pagabuc Goto Github PK

angr-doc

Documentation for the angr suite

angr-management

A GUI for angr. Being developed *very* slowly.

atomicity_tops

Introducing the Temporal Dimension to Memory Forensics - ACM Transactions on Privacy and Security 2019

autoprofile

community

Volatility plugins developed and maintained by the community

efixplorer

IDA plugin for UEFI firmware analysis and reverse engineering automation

firmae

forecast

Forecasting Malware Capabilities From Cyber Attack Memory Images

gfree

Implementation of G-Free: Defeating Return-Oriented Programming through Gadget-less Binaries

kallsyms-extractor

Tool to extract the kallsyms (System.map) from a memory dump

kernographer

Back to the Whiteboard: a Principled Approach for the Assessment and Design of Memory Forensic Techniques (Usenix '19)

lime

LiME (formerly DMD) is a Loadable Kernel Module (LKM), which allows the acquisition of volatile memory from Linux and Linux-based devices, such as those powered by Android. The tool supports acquiring memory either to the file system of the device or over the network. LiME is unique in that it is the first tool that allows full memory captures from Android devices. It also minimizes its interaction between user and kernel space processes during acquisition, which allows it to produce memory captures that are more forensically sound than those of other tools designed for Linux memory acquisition.

pagabuc.github.io

Personal website

panda

Platform for Architecture-Neutral Dynamic Analysis

pcre2

PCRE2 development is now based here.

pyelftools

Parsing ELF and DWARF in Python

radare2

unix-like reverse engineering framework and commandline tools

syzkaller

syzkaller is an unsupervised, coverage-guided Linux system call fuzzer

volatility-dev

An advanced memory forensics framework