Alternatives and similar repositories for reference:

Users that are interested in reference are comparing it to the libraries listed below

• Granary / granary
  Dynamic binary translation framework for instrumenting the Linux kernel and its modules
  ☆77Updated 7 years ago
• Vector35 / generate_assembler
  generate assemblers from disassemblers, 2018 jailbreak security summit talk
  ☆37Updated 4 years ago
• c01db33f / reil
  REIL translation library
  ☆36Updated 8 years ago
• HexHive / libdetox
  Fast and efficient binary translator
  ☆58Updated 6 years ago
• Frky / scat
  Dynamic analysis of binary programs to retrieve function-related information (arity, type of parameters, coupling).
  ☆67Updated 7 years ago
• gdslang / gdsl-toolkit
  Generic Decoder Specification Language Toolkit
  ☆32Updated 5 years ago
• vusec / typesan
  TypeSan checks casts in C++ code - code released for CCS 2016
  ☆32Updated 3 years ago
• regehr / llvm-dataflow-info
  print information from LLVM dataflow analyses
  ☆13Updated 5 years ago
• feliam / klee-taint
  KLEE-TAINT - Klee with taint analysis support
  ☆72Updated 7 years ago
• zachriggle / functions
  Python repository containing parsed standard C library function and argument information
  ☆26Updated 6 years ago
• bx / bootloader_instrumentation_suite
  Bootloader research tools (very much a work in progress)
  ☆37Updated 5 years ago
• lifting-bits / klee
  KLEE Symbolic Execution Engine
  ☆60Updated 5 years ago
• uxmal / nucleus
  Clone of "Compiler-Agnostic Function Detection in Binaries" source code
  ☆85Updated 3 years ago
• simutrace / simutrace
  Tracing framework for full system simulators
  ☆55Updated 9 years ago
• rpaleari / fuzztrace
  A "general-purpose" tracing tool
  ☆38Updated 9 years ago
• trailofbits / screen
  Measure branching along code paths
  ☆20Updated 8 years ago
• abenkhadra / spedi
  Speculative disassembly, CFG recovery, and call-graph recovery from stripped binaries.
  ☆106Updated 6 years ago
• dyninst / tools
  Tools built using Dyninst or Dyninst component libraries.
  ☆25Updated last year
• decomp / doc
  Design documents related to the decompilation pipeline.
  ☆25Updated 4 years ago
• trailofbits / DomTreSat
  Dominator Tree LLVM Pass to Test Satisfiability
  ☆47Updated 8 years ago
• ucsb-seclab / autofacts
  Towards Automatically Generating a Sound and Complete Dataset for Evaluating Static Analysis Tools
  ☆14Updated 6 years ago
• schieb / ELFManip
  Modify ELF executables
  ☆16Updated 5 years ago
• sushant94 / rune
  rune - radare2 based symbolic emulator
  ☆26Updated 7 years ago
• RolfRolles / SMTSample
  Course sample for SMT-Based Binary Program Analysis training class
  ☆31Updated 6 years ago
• MarkusTeufelberger / afl-ddmin-mod
  Test case minimizer for afl-fuzz
  ☆26Updated 7 years ago
• zznop / binjago
  Binary Ninja plugin for ROP gadget calculation
  ☆28Updated 5 years ago
• kmcallister / alameda
  Linux kernel JIT spray for SMEP / KERNEXEC bypass
  ☆55Updated 12 years ago
• programa-stic / ropc-llvm
  ropc-llvm is a PoC of a Turing complete ROP compiler with support for a subset of LLVM IR. It is an extension of ropc.
  ☆67Updated 11 years ago
• ntddk / vine
  Vine: The BitBlaze Static Analysis Component
  ☆25Updated 10 years ago
• xorpd / fcatalog_server
  Functions Catalog
  ☆28Updated 5 years ago