Open-source alternatives to Stringsifter

Cutter is a binary analysis platform and graphical user interface for the Rizin reverse engineering framework. It provides an environment for analyzing the internal logic and data structures of compiled binaries through integrated disassembly and visualization. The platform supports a containerized deployment model to provide isolated environments for binary analysis, which is used to examine suspicious binaries without risking the host system. It is an extensible security tool that allows for the addition of custom analysis capabilities and visualizers via native plugins and scripts. The to

Malware Configuration And Payload Extraction

Angr is a binary analysis framework and static analysis tool used for reverse engineering compiled binaries. It serves as a binary decompiler and a lifting platform that translates machine code into a common intermediate representation to enable cross-architecture analysis. The framework integrates a symbolic execution engine and constraint solvers to determine the inputs required to reach specific program states. It also employs untrusted code sandboxing to isolate guest code from the host environment during analysis. Its capabilities cover control flow and data flow analysis, including the

Malware static analysis framework

Binary Analysis Platform

Pics is a comprehensive reference library providing visual documentation for binary file structures, character encodings, processor instruction sets, and hardware architecture maps. It serves as a centralized resource for the dissection and analysis of diverse binary formats, including executables, images, and archives. The project specializes in mapping complex specifications into visual layouts. This includes the creation of schematic diagrams to explain the physical and logical organization of hardware components and the maintenance of a catalog for processor opcodes across multiple hardwa

GhidraMCP is a Model Context Protocol server that exposes Ghidra binary analysis and decompilation functions to external intelligence models. It acts as a bridge that connects the Ghidra reverse engineering suite to external tools through a standardized communication protocol, facilitating automated reverse engineering and software auditing. The project enables the extraction of decompiled code and program structural data to populate the context windows of language models. It features a binary symbol management tool capable of dynamic symbol resolution, allowing method and data names to be up

Convolutional neural network for analyzing pentest screenshots

Reverse engineering and pentesting for Android applications

Using Intel's PIN tool to solve CTF problems

CAI is a framework for building autonomous security agents and an orchestration system for coordinating multiple specialized agents. It functions as an agentic workflow engine and an autonomous cyber-defense tool that maps language model reasoning to security kill chain functions for threat detection and mitigation. The system distinguishes itself through multi-agent coordination patterns, such as swarms and hierarchies, and the use of stateful conversation handoffs. It implements multi-layer input and output guardrails to block prompt injections and validate commands before they reach the sy

Deep-pwning is a lightweight framework for experimenting with machine learning models with the goal of evaluating their robustness against a motivated adversary.

.. raw:: html

GhIDA is an IDA Pro plugin that integrates the Ghidra decompiler in IDA.

Python scriptable Reverse Engineering Sandbox, a Virtual Machine instrumentation and inspection framework based on QEMU

ROPMEMU is a framework to analyze, dissect and decompile complex code-reuse attacks.

SecGPT网络安全大模型

Automated static analysis tools for binary programs

A static devirtualizer for VMProtect x64 3.x. powered by VTIL.