
grapefruit
Open-source mobile security testing suite for iOS and Android. Previously Passionfruit

Open-source mobile security testing suite for iOS and Android. Previously Passionfruit

A tool for effective testing the binding layer of scripting languages

ExportHider: Generating Export Table during Runtime to Hide the Exported Functions from the DLL File.

Runtime libc function auditor that detects file access race conditions and symlink vulnerabilities by hooking filesystem syscalls via LD_PRELOAD,…

An LLVM-based instrumentation tool for universal taint tracking, dataflow analysis, and tracing.

x64 Dynamic Reverse Engineering Toolkit

Modular software verification toolchain that translates LLVM IR into Boogie intermediate verification language for bounded and experimental unbounded…

Automated DLL Hijacking Discovery, Validation, and Confirmation. Turning local misconfigurations into weaponized, confirmed attack paths.

VMUnprotect.Dumper can dynamically untamper VMProtected Assembly.

CMake build of Ghidra's SLEIGH processor specification library, providing standalone disassembly and p-code lifting engines for reverse engineering…

DLLirant is a tool to automatize the DLL Hijacking researches on a specified binary.

Code Coverage Exploration Plugin for Ghidra

Maps execution-coverage data onto Ghidra disassembly to highlight visited code paths and accelerate reverse-engineering workflows.

Pishi is a code coverage tool like kcov for macOS.

GNU IFUNC is the real culprit behind CVE-2024-3094

match functions in binaries by what they do, not what their bytes look like. behavioral function fingerprinting via microexecution.

Xyntia, the black-box deobfuscator

Winstrument is a framework of modular scripts to aid in instrumenting Windows software using Frida for reverse engineering and attack surface…