naci

Mergen. Deobfuscation via optimization with usage of LLVM IR and parsing assembly.

trace_and_deobfuscation_experiment. Experiment for a devirtualization project with a experimental and probably inefficent optimization

TritonTraceAssembler. Creates a trace and gathers the trace together into a basic block

lifting-tests. code for test binaries

ida-py-plugin-fix-function-tails. plugin for fixing function tails v0.1

iced. Blazing fast and correct x86/x64 disassembler, assembler, decoder, encoder for Rust, .NET, Java, Python, Lua

zydis-db. Zydis instruction DB and editor/generator project

rop-detector-py. detects Return Address manipulation by monitoring Stack Pointer.

inkwell. It's a New Kind of Wrapper for Exposing LLVM (Safely)

onecharacter-recognition. CNN