Category: Reverse Engineering
fsmon FileSystem Monitor utility that runs on Linux, Android, iOS, and OSX. Backends fsmon filesystem information is taken from different backends depending on the operating system and apis available. This...
CocoaDebug – iOS Debugging Tool Feature Shake to hide or show the black bubble. (support both device and simulator) Long press the black bubble to show UIDebuggingInformationOverlay. (Apple’s Private API, support...
DECAF DECAF(short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope dynamic Android malware analysis platform. DroidScope...
gdb (gnu debugger) allows you to see what is going on ‘inside’ another program while it executes — or what another program was doing at the moment it crashed. It is...
B2R2 B2R2 is a collection of useful algorithms, functions, and tools for binary analysis, written purely in F# (in .NET lingo, it is purely managed code). B2R2 has been named after R2-D2,...
applepie, a hypervisor implementation for Bochs This is a tool designed for fuzzing, introspection, and finding bugs! This is a hypervisor using the Windows Hypervisor Platform API present in recent...
LazyIDA Make your IDA Lazy! Features Remove function return type in Hex-Rays: Convert data into different formats: Scan for format string vulnerabilities: Jump to vtable functions by double-clicking Lazy...
libgoblin libgoblin is a cross-platform trifecta of binary parsing and loading fun. It supports: An ELF32/64 parser, and raw C structs A 32/64-bit, zero-copy, endian aware, Mach-o parser, and raw...
JD-GUI – A standalone Java Decompiler GUI JD-GUI is a standalone graphical utility that displays Java source codes of “.class” files. You can browse the reconstructed source code with the...
HeapInfo As pwn lovers, while playing CTF with heap exploitation, we always need a debugger (e.g. gdb) for tracking memory layout. But we don’t really need gdb if we want...
Writing assembly is fun. Assembly is the lowest language (humanly understandable) available to communicate with computers and is crucial to understand the internal mechanisms of any machine. Unfortunately, setting up...
Diaphora diaphora is the most advanced program diffing tool (working as an IDA plugin) available as of today (2023). It was released first during SyScan 2015 and has been actively...
Recaf Recaf is an open-source Java bytecode editor based on Objectweb’s ASM. ASM is a library that abstracts away the constant pool and class-file attributes. Since keeping track of the constant...
Detect It Easy Detect It Easy, or abbreviated “DIE” is a program for determining types of files. “DIE” is a cross-platform application, apart from the Windows version there are also...
Mesos is a tool to gather binary code coverage on all user-land Windows targets without the need for source or recompilation. It also provides an automatic mechanism to save a...