fvrmatteo

DMNP

Resources of the "Dissecting mobile native code packers. A case study." Zimperium's blogpost.

TritonASTLLVMIRTranslator

A simple pluggable tool to convert an unrolled TritonAST to LLVM-IR, optimize it and get back to TritonAST.

oracle-synthesis-meets-equality-saturation

ASMSimplifier

NeuReduce

SiMBA

Efficient Deobfuscation of Linear Mixed Boolean-Arithmetic Expressions

pafish

Pafish is a demonstration tool that employs several techniques to detect sandboxes and analysis environments in the same way as malware families do.

Triton

Triton is a Dynamic Binary Analysis (DBA) framework. It provides internal components like a Dynamic Symbolic Execution (DSE) engine, a dynamic taint engine, AST representations of the x86, x86-64 and AArch64 Instructions Set Architecture (ISA), SMT simplification passes, an SMT solver interface and, the last but not least, Python bindings.

alive2

APKiD

Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android

bfss

Blazingly Fast Skolem function Synthesis

BooleanFunctionSynthesis

Implementation of algorithms for Boolean function synthesis

cadet

A fast and certifying solver for quantified Boolean formulas.

capstone

Capstone disassembly/disassembler framework: Core (Arm, Arm64, M68K, Mips, PPC, Sparc, SystemZ, X86, X86_64, XCore) + bindings (Python, Java, Ocaml)

dcc

DCC (Dex-to-C Compiler) is method-based aot compiler that can translate DEX code to C code.

engine

The Flutter engine

GAMBA

Simplification of General Mixed Boolean-Arithmetic Expressions: GAMBA

hiredis

Minimalistic C client for Redis >= 1.2

keystone

Keystone assembler framework: Core (Arm, Arm64, Hexagon, Mips, PowerPC, Sparc, SystemZ & X86) + bindings

klee

KLEE Symbolic Virtual Machine

MBA-Obfuscator

Non-linear Mixed Boolean-Arithmetic Expressions

MBA-Solver

NeuReduce_pytorch

https://aclanthology.org/2020.findings-emnlp.56/

ProMBA

MBA deobfuscator via Program Synthesis and Term Rewriting

RANE

reFlutter

Flutter Reverse Engineering Framework

remill

Library for lifting of x86, amd64, and aarch64 machine code to LLVM bitcode

rootAVD

Script to root AVDs running with QEMU Emulator from Android Studio

secondhand

souper

A superoptimizer for LLVM IR