Alternatives and similar repositories for xenpwn

Users that are interested in xenpwn are comparing it to the libraries listed below

• lifting-bits / codereason
  Semantic Binary Code Analysis Framework
  ☆124Updated 9 years ago
• utds3lab / pemu
  ☆105Updated 10 years ago
• awailly / nrop
  Automated Return-Oriented Programming Chaining
  ☆85Updated 8 years ago
• lgeek / dynamorio_pin_escape
  ☆61Updated 9 years ago
• felixwilhelm / mario_baslr
  PoC for breaking hypervisor ASLR using branch target buffer collisions
  ☆166Updated 8 years ago
• mothran / aflpin
  aflpin enables afl to fuzz blackbox binaries using a pin tool to trace execution branches.
  ☆170Updated 10 years ago
• RolfRolles / SynesthesiaYS
  Synesthesia, implemented as Yices scripts
  ☆94Updated 7 years ago
• scumjr / the-sea-watcher
  Implementation of the SMM rootkit "The Watcher"
  ☆126Updated 3 years ago
• carlosgprado / NaFl
  A clone (of the basic core) of AFL fuzzer
  ☆74Updated 9 years ago
• jeffball55 / rop_compiler
  An open source, multi-architecture ROP compiler written in python
  ☆162Updated 7 years ago
• Rootkitsmm-zz / Win32k-Fuzzer
  Fuzz and Detect "Use After Free" vulnerability in win32k.sys ( Heap based )
  ☆132Updated 9 years ago
• lifting-bits / grr
  High-throughput fuzzer and emulator of DECREE binaries
  ☆242Updated 5 years ago
• CIFASIS / nosy-newt
  Nosy Newt is a simple concolic execution tool for exploring the input space of a binary executable program based in Triton
  ☆61Updated 7 years ago
• Cisco-Talos / ROPMEMU
  ROPMEMU is a framework to analyze, dissect and decompile complex code-reuse attacks.
  ☆286Updated 9 years ago
• intel / jit-spray-poc-for-ksp
  ☆28Updated 2 years ago
• kokjo / universalrop
  Small tool for generating ropchains using unicorn and z3
  ☆198Updated 7 years ago
• mothran / unicorn-decoder
  Simple shellcode decoder using unicorn-engine
  ☆98Updated 9 years ago
• XVilka / hacklu
  ☆38Updated 9 years ago
• hbowden / nextgen
  A Genetic File, Syscall and Network Fuzzer.
  ☆58Updated 8 years ago
• mxatone / mitigation-bounty
  Old mitigation-bounty code that was applicable to edge before it use webkit/chrome
  ☆87Updated 8 years ago
• thomasdullien / heap_history_viewer
  A program to draw rectangles from heap traces.
  ☆134Updated 5 years ago
• programa-stic / ropc-llvm
  ropc-llvm is a PoC of a Turing complete ROP compiler with support for a subset of LLVM IR. It is an extension of ropc.
  ☆68Updated 11 years ago
• AirbusCyber / grap
  grap: define and match graph patterns within binaries
  ☆171Updated 4 years ago
• carlosgprado / BrundleFuzz
  BrundleFuzz is a distributed fuzzer for Windows and Linux using dynamic binary instrumentation.
  ☆83Updated 8 years ago
• IOActive / I-know-where-your-page-lives
  I Know Where Your Page Lives: Derandomizing the latest Windows 10 Kernel - ZeroNights 2016
  ☆163Updated 8 years ago
• Frky / scat
  Dynamic analysis of binary programs to retrieve function-related information (arity, type of parameters, coupling).
  ☆67Updated 7 years ago
• JonathanSalwan / abf
  Abstract Binary Format Manipulation - ELF, PE and Mach-O format
  ☆118Updated 9 years ago
• bnagy / afl-trivia
  Short, unrelated helper scripts for users of AFL (the fuzzer)
  ☆111Updated 8 years ago
• ice799 / injectso64
  Stealth's 64bit injectso port
  ☆74Updated 14 years ago
• Wenzel / r2vmi
  Hypervisor-Level Debugger based on Radare2 / LibVMI, using VMI IO and debug plugins
  ☆133Updated 6 years ago