ajax4sec

dear-auto-fix

Poc-Monitor

🔍 Github CVE POC 信息监控推送 🚀

cgc-cbs

Challenge binaries (CBs) and tools from DARPA's Cyber Grand Challenge (CGC)

PortedDIFUZE

This repo includes our ported DIFUZE, which can directly generate syzlang format syscall descriptions.

LLM4Decompile

Reverse Engineering: Decompiling Binary Code with Large Language Models

BinSym

Symbolic execution for RISC-V machine code based on the formal LibRISCV ISA model

awesome-vulnerability-assessment

An ever-growing list of resources for data-driven vulnerability assessment and prioritization

0days-in-the-wild

Repository for information about 0-days exploited in-the-wild.

lica

A hacky tool for analysing linux kernel commits

QlRules

Auto-generated CodeQL rules for matching CVE vulnerabilities and variants.

PromptFuzz

PromtFuzz is an automated tool that generates high-quality fuzz drivers for libraries via a fuzz loop constructed on mutating LLMs' prompts.

UTopia

UT based automated fuzz driver generation

swig

SWIG is a software development tool that connects programs written in C and C++ with a variety of high-level programming languages.

CVEs

A collection of proof-of-concept exploit scripts written by the team at Rhino Security Labs for various CVEs.

GraphFuzz

GraphFuzz is an experimental framework for building structure-aware, library API fuzzers.

grype

A vulnerability scanner for container images and filesystems

GCMiner

Artifact for ICSE 2023

tabby

A CAT called tabby ( Code Analysis Tool )

FlowMatrix

FLOWMATRIX: GPU-Assisted Information-Flow Analysis through Matrix-Based Representation, USENIX Security'22

Container-Vulnerability-Exploit

容器安全漏洞的分析与复现

PatchaPalooza

A comprehensive tool that provides an insightful analysis of Microsoft's monthly security updates.

pinball2elf

Hopper

Hopper is a tool for generating fuzzing test cases for libraries automatically using interpretative fuzzing.

GPT-4V-Act

AI agent using GPT-4V(ision) capable of using a mouse/keyboard to interact with web UI

TinyAFL

Awesome-Info-Inferring-Binary

A collection of papers, tools about type inferring, variable renaming, function name inferring on stripped binary executables.

backend

DIRTY

DIRTY: Augmenting Decompiler Output with Learned Variable Names and Types

joern-workshop

Workshop on investigating C/C++ code using Joern

StaticAnalysisQueries

A set of Code-ql/Joern queries to find vulnerabilities