sharem
bw3ll/sharemSHAREM is a shellcode analysis framework, capable of emulating more than 45,000 WinAPIs and virutally all Windows syscalls. It also contains its own…
ai-securitybinary-analysisdebuggers+5
495
bw3ll/sharemSHAREM is a shellcode analysis framework, capable of emulating more than 45,000 WinAPIs and virutally all Windows syscalls. It also contains its own…
quarkslab/binbloomRaw binary firmware analysis software
instlatx64/instlatx64Comprehensive database of x86/x64 instruction tables, latencies, and microarchitecture details for CPU performance analysis and low-level reverse…
struppigel/portexJava library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness
mwemuorg/mwemuPure Rust x86 hardware emulator and Windows process simulator for malware analysis, shellcode emulation, and payload unpacking. Supports 32/64-bit PE…
mrexodia/dumpulatorAn easy-to-use library for emulating memory dumps. Useful for malware analysis (config extraction, unpacking) and dynamic analysis in general…
reb311ion/replicaGhidra plugin that enhances reverse engineering by fixing missed disassembly, detecting functions, labeling crypto constants, and renaming functions…
mrt4ntr4/ntwardenWindows Analysis and Research Toolkit
cert-polska/malduck🦆 Malduck is your ducky companion in malware analysis journeys
0x0be/pepperAn open source script to perform malware static analysis on Portable Executable
strongcourage/uafuzzBinary-level directed fuzzer specialized in detecting Use-After-Free vulnerabilities via ordering-aware input metrics and static analysis, enabling…
seemoo-lab/polypyusBinary-only firmware historian that learns to locate functions in raw binaries by extracting known functions from similar binaries, enabling fast…
trailofbits/mquireZero-dependency Linux memory forensics, leveraging kernel-embedded BTF and kallsyms for type-aware memory analysis without external debug info.
netspooky/inhaleA malware analysis and classification tool.
cmu-sei/kaijuCERT Kaiju is a binary analysis framework extension for the Ghidra software reverse engineering suite. This repository is a "mirror" -- please file…
mistymntncop/cve-2023-4863Proof-of-concept for CVE-2023-4863, a heap buffer overflow in WebP image decoding. Demonstrates the code_lengths trigger mechanism discovered by…
galoisinc/mateInteractive program analysis suite using Code Property Graphs to hunt for bugs in C and C++ code, unifying application-specific and low-level…