
fnprint
match functions in binaries by what they do, not what their bytes look like. behavioral function fingerprinting via microexecution.

match functions in binaries by what they do, not what their bytes look like. behavioral function fingerprinting via microexecution.


A script to detect stack-strings by using emulation (leveraging Unicorn)

Fermion, an electron wrapper for Frida & Monaco.

Xyntia, the black-box deobfuscator

x64 Dynamic Reverse Engineering Toolkit

Golang bindings for PE-sieve

DLLirant is a tool to automatize the DLL Hijacking researches on a specified binary.

Pishi is a code coverage tool like kcov for macOS.

VMUnprotect.Dumper can dynamically untamper VMProtected Assembly.

Detect, analyze and uniquely identify crashes in Windows applications

ADT is a toolset designed to help model application behavior, research and test security vulnerabilities, and facilitate reversing hostile code.

Code Coverage Exploration Plugin for Ghidra

Winstrument is a framework of modular scripts to aid in instrumenting Windows software using Frida for reverse engineering and attack surface…

A tool for effective testing the binding layer of scripting languages

GNU IFUNC is the real culprit behind CVE-2024-3094

ExportHider: Generating Export Table during Runtime to Hide the Exported Functions from the DLL File.

Automated DLL Hijacking Discovery, Validation, and Confirmation. Turning local misconfigurations into weaponized, confirmed attack paths.