Qu1cksc0pe

Why we included this project

Qu1cksc0pe is a single command that pulls a surprising amount of signal out of a suspicious file. It handles Windows executables, Linux ELF, macOS Mach-O, APK, documents, scripts, PCAPs, and .eml files, and reports imported DLLs, functions and APIs, sections, embedded URLs and IPs, Android permission levels, and MITRE ATT&CK mappings. That breadth is useful when you get mixed file types and don't want to juggle a dozen single-purpose tools. The static-analysis engine also includes an MCP server, so Claude Code or Claude Desktop can call its analysis tools directly, and an optional LLM pass (local Ollama by default, or cloud providers) can summarize the report. It's a practical, self-contained triage aid for security teams, incident responders, and anyone doing a quick first-pass inspection of untrusted files.