polytracker
trailofbits/polytrackerAn LLVM-based instrumentation tool for universal taint tracking, dataflow analysis, and tracing.
binary-analysisdynamic-code-analysiseducation+4
599
trailofbits/polytrackerAn LLVM-based instrumentation tool for universal taint tracking, dataflow analysis, and tracing.
ghostvectoracademy/dllhijackhunterAutomated DLL Hijacking Discovery, Validation, and Confirmation. Turning local misconfigurations into weaponized, confirmed attack paths.
zer0condition/reversekitx64 Dynamic Reverse Engineering Toolkit
void-stack/vmunprotect.dumperVMUnprotect.Dumper can dynamically untamper VMProtected Assembly.
redteamsocietegenerale/dllirantDLLirant is a tool to automatize the DLL Hijacking researches on a specified binary.
nccgroup/cartographerCode Coverage Exploration Plugin for Ghidra
robertdfrench/ifuncd-upGNU IFUNC is the real culprit behind CVE-2024-3094
tca-iscas/cooper-ndss-2022A tool for effective testing the binding layer of scripting languages
1rhino2/fnprintmatch functions in binaries by what they do, not what their bytes look like. behavioral function fingerprinting via microexecution.
nccgroup/winstrumentWinstrument is a framework of modular scripts to aid in instrumenting Windows software using Frida for reverse engineering and attack surface…
frkngksl/exporthiderExportHider: Generating Export Table during Runtime to Hide the Exported Functions from the DLL File.
zxgio/ghidra_stack_stringsA script to detect stack-strings by using emulation (leveraging Unicorn)
hasherezade/pesieve-goGolang bindings for PE-sieve
kaisonox/apiscopeAn API hooking framework for intercepting and monitoring Windows applications
syss-research/wcfproxyA proxy for net.tcp-based WCF traffic.
de4dot/de4dot.NET deobfuscator and unpacker.
google/path-auditorRuntime libc function auditor that detects file access race conditions and symlink vulnerabilities by hooking filesystem syscalls via LD_PRELOAD,…
