echidna Echidna is a weird creature that eats bugs and is highly electrosensitive (with apologies to Jacob Stanley) More seriously, Echidna is a Haskell program designed for fuzzing/property-based testing of Ethereum smarts contracts. It...
PyREBox is a Python scriptable Reverse Engineering sandbox. It is based on QEMU, and its goal is to aid reverse engineering by providing a dynamic analysis and debugging capabilities from a different perspective. PyREBox...
Reverse Engineering / Smartphone PenTest
by do son · Published June 20, 2019 · Last modified April 21, 2023
jadx – Dex to Java decompiler Command-line and GUI tools for producing Java source code from Android Dex and Apk files Changelog v1.4.7 Features [core] Inline lambdas by instance field (#1800) [plugins] Allow to...
Malware Analysis / Reverse Engineering
by do son · Published June 17, 2019 · Last modified April 10, 2021
Un{i}packer Unpacking PE files using Unicorn Engine The usage of runtime packers by malware authors is very common, as it is a technique that helps to hinder analysis. Furthermore, packers are a challenge for...
Malware Analysis / Reverse Engineering
by do son · Published June 16, 2019 · Last modified November 9, 2023
PE-sieve is a light-weight tool that helps to detect malware running on the system, as well as to collect the potentially malicious material for further analysis. Recognizes and dumps a variety of implants within the...
Bytecode Viewer is an Advanced Lightweight Java Bytecode Viewer, GUI Java Decompiler, GUI Bytecode Editor, GUI Smali, GUI Baksmali, GUI APK Editor, GUI Dex Editor, GUI APK Decompiler, GUI DEX Decompiler, GUI Procyon Java...
Malware Analysis / Reverse Engineering
by do son · Published June 13, 2019 · Last modified March 29, 2020
Simplify Simplify virtually executes an app to understand its behavior and then tries to optimize the code so that it behaves identically but is easier for a human to understand. Each optimization type is...
Malware Analysis / Reverse Engineering
by do son · Published June 10, 2019 · Last modified October 10, 2021
Sojobo – A binary analysis framework Sojobo is an emulator for the B2R2 framework. It was created to easier the analysis of potentially malicious files. It is totally developed in .NET so you don’t need to...
Execution Trace Viewer Execution Trace Viewer is an application for viewing, editing and analyzing execution traces. It was originally made for reverse engineering obfuscated code, but it can be used to analyze any kind...
Manticore is a prototyping tool for dynamic binary analysis, with support for symbolic execution, taint analysis, and binary instrumentation. Features Input Generation: automatically generates inputs that trigger unique code paths Crash Discovery: discovers inputs...
FLARE VM – a fully customizable, Windows-based security distribution for malware analysis, incident response, penetration testing, etc.. Installed Tools Android dex2jar apktool Debuggers flare-qdb scdbg OllyDbg + OllyDump + OllyDumpEx OllyDbg2 + OllyDumpEx x64dbg...
sgx-step SGX-Step is an open-source framework to facilitate side-channel attack research on Intel SGX platforms. SGX-Step consists of an adversarial Linux kernel driver and userspace library that allow to configure untrusted page table entries...
WinObjEx64 is an advanced utility that lets you explore the Windows Object Manager namespace. For certain object types, you can double-click on it or use the “Properties…” toolbar button to get more information, such...
dnSpy is a tool to reverse engineer .NET assemblies. It includes a decompiler, a debugger and an assembly editor (and more) and can be easily extended by writing your own extension. It uses dnlib to read...
Linux / Networking / Reverse Engineering
by do son · Published May 29, 2019 · Last modified June 29, 2023
BPF Compiler Collection (BCC) BCC is a toolkit for creating efficient kernel tracing and manipulation programs and includes several useful tools and examples. It makes use of extended BPF (Berkeley Packet Filters), formally known...
Secure Your Connection
