idawasm These IDA Pro plugins add support for loading and disassembling WebAssembly modules. Features: control flow reconstruction and graph mode code and data cross-references globals, function parameters, local variables, etc. can be renamed auto-comment...
Androguard Reverse engineering, Malware, and goodware analysis of Android applications … and more (ninja !) Features Androguard is a full Python tool to play with Android files. DEX, ODEX APK Android’s binary xml Android...
Pigaios Pigaios (‘πηγαίος’, Greek for ‘source’ as in ‘source code’) is a tool for diffing/matching source codes directly against binaries. The idea is to point a tool to a code base, regardless of it...
scanmem is a debugging utility designed to isolate the address of an arbitrary variable in an executing process. scanmem simply needs to be told the pid of the process and the value of the...
BIOSUtilities Various BIOS Utilities for Modding/Research Dell HDR Module Extractor Description Extracts and unpacks the SPI/BIOS modules from Dell HDR executables. After extraction, the HDR image is automatically unpacked into individual SPI/BIOS modules via LongSoft’s...
Shellcode Compiler Shellcode Compiler is a program that compiles C/C++ style code into a small, position-independent and NULL-free shellcode for Windows. It is possible to call any Windows API function in a user-friendly way....
Trinity: Linux system call fuzzer What is it? The basic idea is fairly simple. As ‘fuzz testing‘ suggests, we call syscalls at random, with random arguments. Not an original idea, and one that has...
Malware Analysis / Reverse Engineering
by do son · Published January 24, 2019 · Last modified February 18, 2024
pwndbg (/poʊndbæg/) is a GDB plug-in that makes debugging with GDB suck less, with a focus on features needed by low-level software developers, hardware hackers, reverse-engineers and exploit developers. Pwndbg has a lot of useful...
What is BinCAT? A static Binary Code Analysis Toolkit, designed to help reverse engineers, directly from IDA. It features: value analysis (registers and memory) taint analysis type reconstruction and propagation backward and forward analysis Changelog v1.2...
Miasm is a free and open-source (GPLv2) reverse engineering framework. Miasm aims to analyze/ modify/generate binary programs. Here is a non-exhaustive list of features: Opening / modifying / generating PE / ELF 32 /...
Exploitation / Reverse Engineering
by do son · Published January 14, 2019 · Last modified October 10, 2021
Lucky CAT – Crash All the Things! What is Lucky CAT? Lucky CAT (Crash All the Things!) is a distributed fuzzing testing suite with an easy to use web interface. It allows managing several fuzzing jobs...
pwntools – CTF toolkit Pwntools is a CTF framework and exploits the development library. Written in Python, it is designed for rapid prototyping and development and intended to make exploit writing as simple as...
Linux Exploitation course A Course on Intermediate Level Linux Exploitation Pre-Requisites The course is designed as a continuation of the Windows Exploit Development workshops by the people at Null Singapore and some pre-requisite knowledge...
IDAMagicStrings An IDA Python plugin to extract information from string constants. The current version of the plugin is able to: Display functions to source files relationships (in a tree and in a plain list, a chooser in...
Welcome to salt, a tool to reverse and learn kernel heap memory management. It can be useful to develop an exploit, to debug your own kernel code, and, more importantly, to play with the kernel...
