ELF/PE/Mach-O parsing library https://github.com/airbus-seclab/elfesteem

IDAFuzzy - Fuzzy search tool for IDA Pro. Based on IDAPython. https://github.com/ga-ryo/idafuzzy

Collaborative malware analysis framework https://github.com/ANSSI-FR/polichombr

Programmatic disassembly and patching https://github.com/isislab/dispatch

IDA StringCluster - extending IDA's string navigation capabilities. Based on IDAPython. https://github.com/Comsecuris/ida_strcluster

Fentanyl is an IDAPython script that makes patching significantly easier https://github.com/isislab/Fentanyl

Symbiotic is a tool for finding bugs in computer programs based on instrumentation, program slicing and KLEE http://staticafi.github.io/symbiotic/

Python Based ARM CoreSight Debug and Trace Tools https://github.com/deadsy/pycs

http://vmlinux.py - script which can load Android/Linux vmlinux image in both IDA Pro and radare2. https://github.com/nforest/droidimg

T-Fuzz - a fuzzing tool based on program transformation and Crash Analyzer. Slides: http://nebelwelt.net/publications/files/18Oakland-presentation.pdf WP: http://nebelwelt.net/publications/files/18Oakland.pdf Based on angr, radare2. https://github.com/HexHive/T-Fuzz

PyFDP - Python extension used to communicate with the FDP (Fast Debugging Protocol) hypervisor-based debugging server used in the Winbagility project. https://github.com/Winbagility/Winbagility/tree/master/bindings/python

Article: "MINDSHARE: VARIANT HUNTING WITH IDA PYTHON" About IDA Python. https://www.zerodayinitiative.com/blog/2018/6/26/mindshare-variant-hunting-with-ida-python

Sandbagility - a framework to analyze malwares. Based on PyFDP. https://github.com/iNod3/sandbagility

ida-embed-arch-disasm.py - allows IDA PRO to disassemble x86-64 code (WOW64) in 32-bit database. Based on IDAPython, capstone. https://github.com/a1ext/ida-embed-arch-disasm

Octopus - Security Analysis tool (Explorer, Disassembler, CFG recovery) for Blockchain Smart Contracts (BTC/ETH/NEO/EOS). https://github.com/quoscient/octopus

Noriben - Portable, Simple, Malware Analysis Sandbox. https://github.com/Rurik/Noriben

crave - framework to automatically test and explore the capabilities of generic AV engines. Based on angr, capstone… https://github.com/necst/crave

angrgdb - use angr inside GDB. Create an angr state from the current debugger state.. Based on angr, gdb. https://github.com/andreafioraldi/angrgdb

VDiscover - a tool to predict vulnerability discovery (using Machine Learning techniques) of binary only programs.… https://github.com/CIFASIS/VDiscover

Functions+ - plugin to make functions tree view. Plugin parses function names and groups them by namespaces. Based… https://github.com/ax330d/functions-plus

mcsema_disass - a set of tools from McSema framework for communication with backend: IDA Pro, Binary Ninja for CFG recovering. (McSema - a framework for lifting x86, amd64, and aarch64 program binaries to LLVM bitcode.) Based on IDAPython, binaryninja. https://github.com/trailofbits/mcsema/tree/master/tools/mcsema_disass