#1Tools for analyzing application behavior during runtime to find security vulnerabilities.
Kitploit recommended
cobbr/eliteElite is the client-side component of the Covenant project. Covenant is a .NET command and control framework that aims to highlight the attack…
cornerpirate/java-stagerA PoC Java Stager which can download, compile, and execute a Java file in memory.
dobin/burpsentinelGUI Burp Plugin to ease discovering of security holes in web applications
advdebug/brovanUser-mode x86_64 binary emulator for malware analysis and reverse engineering. Supports PE, ELF, memory dumps, and raw binaries with syscall tracing,…
we5ter/flerkenA Solution For Cross-Platform Obfuscated Commands Detection presented on CIS2019 China. 动静态Bash/CMD/PowerShell命令混淆检测框架 - CIS 2019大会
lauriewired/artfulThe ARTful library for dynamically modifying the Android Runtime
ch0pin/rdxA native APK and DEX decompiler written in Rust
nccgroup/dibfWindows NT ioctl bruteforcer and modular fuzzer
rbmm/ntdetoursDetours implementation (x64/x86) which used only ntdll import
worksbutnottested/lightkeeperMaps execution-coverage data onto Ghidra disassembly to highlight visited code paths and accelerate reverse-engineering workflows.
r00tkitsmm/pishiPishi is a code coverage tool like kcov for macOS.
jpiechowka/jenkins-cve-2016-0792Exploit for Jenkins serialization vulnerability - CVE-2016-0792
robertdfrench/ifuncd-upGNU IFUNC is the real culprit behind CVE-2024-3094
tca-iscas/cooper-ndss-2022A tool for effective testing the binding layer of scripting languages
dougwithseismic/dezlock-dumpRuntime schema + RTTI extraction tool for Deadlock, CS2, Dota, and others (Source 2). No source2gen required.
binsec/xyntiaXyntia, the black-box deobfuscator
1rhino2/fnprintmatch functions in binaries by what they do, not what their bytes look like. behavioral function fingerprinting via microexecution.
