table analysis for malware triage, API capability review, suspicious function flags, and detection leads.

Windows PE analysis and malware analysis methodology labs with static analysis, dynamic analysis, API monitoring, x64dbg verification, and structured reporting.