QDBI - Dynamic Binary Instrumentation framework based on LLVM. pyQBDI - Python bindings. QBDI is also fully integrated with Frida. https://github.com/quarkslab/QBDI
GitHub
GitHub - QBDI/QBDI: A Dynamic Binary Instrumentation framework based on LLVM.
A Dynamic Binary Instrumentation framework based on LLVM. - GitHub - QBDI/QBDI: A Dynamic Binary Instrumentation framework based on LLVM.
Example: Triton + QDBI http://shell-storm.org/repo/Notepad/qbdi_with_triton.txt
EasyROP - tool allows you to search gadgets, operations formed by gadgets and generate automatic ROP chains in Portable Executable (PE). Based on Capstone, pefile. https://github.com/uZetta27/EasyROP
GitHub
GitHub - uZetta27/EasyROP: A Python tool to generate ROP chains
A Python tool to generate ROP chains. Contribute to uZetta27/EasyROP development by creating an account on GitHub.
IDAFuzzy - Fuzzy search tool for IDA Pro. Based on IDAPython. https://github.com/ga-ryo/idafuzzy
GitHub
GitHub - Ga-ryo/IDAFuzzy: Fuzzy search tool for IDA Pro.
Fuzzy search tool for IDA Pro. Contribute to Ga-ryo/IDAFuzzy development by creating an account on GitHub.
IDA StringCluster - extending IDA's string navigation capabilities. Based on IDAPython. https://github.com/Comsecuris/ida_strcluster
GitHub
GitHub - Comsecuris/ida_strcluster: extending IDA's string navigation capabilities
extending IDA's string navigation capabilities. Contribute to Comsecuris/ida_strcluster development by creating an account on GitHub.
Fentanyl is an IDAPython script that makes patching significantly easier https://github.com/isislab/Fentanyl
GitHub
osirislab/Fentanyl
Fentanyl is an IDAPython script that makes patching significantly easier - osirislab/Fentanyl
Symbiotic is a tool for finding bugs in computer programs based on instrumentation, program slicing and KLEE http://staticafi.github.io/symbiotic/
Symbiotic
What is Symbiotic?
Tool for verifying computer programs based on instrumentation, program slicing and symbolic executor KLEE.
http://vmlinux.py - script which can load Android/Linux vmlinux image in both IDA Pro and radare2. https://github.com/nforest/droidimg
GitHub
GitHub - nforest/droidimg: Android/Linux vmlinux loader
Android/Linux vmlinux loader. Contribute to nforest/droidimg development by creating an account on GitHub.
T-Fuzz - a fuzzing tool based on program transformation and Crash Analyzer. Slides: http://nebelwelt.net/publications/files/18Oakland-presentation.pdf WP: http://nebelwelt.net/publications/files/18Oakland.pdf Based on angr, radare2. https://github.com/HexHive/T-Fuzz
PyFDP - Python extension used to communicate with the FDP (Fast Debugging Protocol) hypervisor-based debugging server used in the Winbagility project. https://github.com/Winbagility/Winbagility/tree/master/bindings/python
GitHub
Winbagility/Winbagility
Contribute to Winbagility/Winbagility development by creating an account on GitHub.
Article: "MINDSHARE: VARIANT HUNTING WITH IDA PYTHON" About IDA Python. https://www.zerodayinitiative.com/blog/2018/6/26/mindshare-variant-hunting-with-ida-python
Zero Day Initiative
Zero Day Initiative — MindshaRE: Variant Hunting with IDA Python
MindShaRE is our periodic look at various reverse engineering tips and tricks. The goal is to keep things small and discuss some everyday aspects of reversing. You can view previous entries in this series here .
Sandbagility - a framework to analyze malwares. Based on PyFDP. https://github.com/iNod3/sandbagility
GitHub
iNod3/sandbagility
Contribute to iNod3/sandbagility development by creating an account on GitHub.
ida-embed-arch-disasm.py - allows IDA PRO to disassemble x86-64 code (WOW64) in 32-bit database. Based on IDAPython, capstone. https://github.com/a1ext/ida-embed-arch-disasm
GitHub
GitHub - a1ext/ida-embed-arch-disasm: Allows IDA PRO to disassemble x86-64 code (WOW64) in 32-bit database
Allows IDA PRO to disassemble x86-64 code (WOW64) in 32-bit database - a1ext/ida-embed-arch-disasm
Octopus - Security Analysis tool (Explorer, Disassembler, CFG recovery) for Blockchain Smart Contracts (BTC/ETH/NEO/EOS). https://github.com/quoscient/octopus
GitHub
GitHub - FuzzingLabs/octopus: Security Analysis tool for WebAssembly module (wasm) and Blockchain Smart Contracts (BTC/ETH/NEO/EOS)
Security Analysis tool for WebAssembly module (wasm) and Blockchain Smart Contracts (BTC/ETH/NEO/EOS) - FuzzingLabs/octopus
Noriben - Portable, Simple, Malware Analysis Sandbox. https://github.com/Rurik/Noriben
GitHub
GitHub - Rurik/Noriben: Noriben - Portable, Simple, Malware Analysis Sandbox
Noriben - Portable, Simple, Malware Analysis Sandbox - Rurik/Noriben