polytracker
trailofbits/polytrackerAn LLVM-based instrumentation tool for universal taint tracking, dataflow analysis, and tracing.
binary-analysisdynamic-code-analysiseducation+4
600
trailofbits/polytrackerAn LLVM-based instrumentation tool for universal taint tracking, dataflow analysis, and tracing.
zer0condition/reversekitx64 Dynamic Reverse Engineering Toolkit
elyelysiox/recaptchaDocumentation and reverse engineering of reCAPTCHA
void-stack/vmunprotect.dumperVMUnprotect.Dumper can dynamically untamper VMProtected Assembly.
lifting-bits/sleighCMake build of Ghidra's SLEIGH processor specification library, providing standalone disassembly and p-code lifting engines for reverse engineering…
nccgroup/cartographerCode Coverage Exploration Plugin for Ghidra
nccgroup/dibfWindows NT ioctl bruteforcer and modular fuzzer
worksbutnottested/lightkeeperMaps execution-coverage data onto Ghidra disassembly to highlight visited code paths and accelerate reverse-engineering workflows.
r00tkitsmm/pishiPishi is a code coverage tool like kcov for macOS.
robertdfrench/ifuncd-upGNU IFUNC is the real culprit behind CVE-2024-3094
1rhino2/fnprintmatch functions in binaries by what they do, not what their bytes look like. behavioral function fingerprinting via microexecution.
binsec/xyntiaXyntia, the black-box deobfuscator
nccgroup/winstrumentWinstrument is a framework of modular scripts to aid in instrumenting Windows software using Frida for reverse engineering and attack surface…
ejfkdev/jscdReverse bytenode .jsc (V8 code cache) to JavaScript — static, pure Rust, no patched V8/Node. Node 8→26 / V8 5.8–14.6; 25k .jsc tested, 0 fail.
frkngksl/exporthiderExportHider: Generating Export Table during Runtime to Hide the Exported Functions from the DLL File.
zxgio/ghidra_stack_stringsA script to detect stack-strings by using emulation (leveraging Unicorn)
lolcaken/javascript-deobfuscatorDeobfuscator for javascript-obfuscator 5.x output (string arrays, control-flow flattening, self-defending, RC4/base64)
