Awesome List Updates on Jun 07, 2025

9 awesome lists updated today.

🏠 Home · 🔍 Search · 🔥 Feed · 📮 Subscribe · ❤️ Sponsor

1. Awesome Executable Packing

📚 Literature / Documentation

• 🌎 Awesome LLVM security (⭐724)

• 🌎 Defacto2

• 📌 Explained: Packer, crypter, and protector

• 📜 Implementing your own generic unpacker

• 🌎 MITRE ATT&CK | T1027.002 | obfuscated files or information: Software packing - Enterprise

• 🌎 MITRE ATT&CK | T1406.002 | obfuscated files or information: Software packing - Mobile

• 📊 NotPacked++: Evading static packing detection

• 🌎 OllyDbg OEP finder scripts (⭐255)

• 📊 Packing-box: Improving detection of executable packing

• 📄 Unpacking binary 101

• 📌 Unpacking the potential of "Packing box"

• 📌 Unpacking, reversing, patching

• 📌 Writing a PE packer

📚 Literature / Scientific Research

• 📰 Adversarial attacks against windows PE malware detection: A survey of the state-of-the-art (December 2021)

• 📰 All-in-one framework for detection, unpacking, and verification for malware analysis (January 2019)

• 📰 Analysis of machine learning approaches to packing detection (October 2023) ⭐ ⭐

• 📰 Anti-emulation trends in modern packers: A survey on the evolution of anti-emulation techniques in UPA packers (May 2018)

• 📓 Anti-unpacker tricks (May 2008)

• 📕 Assessing static and dynamic features for packing detection (October 2024) ⭐

• 📰 Binary-code obfuscations in prevalent packer tools (October 2013)

• 🎓 Building a malware mutation tool (June 2024) ⭐

• 🎓 Building a mutation tool for binaries: Expanding a dynamic binary rewriting tool to obfuscate malwares (June 2023) ⭐ ⭐

• 📓 Certified robustness of static deep learning-based malware detectors against patch and append attacks (November 2023) ⭐

• 📓 Chosen-instruction attack against commercial code virtualization obfuscators (April 2022)

• 📊 Dealing with virtualization packers (May 2008)

• 🔖 Deceiving end-to-end deep learning malware detectors using adversarial examples (January 2019)

• 📓 Deceiving portable executable malware classifiers into targeted misclassification with practical adversarial examples (March 2020)

• 📓 Detection of packed malware (August 2012)

• 📰 An efficient algorithm to extract control flow-based features for ioT malware detection (April 2021)

• 📓 Experimental toolkit for manipulating executable packing (June 2024) ⭐ ⭐

• 📓 Exploring adversarial examples in malware detection (May 2019)

• 📰 Feature selection for packer classification based on association rule mining (August 2024) ⭐

• 📰 Functionality-preserving black-box optimization of adversarial windows malware (May 2021) ⭐

• 📓 Highlighting the impact of packed executable alterations with unsupervised learning (April 2025)

• 📰 Mal-xtract: Hidden code extraction using memory analysis (January 2017)

• 📓 Malware images: Visualization and automatic classification (July 2011)

• 📓 Malware obfuscation through evolutionary packers (July 2015)

• 📓 Metadata recovery from obfuscated programs using machine learning (December 2016)

• 📰 MSG: Missing-sequence generator for metamorphic malware detection (March 2025)

• 📓 Obfuscation: Where are we in anti-DSE protections? (a first attempt) (December 2019)

• 📰 Opcodes as predictor for malware (January 2008)

• 📓 Packed code detection using shannon entropy and homomorphic encrypted executables (October 2024)

• 📰 Packed malware detection using entropy related analysis: A survey (November 2015)

• 📰 Packed malware variants detection using deep belief networks (March 2020)

• 🔖 PackHero: A scalable graph-based approach for efficient packer identification (July 2025)

• 📰 PE file features in detection of packed executables (January 2012)

