
polytracker
An LLVM-based instrumentation tool for universal taint tracking, dataflow analysis, and tracing.

An LLVM-based instrumentation tool for universal taint tracking, dataflow analysis, and tracing.

Coverage-guided fuzzer that uses taint tracking and scalar optimization to solve path constraints without symbolic execution, improving branch…

A security scanner for your LLM agentic workflows

A wrapper around grep, to help you grep for things

Open-source mobile security testing suite for iOS and Android. Previously Passionfruit

Runtime instrumentation framework for building dynamic analysis tools: tracing, profiling, code coverage, memory debugging, fuzzing, and disassembly…

Runtime Windows API interception library for hooking, monitoring, and instrumenting function calls. Supports binary rewriting and DLL injection,…

Web vulnerability scanner written in Python3

Linux ptrace-based process tracing and debugging utility for inspecting system calls, memory, and program execution flow.

match functions in binaries by what they do, not what their bytes look like. behavioral function fingerprinting via microexecution.

Exploit PoC for CVE-2026-56848, a Node.js HTTP/2 heap-use-after-free that allows remote unauthenticated DoS. Includes raw-socket trigger, ASan build…

Time Travel Debugging IDA plugin

Helper script for Windows kernel debugging with IDA Pro on native Bochs debugger (including PDB symbols)

The first analysis framework for CPU microcode

A DTrace on Windows Reimplementation

Unofficial frida extension for VSCode

Maps execution-coverage data onto Ghidra disassembly to highlight visited code paths and accelerate reverse-engineering workflows.

A script to detect stack-strings by using emulation (leveraging Unicorn)