fritap
Simplifying SSL/TLS traffic analysis for researchers by making SSL decryption effortless.
flare-capa
The FLARE team's open-source tool to identify capabilities in executable files.
https://github.com/beehive-lab/mambo
A low-overhead dynamic binary instrumentation and modification tool for ARM (both AArch32 and AArch64 support) and RISC-V (RV64GC).
https://github.com/binsec/haunted
Binsec/Haunted is an extension of Binsec to verify speculative constant-time and detect Spectre attacks.
https://github.com/csvl/sema
SEMA is based on angr, a symbolic execution engine used to extract API calls. Especially, we extend ANGR with strategies to create representative signatures based on System Call Dependency graph (SCDG). Those SCDGs can be exploited in machine learning modules to do classification/detection.
docker-packing-box
Docker image gathering packers and tools for making datasets of packed executables and training machine learning models for packing detection
https://github.com/binsec/rel
Binsec/Rel is an extension of Binsec that implements relational symbolic execution for constant-time verification and secret-erasure at binary-level.