• 📰 Pitfalls in machine learning for computer security (October 2024)

• 🎓 REFORM: A framework for malware packer analysis using information theory and statistical methods (April 2010)

• 🎓 Source-free binary mutation for offense and defense (December 2014)

• 📰 A survey on malware analysis techniques: Static, dynamic, hybrid and memory analysis (September 2018)

• 📓 Syntia: Synthesizing the semantics of obfuscated code (August 2017)

• 📕 Unpacking malware in the real world: A step-by step guide (July 2024)

• 📓 VABox: A virtualization-based analysis framework of virtualization-obfuscated packed executables (June 2021)

• 📰 x64Unpack: Hybrid emulation unpacker for 64-bit Windows Environments and detailed analysis results on VMProtect 3.4 (July 2020)

📑 Datasets / Scientific Research

• BODMAS (⭐83) - Code for our DLS'21 paper - BODMAS: An Open Dataset for Learning based Temporal Analysis of PE Malware.

• MalwareGallery - Yet another malware collection in the Internet.

• MalwareTips - MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats.

📦 Packers / After 2010

• ASM Guard (⭐249) - Packer utility for compressing and complicating reversing compiled native code (native files), protecting resources, adding DRM, and packing into an optimized loader.

• Astral-PE (⭐313) - Low-level mutator (Headers/EP obfuscator) for native Windows PE files (x32/x64).

• ELF Packer (⭐32) - Encrypts 64-bit elf files that decrypt at runtime.

• NPack - Can compress 32bits and 64bits exe, dll, ocx, scr Windows program.

• Obsidium - Feature-rich professional software protection and licensing system designed as a cost effective and easy to implement, yet reliable and non-invasive way to protect your 32- and 64-bit Windows software applications and games from reverse engineering.

• OS-X_Packer - Binary packer for the Mach-O file format.

• VirtualMachineObfuscationPoC - Obfuscation method using virtual machine.

• Woody Wood Packer (⭐18) - ELF packer - encrypt and inject self-decryption code into executable ELF binary target.

📦 Packers / Between 2000 and 2010

• NSPack - 32/64-bits exe, dll, ocx, scr Windows program compressor.

• TTProtect - Professional protection tool designed for software developers to protect their PE applications against illegal modification or decompilation.

📦 Packers / Before 2000

• CauseWay Compressor - DOS EXE compressor.

• PEBundle - Physically attaches DLL(s) to an executable, resolving dependencies in memory.

• VGCrypt - PE crypter for Win95/98/NT.

🔧 Tools / Before 2000

• Assiste (Packer) - Assiste.com's example list of packers.

• BinUnpack - Unpacking approach free from tedious memory access monitoring, therefore introducing very small runtime overhead.

• Cave-Finder (⭐66) - Tool to find code cave in PE image (x86 / x64) - Find empty space to place code in PE files.

• GUnpacker - Shell tool that performs OEP positioning and dumps decrypted code.

• Lissom - Retargetable decompiler consisting of a preprocessing part and a decompilation core.

• NotPacked++ (⭐19) - Attack tool for altering packed samples so that they evade static packing detection.

• PackerBreaker - Tool for helping unpack, decompress and decrypt most of the programs packed, compressed or encrypted using advanced emulation technology.

• PE Compression Test - List of packers tested on a few sample executables for comparing compressed sizes.

• PEiD - Packed Executable iDentifier.

• Quick Unpack - Generic unpacker that facilitates the unpacking process.

• RDG Packer Detector - Packer detection tool.

• Renovo - Detection tool built on top of TEMU (dynamic analysis component of BitBlaze) based on the execution of newly-generated code and monitoring memory writes after the program starts.

• VMUnpacker - Unpacker based on the technology of virtual machine.

2. Awesome Osint

Threat Actor Search

• BreachHQ - Provides a list of all known cyber threat actors also referred to as malicious actors, APT groups or hackers.

