Category: Reverse Engineering
PE Tools lets you actively research PE files and processes. Process Viewer and PE files Editor, Dumper, Rebuilder, Comparator, Analyzer are included. PE Tools is an oldschool reverse engineering tool with a long history since 2002. PE Tools was initially inspired by LordPE (Yoda). Features PE Editor PE and...
BinDbg BinDbg is a Binary Ninja plugin that syncs WinDbg to Binja to create a fusion of dynamic and static analyses. It was primarily written to improve the Windows experience for Binja debugger integrations....
HeapViewer An IDA Pro plugin (for now) to examine the heap, focused on exploit development. Currently only supports glibc malloc (ptmalloc2). Features Heap tracer (malloc/free) Malloc chunk info Multi-arena info (chunks, top, last-remainder) Bins...
AFL is a popular fuzzing tool for coverage-guided fuzzing. The tool combines fast target execution with clever heuristics to find new execution paths in the target binary. It has been successfully used to find...
r2vmi Radare2 VMI IO and debugger plugins. These plugins allow you to debug a remote process running in a VM, from the hypervisor-level, leveraging Virtual Machine Introspection. Based on Libvmi to access the VM memory and listen...
AllTools All reasonably stable tools CpuStres – thread/CPU stress testing app DriverMon – monitor any driver activity GFlagsX – enhanced version of the GFlags tool Kdump – generate a local kernel dump Kdump64 – generate a local kernel dump...
Fibratus Fibratus is a tool for exploration and tracing of the Windows kernel. It lets you trap system-wide events such as process life-cycle, file system I/O, registry modifications or network requests among many other observability signals. In a...
Mellivora Mellivora is a CTF engine written in PHP. Features Arbitrary categories and challenges. Scoreboard with optional multiple team types. Manual or automatic free-text submission marking. Challenge hints. Team progress page. Challenge overview page....
peanalyzer Advanced Portable Executable File Analyzer Installation git clone https://github.com/blacknbunny/peanalyzer.git && cd peanalyzer/ pip install pefile pip install capstone Usage python pyanalyzer.py –file file.exe –show all python pyanalyzer.py –file file.exe –disassemble all General Dos...
SCTF Security Capture the Flag Platform is the best platform for CTF Challenges. You will be able to define Teams, Challenges, and access to relative statistics. SCTF is lightweight and fast Django application that...
PloitKit is a Python-based GUI tool designed as one-stop for all other software. I was facing these kinds of problem when I need to switch to the different system, or I lost my pen-drive....
IDACyber is a plugin for the Interactive Disassembler which is capable of visualizing the currently loaded IDB’s data. This can be useful for identifying structures and patterns of binary blobs where extended information such...
What’s IDAFuzzy? IDAFuzzy is a fuzzy searching tool for IDA Pro. This tool helps you to find command/function/struct and so on. This tool is usefull when You don’t remember all shortcut. You don’t remember...
tinyctf-platform tinyctf-platform is yet another open-source (jeopardy style) CTF platform. It is relatively easy to set up and modify. Deployment Note: Flask should run on top of a proper web server if you plan...
sRDI – Shellcode Reflective DLL Injection sRDI allows for the conversion of DLL files to position independent shellcode. Functionality is accomplished via two components: C project which compiles a PE loader implementation (RDI) to...