http://vmlinux.py - script which can load Android/Linux vmlinux image in both IDA Pro and radare2. https://github.com/nforest/droidimg
GitHub
GitHub - nforest/droidimg: Android/Linux vmlinux loader
Android/Linux vmlinux loader. Contribute to nforest/droidimg development by creating an account on GitHub.
T-Fuzz - a fuzzing tool based on program transformation and Crash Analyzer. Slides: http://nebelwelt.net/publications/files/18Oakland-presentation.pdf WP: http://nebelwelt.net/publications/files/18Oakland.pdf Based on angr, radare2. https://github.com/HexHive/T-Fuzz
PyFDP - Python extension used to communicate with the FDP (Fast Debugging Protocol) hypervisor-based debugging server used in the Winbagility project. https://github.com/Winbagility/Winbagility/tree/master/bindings/python
GitHub
Winbagility/Winbagility
Contribute to Winbagility/Winbagility development by creating an account on GitHub.
Article: "MINDSHARE: VARIANT HUNTING WITH IDA PYTHON" About IDA Python. https://www.zerodayinitiative.com/blog/2018/6/26/mindshare-variant-hunting-with-ida-python
Zero Day Initiative
Zero Day Initiative — MindshaRE: Variant Hunting with IDA Python
MindShaRE is our periodic look at various reverse engineering tips and tricks. The goal is to keep things small and discuss some everyday aspects of reversing. You can view previous entries in this series here .
Sandbagility - a framework to analyze malwares. Based on PyFDP. https://github.com/iNod3/sandbagility
GitHub
iNod3/sandbagility
Contribute to iNod3/sandbagility development by creating an account on GitHub.
ida-embed-arch-disasm.py - allows IDA PRO to disassemble x86-64 code (WOW64) in 32-bit database. Based on IDAPython, capstone. https://github.com/a1ext/ida-embed-arch-disasm
GitHub
GitHub - a1ext/ida-embed-arch-disasm: Allows IDA PRO to disassemble x86-64 code (WOW64) in 32-bit database
Allows IDA PRO to disassemble x86-64 code (WOW64) in 32-bit database - a1ext/ida-embed-arch-disasm
Octopus - Security Analysis tool (Explorer, Disassembler, CFG recovery) for Blockchain Smart Contracts (BTC/ETH/NEO/EOS). https://github.com/quoscient/octopus
GitHub
GitHub - FuzzingLabs/octopus: Security Analysis tool for WebAssembly module (wasm) and Blockchain Smart Contracts (BTC/ETH/NEO/EOS)
Security Analysis tool for WebAssembly module (wasm) and Blockchain Smart Contracts (BTC/ETH/NEO/EOS) - FuzzingLabs/octopus
Noriben - Portable, Simple, Malware Analysis Sandbox. https://github.com/Rurik/Noriben
GitHub
GitHub - Rurik/Noriben: Noriben - Portable, Simple, Malware Analysis Sandbox
Noriben - Portable, Simple, Malware Analysis Sandbox - Rurik/Noriben
crave - framework to automatically test and explore the capabilities of generic AV engines. Based on angr, capstone… https://github.com/necst/crave
GitHub
necst/crave
Framework to automatically test and explore the capabilities of generic AV engines - necst/crave
angrgdb - use angr inside GDB. Create an angr state from the current debugger state.. Based on angr, gdb. https://github.com/andreafioraldi/angrgdb
GitHub
GitHub - andreafioraldi/angrgdb: Use angr inside GDB. Create an angr state from the current debugger state.
Use angr inside GDB. Create an angr state from the current debugger state. - GitHub - andreafioraldi/angrgdb: Use angr inside GDB. Create an angr state from the current debugger state.
VDiscover - a tool to predict vulnerability discovery (using Machine Learning techniques) of binary only programs.… https://github.com/CIFASIS/VDiscover
GitHub
GitHub - CIFASIS/VDiscover: A tool to predict vulnerability discovery of binary only programs
A tool to predict vulnerability discovery of binary only programs - CIFASIS/VDiscover
Functions+ - plugin to make functions tree view. Plugin parses function names and groups them by namespaces. Based… https://github.com/ax330d/functions-plus
GitHub
GitHub - ax330d/functions-plus: IDA Pro plugin to show functions in a tree view
IDA Pro plugin to show functions in a tree view. Contribute to ax330d/functions-plus development by creating an account on GitHub.
mcsema_disass - a set of tools from McSema framework for communication with backend: IDA Pro, Binary Ninja for CFG recovering. (McSema - a framework for lifting x86, amd64, and aarch64 program binaries to LLVM bitcode.) Based on IDAPython, binaryninja. https://github.com/trailofbits/mcsema/tree/master/tools/mcsema_disass
GitHub
lifting-bits/mcsema
Framework for lifting x86, amd64, and aarch64 program binaries to LLVM bitcode - lifting-bits/mcsema
binja-ipython - a plugin to integrate an IPython kernel into Binary Ninja. Based on binaryninja. https://github.com/ernw/binja-ipython
GitHub
ernw/binja-ipython
A plugin to integrate an IPython kernel into Binary Ninja. - ernw/binja-ipython
SnippetDetector - IDA Python scripts project for snippets detection. Based on IDAPython. https://github.com/zaironne/SnippetDetector
GitHub
zaironne/SnippetDetector
IDA Python scripts project for snippets detection. Contribute to zaironne/SnippetDetector development by creating an account on GitHub.
r2angrdbg - use angr inside the radare2 debugger. Create an angr state from the current debugger state.. Based on radare2, angr. https://github.com/andreafioraldi/r2angrdbg
GitHub
andreafioraldi/r2angrdbg
Use angr inside the radare2 debugger. Create an angr state from the current debugger state. - andreafioraldi/r2angrdbg
Article: "MINDSHARE: AN INTRODUCTION TO PYKD". About pykd. https://www.zerodayinitiative.com/blog/2018/7/19/mindshare-an-introduction-to-pykd
Zero Day Initiative
Zero Day Initiative — MindshaRE: An Introduction to PyKD
MindShaRE is our periodic look at various reverse engineering tips and tricks. The goal is to keep things small and discuss some everyday aspects of reversing. You can view previous entries in this series here .
ethRE - Reverse Engineering tool for Ethereum EVM. Based on miasm. https://github.com/jbcayrou/ethRE
GitHub
GitHub - jbcayrou/ethRE: Reverse Engineering tool for Ethereum EVM
Reverse Engineering tool for Ethereum EVM. Contribute to jbcayrou/ethRE development by creating an account on GitHub.
ida2r2 - export IDB or IDC from IDA into a radare2 initialization script. https://github.com/radare/radare2ida
GitHub
GitHub - radare/radare2ida: Tools, documentation and scripts to move projects from IDA to R2 and viceversa
Tools, documentation and scripts to move projects from IDA to R2 and viceversa - radare/radare2ida
GBA-IDA-Pseudo-Terminal - a collection of tools that uses the IDAPython API to execute commands for IDB analysis https://github.com/LanHikari22/GBA-IDA-Pseudo-Terminal
GitHub
LanHikari22/GBA-IDA-Pseudo-Terminal
IDAPython tools to aid with analysis, disassembly and data extraction using IDA python commands, tailored for the GBA architecture at some parts - LanHikari22/GBA-IDA-Pseudo-Terminal