• Cybergeist - Cybergeist.io generates intelligence profiles about key threats and threat context that is actively being discussed and reported upon across the internet.

• Dark Web Informer - Tracking 854 Threat Actors as of 29th of May 2025.

• lazarusholic - Total 203 threat actors.

• OPENHUNTING.IO - Threat Library Collecting Information.

• SOCRadar LABS - Know threat actor tactics, techniques, and past activities. Access detailed profiles and track their activities.Keep up with the latest threats and Tactics, Techniques, and Procedures (TTPs).

3. Awesome Angular

Mixed utilities / Google Developer Experts

• ng-util (⭐34) - A set of Angular utilities.

4. Free for Dev

Miscellaneous

• Hosting Checker - Check hosting information such as ASN, ISP, location and more for any domain, website or IP address. Also includes multiple hosting and DNS-related tools.

5. Awesome Falsehood

Transportation

• Falsehoods about Aviation - Aviation data are less normalized than you might think.

6. Awesome Vue

Components & Libraries / Utilities

• vue-tiny-translation (⭐6) - Super lightweight (0.32KB) reactive translation plugin for Vue 3. Demo

• Loccy - Effortless Vue-i18n management in VS Code-based editors, featuring smart AI translations and key suggestions.

7. Awesome Agi Cocosci

Domain Specific Language / Design Practises

• Reproducibility in automated chemistry laboratories using computer science abstractions - Nature Synthesis, 2024. [All Versions]. While abstraction is critical for the transferability of automated laboratory science in (bio)chemical and materials sciences, its improper implementation is a technical debt taken against the reproducibility of experimental results. Over the decades, computer science has developed guidelines and strategies for how abstractions are captured in programming languages---particularly concerning the substitutability of implementations of abstracted ideas and the clear definition of the contexts in which abstractions are used. However, few programming languages developed for automated experiments fully leverage the wisdom learned in computer science. To achieve collaborative sharing of scientific knowledge via automated laboratories, the way that experimental protocols are codified and interpreted by machine agents must use abstractions responsibly and with reproducibility, rather than solely transferability, at its core. This Review discusses how computer science principles of abstraction can be translated to create more reproducible automation as an enabler for the acceleration of collaborative research with self-driving laboratories.

8. Awesome Billing

Basics

• Billed for ¥21,120, invoiced at ¥2,112,000 and paid ¥2,112,000 - Get rid of integers and floats for monetary values. Use decimals. Or face the risks of anomalous x100 charges.

• How to recruit software engineers in this domain? “The trick is to make the accounting/billing/payment department the antechamber of data engineering.” (source)

Pricing

• Axial - Business models - 38 models for inspiration.

• SaaS pricing explorer - A collection of 1000+ pricing pages for inspiration.

Pricing / Usage-based Pricing

• A Survey of Profit Optimization Techniques for Cloud Providers - “The strategy of improving user service quality is discussed first, followed by the pricing strategy for cloud resources to maximize revenue.”

• “Billing is not complex on purpose: it's the price to pay for elasticity.” (source) - Or why you're likely to get an endless stream of complaining users if choosing utility pricing scheme: while accurate to the (milli-)cent, this model is frustrating for customers not ready to invest time grasping the underlying concepts.

• Allen's interval algebra - Implementing usage-based pricing is tricky, and this algebra will help you organize temporal reasoning. Also see this Stack Overflow question with clean schema.

Pricing / Strategy

• "There are two ways to make money. You can bundle, or you can unbundle." - Jim Barksdale.

• Changing the Pricing Model - A couple of ways to re-license your product.

Product Catalog / Market Research

• OpenPIM - A streamlined open-source project, focusing on PIM-only features.

Cost Forecast / Market Research

• Transforming Financial Forecasting with Data Science and Machine Learning at Uber - Discusses how Uber apply data science and machine learning in their financial planning platforms.

• How to save money on your AWS bill - “The biggest cost savings there are: 1. Turning things off that you're not using; 2. Then spot instances; 3. Then reserved instances.”

