Tools

jpiechowka/jenkins-cve-2016-0792

Exploit for Jenkins serialization vulnerability - CVE-2016-0792

robertdfrench/ifuncd-up

GNU IFUNC is the real culprit behind CVE-2024-3094

tca-iscas/cooper-ndss-2022

A tool for effective testing the binding layer of scripting languages

binsec/xyntia

Xyntia, the black-box deobfuscator

1rhino2/fnprint

match functions in binaries by what they do, not what their bytes look like. behavioral function fingerprinting via microexecution.

nccgroup/winstrument

Winstrument is a framework of modular scripts to aid in instrumenting Windows software using Frida for reverse engineering and attack surface…

stealthcopter/wordpress-hacking

A collection of useful resources for hacking WordPress and it's plugins and themes

ylca0/idalib-cli

Agent-native CLI wrapping IDA Pro IDALib for stateless, JSON-output binary analysis: disassembly, Hex-Rays decompilation, CFG, xrefs, strings, and…

frkngksl/exporthider

ExportHider: Generating Export Table during Runtime to Hide the Exported Functions from the DLL File.

0xbigshaq/apatchy

Fuzzing Framework for Modules in Apache HTTPD Server

zxgio/ghidra_stack_strings

A script to detect stack-strings by using emulation (leveraging Unicorn)

hasherezade/pesieve-go

Golang bindings for PE-sieve

iamavu/zairo

Scans code diffs with context to build an impact graph and uses LLMs to find vulnerabilities, supporting multi-repo scans and CI gating with SARIF…

hupe1980/cve-2021-3129

Laravel debug mode - Remote Code Execution (RCE)

de4dot/de4dot

.NET deobfuscator and unpacker.

ejfkdev/jscd

Reverse bytenode .jsc (V8 code cache) to JavaScript — static, pure Rust, no patched V8/Node. Node 8→26 / V8 5.8–14.6; 25k .jsc tested, 0 fail.

aftermathlabs/vmp2

Unpack and deobfuscate VMProtect 2 protected binaries with an emulation-based VM explorer, handler profiler, and experimental LLVM recompiler for…