
polytracker
An LLVM-based instrumentation tool for universal taint tracking, dataflow analysis, and tracing.

An LLVM-based instrumentation tool for universal taint tracking, dataflow analysis, and tracing.

.NET deobfuscator and unpacker.

Windows privilege escalation discovery tool that parses Process Monitor boot logs to identify DLL hijacking, weak ACLs, and other elevation paths,…

match functions in binaries by what they do, not what their bytes look like. behavioral function fingerprinting via microexecution.

Automated DLL Hijacking Discovery, Validation, and Confirmation. Turning local misconfigurations into weaponized, confirmed attack paths.

"Reverse engineering analysis of Salat Stealer, a Go-based info-stealer that uses a Telegram proxy decoy, C2 communication, and encrypted memory…

Generate a proxy dll for arbitrary dll

ExportHider: Generating Export Table during Runtime to Hide the Exported Functions from the DLL File.

VMUnprotect.Dumper can dynamically untamper VMProtected Assembly.

Fuzzes CPU implementations by generating test inputs from software proxies, then executes them on real hardware to detect microarchitecture defects…

Frida-based in-process fuzzing suite with AFL++ proxy, standalone active/passive modes, and shared memory communication for high-performance…

An API hooking framework for intercepting and monitoring Windows applications

GNU IFUNC is the real culprit behind CVE-2024-3094

x64 Dynamic Reverse Engineering Toolkit

This experimetal fuzzer is meant to be used for API in-memory fuzzing.

DLLirant is a tool to automatize the DLL Hijacking researches on a specified binary.

Static Binary Instrumentation tool for Windows x64 executables

Code Coverage Exploration Plugin for Ghidra