Alternatives and similar repositories for klee-taint:

Users that are interested in klee-taint are comparing it to the libraries listed below

• test-pipeline / orthrus
  A tool to manage, conduct, and assess dictionary-based fuzz testing
  ☆64Updated 7 years ago
• s3team / loop
  Logic-Oriented Opaque Predicate Detection in Obfuscated Binary Code
  ☆50Updated 9 years ago
• SVL-PSU / crete-dev
  CRETE under development
  ☆59Updated 4 years ago
• bshastry / afl-sancov
  AFL coverage tool using Clang SanitizerCoverage
  ☆37Updated 8 years ago
• vlad902 / kernel-uninitialized-memory-checker
  A clang analyzer checker that looks for kernel uninitialized memory disclosures to userland.
  ☆59Updated 6 years ago
• vusec / typearmor
  Implementation of our S&P16 paper: A Tough Call: Mitigating Advanced Code-Reuse Attacks
  ☆46Updated 7 years ago
• c01db33f / concolica
  Python concolic execution framework for program analysis
  ☆65Updated 10 years ago
• angr / tracer
  Utilities for generating dynamic traces
  ☆90Updated 2 years ago
• vanhauser-thc / afl-pin
  run AFL with pintool
  ☆65Updated 5 years ago
• MarkusTeufelberger / afl-ddmin-mod
  Test case minimizer for afl-fuzz
  ☆26Updated 7 years ago
• lifting-bits / klee
  KLEE Symbolic Execution Engine
  ☆60Updated 5 years ago
• dennisaa / patharmor
  PathArmor context-sensitive CFI implementation
  ☆45Updated 9 years ago
• awailly / nrop
  Automated Return-Oriented Programming Chaining
  ☆83Updated 8 years ago
• trailofbits / DomTreSat
  Dominator Tree LLVM Pass to Test Satisfiability
  ☆47Updated 9 years ago
• vanhauser-thc / afl-patches
  Patches to afl to fix bugs or add enhancements
  ☆80Updated 5 years ago
• agustingianni / instrumentation
  Assorted pintools
  ☆30Updated 4 years ago
• Cisco-Talos / covnavi
  ☆63Updated 5 years ago
• maurer / symfuzz
  ☆63Updated 9 years ago
• c01db33f / reil
  REIL translation library
  ☆36Updated 8 years ago
• melynx / taintinduce
  TaintInduce is a project which aims to automate the creation of taint propagation rules for unknown instruction sets.
  ☆58Updated 4 years ago
• bx / bootloader_instrumentation_suite
  Bootloader research tools (very much a work in progress)
  ☆37Updated 5 years ago
• junxzm1990 / afl-pt
  ☆53Updated 5 years ago
• JonathanSalwan / stuffz
  Some low-level stuff
  ☆105Updated 10 months ago
• CAFA1 / CAFA
  CAFA: A Checksum-Aware Fuzzing Assistant For More Coverage
  ☆31Updated 6 years ago
• dpc-grindland / Fuzzgrind
  A fully automatic fuzzing tool for Valgrind, unofficial mirror for http://esec-lab.sogeti.com/pages/fuzzgrind.html
  ☆36Updated 9 years ago
• vanhauser-thc / afl-dyninst
  American Fuzzy Lop + Dyninst == AFL Fuzzing blackbox binaries
  ☆74Updated 3 years ago
• andreafioraldi / angrdbg
  Abstract library to generate angr states from a debugger state
  ☆59Updated 4 years ago
• jrmuizel / kemufuzzer
  Automatically exported from code.google.com/p/kemufuzzer
  ☆27Updated 10 years ago
• MartijnB / disfuzz-afl
  Distributed Fuzzing for afl
  ☆71Updated 9 years ago
• ucsb-seclab / sasi
  Signedness-Agnostic Strided-Interval
  ☆35Updated 5 years ago