huku- / research

Related projects: ⓘ

• nccgroup / TriforceLinuxSyscallFuzzer
  A linux system call fuzzer using TriforceAFL
  ☆169Updated 6 months ago
• awailly / nrop
  Automated Return-Oriented Programming Chaining
  ☆83Updated 8 years ago
• felixwilhelm / xenpwn
  Xenpwn is a toolkit for memory access tracing using hardware-assisted virtualization
  ☆143Updated 8 years ago
• jonoberheide / ksymhunter
  Routines for hunting down kernel symbols.
  ☆80Updated 13 years ago
• jeffball55 / rop_compiler
  An open source, multi-architecture ROP compiler written in python
  ☆160Updated 7 years ago
• utds3lab / pemu
  ☆104Updated 9 years ago
• felixwilhelm / mario_baslr
  PoC for breaking hypervisor ASLR using branch target buffer collisions
  ☆164Updated 7 years ago
• sciencemanx / dress
  add symbols back into a stripped ELF binary (~strip)
  ☆168Updated 7 years ago
• roachspray / opcde2017
  Slides and very basic examples
  ☆111Updated 7 years ago
• thomasdullien / heap_history_viewer
  A program to draw rectangles from heap traces.
  ☆131Updated 4 years ago
• ucsb-seclab / leakless
  Function redirection via ELF tricks.
  ☆156Updated 9 years ago
• xairy / kaslr-bypass-via-prefetch
  ☆132Updated this week
• lifting-bits / codereason
  Semantic Binary Code Analysis Framework
  ☆123Updated 8 years ago
• lifting-bits / grr
  High-throughput fuzzer and emulator of DECREE binaries
  ☆242Updated 5 years ago
• airbus-seclab / crashos
  A tool dedicated to the research of vulnerabilities in hypervisors by creating unusual system configurations.
  ☆182Updated 2 years ago
• elfmaster / binflow
  This is the new ftrace (https://github.com/elfmaster/ftrace) - Much faster, better resolution but not complete yet! :)
  ☆107Updated 5 years ago
• vusec / dangsan
  ☆63Updated 3 years ago
• RUB-SysSec / Marx
  Uncovering Class Hierarchies in C++ Programs
  ☆121Updated 2 years ago
• lgeek / dynamorio_pin_escape
  ☆59Updated 8 years ago
• mothran / aflpin
  aflpin enables afl to fuzz blackbox binaries using a pin tool to trace execution branches.
  ☆169Updated 9 years ago
• pagabuc / gfree
  Implementation of G-Free: Defeating Return-Oriented Programming through Gadget-less Binaries
  ☆95Updated 6 years ago
• Comsecuris / luaqemu
  QEMU-based framework exposing several of QEMU-internal APIs to a LuaJIT core injected into QEMU itself. Among other things, this allows f…
  ☆142Updated 5 years ago
• montyly / gueb
  ☆237Updated 6 years ago
• bnagy / afl-trivia
  Short, unrelated helper scripts for users of AFL (the fuzzer)
  ☆110Updated 8 years ago
• feliam / pysymemu
  An amd64 symbolic emulator
  ☆308Updated 3 years ago
• REMath / implementations
  Implementations of program analysis tools with a focus on machine code
  ☆207Updated 9 years ago
• S2E / docs
  Documentation and Quick Start Guides for the S2E Symbolic Execution Platform
  ☆76Updated 4 years ago
• kokjo / universalrop
  Small tool for generating ropchains using unicorn and z3
  ☆197Updated 6 years ago
• argp / unmask_jemalloc
  De Mysteriis Dom jemalloc
  ☆65Updated 6 years ago
• pakt / ropc
  A Turing complete ROP compiler
  ☆314Updated 11 years ago