Alternatives and similar repositories for kstructhunter:

Users that are interested in kstructhunter are comparing it to the libraries listed below

• NickStephens / rop-edurange
  A ROP and binary analysis exploit challenge for edurange
  ☆15Updated 10 years ago
• programa-stic / ropc-llvm
  ropc-llvm is a PoC of a Turing complete ROP compiler with support for a subset of LLVM IR. It is an extension of ropc.
  ☆67Updated 11 years ago
• spiperac / armroper
  ARM rop chain gadget searcher
  ☆37Updated 7 years ago
• n3k / CansecWest2016_Getting_Physical
  CansecWest2016 - Getting Physical: Extreme Abuse of Intel Based Paging Systems
  ☆27Updated 8 years ago
• zachriggle / functions
  Python repository containing parsed standard C library function and argument information
  ☆26Updated 6 years ago
• angr / fidget
  A tool to add simple inline patches to a binary to rearrange its stack frames, and other things!
  ☆45Updated 2 years ago
• kamou / pimp
  Triton based R2 plugin for concolic execution and total control
  ☆31Updated 6 years ago
• arizvisa / afl-cygwin
  AFL "mostly" ported to cygwin
  ☆26Updated 9 years ago
• ChrisTheCoolHut / Easy-Pickings
  Automatic function exporting and linking for fuzzing cross-architecture binaries.
  ☆51Updated 6 years ago
• jonoberheide / ksymhunter
  Routines for hunting down kernel symbols.
  ☆82Updated 14 years ago
• jpenalbae / rarop
  Graphical ROP chain builder using radare2 and r2pipe
  ☆51Updated 7 years ago
• floyd-fuh / afl-fuzzing-scripts
  Fuzzing scripts for the American Fuzzy Lop (AFL) fuzzer
  ☆48Updated 9 years ago
• jonoberheide / stackjacking
  PoC code for our presentation titled "Stackjacking Your Way to grsec/PaX Bypass"
  ☆46Updated 14 years ago
• shellphish / shellphish-qemu
  A pip wrapper around our ridiculous amount of qemu forks.
  ☆49Updated last year
• leetchicken / afl
  Unofficial American Fuzzy Lop repo
  ☆25Updated 8 years ago
• n30m1nd / painless_intro_ptmalloc2
  Proof of Concept files for SensePost's blog - Painless intro to the linux userland heap
  ☆22Updated 7 years ago
• MarkusTeufelberger / afl-ddmin-mod
  Test case minimizer for afl-fuzz
  ☆26Updated 7 years ago
• bx / bootloader_instrumentation_suite
  Bootloader research tools (very much a work in progress)
  ☆37Updated 6 years ago
• maurer / symfuzz
  ☆63Updated 9 years ago
• CIFASIS / nosy-newt
  Nosy Newt is a simple concolic execution tool for exploring the input space of a binary executable program based in Triton
  ☆61Updated 7 years ago
• tharina / 33c3ctf-smartfridge
  Challenge for the 33C3 CTF
  ☆15Updated 8 years ago
• osirislab / xnippet
  A little tool to execute functions without debugging an entire executable. Originally written by Gonzalo J. Carracedo (BatchDrake).
  ☆29Updated 11 years ago
• kukfa / bindbg
  Binary Ninja plugin that syncs WinDbg to Binary Ninja
  ☆47Updated 7 years ago
• huku- / xde
  XED based Disassembly Engine
  ☆19Updated 7 years ago
• mechaphish / pov_fuzzing
  Our backup exploitation technique: fuzzing for POVs!
  ☆25Updated 8 years ago
• sam-b / pilloc
  A pin tool to visualise heap operations
  ☆21Updated 9 years ago
• Jacopo / elf_add_code
  Adds another code segment to an existing program. Experimental: can take in ELF-compiled stuff.
  ☆18Updated 9 years ago
• dkemp / Vulndev
  Vulnerability research and development.
  ☆25Updated 9 years ago
• andreafioraldi / pwntrace
  Use ltrace with pwnlib.tubes.process instances, useful for heap exploitation. Pwntools rocks!
  ☆53Updated 7 years ago
• bannsec / formatStringExploiter
  Helper script for working with format string bugs
  ☆57Updated 4 years ago