Alternatives and similar repositories for TEE-reversing:

Users that are interested in TEE-reversing are comparing it to the libraries listed below

• IntelLabs / kAFL
  A fuzzer for full VM kernel/driver targets
  ☆683Updated 2 weeks ago
• Nalen98 / AngryGhidra
  Use angr in Ghidra
  ☆575Updated 8 months ago
• angr / angr-management
  The official angr GUI.
  ☆965Updated this week
• bkerler / exploit_me
  Very vulnerable ARM/AARCH64 application (CTF style exploitation tutorial with 14 vulnerability techniques)
  ☆917Updated 3 years ago
• marin-m / vmlinux-to-elf
  A tool to recover a fully analyzable .ELF from a raw kernel, through extracting the kernel symbol table (kallsyms)
  ☆1,450Updated last month
• bcoles / kasld
  Kernel Address Space Layout Derandomization (KASLD) - A collection of various techniques to infer the Linux kernel base virtual address a…
  ☆436Updated 11 months ago
• jakespringer / angr_ctf
  ☆1,018Updated last year
• R3x / How2Kernel
  This Repository aims at giving a basic idea about Kernel Exploitation.
  ☆508Updated 9 months ago
• bsauce / kernel-security-learning
  Anything about kernel security. CTF kernel pwn, kernel exploit, kernel fuzz and kernel defense paper, kernel debugging technique, kernel…
  ☆674Updated last week
• pr0cf5 / kernel-exploit-practice
  repository for kernel exploit practice
  ☆396Updated 5 years ago
• intel / kernel-fuzzer-for-xen-project
  Kernel Fuzzer for Xen Project (KF/x) - Hypervisor-based fuzzing using Xen VM forking, VMI & AFL
  ☆472Updated 8 months ago
• cloudfuzz / android-kernel-exploitation
  Android Kernel Exploitation
  ☆607Updated 3 years ago
• HexHive / retrowrite
  RetroWrite -- Retrofitting compiler passes through binary rewriting
  ☆703Updated 10 months ago
• smallkirby / kernelpwn
  kernel-pwn and writeup collection
  ☆600Updated last year
• mandiant / flare-emu
  ☆826Updated 5 months ago
• therealsaumil / emux
  EMUX Firmware Emulation Framework (formerly ARMX)
  ☆728Updated 3 months ago
• avatartwo / avatar2
  Python core of avatar²
  ☆542Updated 3 months ago
• aemmitt-ns / radius2
  radius2 is a fast binary emulation and symbolic execution framework using radare2
  ☆603Updated 3 months ago
• angr / angrop
  ☆656Updated last month
• quarkslab / binbloom
  Raw binary firmware analysis software
  ☆527Updated 9 months ago
• grayhatacademy / ghidra_scripts
  Port of devttyS0's IDA plugins to the Ghidra plugin framework, new plugins as well.
  ☆483Updated 3 years ago
• jovanbulck / sgx-step
  A practical attack framework for precise enclave execution control
  ☆452Updated this week
• airbus-seclab / bincat
  Binary code static analyser, with IDA integration. Performs value and taint analysis, type reconstruction, use-after-free and double-free…
  ☆1,762Updated last month
• mahaloz / decomp2dbg
  A plugin to introduce interactive symbols into your debugger from your decompiler
  ☆649Updated 6 months ago
• andreafioraldi / frida-fuzzer
  This experimetal fuzzer is meant to be used for API in-memory fuzzing.
  ☆573Updated 4 years ago
• alexhude / uEmu
  Tiny cute emulator plugin for IDA based on unicorn.
  ☆1,152Updated 7 months ago
• inforion / idapython-cheatsheet
  Scripts and cheatsheets for IDAPython
  ☆673Updated last year
• Battelle / afl-unicorn
  afl-unicorn lets you fuzz any piece of binary that can be emulated by Unicorn Engine.
  ☆603Updated last year
• googleprojectzero / p0tools
  Project Zero Docs and Tools
  ☆738Updated 2 weeks ago
• quarkslab / titanm
  This repository contains the tools we used in our research on the Google Titan M chip
  ☆186Updated 2 years ago