Free educational content on reverse engineering and malware analysis from the FLARE team
☆1,503Mar 31, 2026Updated 6 months ago
Alternatives and similar repositories for flare-learning-hub
Users that are interested in flare-learning-hub are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A curated collection of DFIR skills and workflows for InfoSec practitioners.☆325May 14, 2026Updated 5 months ago
- Workshop materials for “Step-by-Step Malware Development: Evading EDR from Loaders to the Kernel” presented at DEF CON 34 and BSidesLV 20…☆398Aug 16, 2026Updated 2 months ago
- DFIR LABS - A compilation of challenges that aims to provide practice in simple to advanced concepts in the following topics: Digital For…☆643Sep 20, 2026Updated last month
- DFIR Timeline Analysis for macOS — SQLite-backed viewer for CSV, TSV, XLSX, EVTX, Plaso, $MFT, and $J files with AI Artifacts, AI Secret …☆382Sep 8, 2026Updated last month
- A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering env…☆9,196Oct 7, 2026Updated 3 weeks ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- This repository contains detailed adversary simulation APT campaigns targeting various critical sectors. Each simulation includes custom …☆1,155Updated this week
- Agentic malware analysis environment with MCP-connected disassemblers, RE tooling, and structured workflows for Claude Code and Codex CLI…☆319Mar 22, 2026Updated 7 months ago
- The samples referenced in my book, Evasive Malware (No starch Press)☆62Feb 20, 2026Updated 8 months ago
- My external brain for cyber defense (WIP). A practical collection of field notes on hunting strategies and system principles. Documentin…☆106Aug 27, 2026Updated 2 months ago
- Lab4PurpleSec is a modular Purple Team homelab combining a vulnerable Active Directory environment (GOAD), a Docker-based web DMZ, pfSens…☆332Dec 31, 2025Updated 9 months ago
- MCP to help Defenders Detection Engineer Harder and Smarter☆502Jun 16, 2026Updated 4 months ago
- Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, M…☆4,135Sep 22, 2026Updated last month
- Extract Windows credentials directly from VM memory snapshots and virtual disks☆1,643Updated this week
- Awesome Security lists for SOC/CERT/CTI☆1,954Updated this week
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- CTF kernel exploitation notes, PoCs, exploits, and writeups.☆627Oct 19, 2026Updated last week
- Reverse Engineering and Malware Analysis Roadmap☆971Oct 2, 2025Updated last year
- This map lists the essential techniques to bypass anti-virus and EDR☆3,480Mar 28, 2025Updated last year
- 15-stage Windows malware development & analysis course in Rust. Red team builds it, blue team detects it. All 15 binaries achieved 0/76 o…☆301Mar 27, 2026Updated 7 months ago
- A self-hosted sandbox for red teams to test payloads against modern detection before deployment. MCP integration lets an LLM agent drive …☆1,551May 5, 2026Updated 5 months ago
- This project aims to compare and evaluate the telemetry of various EDR products.☆1,997Updated this week
- game of active directory☆8,533Updated this week
- The Mimikatz Missing Manual☆466Feb 5, 2026Updated 8 months ago
- A resource containing all the tools each ransomware gangs uses☆1,462Aug 29, 2026Updated last month
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Malware Configuration And Payload Extraction☆3,611Updated this week
- Hayabusa (隼) is a sigma-based threat hunting and fast forensics timeline generator for Windows event logs.☆3,419Updated this week
- The FLARE team's open-source tool to identify capabilities in executable files.☆6,277Updated this week
- Find zero-days while you sleep. DeepZero is an automated vulnerability research framework that parses, decompiles, and analyzes thousands…☆752Sep 10, 2026Updated last month
- Windows kernel and user mode emulation.☆2,090Updated this week
- Cybersecurity oriented awesome list☆4,248Updated this week
- Two WinForms GUI tools for enumerating, searching, and exfiltrating data from M365 environments using application-level OAuth tokens☆255Mar 4, 2026Updated 7 months ago
- This repository contains sample programs that mimick behavior found in real-world malware. The goal is to provide source code that can be…☆712Jul 6, 2024Updated 2 years ago
- ATHF is a framework for agentic threat hunting - building systems that can remember, learn, and act with increasing autonomy.☆402Updated this week
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Windows Analysis and Research Toolkit☆700Apr 28, 2026Updated 6 months ago
- Windows protocol library, including SMB and RPC implementations, among others.☆840Oct 5, 2026Updated 3 weeks ago
- A complete Go port of Impacket - 63 CLI tools and 24 libraries for Windows & Active Directory protocol attacks, compiled to a single depe…☆721Oct 21, 2026Updated last week
- MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR☆743Aug 31, 2026Updated last month
- A vendor-neutral collection of Sigma, YARA, and Suricata rules for detecting compromise of LLM applications, MCP servers, ML supply chain…☆131Updated this week
- Rapidly Search and Hunt through Windows Forensic Artefacts☆3,702Oct 14, 2026Updated 2 weeks ago
- Run TTPs, with AI!☆143Feb 23, 2026Updated 8 months ago