
elfxtract
Automated ELF binary analysis tool for CTF/PWN challenges. Extracts security mitigations, ROP gadgets, PLT/GOT tables, and decompiles ASM to C using…

Automated ELF binary analysis tool for CTF/PWN challenges. Extracts security mitigations, ROP gadgets, PLT/GOT tables, and decompiles ASM to C using…

Automated static analysis tools for binary programs

Scriptable binary emulation framework integrating IDA Pro/Radare2 with Unicorn engine for automated malware analysis, string decryption, and code…

Curated repository of Windows kernel patch diffs with automated vulnerability analysis, exploit primitive mapping, and debugging aids for security…

Core binary-lifting library that translates executable code to LLVM IR and reconstructs C-like source for reverse engineering and automated binary…

Runtime tracer for Node.js malware analysis that hooks core modules, logs calls, spoofs anti-analysis checks, and captures file writes and HTTP…

ELF anti-reversing tool that overwrites section headers with nullbytes to prevent static analysis by disassemblers and debuggers, rendering functions…

Analysis of DataDome's custom obfuscated VM and bytecode format, revealing string encryption, S-box ciphers, and browser fingerprinting signals for…

Documentation and reverse engineering of reCAPTCHA

makin - reveal anti-debugging and anti-VM tricks [This project is not maintained anymore]

ARM64 ELF Virtual Machine Protection System

Documenting the internals of Fingerprint Pro's commercial agent, not the open-source FingerprintJS library

Reverse engineering the new Datadome VM 🔥

Reverse engineering toolkit for PerimeterX's bytecode VM, featuring a CFG-based disassembler, 5-layer decryption pipeline, opcode table…

Decompiled and cleaned Akamai v3 VM powering the latest sensor_data challenge script.

A Runtime Crypter in C for Linux ELF binaries.

🛡️ Open-source binary protection toolkit for Windows PE. Nanomite, VM protection, anti-debug, and more.