carsonharmon

act

Run your GitHub Actions locally 🚀

TinyCheck

TinyCheck allows you to easily capture network communications from a smartphone or any device which can be associated to a Wi-Fi access point in order to quickly analyze them. This can be used to check if any suspect or malicious communication is outgoing from a smartphone, by using heuristics or specific Indicators of Compromise (IoCs). In order to make it working, you need a computer with a Debian-like operating system and two Wi-Fi interfaces. The best choice is to use a Raspberry Pi (2+) a Wi-Fi dongle and a small touch screen. This tiny configuration (for less than $50) allows you to tap any Wi-Fi device, anywhere.

onefuzz

A self-hosted Fuzzing-As-A-Service platform

mcsema

Framework for lifting x86, amd64, aarch64, sparc32, and sparc64 program binaries to LLVM bitcode

graphtage

A semantic diff utility and library for tree-like files such as JSON, JSON5, XML, HTML, YAML, and CSV.

pelican-themes

Themes for Pelican

spoon

Spoon is a metaprogramming library to analyze and transform Java source code. :spoon: is made with :heart:, :beers: and :sparkles:. It parses source files to build a well-designed AST with powerful analysis and transformation API.

publications

Publications from Trail of Bits

SVF

Static Value-Flow Analysis Framework for Source Code

egg

egg is a flexible, high-performance e-graph library

remill

Library for lifting machine code to LLVM bitcode

symcc

SymCC: efficient compiler-based symbolic execution

whole-program-llvm

A wrapper script to build whole-program LLVM bitcode files

llsoftsecbook

Low-Level Software Security for Compiler Developers

ProGraML

A Graph-based Program Representation for Data Flow Analysis and Compiler Optimizations

magma

A ground-truth fuzzing benchmark suite based on real programs with real bugs.

sys

Sys: A Static/Symbolic Tool for Finding Good Bugs in Good (Browser) Code

sleigh

Unofficial CMake build for Ghidra's C++ SLEIGH code

angelix

Semantic program repair system for C programs

blight

A framework for instrumenting build tools

klee-taint

KLEE-TAINT - Klee with taint analysis support

arancino

Arancino is a dynamic protection framework that defends Intel Pin against anti-instrumentation attacks.

NetPlier

NetPlier: Probabilistic Network Protocol Reverse Engineering from Message Traces

LG-ultrafine-brightness

A tool to adjust LG Ultrafine Series Monitor without Bootcamp in Linux and Windows.

cvedb

CVE querying library and utility that uses a local store syncing directly to the National Vulnerability Database

tourniquet

A Python library for easy and fast program transformation/repair

ittc

Materials related to the Iowa Type Theory Commute podcast

margotua

rucos-rs

Rust Microcontroller Operating System

EdgeCam