Accounting / Software design and implementation

• TigerBeetle (⭐13k) - A distributed financial accounting database to ensure that the money either moves, or doesn't move, that it doesn't get lost somewhere in between. It has been tested on Jepsen, which tested its strong serializability.

Contracts / Currencies

• Is this what Enterprise mean? - When contracts, invoicing and payments are not working together, you end up alienating your big enterprise customers. See the associated HN comments on bulk license purchase.

Coupons and Vouchers / Currencies

• China's Pinduoduo reports theft of online discount vouchers to police - The next level of fraud: “an online collective exploited a loophole on its platform to ‘steal’ tens of millions of yuan worth of discount vouchers”.

Taxes / Currencies

• 2017 Tax Software Developer's Guides - A list of test cases for developers to test their tax code against.

Invoice / Electronic invoices

• EU eInvoicing - European standard on electronic invoice.

Payments / Electronic invoices

• The Best Payment Gateway for Startups - A benchmark of top payment providers, their pricing and models.

• How ACH works: A developer perspective, part 1, part 2, part 3, part 4, part 5.

• Why was I charged? - Under a constant stream of user complaints about payments, WordPress created a dedicated subdomains to help customers understand unexpected transactions. The trick was to add this URL directly in the bank statement.

• Hyperswitch (⭐22k) - Open-source backend for payment processing.

Payments / Credit Cards

• 'Is that even legal?': Companies may be sharing new credit or debit card information without you knowing - Some credit and debit card companies have "updating service" that allows new account numbers and expiry dates to be shared with merchants. Visa's implementation is called VAU and Mastercard's is ABU.

Payments / Bank Accounts

• EPC QR code - EU standard for QR codes used to transfer money between bank accounts via SEPA.

Payments / Online Payments

• UPI 101: The Basics - “In this article, we will learn about India's Unified Payments Interface. A four-year-old payment scheme that has been accounting for 40-45% of digital payments across India.”

Fraud / Cards

• Five Fun Fraud Facts - Another tiny collection of features we can feed to a ML system to detect fraud. Comments on HN also unearthed more qualifying signals and derived geodata on the transaction.

• Training an ML model to score chargebacks - An example of a platform's network effect, which allows to predict the likelihood of winning a dispute.

Fraud / Statistics

• Method to check if you swapped 2 digits - Standard manual accounting trick employed when isolating an error in a double ledger.

UX/UI / Billing

• We tried to make billing backendless - Failed attempt to move the billing experience by from backend to frontend because of security.

Business Intelligence / Customer Lifetime Value

• PyMC-Marketing (⭐890) - A full-featured Python package to analyze your users based on their "alive" and "dead" states.

Business Intelligence / Data Engineering

• AI vs Data Science vs Data Engineering - “Data Engineers build data pipelines and infrastructure to ensure a constant availability of transformed data. Data Scientists analyze and build models from these data to develop new product features or drive the bottom line of the business.” As for AI professionals, their focus is on cognitive automation.

• Why not use Double or Float to represent currency? - Because of precision: floats and doubles cannot accurately represent the base 10 multiples that we use for money.

Business Intelligence / Tools

• Meltano (⭐2.1k) - Open source convention-over-configuration product for the whole data lifecycle, all the way from loading data to analyzing it.

Competitive Analysis / Cloud providers

• AWS reserved instances vs saving plan - A feature matrix of the different scheme and their average dicounts.

History / Cloud providers

• Product Development as Iterated Taste - AWS sacrificed the simplicity of subscription pricing for S3 and went instead with a safe cost-following strategy because they had no clue how the users will use their service.

9. Magictools

Engines and Frameworks / Voxel Editors

• 🎉 is::Engine (⭐218) - C++, SDL 2 and SFML game engine that allows to create games on Nintendo Switch, Web (HTML 5), Mobile and PC.

• Prev: Jun 08, 2025
• Next: Jun 06, 2025