
DLLirant
DLLirant is a tool to automatize the DLL Hijacking researches on a specified binary.

DLLirant is a tool to automatize the DLL Hijacking researches on a specified binary.

Code Coverage Exploration Plugin for Ghidra

A powerful decompiler that lets you reverse-engineer React Native mobile apps by converting their compiled Hermes bytecode (.hbc) files back into…

Elite is the client-side component of the Covenant project. Covenant is a .NET command and control framework that aims to highlight the attack…

A PoC Java Stager which can download, compile, and execute a Java file in memory.

A Solution For Cross-Platform Obfuscated Commands Detection presented on CIS2019 China. 动静态Bash/CMD/PowerShell命令混淆检测框架 - CIS 2019大会

The ARTful library for dynamically modifying the Android Runtime

A native APK and DEX decompiler written in Rust

Windows NT ioctl bruteforcer and modular fuzzer

Maps execution-coverage data onto Ghidra disassembly to highlight visited code paths and accelerate reverse-engineering workflows.

Pishi is a code coverage tool like kcov for macOS.

Exploit for Jenkins serialization vulnerability - CVE-2016-0792

GNU IFUNC is the real culprit behind CVE-2024-3094

Xyntia, the black-box deobfuscator

match functions in binaries by what they do, not what their bytes look like. behavioral function fingerprinting via microexecution.

Winstrument is a framework of modular scripts to aid in instrumenting Windows software using Frida for reverse engineering and attack surface…

ExportHider: Generating Export Table during Runtime to Hide the Exported Functions from the DLL File.

Fuzzing Framework for Modules in Apache HTTPD Server