
DIBF
Windows NT ioctl bruteforcer and modular fuzzer

Windows NT ioctl bruteforcer and modular fuzzer

Elite is the client-side component of the Covenant project. Covenant is a .NET command and control framework that aims to highlight the attack…

A PoC Java Stager which can download, compile, and execute a Java file in memory.

GUI Burp Plugin to ease discovering of security holes in web applications

Pishi is a code coverage tool like kcov for macOS.

A Solution For Cross-Platform Obfuscated Commands Detection presented on CIS2019 China. 动静态Bash/CMD/PowerShell命令混淆检测框架 - CIS 2019大会

A tool for effective testing the binding layer of scripting languages

Exploit for Jenkins serialization vulnerability - CVE-2016-0792

NebulaPulsar is a proof-of-concept in-memory implant framework for Java (JSP) and ASP.NET (ASPX/ASHX/ASMX) webshells, originally developed as part of…

Maps execution-coverage data onto Ghidra disassembly to highlight visited code paths and accelerate reverse-engineering workflows.

Xyntia, the black-box deobfuscator

Distributed coverage-guided fuzzing engine compatible with libFuzzer targets; scales to thousands of concurrent jobs, uses sanitizers and corpus…

GNU IFUNC is the real culprit behind CVE-2024-3094

ExportHider: Generating Export Table during Runtime to Hide the Exported Functions from the DLL File.

match functions in binaries by what they do, not what their bytes look like. behavioral function fingerprinting via microexecution.

CodeQL + DTrace = Memory Disclosure Vulnerabilities in XNU

Instrumented fuzzer for PLC-based ICS control applications, targeting Codesys runtime on Wago controllers to uncover memory corruption and…

Fuzzing Framework for Modules in Apache HTTPD Server