
vmp-devirt
Trace-assisted VMProtect devirtualization research platform: version front-ends feed a shared Remill/LLVM backend to lift handlers, recover dataflow,…
ai-assisted-reversingbinary-analysisbinary-exploitation+8
42

Trace-assisted VMProtect devirtualization research platform: version front-ends feed a shared Remill/LLVM backend to lift handlers, recover dataflow,…

WinDbg x64 extension that disassembles live functions and uses an LLM to produce verified pseudocode.

SHAREM is a shellcode analysis framework, capable of emulating more than 45,000 WinAPIs and virutally all Windows syscalls. It also contains its own…

Extensible debugger UI toolkit providing customizable register, disassembly, stack, memory, breakpoint, and backtrace views for LLDB, GDB, VDB, and…

A multi-arch assembly REPL and emulator for your command line.

This is an exploit for CVE-2017-7047, Works on 10.3.2 and below.