
STrace
A DTrace on Windows Reimplementation

A DTrace on Windows Reimplementation

DLLirant is a tool to automatize the DLL Hijacking researches on a specified binary.

A PoC Java Stager which can download, compile, and execute a Java file in memory.

GUI Burp Plugin to ease discovering of security holes in web applications


Maps execution-coverage data onto Ghidra disassembly to highlight visited code paths and accelerate reverse-engineering workflows.

GNU IFUNC is the real culprit behind CVE-2024-3094

Xyntia, the black-box deobfuscator

match functions in binaries by what they do, not what their bytes look like. behavioral function fingerprinting via microexecution.

Distributed coverage-guided fuzzing engine compatible with libFuzzer targets; scales to thousands of concurrent jobs, uses sanitizers and corpus…

CodeQL + DTrace = Memory Disclosure Vulnerabilities in XNU

ExportHider: Generating Export Table during Runtime to Hide the Exported Functions from the DLL File.

Reverse bytenode .jsc (V8 code cache) to JavaScript — static, pure Rust, no patched V8/Node. Node 8→26 / V8 5.8–14.6; 25k .jsc tested, 0 fail.

A script to detect stack-strings by using emulation (leveraging Unicorn)

Scans code diffs with context to build an impact graph and uses LLMs to find vulnerabilities, supporting multi-repo scans and CI gating with SARIF…

通过 jvm 启动参数 以及 jps pid进行拦截非法参数

frida-stalker based system call tracer on windows(x64).

Plugins integrating Claude Code with IDA Pro to assist reverse engineering and binary analysis workflows through AI-driven disassembly and code…