
HookCase
Tool for reverse engineering macOS/OS X

Tool for reverse engineering macOS/OS X

Coverage-guided fuzzer that uses taint tracking and scalar optimization to solve path constraints without symbolic execution, improving branch…

Toolbox containing research notes & PoC code for weaponizing .NET's DLR

An LLVM-based instrumentation tool for universal taint tracking, dataflow analysis, and tracing.

jshunter is a command-line tool designed for analyzing JavaScript files and extracting endpoints. This tool specializes in identifying sensitive…

Modular software verification toolchain that translates LLVM IR into Boogie intermediate verification language for bounded and experimental unbounded…

eBPF fuzzer toolchain for generating random eBPF programs and validating kernel verifier/runtime behavior. Supports coverage-guided fuzzing and…

Lightweight Python utility for automated security auditing of GraphQL APIs. Detects misconfigurations, information leaks, and denial-of-service…

An strace-like program for the Windows 'native' API

CMake build of Ghidra's SLEIGH processor specification library, providing standalone disassembly and p-code lifting engines for reverse engineering…

pyREtic is an extensible framework for in-memory Python 2.x bytecode reverse engineering

TInjA is a CLI tool for testing web pages for template injection vulnerabilities and supports 44 of the most relevant template engines for eight…

0-day malware detection for binaries, source & scripts (that doesn't suck)

Code Coverage Exploration Plugin for Ghidra

The first analysis framework for CPU microcode

Toy scripts for playing with WinDbg JS API

Elite is the client-side component of the Covenant project. Covenant is a .NET command and control framework that aims to highlight the attack…

User-mode x86_64 binary emulator for malware analysis and reverse engineering. Supports PE, ELF, memory dumps, and raw binaries with syscall tracing,…