2 repositorios
Techniques for analyzing binary cross-references by mapping files into a virtual address space.
Distinct from Binary Memory Mapping: Focuses on using memory mapping for static analysis of offsets rather than OS-level binary loading configurations
Explore 2 awesome GitHub repositories matching operating systems & systems programming · Static Memory Analysis. Refine with filters or upvote what's useful.
ROPgadget es una herramienta de análisis binario y desensamblador multiarquitectura diseñado para localizar secuencias de instrucciones utilizadas para la programación orientada al retorno (ROP). Funciona como un framework de desarrollo de exploits que identifica gadgets dentro de binarios para facilitar la creación de exploits de corrupción de memoria. La herramienta admite auditoría binaria cross-architecture, procesando código máquina de x86, ARM, MIPS y RISC-V. Proporciona una interfaz unificada para analizar diversos formatos de archivos ejecutables, incluyendo ELF, PE y Mach-O. Sus capacidades cubren el análisis de vulnerabilidades binarias y el desarrollo de payloads de exploit. Esto se logra mediante desensamblado de barrido lineal, búsqueda de gadgets basada en patrones y validación de secuencias de instrucciones para asegurar que los fragmentos identificados sean ejecutables.
Maps executable files into virtual memory to enable fast random access during the binary scanning process.
Flare-floss is a security utility and static binary string extractor designed to uncover hidden text and configuration data within compiled binaries. It functions as an obfuscated string decoder and reverse engineering tool to translate encoded strings into readable text for security auditing. The project employs emulated execution to capture the decrypted state of strings in memory by running small chunks of binary code in a virtual CPU. It further utilizes static analysis disassembly, intermediate representation analysis, and heuristic-based pattern matching to identify and decode strings t
Maps executable files into virtual address space to analyze data offsets and cross-references without executing the process.