CTF framework and exploit development library

CLI tool and python library that converts the output of popular command-line tools, file-types, and common strings to JSON, YAML, or Dictionaries. This allows piping of output to tools like jq and …

A powerful and user-friendly binary analysis platform!

GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux

A True Instrumentable Binary Emulation Framework

Diaphora, the most advanced Free and Open Source program diffing tool.

RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services.

CodeChecker is an analyzer tooling, defect database and viewer extension for static and dynamic analyzer tools.

A Coverage Explorer for Reverse Engineers

Extract files from any kind of container formats

OFRAK: unpack, modify, and repack binaries.

The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others),…

Academic papers related to fuzzing, binary analysis, and exploit dev, which I want to read or have already read

Tern is a software composition analysis tool and Python library that generates a Software Bill of Materials for container images and Dockerfiles. The SBOM that Tern generates will give you a layer-…

Differential testing framework for HTTP implementations

Karta - source code assisted fast binary matching plugin for IDA

FirmWire is a full-system baseband firmware emulation platform for fuzzing, debugging, and root-cause analysis of smartphone baseband firmwares

Towards Large-Scale Emulation of IoT Firmware for Dynamic Analysis

EMUX Firmware Emulation Framework (formerly ARMX)

the Network Protocol Fuzzer that we will want to use.

Python Command-Line Ghidra Binary Diffing Engine

A reversing plugin for cross-decompiler collaboration, built on git.

Port of devttyS0's IDA plugins to the Ghidra plugin framework, new plugins as well.

Karonte is a static analysis tool to detect multi-binary vulnerabilities in embedded firmware

ToolSet for VxWorks Based Embedded Device Analyses

Repository to train/learn memory corruption on the ARM platform.

An embedded bus adapter for various microcontrollers and radios.