Reversing & Binary Exploit

Tools designed to aid in the reverse engineering of binaries and assist in exploit development

Tool	Description	Source
Buffer-Overflow	This tool is created in order to allow penetration testers / researchers to quickly test out simple buffer overflows, without having to write a line of code	https://github.com/the-c0d3r/buffer-overflow
CAPE	Malware configuration and payload extraction tool	https://github.com/kevoreilly/CAPEv2
dotPeek	.Net decompiler tool	https://www.jetbrains.com/decompiler/
fuzza	Customizable TCP fuzzing tool to test for remote buffer overflows	https://github.com/cytopia/fuzza
GDB-Peda	GDB is included in most Linux distros (or is easily available) Peda is an extension for GDB. Used for debugging software/reverse engineering/exploit development	https://github.com/logld/peda
Ghidra	NSA Developed - Reverse Engineering Software	https://ghidra-sre.org
IDA free	Reversing and Debugging Tool	https://hex-rays.com/products/ida/support/download_freeware
Immunity Debugger	Reversing/Exploit development/Debugger	https://immunityinc.com/products/debugger
Inhale	Malware analysis and classification tool	https://github.com/netspooky/inhale#install
JD-GUI	Java Decompiler - Can be used to open and view and modify .Jar .Class etc	http://java-decompiler.github.io
Malice	Malice's mission is to be a free open source version of VirusTotal that anyone can use at any scale	https://github.com/maliceio/malice
mona	Mona.py is a python script that can be used to automate and speed up specific searches while developing exploits	https://github.com/corelan/mona
NodeJsScan	Static security code scanner (SAST) for Node.js applications powered by libsast and semgrep.	https://github.com/ajinabraham/NodeJsScan
OneFuzz	Self hosted Fuzzing-as-a-service	https://github.com/microsoft/onefuzz
Overflow-Helper	Assists with automating parts of Buffer-Overflows	https://github.com/LegendBegins/Overflow-Helper
Peframe	Static Analyses of Portable Exectuable malware and generic suspicious files	https://github.com/guelfoweb/peframe
pestudio	Spots suspicious artifacts within executable files	https://winitor.com
ropstar	Exploits simple linux bof challenges involving alsr, nx and to some extend format strings. You can let it get you a shell or specify a win function that is called	https://github.com/xct/ropstar
Tr-ID	File identification tool	https://mark0.net/soft-trid-e.html
x64dbg	Open-source debugger for Windows	https://x64dbg.com