r2inspect is a professional malware analysis framework that automates deep static inspection for PE, ELF, and Mach-O binaries using the radare2 ecosystem. It combines format parsing, detection heuristics, and rich reporting to support reverse engineers, incident responders, and threat analysts.
☆55Sep 6, 2026Updated last month
Alternatives and similar repositories for r2inspect
Users that are interested in r2inspect are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Collection of scripts to automate the Malware Analysis process☆33Oct 27, 2025Updated 11 months ago
- A Rust library along with a Win32 GUI application to determine the driver load order of a Windows system (cf. https://colinfinck.de/posts…☆13Jan 26, 2025Updated last year
- This central repository is crafted for cybersecurity enthusiasts, researchers, and professionals aiming to advance their skills. It offer…☆23Jun 10, 2026Updated 4 months ago
- C++ tool and library for converting .bin files to shellcode in multiple output formats.☆34Aug 4, 2026Updated 2 months ago
- Boot loader and emulator for real mode written in C/Python.☆51Jun 6, 2026Updated 4 months ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Offensive Security & Red Teaming Labs and Projects☆26Aug 26, 2025Updated last year
- SVG Analysis and generation tools for commonly seen SVG attachment phishing☆57Sep 24, 2025Updated last year
- A .NET assembly tracer using Harmony for runtime method interception.☆50Oct 24, 2025Updated last year
- A Proof-of-Concept implementation of Reflective DLL Injection (RDI) specifically for Windows on ARM64. Demonstrates PEB access via the x1…☆39May 30, 2025Updated last year
- Repository of different kernel drivers written while studying Windows NT Driver development☆12Apr 14, 2024Updated 2 years ago
- Module to generate and verify Authenticode signatures☆87Oct 11, 2026Updated 2 weeks ago
- A powerful Python library and CLI tool for parsing, analyzing, and manipulating YARA rules through Abstract Syntax Tree (AST) representat…☆54Updated this week
- A C# PE loader for x64 and x86 PE files.☆56Mar 9, 2026Updated 7 months ago
- ☆31Feb 28, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- The samples referenced in my book, Evasive Malware (No starch Press)☆62Feb 20, 2026Updated 8 months ago
- Study of binaries created with Rust through reverse engineering☆43Jan 28, 2026Updated 8 months ago
- ☆19Aug 1, 2026Updated 2 months ago
- A C++ REPL for IDA Pro / IDA C++ SDK☆96Mar 26, 2026Updated 7 months ago
- Python scripts that helps in the development of PPKG binaries☆13Jul 31, 2026Updated 2 months ago
- Simple, header-only, pattern matching and patching class + tool written in modern C++.☆26Jun 5, 2026Updated 4 months ago
- Source code for the DEF CON 33 CTF Finals.☆34Aug 26, 2025Updated last year
- Sh3ller is a lightweight C2 framework in its simplest form.☆33Sep 5, 2025Updated last year
- AI-driven agent runtime for Windows PE binary analysis. Turns IDA Pro decompiled code and SQLite databases produced by DeepExtractIDA int…☆21Sep 13, 2026Updated last month
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Plugins for Scylla☆21Sep 14, 2011Updated 15 years ago
- Staged DLL injection proof-of-concept built in C using Win32 APIs — developed in an isolated lab environment for red team certification s…☆42Jun 4, 2026Updated 4 months ago
- An IDA Pro plugin to assist with malware reverse engineering with AI and useful utilities☆49Aug 27, 2026Updated last month
- Defanged malware stages from the telnyx 4.87.1/4.87.2 PyPI supply chain compromise — WAV steganography, credential stealer, Windows persi…☆21Mar 29, 2026Updated 6 months ago
- ☆167Mar 4, 2025Updated last year
- Static Encrypt is an crate that encrypts string literals at compile time and only decrypted at runtime when needed.☆60Jan 17, 2026Updated 9 months ago
- Collection of custom implementations or Userland Primitives about some WinAPI functions☆47Oct 5, 2026Updated 2 weeks ago
- Find Windows RWX Memory Regions depending on the memory space needed☆18Nov 26, 2023Updated 2 years ago
- ETW based POC to identify direct and indirect syscalls☆197Apr 19, 2023Updated 3 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- DriverSentinel is a security tool developed in Go that detects malicious and vulnerable drivers on Windows systems by comparing them agai…☆36Jul 28, 2026Updated 2 months ago
- Polymorphic AV/AMSI bypass toolkit - Donut shellcode runner for offensive .NET/PE tools☆40May 26, 2026Updated 4 months ago
- Tests for LFI in PHP apps and automates the process of leveraging LFI's to recursively download source code and discover new files via in…☆14Sep 29, 2022Updated 4 years ago
- Whitepaper☆16Dec 1, 2025Updated 10 months ago
- A radare2 script to parse the gopclntab to facilitate Reverse Engineering Go binaries.☆17Apr 20, 2026Updated 6 months ago
- A cross-platform, collaborative C2 for red-teaming. Agents are cross-compilable (e.g, you can generate Windows DLLs on Linux), cross-comp…☆22Mar 7, 2025Updated last year
- Open source Ai voice agent builder platform☆13Oct 15, 2026Updated last week