Alternatives and similar repositories for klee-taint

Users that are interested in klee-taint are comparing it to the libraries listed below

• vanhauser-thc / afl-pin
  run AFL with pintool
  ☆66Updated 5 years ago
• MarkusTeufelberger / afl-ddmin-mod
  Test case minimizer for afl-fuzz
  ☆26Updated 8 years ago
• m000 / dtracker
  DataTracker: A Pin tool for collecting high-fidelity data provenance from unmodified programs.
  ☆95Updated 7 years ago
• c01db33f / concolica
  Python concolic execution framework for program analysis
  ☆68Updated 10 years ago
• SVL-PSU / crete-dev
  CRETE under development
  ☆59Updated 5 years ago
• awailly / nrop
  Automated Return-Oriented Programming Chaining
  ☆85Updated 9 years ago
• angr / fidget
  A tool to add simple inline patches to a binary to rearrange its stack frames, and other things!
  ☆46Updated 3 years ago
• c01db33f / reil
  REIL translation library
  ☆36Updated 9 years ago
• andreafioraldi / angrdbg
  Abstract library to generate angr states from a debugger state
  ☆61Updated 5 years ago
• vusec / typearmor
  Implementation of our S&P16 paper: A Tough Call: Mitigating Advanced Code-Reuse Attacks
  ☆48Updated 8 years ago
• vlad902 / kernel-uninitialized-memory-checker
  A clang analyzer checker that looks for kernel uninitialized memory disclosures to userland.
  ☆58Updated 6 years ago
• pagabuc / gfree
  Implementation of G-Free: Defeating Return-Oriented Programming through Gadget-less Binaries
  ☆96Updated 7 years ago
• Frky / scat
  Dynamic analysis of binary programs to retrieve function-related information (arity, type of parameters, coupling).
  ☆69Updated 8 years ago
• programa-stic / ropc-llvm
  ropc-llvm is a PoC of a Turing complete ROP compiler with support for a subset of LLVM IR. It is an extension of ropc.
  ☆69Updated 12 years ago
• vusec / dangsan
  ☆65Updated 4 years ago
• bx / bootloader_instrumentation_suite
  Bootloader research tools (very much a work in progress)
  ☆37Updated 6 years ago
• s3team / loop
  Logic-Oriented Opaque Predicate Detection in Obfuscated Binary Code
  ☆51Updated 9 years ago
• trailofbits / DomTreSat
  Dominator Tree LLVM Pass to Test Satisfiability
  ☆46Updated 9 years ago
• zhechkoz / PwIN
  Security Evaluation of Dynamic Binary Instrumentation Engines
  ☆80Updated 7 years ago
• panda-re / symbll
  Symbolic execution for LLVM traces produced by PANDA
  ☆40Updated 6 years ago
• zardus / idalink
  Some glue facilitating remote use of IDA (the Interactive DisAssembler) Python API.
  ☆77Updated 5 years ago
• test-pipeline / orthrus
  A tool to manage, conduct, and assess dictionary-based fuzz testing
  ☆63Updated 8 years ago
• MozillaSecurity / libfuzzer-python-bridge
  INACTIVE - http://mzl.la/ghe-archive - A Python3 bridge for implementing custom libFuzzer mutators
  ☆74Updated 6 years ago
• rpaleari / fuzztrace
  A "general-purpose" tracing tool
  ☆39Updated 10 years ago
• maurer / symfuzz
  ☆64Updated 10 years ago
• vanhauser-thc / afl-dyninst
  American Fuzzy Lop + Dyninst == AFL Fuzzing blackbox binaries
  ☆74Updated 4 years ago
• choller / afl
  Mozilla fork of the American Fuzzy Lop repo
  ☆47Updated 6 years ago
• ouspg / libfuzzerfication
  libfuzzerfication - fuzzing for the rest of us!
  ☆61Updated 8 years ago
• shellphish / driller-afl
  A version of AFL tailored for Driller's use in analyzing CGC binaries.
  ☆80Updated 8 years ago
• GoSSIP-SJTU / k-hunt
  K-Hunt: Pinpointing Insecure Crypto Keys
  ☆44Updated 7 years ago