sandsifter

s a n d s i f t e r : the x86 processor fuzzer Overview The sandsifter audits x86 processors for hidden instructions and hardware bugs, by systematically generating machine code to search through a processor's instruction set, and monitoring execution for anomalies. Sandsifter has uncovered secre...

gef

GEF pronounced ʤɛf - "Jeff" is a set of commands for x86/64, ARM, MIPS, PowerPC and SPARC to assist exploit developers and reverse-engineers when using old school GDB. It provides additional features to GDB using the Python API to assist during the process of dynamic analysis and exploit...

shellen

Shellen General Shellen is an interactive shellcoding environment. If you want a handy tool to write shellcodes, then shellen may be your friend. Shellen can also be used as an assembly or disassembly tool. keystone and capstone engines are used for all of shellen's operations. Shellen only works...

fhex

Fhex - A Full-Featured HexEditor This project is born with the aim to develop a lightweight, but useful tool. The reason is that the existing hex editors have some different limitations e.g. too many dependencies, missing hex coloring features, etc.. This project is based on qhexedit2 , capstone...

grap

grap: define and match graph patterns within binaries https://github.com/QuoSecGmbH/grap grap takes patterns and binary files, uses a Casptone-based disassembler to obtain the control flow graphs from the binaries, then matches the patterns against them. Patterns are user-defined graphs with...

xori

Xori - Custom disassembly framework Xori is an automation-ready disassembly and static analysis library that consumes shellcode or PE binaries and provides triage analysis data. Acknowledgements: Xori wouldn't exist without inspiration and ideas from the open source community. We are indebted to...

keystone

Keystone Engine Keystone is a lightweight multi-platform, multi-architecture assembler framework. It offers some unparalleled features: Multi-architecture, with support for Arm, Arm64 AArch64/Armv8, Ethereum Virtual Machine, Hexagon, Mips, PowerPC, RISC-V, Sparc, SystemZ & X86 include 16/32/64bit...

iblessing

☠️ ██╗██████╗ ██╗ ███████╗███████╗███████╗██╗███╗ ██╗ ██████╗ ██║██╔══██╗██║ ██╔════╝██╔════╝██╔════╝██║████╗ ██║██╔════╝ ██║██████╔╝██║ █████╗ ███████╗███████╗██║██╔██╗ ██║██║ ███╗ ██║██╔══██╗██║ ██╔══╝ ╚════██║╚════██║██║██║╚██╗██║██║ ██║ ██║██████╔╝███████╗███████╗███████║███████║██║██║...

capstone

Capstone Engine !TIP Bienvenue dans notre groupe communautaire ! Capstone est un framework de désassemblage dont l'objectif est de devenir le moteur de désassemblage ultime pour l'analyse binaire et le reverse engineering dans la communauté de la sécurité. Créé par Nguyen Anh Quynh, puis développ...

peCloakCapstone

peCloak - Capstone This is a simple fork of SecuritySift's peCloak that uses Capstone. The intention is to provide a fork based on a well-maintained, up-to-date disassembly library and to make the script multi-platform. Here's what I did so far: Replaced pydasm with Capstone Included a patched...

Ropper

Ropper Vous pouvez utiliser ropper pour afficher des informations sur des fichiers binaires dans différents formats de fichiers et vous pouvez rechercher des gadgets pour construire des chaînes rop pour différentes architectures x86/X8664, ARM/ARM64, MIPS/MIPS64, PowerPC/PowerPC64, SPARC64. Pour ...

Ropper

Ropper You can use ropper to display information about binary files in different file formats and you can search for gadgets to build rop chains for different architectures x86/X8664, ARM/ARM64, MIPS/MIPS64, PowerPC/PowerPC64, SPARC64. For disassembly ropper uses the awesome Capstone Framework...

fhex

Fhex - Un éditeur hexadécimal complet Ce projet est né avec l'objectif de développer un outil léger mais utile. La raison est que les éditeurs hexadécimaux existants présentent différentes limitations par exemple, trop de dépendances, absence de fonctionnalités de coloration hexadécimale, etc.. C...

silica

SILICA An exhaustive comparison of A64 instruction-allocation decisions. Silica checks every one of the 4,294,967,296 possible A64 instruction words. It compares whether Capstone, LLVM, Unicorn, and a table compiled from Arm's XML encoding diagrams accept each word. A decoder and an encoding...

psr

Pointer Sequence Reverser Предназначен для того, чтобы помочь реверс-инженеру легко увидеть, как Windows C++ приложение обращается к конкретному элементу данных или объекту. Имея адрес памяти элемента данных или объекта, этот инструмент установит точку останова по памяти по этому адресу, а затем...

binviz

binviz Инструмент визуализации и триажа бинарных файлов: связанные интерактивные представления энтропия, гистограммы, поверхности изображений/точечных графиков, графы потока управления поверх единой модели адресного пространства. pipx install binviz && binviz serve Что он делает Откройте файл — и...

JOP_ROCKET

JOP ROCKET ПРИМЕЧАНИЕ: В версии 2.15 мы представляем двухгаджетный диспетчер — это значительно расширяет возможности с диспетчерскими гаджетами. 26 мая 2021 года в версии 2.15 было добавлено множество оптимизаций и новых функций. Обновление: 29 ноября 2021 г.: Я загрузил слайды для @Hack в...

Rocky Linux 9.6 [TuxCare] Security Update: capstone / capstone-devel / capstone-java / python3-capstone (ALMALINUX9.6:CLSA-2026:1774374355)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1774374355 advisory. - Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, Skipdata length is not bounds- checked, so a user-provided...

Rocky Linux 9 [CIQ] Security Update: capstone / capstone-debuginfo / capstone-debugsource / etc (crlsa-2026_39309)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202639309 advisory. capstone: Capstone: Memory corruption via unchecked vsnprintf return CVE-2025-68114 Tenable has extracted the preceding description block directly from the CIQ...

AlmaLinux 9.6 [TuxCare] Security Update: capstone / capstone-devel / capstone-java / python3-capstone (ALMALINUX9.6:CLSA-2026:1774347657)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1774347657 advisory. - Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, an unchecked vsnprintf return in SStreamconcat lets a malicious...