Nightingale

Nightingale: Docker for Pentesters This project is supported by: | ---|--- Nightingale is a ready-to-use, multi-architecture Docker toolkit for pentesting and security research. It gives you a reproducible environment with curated tools for web, network, mobile, API, OSINT, and forensics workflow...

Ventoy

Ventoy Ventoy is an open source tool to create bootable USB drive for ISO/WIM/IMG/VHDx/EFI files. With Ventoy, you don't need to format the disk over and over, just copy the image files to the USB drive and boot them. You can copy many image files at a time and Ventoy will give you a boot menu to...

ROPgadget

ROPgadget Tool This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF/PE/Mach-O/Raw formats on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures. Install The easiest way is installing ROPgadget...

remill

Remill Remill is a static binary translator that translates machine code instructions into LLVM bitcode. It translates AArch64 64-bit ARMv8, SPARC32 SPARCv8, SPARC64 SPARCv9, x86 and amd64 machine code including AVX and AVX512 into LLVM bitcode. AArch32 32-bit ARMv8 / ARMv7 support is underway...

Ropper

Ropper You can use ropper to display information about binary files in different file formats and you can search for gadgets to build rop chains for different architectures x86/X8664, ARM/ARM64, MIPS/MIPS64, PowerPC/PowerPC64, SPARC64. For disassembly ropper uses the awesome Capstone Framework...

ArchStrike

ArchStrike ArchStrike is shutting down This should come as no surprise to those who've been paying attention, but the project hasn't been getting maintained for a while now. Over time, most of the killer applications provided by ArchStrike have gained official upstream packages, and the list of...

Elfina

Elfina: A Multi-Architecture ELF Loader Elfina is a multi-architecture ELF loader supporting x86 and x86-64 binaries. This project has been implemented in Rust since v2.0.0. Background Recently, I have been studying reverse engineering on Windows and the PE file format. After that, I started...

dynamorio

DynamoRIO About DynamoRIO DynamoRIO is a runtime code manipulation system that supports code transformations on any part of a program, while it executes. DynamoRIO exports an interface for building dynamic tools for a wide variety of uses: program analysis and understanding, profiling,...

BLUESPAWN

BLUESPAWN Code Status Our Mission BLUESPAWN helps blue teams monitor systems in real-time against active attackers by detecting anomalous activity What is BLUESPAWN BLUESPAWN is an active defense and endpoint detection and response tool which means it can be used by defenders to quickly detect ,...

CVE-2018-8120

CVE-2018-8120 CVE-2018-8120 Windows LPE exploit Tested support: Win7 x32, Win7 x64, Win2008 x32, Win2008 R2 x32, Win2008 R2 Datacenter x64, Win2008 Enterprise x64 WinXP x32, Win2003 x32, Win2003 x64 The original exp does not support xp, 2003. This code adds support for these two systems based on...

ghostrings

Ghostrings Scripts for recovering string definitions in Go binaries with P-Code analysis. Tested with x86, x86-64, ARM, and ARM64. Scripts Golang These can be found in the Golang category in the Script Manager. GoDynamicStrings.java Analyzes P-Code to find string structures created on the stack...

hyperion-disassembler

Hyperion A native multi-architecture disassembler and binary analysis tool. Supports PE, ELF, Mach-O, and .NET binaries across x86, x64, ARM, ARM64, MIPS, and PPC. Built from scratch in C++20 with ImGui. Single statically-linked executable. No installer, no runtime dependencies. Under 3MB...

uEmu

Overview uEmu is a tiny cute emulator plugin for IDA based on unicorn engine. Supports following architectures out of the box: x86 , x64 , ARM , ARM64 , MIPS , MIPS64 What is it GOOD for? Emulate bare metal code bootloaders, embedded firmware etc Emulate standalone functions What is it BAD for?...

melange

melange Build apk packages using declarative pipelines. Commonly used to provide custom packages for container images built with apko. The majority of apks are built for use with either the Wolfi or Alpine Linux ecosystems. Key features: Pipeline-oriented builds. Every step of the build pipeline ...

Umay

IoT Malware Similarity Analysis Platform View Demo Table of contents About The Project Current features Getting Started Prerequisites Installation Create your own dataset Contributing License About The Project This project provides IoT malware similarity analysis based on shared codes. It helps t...

qiling

Cas d'utilisation de Qiling, blog et travaux connexes Qiling est un framework avancé d'émulation binaire, avec les fonctionnalités suivantes : Émuler multi-plateformes : Windows, macOS, Linux, Android, BSD, UEFI, DOS, MBR. Émuler multi-architectures : 8086, X86, X8664, ARM, ARM64, MIPS, RISC-V,...

unicorn

Moteur Unicorn RECHERCHE DE CONTRIBUTEURS ! Voir ceci. Unicorn est un framework d'émulation de CPU léger, multi-plateforme et multi-architecture, basé sur QEMU. Unicorn offre des fonctionnalités inégalées : Multi-architecture : ARM, ARM64 ARMv8, M68K, MIPS, PowerPC, RISCV, SPARC, S390X, TriCore e...

lpe-toolkit

Linux LPE Toolkit Мультиархитектурный набор инструментов для повышения привилегий с 24 эксплойтами amd64 предварительно скомпилированы; остальные архитектуры компилируются через gcc во время выполнения. Поддерживает amd64, arm64, 386, mips, mipsle, mips64 и mips64le. Определяет версию ядра,...

detux

Detux : Le bac à sable Linux multiplateforme Introduction : Detux est un bac à sable développé pour analyser le trafic des logiciels malveillants Linux et capturer les IOCs ce faisant. L'hyperviseur QEMU est utilisé pour émuler Linux Debian pour diverses architectures CPU. Les CPU suivants sont...

retdec

Avertissement Le projet RetDec est actuellement en mode maintenance limité en raison d'un manque de ressources : Les Pull Requests sont les bienvenues. Elles sont examinées en priorité, si possible sans délais. Les issues reçoivent une réponse avec des délais pouvant aller jusqu'à un trimestre. L...