755 matches found
dr_checker
DR.CHECKER : A Soundy Vulnerability Detection Tool for Linux Kernel Drivers This repo contains all the sources, including setup scripts. Now with an Amazing UI to view the warnings along with corresponding source files. Tested on Ubuntu = 14.04.5 LTS Announcements 16 Feb 2018 : DR.CHECKER has bee...
Mergen
Project Overview: Mergen is a tool engineered to convert Assembly code into LLVM Intermediate Representation IR. This tool is designed for: The deobfuscation or devirtualization of obfuscated binary code The enhancement of the reverse engineering process, making it more efficient and effective,...
smack
SMACK is both a modular software verification toolchain and a self-contained software verifier. It can be used to verify the assertions in its input programs. In its default mode, assertions are verified up to a given bound on loop iterations and recursion depth; it contains experimental support...
retdec
Warning The RetDec project is currently in a limited maintenance mode due to a lack of resources: Pull Requests are welcomed. They are reviewed with priority, if possible without delays. Issues are reacted on with delays up to one quarter. Issues are not actively solved unless they relate to a...
zyrox
Zyrox LLVM Obfuscator llvm compile and link-time plugin for obfuscating native code Why why not ¯\ツ/¯ One of my biggest projects, where I learned a lot about LLVM internals, binary formats, assembly and obfuscation techniques. I believe that learning through building is the best way to learn, thu...
remill
Remill Remill is a static binary translator that translates machine code instructions into LLVM bitcode. It translates AArch64 64-bit ARMv8, SPARC32 SPARCv8, SPARC64 SPARCv9, x86 and amd64 machine code including AVX and AVX512 into LLVM bitcode. AArch32 32-bit ARMv8 / ARMv7 support is underway...
difuze
difuze: Fuzzer for Linux Kernel Drivers This repo contains all the sources including setup scripts, you need to get difuze up and running. Tested on Ubuntu = 14.04.5 LTS 0. Running difuze from Docker Refer the readme As explained in our paper, There are two main components of difuze: Interface...
eternal
Introduction This is the root repository for the Eternal Software Initiative. The ESI defines a minimal machine architecture based on a modification of the Subleq OISC that is so simple that its complete specification can be written down on a napkin. We then provide an LLVM compiler backend for...
avcleaner
avcleaner Ofuscador de código fuente C/C++ para evasión de antivirus Publicaciones del blog La implementación es bastante compleja y este dominio del desarrollo de software rara vez se documenta en términos sencillos. Por eso existen publicaciones en el blog que detallan cada decisión de diseño y...
xori
Xori - Custom disassembly framework Xori is an automation-ready disassembly and static analysis library that consumes shellcode or PE binaries and provides triage analysis data. Acknowledgements: Xori wouldn't exist without inspiration and ideas from the open source community. We are indebted to...
llvm-jutsu
llvm-jutsu: anti-LLM obfuscation This is a 32-bit integer The Problem It's 2025. You've spent weeks crafting the perfect license check. You've used every trick in the book: opaque predicates, control flow flattening, MBA expressions. You deploy. Within hours, some guy pastes your binary into Clau...
Dna
Dna Dna is a static binary analysis framework built on top of LLVM. Notably it's written almost entirely in C, including managed bindings for LLVM, Remill, and Souper. Functionality Dna implements an iterative control flow graph reconstruction inspired heavily by the SATURN paper. It iteratively...
memoro
Memoro Memoro es un perfilador de montón heap altamente detallado. Memoro no solo te muestra dónde y cuándo tu programa realiza asignaciones de montón, sino que también te mostrará cómo tu programa realmente utilizó esa memoria. Memoro recopila información detallada sobre los accesos al montón,...
memoro
Memoro Memoro is a highly detailed heap profiler. Memoro not only shows you where and when your program makes heap allocations, but will show you how your program actually used that memory. Memoro collects detailed information on accesses to the heap, including reads and writes to memory and when...
honggfuzz
Honggfuzz A security-oriented, feedback-driven, evolutionary fuzzer. Honggfuzz is a general-purpose fuzzer that uses code coverage software and hardware-based to find bugs. It is multi-process, multi-threaded, and supports persistent fuzzing for extreme speed. Key Features Fast : Multi-process an...
OffensiveRust
OffensiveRust My experiments in weaponizing Rust for implant development and general offensive operations. Table of Contents OffensiveRust Why Rust? Examples in this repo Compiling the examples Compiling the examples in this repo Cross Compiling Optimizing executables for size Pitfalls I found...
retdec
Advertencia El proyecto RetDec se encuentra actualmente en un modo de mantenimiento limitado debido a la falta de recursos: Se aceptan Pull Requests. Se revisan con prioridad, si es posible sin demoras. Los Issues se atienden con demoras de hasta un trimestre. Los Issues no se resuelven activamen...
keystone
Keystone Engine Keystone は、軽量でマルチプラットフォーム・マルチアーキテクチャ対応のアセンブラフレームワークです。 他の追随を許さない以下の特徴があります。 マルチアーキテクチャ対応。Arm、Arm64(AArch64/Armv8)、Ethereum Virtual Machine、Hexagon、Mips、PowerPC、RISC-V、Sparc、SystemZ、X86(16/32/64ビットを含む)をサポート。 クリーンでシンプル、軽量、直感的なアーキテクチャ非依存の API。 C/C++...
cargo-fuzz
cargo fuzz libFuzzer로 퍼징을 수행하는 cargo 서브커맨드! 사용하기 쉽습니다! 설치 root@kitploit: $ cargo install cargo-fuzz 참고: libFuzzer는 LLVM sanitizer 지원이 필요하므로 x86-64 및 Aarch64에서만, 그리고 Unix 계열 운영 체제Windows 제외에서만 동작합니다. 일부 unstable 커맨드라인 플래그를 사용하므로 nightly 컴파일러도 필요합니다. C++11을 지원하는 C++ 컴파일러도 필요합니다. 사용법 cargo fuzz init...
difuze
difuze: Фаззер для драйверов ядра Linux Этот репозиторий содержит все исходные файлы включая скрипты настройки, необходимые для запуска difuze. Протестировано на Ubuntu = 14.04.5 LTS 0. Запуск difuze из Docker См. README Как описано в нашей статье, difuze состоит из двух основных компонентов:...