Tools

1rhino2/fnprint

match functions in binaries by what they do, not what their bytes look like. behavioral function fingerprinting via microexecution.

open-flaw/cve-2026-56848

Exploit PoC for CVE-2026-56848, a Node.js HTTP/2 heap-use-after-free that allows remote unauthenticated DoS. Includes raw-socket trigger, ASan build…

worksbutnottested/lightkeeper

Maps execution-coverage data onto Ghidra disassembly to highlight visited code paths and accelerate reverse-engineering workflows.

zxgio/ghidra_stack_strings

A script to detect stack-strings by using emulation (leveraging Unicorn)

tanprathan/mobileapp-pentest-cheatsheet

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration…

fuzzysecurity/fermion

Fermion, an electron wrapper for Frida & Monaco.

binsec/xyntia

Xyntia, the black-box deobfuscator

0x3c3e/slides

CodeQL + DTrace = Memory Disclosure Vulnerabilities in XNU

zer0condition/reversekit

x64 Dynamic Reverse Engineering Toolkit

hasherezade/pesieve-go

Golang bindings for PE-sieve

google/oss-fuzz-gen

LLM powered fuzzing via OSS-Fuzz.

narfindustries/http-garden

Differential testing framework for HTTP implementations

redteamsocietegenerale/dllirant

DLLirant is a tool to automatize the DLL Hijacking researches on a specified binary.

r00tkitsmm/pishi

Pishi is a code coverage tool like kcov for macOS.

0xbigshaq/apatchy

Fuzzing Framework for Modules in Apache HTTPD Server

void-stack/vmunprotect.dumper

VMUnprotect.Dumper can dynamically untamper VMProtected Assembly.