cylance / Ablation
Ablation is a tool for augmenting static analysis by extracting information at runtime, and importing it into IDA. It can resolve virtual calls, reveal interesting code, exclude heavily traversed regions, identify untested or undocumented features, visually diff samples, or perform root cause analysis simply by running samples. My favourite howe…
☆50Updated 8 years ago
Alternatives and similar repositories for Ablation:
Users that are interested in Ablation are comparing it to the libraries listed below
- IDAPython plugin for finding Xrefs from a function☆48Updated 8 years ago
- IDAtropy is a plugin for Hex-Ray's IDA Pro designed to generate charts of entropy and histograms using the power of idapython and matplot…☆138Updated 3 years ago
- qb-sync is an open source tool to add some helpful glue between IDA Pro and Windbg. Its core feature is to dynamically synchronize IDA's …☆120Updated 9 years ago
- An IDA Pro Plugin for embedding an IPython Kernel☆63Updated 5 years ago
- Automatic function exporting and linking for fuzzing cross-architecture binaries.☆51Updated 6 years ago
- IDA Pro resources, scripts, and configurations☆111Updated last year
- This IDAPython script tags subroutines according to their use of imported functions☆72Updated 3 years ago
- MrsPicky - An IDAPython decompiler script that helps auditing memcpy() and memmove() calls☆122Updated last year
- Use angr inside the radare2 debugger. Create an angr state from the current debugger state.☆34Updated 5 years ago
- Automated library compilation and PDB annotation with CMake and IDA Pro☆20Updated 6 years ago
- Augmenting Static Reverse Engineering with Dynamic Analysis and Instrumentation☆132Updated 10 years ago
- A combination of an IDAPython Plugin and a control version system that result in a new reverse engineering collaborative addon for IDA Pr…☆92Updated 8 years ago
- Plugins for IDA Pro and Hex-Rays☆41Updated 6 years ago
- PoC for a snapshot-based coverage-guided fuzzer targeting Windows kernel components☆68Updated 3 years ago
- Function signature matching and signature generation plugin for Binary Ninja☆69Updated 6 months ago
- ☆33Updated 3 years ago
- Binary Ninja plugin that syncs WinDbg to Binary Ninja☆47Updated 6 years ago
- suite of binaries used to test function identification☆28Updated 7 years ago
- IDA+Triton plugin in order to extract opaque predicates using a Forward-Bounded DSE. Example with X-Tunnel.☆52Updated 5 years ago
- Hansel - a simple but flexible search for IDA☆26Updated 5 years ago
- Collaborative reverse engineering plugin for IDA Pro. Latest version, including IDA 7.0 support, is not back ward compatible with earlier…☆98Updated 3 years ago
- Course sample for SMT-Based Binary Program Analysis training class☆31Updated 6 years ago
- Use ltrace with pwnlib.tubes.process instances, useful for heap exploitation. Pwntools rocks!☆52Updated 6 years ago
- IDASimulator is a plugin that extends IDA's conditional breakpoint support, making it easy to augment / replace complex executable code i…☆47Updated 10 years ago
- ☆33Updated 9 years ago
- Translate regular Assembly into Extended Instructions☆86Updated 12 years ago
- IDA Plugin which decodes Windows Device I/O control code into DeviceType, FunctionCode, AccessType and MethodType.☆108Updated last year
- ☆91Updated 5 years ago
- ☆100Updated 9 months ago
- A search tool for IDA☆70Updated 8 years ago