Tools

reverseclabs/needle

The iOS Security Testing Framework

zer0condition/reversekit

x64 Dynamic Reverse Engineering Toolkit

smackers/smack

Modular software verification toolchain that translates LLVM IR into Boogie intermediate verification language for bounded and experimental unbounded…

trailofbits/polytracker

An LLVM-based instrumentation tool for universal taint tracking, dataflow analysis, and tracing.

ghostvectoracademy/dllhijackhunter

Automated DLL Hijacking Discovery, Validation, and Confirmation. Turning local misconfigurations into weaponized, confirmed attack paths.

void-stack/vmunprotect.dumper

VMUnprotect.Dumper can dynamically untamper VMProtected Assembly.

redteamsocietegenerale/dllirant

DLLirant is a tool to automatize the DLL Hijacking researches on a specified binary.

nccgroup/cartographer

Code Coverage Exploration Plugin for Ghidra

atomdrift-project/scan

0-day malware detection for binaries, source & scripts (that doesn't suck)

worksbutnottested/lightkeeper

Maps execution-coverage data onto Ghidra disassembly to highlight visited code paths and accelerate reverse-engineering workflows.

r00tkitsmm/pishi

Pishi is a code coverage tool like kcov for macOS.

robertdfrench/ifuncd-up

GNU IFUNC is the real culprit behind CVE-2024-3094

tca-iscas/cooper-ndss-2022

A tool for effective testing the binding layer of scripting languages

binsec/xyntia

Xyntia, the black-box deobfuscator

1rhino2/fnprint

match functions in binaries by what they do, not what their bytes look like. behavioral function fingerprinting via microexecution.

nccgroup/winstrument

Winstrument is a framework of modular scripts to aid in instrumenting Windows software using Frida for reverse engineering and attack surface…

ylca0/idalib-cli

Agent-native CLI wrapping IDA Pro IDALib for stateless, JSON-output binary analysis: disassembly, Hex-Rays decompilation, CFG, xrefs, strings, and…