mona - Fork of mona.py with x64dbg support. https://github.com/x64dbg/mona

*Decompile All the Things* - IDA Batch Decompile plugin and script for Hex-Ray's IDA Pro that adds the ability to batch decompile multiple files and their imports with additional annotations (xref, stack var size) to the pseudocode .c file https://github.com/tintinweb/ida-batch_decompile

angrop - ROP gadget finder and chain builder. Based on angr. https://github.com/salls/angrop

Hex-Rays Plug-In Contest 2017: Hall Of Fame https://www.hex-rays.com/contests/2017/index.shtml

QDBI - Dynamic Binary Instrumentation framework based on LLVM. pyQBDI - Python bindings. QBDI is also fully integrated with Frida. https://github.com/quarkslab/QBDI

Example: Triton + QDBI http://shell-storm.org/repo/Notepad/qbdi_with_triton.txt

EasyROP - tool allows you to search gadgets, operations formed by gadgets and generate automatic ROP chains in Portable Executable (PE). Based on Capstone, pefile. https://github.com/uZetta27/EasyROP

ELF/PE/Mach-O parsing library https://github.com/airbus-seclab/elfesteem

IDAFuzzy - Fuzzy search tool for IDA Pro. Based on IDAPython. https://github.com/ga-ryo/idafuzzy

Collaborative malware analysis framework https://github.com/ANSSI-FR/polichombr

Programmatic disassembly and patching https://github.com/isislab/dispatch

IDA StringCluster - extending IDA's string navigation capabilities. Based on IDAPython. https://github.com/Comsecuris/ida_strcluster

Fentanyl is an IDAPython script that makes patching significantly easier https://github.com/isislab/Fentanyl

Symbiotic is a tool for finding bugs in computer programs based on instrumentation, program slicing and KLEE http://staticafi.github.io/symbiotic/

Python Based ARM CoreSight Debug and Trace Tools https://github.com/deadsy/pycs

http://vmlinux.py - script which can load Android/Linux vmlinux image in both IDA Pro and radare2. https://github.com/nforest/droidimg

T-Fuzz - a fuzzing tool based on program transformation and Crash Analyzer. Slides: http://nebelwelt.net/publications/files/18Oakland-presentation.pdf WP: http://nebelwelt.net/publications/files/18Oakland.pdf Based on angr, radare2. https://github.com/HexHive/T-Fuzz

PyFDP - Python extension used to communicate with the FDP (Fast Debugging Protocol) hypervisor-based debugging server used in the Winbagility project. https://github.com/Winbagility/Winbagility/tree/master/bindings/python

Article: "MINDSHARE: VARIANT HUNTING WITH IDA PYTHON" About IDA Python. https://www.zerodayinitiative.com/blog/2018/6/26/mindshare-variant-hunting-with-ida-python

Sandbagility - a framework to analyze malwares. Based on PyFDP. https://github.com/iNod3/sandbagility