Category: Reverse Engineering
HyperPlatform HyperPlatform is an Intel VT-x based hypervisor (a.k.a. virtual machine monitor) aiming to provide a thin platform for research on Windows. HyperPlatform is capable of monitoring a wide range...
exploit generator – autoexp A script to automatically create a working exploit from crash PoCs. The motivations behind creating this simple tool were to show how powerful is to script...
T-Fuzz T-Fuzz consists of 2 components: Fuzzing tool (TFuzz): a fuzzing tool based on program transformation Crash Analyzer (CrashAnalyzer): a tool that verifies whether crashes found transformed programs are true...
edb is a cross-platform x86/x86-64 debugger. It was inspired by Ollydbg but aims to function on x86 and x86-64 as well as multiple OS’s. Linux is the only officially supported platform...
ShellGen ShellGen is a dynamic shellcode generator with multiple output types that can be formatted in binary, hexadecimal, and the typical shellcode output standard. Outputs are also able to be...
uDdbg – Unicorn DOPE Debugger A gdb-like debugger that provides a runtime env to unicorn emulator and additionals features! Unicorn DOPE Debugger (uDdbg) is a tool that extends the functionality...
LiME ~ Linux Memory Extractor A Loadable Kernel Module (LKM) which allows for volatile memory acquisition from Linux and Linux-based devices, such as Android. This makes LiME unique as it...
HexRaysPyTools Plugin assists in creation classes/structures and detection virtual tables. Also helps to transform decompiler output faster and allows to make some stuff otherwise impossible. Was introduced at ZeroNights 2016...
memrepl memrepl is a Frida based script that aims to help a researcher in the task of exploitation of memory corruption related bugs. The idea is that the researcher can perform database like queries to...
pythem – Penetration Testing Framework pythem is a multi-purpose pentest framework written in Python. It has been developed to be used by security researchers and security professionals. Usage Examples ARP...
BARF: Binary Analysis and Reverse engineering Framework The analysis of binary code is a crucial activity in many areas of the computer sciences and software engineering disciplines ranging from software...
PE Tools lets you actively research PE files and processes. Process Viewer and PE files Editor, Dumper, Rebuilder, Comparator, Analyzer are included. PE Tools is an oldschool reverse engineering tool with a long history since 2002. PE Tools was initially inspired by LordPE (Yoda). Features...
BinDbg BinDbg is a Binary Ninja plugin that syncs WinDbg to Binja to create a fusion of dynamic and static analyses. It was primarily written to improve the Windows experience...
HeapViewer An IDA Pro plugin (for now) to examine the heap, focused on exploit development. Currently only supports glibc malloc (ptmalloc2). Features Heap tracer (malloc/free) Malloc chunk info Multi-arena info...
AFL is a popular fuzzing tool for coverage-guided fuzzing. The tool combines fast target execution with clever heuristics to find new execution paths in the target binary. It has been...