Binary String Hunt

Extract the hardcoded C2 endpoint from a malware binary's strings output.

Decompiled License Check

Extract the hardcoded license key from a decompiled function.

XOR Key Recovery

Recover the single-byte XOR key used to encode a malware string.

Anti-Debug Bypass

Identify the x86 instruction patch to invert an IsDebuggerPresent anti-debug check.

PowerShell Decode

Decode an obfuscated Base64 PowerShell command to identify the dropped filename.

Reverse the Dropper

Decode a ROT-13 obfuscated C2 URL extracted from a malware dropper.

Shadow File Hash Algorithm

Identify the password hashing algorithm from a /etc/shadow hash prefix.

Packer Identification

Identify the packer and the CLI command to unpack a malware sample.