kong

Kong: Агентный реверс-инженер Оркестрация LLM для реверс-инжиниринга бинарных файлов Что такое Kong? Большинство задач подчиняются линейной зависимости: чем сложнее задача, тем больше времени она обычно занимает. Реверс-инжиниринг и бинарный анализ — это задача, в которой фактическая сложность...

r2gopclntabParser

r2gopclntabParser Примечание: Эта функция была напрямую реализована в ядре radare2 как плагин анализа gopc Парсер gopclntab на основе radare2 для восстановления символов функций из Go-бинарников, включая полностью лишённые символьной информации. Поддерживает ELF, Mach-O и PE бинарники для версий ...

resym

ReSym 아티팩트 이 저장소는 논문 "ReSym: Harnessing LLMs to Recover Variable and Data Structure Symbols from Stripped Binaries" CCS 2024의 아티팩트를 제공합니다. 🏆 ACM SIGSAC Distinguished Paper Award 수상작 참고 : 저희는 아티팩트를 지속적으로 유지/업데이트하고 있습니다. 최신 버전을 사용 중인지 확인해 주시기 바랍니다. 제공 데이터 및 리소스 데이터 준비 스크립트 : processdata 폴더에 있습니다...

fnprint

fnprint matches functions in binaries by what they do , not by what their bytes or control-flow graphs look like. it runs each function in a tiny emulator with made-up inputs, records the side effects it produces, and hashes that behavior into a fingerprint. two functions that behave the same get...

Identifying Adversary Tactics and Techniques in Malware Binaries with an LLM Agent

Understanding TTPs Tactics, Techniques, and Procedures in malware binaries is essential for security analysis and threat intelligence, yet remains challenging in practice. Real-world malware binaries are typically stripped of symbols, contain large numbers of functions, and distribute malicious...

VulBinLLM: LLM-Powered Vulnerability Detection for Stripped Binaries

Recognizing vulnerabilities in stripped binary files presents a significant challenge in software security. Although some progress has been made in generating human-readable information from decompiled binary files with Large Language Models LLMs, effectively and scalably detecting vulnerabilitie...

Heaptrace - Helps Visualize Heap Operations For Pwn And Debugging

heaptrace is a heap debugger for tracking glibc heap operations in ELF64 x8664 binaries. Its purpose is to help visualize heap operations when debugging binaries or doing heap pwn. replaces addresses with easy-to-understand symbols detects heap corruption and memory leakage issues can debug in gd...