ret5et

SymbolicTriagePost

Supporting Materials for “Symbolic Triage” blog post

tplmap

Server-Side Template Injection and Code Injection Detection and Exploitation Tool

mcsema

Framework for lifting x86, amd64, aarch64, sparc32, and sparc64 program binaries to LLVM bitcode

cisol

Translator from asm to C, but not decompiler. Something between compiler and decompiler.

ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.

Presentations

Presentations in different conferences

Win32k-Fuzzer

Fuzz and Detect "Use After Free" vulnerability in win32k.sys ( Heap based )

IDAtropy

IDAtropy is a plugin for Hex-Ray's IDA Pro designed to generate charts of entropy and histograms using the power of idapython and matplotlib.

pafish

Pafish is a testing tool that uses different techniques to detect virtual machines and malware analysis environments in the same way that malware families do

rustlings

:crab: Small exercises to get you used to reading and writing Rust code!

symfuzz

klee

KLEE Symbolic Execution Engine

sandbox-attacksurface-analysis-tools

Set of tools to analyze Windows sandboxes for exposed attack surface.

neovim

Vim-fork focused on extensibility and usability

microsoft-pdb

Information from Microsoft about the PDB format. We'll try to keep this up to date. Just trying to help the CLANG/LLVM community get onto Windows.

unicorn

Unicorn CPU emulator framework (ARM, AArch64, M68K, Mips, Sparc, PowerPC, RiscV, S390x, TriCore, X86)

endless-sosuch

Endless WebM player from 2ch.hk

Stingray

IDAPython plugin for finding function strings recursively

fuzzdb

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

blowfish

Educational implementation of Blowfish

dnSpy

.NET debugger and assembly editor

Ida_Pro_Ultimate_Qt_Build_Guide

Ida Pro Ultimate Qt Build Guide

pysap

pysap is an open source Python library that provides modules for crafting and sending packets using SAP's NI, Diag, Enqueue, Router, MS, SNC, IGS, RFC and HDB protocols.

binnavi

BinNavi is a binary analysis IDE that allows to inspect, navigate, edit and annotate control flow graphs and call graphs of disassembled code.

edb-debugger

edb is a cross platform x86/x86-64 debugger.

wsym

Adds symbols to a ELF file.

x64dbgpy

Automating x64dbg using Python, Snapshots:

edb-debugger

edb is a cross-platform AArch32/x86/x86-64 debugger.

IDA_PIP_GUI

Little Ida pro gimmick, to use pip from python.

ROPgadget

This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.