angr angr is a platform-agnostic binary analysis framework developed by the Computer Security Lab at UC Santa Barbara and their associated CTF team, Shellphish. Several challenges must be overcome to programmatically analyze a binary....
arm_now is a qemu powered tool that allows instant setup of virtual machines on arm CPU, mips, PowerPC, nios2, x86 and more, for reverse, exploit, fuzzing and programming purpose. Supported cpu CPU images arm...
Frick Frick is a kick-ass Frida cli for reverse engineer inspired by the epic GDB init gef by @hugsy, with commands design similar to uDdbg. Features for the eyes interactive commands with shortcuts nice...
House: A runtime mobile application analysis toolkit with a Web GUI, powered by Frida, written in Python. It is designed for helping assess mobile applications by implementing dynamic function hooking and intercepting and intended to...
HyperPlatform HyperPlatform is an Intel VT-x based hypervisor (a.k.a. virtual machine monitor) aiming to provide a thin platform for research on Windows. HyperPlatform is capable of monitoring a wide range of events, including but...
exploit generator – autoexp A script to automatically create a working exploit from crash PoCs. The motivations behind creating this simple tool were to show how powerful is to script WinDBG and to simplify...
T-Fuzz T-Fuzz consists of 2 components: Fuzzing tool (TFuzz): a fuzzing tool based on program transformation Crash Analyzer (CrashAnalyzer): a tool that verifies whether crashes found transformed programs are true bugs in the original...
edb is a cross-platform x86/x86-64 debugger. It was inspired by Ollydbg but aims to function on x86 and x86-64 as well as multiple OS’s. Linux is the only officially supported platform at the moment, but...
Exploitation / Reverse Engineering
by do son · Published August 2, 2018 · Last modified January 4, 2020
ShellGen ShellGen is a dynamic shellcode generator with multiple output types that can be formatted in binary, hexadecimal, and the typical shellcode output standard. Outputs are also able to be encrypted and shellcode can...
uDdbg – Unicorn DOPE Debugger A gdb-like debugger that provides a runtime env to unicorn emulator and additionals features! Unicorn DOPE Debugger (uDdbg) is a tool that extends the functionality of the epic Unicorn...
LiME ~ Linux Memory Extractor A Loadable Kernel Module (LKM) which allows for volatile memory acquisition from Linux and Linux-based devices, such as Android. This makes LiME unique as it is the first tool...
HexRaysPyTools Plugin assists in creation classes/structures and detection virtual tables. Also helps to transform decompiler output faster and allows to make some stuff otherwise impossible. Was introduced at ZeroNights 2016 (slides). Features 1) Structure...
memrepl memrepl is a Frida based script that aims to help a researcher in the task of exploitation of memory corruption related bugs. The idea is that the researcher can perform database like queries to get information about the...
Forensics / Network PenTest / Password Attacks / Reverse Engineering / Sniffing & Spoofing
by do son · Published July 2, 2018
pythem – Penetration Testing Framework pythem is a multi-purpose pentest framework written in Python. It has been developed to be used by security researchers and security professionals. Usage Examples ARP spoofing – Man-in-the-middle. ARP+DNS...
BARF: Binary Analysis and Reverse engineering Framework The analysis of binary code is a crucial activity in many areas of the computer sciences and software engineering disciplines ranging from software security and program analysis...
Secure Your Connection
