Discover fkie-cad/fact_goblin_bindings Open Source project

Stars
1
Language
Rust
License
MIT License
Created almost 2 years ago
Updated almost 2 years ago

fkie-cad

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Goblin bindings for parsing ELF header information in FACT

awesome-embedded-and-iot-security

A curated list of awesome embedded and IoT security resources.

1,395

FACT_core

Firmware Analysis and Comparison Tool

Python

1,230

cwe_checker

cwe_checker finds vulnerable patterns in binary executables

Rust

1,088

friTap

The goal of this project is to help researchers to analyze traffic encapsulated in SSL or TLS.

JavaScript

257

dewolf

A research decompiler implemented as a Binary Ninja plugin.

Python

171

libdesock

A de-socketing library for fuzzing.

131

nvd-json-data-feeds

Community reconstruction of the legacy JSON NVD Data Feeds. This project uses and redistributes data from the NVD API but is neither endorsed nor certified by the NVD.

Shell

109

RoAMer

Robust Automated Malware Unpacker

Python

fact_extractor

Standalone Utility for FACT-like extraction

Python

LuckyCAT

A distributed fuzzing management framework

Python

iva

IVA is a system to scan for known vulnerabilities in software products installed inside an organization. IVA uses CPE identifiers to search for CVEs related to a software product.

Python

DeStroid

Fighting String Encryption in Android Malware

Python

butterfly

LibAFL components for stateful fuzzing

Rust

yapscan

Yapscan is a YAra based Process SCANner, aimed at giving more control about what to scan and giving detailed reports on matches.

bountyhunter

A Caldera plugin for the emulation of complete, realistic cyberattack chains.

Python

socbed

A Self-Contained Open-Source Cyberattack Experimentation Testbed

Python

pcapFS

A FUSE module to mount captured network data

C++

Logprep

log data pre processing, generation and shipping in python

Python

embedded-evaluation-corpus

firmware evaluation reference corpus

wattson

A co-simulation framework for reasearching cybersecurity in power grids.

Python

ipal_transcriber

Industrial protocol transcriber - a common representation of industrial communication as input for protocol-independent industrial intrusion detection systems.

Python

ipal_ids_framework

Industrial Intrusion Detection - A framework for protocol-independent industrial intrusion detection on top of IPAL.

Python

FACT_docker

Dockerfile for building the FACT container

Python

ipal_datasets

Industrial datasets - datasets for evaluating industrial intrusion detection systems on IPAL.

Python

FACT_analysis-plugin_CVE-lookup

FACT analysis plug-in that maps software version to cves

Python

headerParser

Header information parser for PE, ELF, DEX, MachO, ZIP (JAR, DocX).

blackbox-opcua-fuzzing

Python

Codescanner

Python

png-carving

PNG file carving related material

C++

mcritweb

JavaScript

bidcos-security-doc

A documentation of the Bidcos (homematic) radio protocol with focus on practical security aspects

Python

FACT_firmadyne_analysis_plugin

Integrates Firmadyne into FACT

Python

61850-fuzzing

This repository provides fuzzing scripts to analyze an IEC 61850 implementation

Python

woodblock

A framework to generate file carving test data.

Python

eeva

E²VA short for Exploitation Experience with Vulnerable App is a vulnerable app to learn userspace exploitation on Android

Java

common_analysis_oms

Offline Malware Scanner (OMS) scans files with multiple locally installed malware scanners.

Python

dewolf-logic

A graph-based logic engine for bitwise operations.

Python

fact_pdf_report

FACT PDF Report Generator

Python

maritime-dissector

A lua plugin for Wireshark which contains dissectors for common maritime protocols.

Lua

common_analysis_ip_and_uri

Detects IPv4 and IPv6 adresses as well as URIs

Python

Algorithmic-Heap-Layout-Manipulation-in-the-Linux-Kernel

Our artifacts to our Paper: "Algorithmic Heap Layout Manipulation in the Linux Kernel"

bpf-rootkit-workshop

Workshop: Forensic Analysis of eBPF based Linux Rootkits

bpmac

talk

NtDeviceIoControlFile talker

windowsScripts

A collection of some useful windows (batch) scripts.

Batchfile

common_helper_extraction

Extraction support functions

Python

cve-attribution-s2

Companion Repository to our the whitepaper "Towards Reliable and Scalable Linux Kernel CVE Attribution in Automated Static Firmware Analyses": https://arxiv.org/abs/2209.05217

Python

fact_helper_file

File type helper functions and magic library

Python

entropython

Efficient calculation of shannon byte entropy based on rust library.

Rust

docker_qemu_user

Phusion-based docker image containing the binaries for Qemu User Emulation

Shell

epf-parameter-screening

Shell

pidarci

PIdARCI Prototype Implementation

Python

FACT_analysis_plugin_template

Download this template if you want to write your own FACT analysis plug-in

Python

FACT_Search_and_Download

This tool is intended to create a ground truth matching specific parameters for scientific research on firmware.

Python

common_helper_files

Python

common_helper_yara

Yara command line wrapper

Python

bamboo-chuck-norris-plugin

ELFbin

hexter

A minimal terminal hex viewer supporting reading, writing and searching in files and processes.

docker_ghidra_headless_base

base docker image for ghidra headless scripting

Dockerfile

ssdeeper

Supplemental material for our paper: ssdeeper - Evaluating and Improving ssdeep.

Shell

common_helper_filter

generate nice structured output

Python

cwe_checker_travis_docker_image

Docker image with current BAP (opam testing) and other dependencies for fast testing of cwe_checker on travis

Dockerfile

mana

Python

FACT_remote_plugin_runner

Base class for FACT remote analysis systems

epf-case-study

fact_radare_viewer

Start radare webUI via REST in container and deliver url to view

Python

socbed-eval-acsac-2021

SOCBED evaluation code and dataset as presented at ACSAC 2021

Python

ei2f

C++

common_helper_unpacking_classifier

Try to guess if unpacking a container was successfull.

Python

docker-radare-web-gui

Dockerfile for Radare2 web gui

Shell

dewolf-idioms

A new approach for compiler idioms handling that automatically generates patterns to annotate them.

Python

conpot-plus

Python

frida-emulator-bypass

common_helper_passwords

Helper functions for handling password lists and files.

Python

Web-Content-Integrity

Web Content Integrity: Tamper-proof websites beyond HTTPS

HTML

spmac

Python

common_helper_process

fail-safe process helpers

Python

powerowl

PowerOwl models power grids as a whole and allows to simulate their power-domain behavior.

Python

winDbgFixPte

Fixes WinDbg !pte command not working bug

DEXSLib

Currently, the project is being heavily refactored and is therefore in an unusable state. Android RE library for static forward and backward slicing

Java

linux-firmware-corpus

HTML

fkie-cad/fact_goblin_bindings

fkie-cad

Reviews

Repository Details

More Repositories