Awesome GitHub RepositoriesBinary Memory Mapping

pwndbg is a GDB plugin and binary analysis framework designed for reverse engineering, exploit development, and low-level program analysis. It extends the core functionality of the debugger to provide advanced memory inspection and automation tools. The project distinguishes itself with specialized capabilities for heap analysis across glibc, jemalloc, and musl, as well as a comprehensive kernel debugging toolkit for inspecting Linux kernel tasks and slab allocators. It includes an integrated ROP gadget searcher for constructing exploit chains and an LLM-powered debugging assistant that provi

iOS-Runtime-Headers 是一个 Objective-C 头文件和工具集合，用于暴露私有且未公开的 iOS 系统 API。这些定义是通过对实时操作系统进行运行时内省生成的，旨在揭示隐藏的类方法和属性。 该项目支持在 Apple 内部框架中使用未公开的 iOS API 定义。它提供了必要的头文件，允许编译器链接私有系统符号，并验证未公开系统调用的类型。 该工具涵盖了多个技术领域，包括内存映射元数据提取和动态符号解析，以将函数名映射到内存地址。它还包括 Objective-C 头文件合成机制，以及通过查询运行进程的活动内存来推导类和方法签名的方法。 该仓库支持 iOS 逆向工程、系统内省以及开发公共 SDK 中不可用的功能的工作流。

stlink 是一套用于 ARM Cortex-M 烧录、固件管理和调试服务器操作的工具集，特别支持 STM32 微控制器。它提供了一个用于写入二进制和 hex 文件的 ARM Cortex-M 闪存编程器、一个用于实时插桩数据的 ITM 跟踪记录器，以及一个 SWD/JTAG 调试服务器。 该项目包括一个用于管理 MCU 固件和导出内存的图形用户界面，以及一个允许外部调试器控制执行并检查目标硬件寄存器的远程服务器。 该工具集涵盖了通过闪存擦除和选项字节配置进行的微控制器内存管理，以及通过半主机 (semihosting) 和执行跟踪记录进行的系统可观测性。它还提供了用于芯片信息提取和设备重置的实用程序。

ROPgadget is a binary analysis tool and multi-architecture disassembler designed to locate instructional sequences used for return-oriented programming. It functions as an exploit development framework that identifies gadgets within binaries to facilitate the creation of memory corruption exploits. The tool supports cross-architecture binary auditing, processing machine code from x86, ARM, MIPS, and RISC-V. It provides a unified interface for analyzing diverse executable file formats, including ELF, PE, and Mach-O. Its capabilities cover binary vulnerability analysis and exploit payload deve

Psychson 是一个用于修改 USB 固件二进制文件并将自定义镜像刷入特定硬件控制器架构的工具集。它提供专门用于转储、修补和刷写 Phison 2251-03 USB 控制器自定义固件的工具。 该软件包含一个有效载荷注入器，用于将 HID 击键脚本嵌入 USB 固件，以在目标机器上自动化输入。它还具有一个控制器刷写器，用于将修改后的烧录镜像直接写入基于 Phison 的 USB 硬件。 该套件涵盖固件管理和硬件取证分析，包括提取元数据地址和修补二进制镜像以实现隐藏分区、密码保护或引导模式限制的功能。

Flare-floss is a security utility and static binary string extractor designed to uncover hidden text and configuration data within compiled binaries. It functions as an obfuscated string decoder and reverse engineering tool to translate encoded strings into readable text for security auditing. The project employs emulated execution to capture the decrypted state of strings in memory by running small chunks of binary code in a virtual CPU. It further utilizes static analysis disassembly, intermediate representation analysis, and heuristic-based pattern matching to identify and decode strings t

Wild is a binary linker and compiler integration tool used to merge multiple object files into single executable binaries, shared libraries, or static archives. It functions as a replacement for standard system linkers, automating the final stage of the compilation process to generate binaries across different operating system architectures. The project provides custom binary linking and toolchain integration, allowing for the modification of how compilers resolve symbols and determine memory layouts. It specifically handles the organization of machine code and data sections to meet the requi