yangke

chucky-ng

Projects based on joern

DLLInjectionDemo

This repository is a demo of dll injection. It demostates how to hook and inject data during the DragDrop process in explorer.exe implemented by wine.

KATCH

This is a copied and to be developed version of KATCH(see ESEC/FSE ’13, paper of Paul Dan Marinescu and Cristian Cadar)

7zip-null-pointer-dereference

This repository is for CVE bug report of p7zip only

cluehunter

Find clues of program crash: a data flow tracker based on gdb log.

aflfast

AFLFast (extends AFL with Power Schedules)

apisan

APISan: Sanitizing API Usages through Semantic Cross-Checking

cloud9-depot

The Cloud9 depot (root repository)

conna

Finding Relational Data Injection Point

DECAF

DECAF(short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope dynamic Android malware analysis platform. DroidScope is now an extension to DECAF.

Experiment

hashset.c

hash set C implementation

IMF

Inferred Model-based Fuzzer

lrsan

LRSan: Detecting Lacking-Recheck Bugs in OS Kernels

metasploitable3

Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities.

octopus

oss-fuzz

OSS-Fuzz - continuous fuzzing of open source software

paimei

A reverse engineering framework written in Python.

rust-sgx-sdk

s2e

S2E - A Platform for In-Vivo Multi-Path Software Analysis

sanitizers

AddressSanitizer, ThreadSanitizer, MemorySanitizer

sulley

A pure-python fully automated and unattended fuzzing framework.

tensorflow

Computation using data flow graphs for scalable machine learning

tock

A secure embedded operating system for Cortex-M based microcontrollers

travioli

Travioli: A Dynamic Analysis for Detecting Data-Structure Traversals

TriforceAFL

AFL/QEMU fuzzing with full-system emulation.

TriforceLinuxSyscallFuzzer

A linux system call fuzzer using TriforceAFL

Triton

Triton is a Dynamic Binary Analysis (DBA) framework. It provides internal components like a Dynamic Symbolic Execution (DSE) engine, a Taint Engine, AST representations of the x86 and the x86-64 instructions set semantics, SMT simplification passes, a SMT Solver Interface and, the last but not least, Python bindings.

vuzzer

ZChecker

Find missing check for attacker controlled implicit data flow.