rizin

Rizin Rizin is a reverse engineering framework, born as a fork of the radare2, with a focus on usability, features and cleanliness. Rizin is portable and it can be used to analyze binaries, disassemble code, debug programs, as a forensic tool, as a scriptable command-line hexadecimal editor able ...

sleigh

Sleigh Library Sleigh is a language used to describe the semantics of instruction sets of general-purpose microprocessors, with enough detail to facilitate the reverse engineering of software compiled for these architectures. It is part of the Ghidra reverse engineering platform and underpins two...

isa_recovery

ISA Recovery System A reverse-engineering pipeline that turns a firmware binary and its possibly-wrong disassembly into a working Ghidra processor specification. When you hit a proprietary processor with no documentation and no Ghidra support, this tool recovers the real encoding of each...

Ghidra-Rare

Ghidra-Rare Ghidra processor modules SLEIGH for uncommon CPU, DSP and GPU architectures. Target: Ghidra 12.1.4. This project brings to Ghidra the set of architectures covered by Mr-wolf-is-me/IDA-Processor-Modules, a collection of IDA Pro processor modules. Each module here is the Ghidra...

maat

Acerca de Maat es un framework de código abierto para Ejecución Simbólica Dinámica y Análisis Binario. Proporciona diversas funcionalidades como ejecución simbólica, análisis de taint, resolución de restricciones, carga de binarios, simulación de entorno, y aprovecha la librería sleigh de Ghidra...

rz-ghidra

rz-ghidra Esta es una integración del descompilador de Ghidra y el desensamblador Sleigh para Rizin. Está basada únicamente en la parte del descompilador de Ghidra, que está escrita completamente en C++, por lo que Ghidra en sí no es necesario en absoluto y el plugin se puede compilar de forma...

Malicious code in elf-stats-tinsel-sleigh-669 (npm)

Source: amazon-inspector ea0f6663d5e999d515c8873ef2ea13aeeac00025c4aceaa81a2b5178991461be The package elf-stats-tinsel-sleigh-669 was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in elf-stats-snowy-sleigh-766 (npm)

Source: amazon-inspector d3bce5562876d0696c0939c6b8279bd368db5664dd893ed64ad9b73bc8270cde The package elf-stats-snowy-sleigh-766 was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in elf-stats-magical-sleigh-777 (npm)

Source: amazon-inspector f73e5e3034697e77965b67b4588a8e173d9c37347df921cf4e0c4085a993249a The package elf-stats-magical-sleigh-777 was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in elf-stats-festive-sleigh-368 (npm)

Source: amazon-inspector 2f1f4d8617d9417b57ac5d906d1d72bec6c8f342444d3aefcc2681d4f56ebcbe The package elf-stats-festive-sleigh-368 was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in elf-stats-cranberry-sleigh-853 (npm)

Source: amazon-inspector f85ae12d2f730c46ea2549c98a491f8ccccf2c8f7a484258398ce7dad89c137c The package elf-stats-cranberry-sleigh-853 was found to contain malicious code. Source: ossf-package-analysis 8c2499eb605ed1cdd8896cb21357da72fa92cbb5d8b27048115bf63144046a39 The OpenSSF Package Analysis...

Malicious code in elf-stats-caroling-sleigh-970 (npm)

Source: amazon-inspector d944fe70f1da2af7a3079038cc98a40c8a7f51fe33dc01078e0e9b927247a4ed The package elf-stats-caroling-sleigh-970 was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in elf-stats-cheery-sleigh-538 (npm)

Source: amazon-inspector b9733e102f5e123d456a593acf8acff3eebe9875306e5ee21df8992acd3bd373 The package elf-stats-cheery-sleigh-538 was found to contain malicious code. --- Credit: OpenSSF source...

CVE-2026-49496

Ghidra before 12.1 contains a heap-use-after-free vulnerability in SleighBuilder::generatePointerAdd caused by iterator invalidation when PcodeCacher::allocateInstruction reallocates the issued vector. Attackers can trigger memory corruption by decompiling malicious binaries through the public...

CVE-2024-58350

Ghidra before 11.2 contains a use after free vulnerability in the Sleigh backend caused by undefined static initialization order of the SleighArchitecture::translators and XmlArchitectureCapability singletons. Attackers can trigger an infinite loop or denial of service during shutdown by exploiti...

CVE-2024-58350

Ghidra before 11.2 contains a use after free vulnerability in the Sleigh backend caused by undefined static initialization order of the SleighArchitecture::translators and XmlArchitectureCapability singletons. Attackers can trigger an infinite loop or denial of service during shutdown by exploiti...

CVE-2026-49496 Ghidra < 12.1 - Heap-Use-After-Free in SleighBuilder::generatePointerAdd via Vector Reallocation

Ghidra before 12.1 contains a heap-use-after-free vulnerability in SleighBuilder::generatePointerAdd caused by iterator invalidation when PcodeCacher::allocateInstruction reallocates the issued vector. Attackers can trigger memory corruption by decompiling malicious binaries through the public...

EUVD-2026-36005

Ghidra before 12.1 contains a heap-use-after-free vulnerability in SleighBuilder::generatePointerAdd caused by iterator invalidation when PcodeCacher::allocateInstruction reallocates the issued vector. Attackers can trigger memory corruption by decompiling malicious binaries through the public...

CVE-2024-58350 Ghidra < 11.2 - Use After Free in Sleigh Backend via Static Initialization Order

Ghidra before 11.2 contains a use after free vulnerability in the Sleigh backend caused by undefined static initialization order of the SleighArchitecture::translators and XmlArchitectureCapability singletons. Attackers can trigger an infinite loop or denial of service during shutdown by exploiti...

CVE-2024-58350 Ghidra < 11.2 - Use After Free in Sleigh Backend via Static Initialization Order

Ghidra before 11.2 contains a use after free vulnerability in the Sleigh backend caused by undefined static initialization order of the SleighArchitecture::translators and XmlArchitectureCapability singletons. Attackers can trigger an infinite loop or denial of service during shutdown by exploiti...