Andrea Fioraldi

frida-fuzzer. This experimetal fuzzer is meant to be used for API in-memory fuzzing.

qasan. QASan is a custom QEMU 3.1.1 that detects memory errors in the guest using AddressSanitizer.

IDAngr. Use angr in the IDA Pro debugger generating a state from the current debug session

angrgdb. Use angr inside GDB. Create an angr state from the current debugger state.

cve_searchsploit. Search an exploit in the local exploitdb database by its CVE

frida-js-afl-instr. An example on how to do performant in-memory fuzzing with AFL++ and Frida

weizz-fuzzer. C

angrdbg. Abstract library to generate angr states from a debugger state

motherfucking-ctf. What do we say to JavaScript? Not today! motherfuckingwebsite.com inspired CTF platform.

pwntrace. Use ltrace with pwnlib.tubes.process instances, useful for heap exploitation. Pwntools rocks!

libafl_quickjs_fuzzing. An example fuzzer about how to fuzz a JS engine combinign Nautilus with Token-level fuzzing

FuzzSplore. FuzzSplore: Visualizing Feedback-Driven Fuzzing Techniques

r2angrdbg. Use angr inside the radare2 debugger. Create an angr state from the current debugger state.

useful-pwn-writeups. a repo of links to useful writeups of pwn challenges

asan-giovese. My AddressSanitizer implementation in C

afl-qemu-cov. Measure Basic Blocks coverage of all testcases in the AFL queue using a patched QEMU

taint-with-frida. just an experiment

idb2gdb. Load function names from an IDA Pro database inside GDB

angr-win64-wheels. prebuild angr wheels for Windows on x86_64

ConstrainedMemorySanitizer. C++

store-interval-tree. A balanced unbounded interval-tree in Rust with associated values in the nodes

deferred_driller. My version of driller using Intel PIN and angrgdb. In "theory" can work with AFL in deferred and persistent mode.

QEMU-SanCov. SanitizerCoverage hooks and coverage reports for user-mode QEMU

IdaVSHelp. IDAPython plugin to integrate Visual Studio Help Viewer in IDA Pro >= 6.8

CristoShot. MS Paint powered graphics game in C# 2008 in which an ass throws things to Jesus as antistress

afl. AFL with QEMU 3.1.0 + optimizations (thread safe this time) from https://github.com/abiondo/afl

IdaGrabStrings. IDAPython plugin to search strings in a specified range of addresses and map it to a C struct

IdaRetAddr. Highlight the return address of a function in the Ida Pro debugger

leakyleak. a POC for the libc address leak using __libc_csu_init from the paper https://i.blackhat.com/briefings/asia/2018/asia-18-Marco-return-to-csu-a-new-method-to-bypass-the-64-bit-Linux-ASLR-wp.pdf

ascii-ctf. A tiny and minimal web platform for jeopardy ctf hosting. Who needs javascript? Real hackers use ascii.

libradamsa. Precompiled radamsa library

sanitizer_stacktrace_rs. A Rust crate to generate backtraces using the LLVM codebase

bsc-thesis. Symbolic Execution and Debugging Synchronization - Bsc Thesis

mc2. Mirror of the MC2 fuzzer https://dl.acm.org/doi/10.1145/3548606.3560648

FFF. C++

AFL-exp. C

IDAngr-PinTool. PinTool skeleton for state synchronization with IDAngr

aosv-cheatshit. shitty partial notes of the Advanced Operating Systems and Virtualization course in shitty text files

ToolsForCyberChallenge. A set of tools that i developed to help me during the CyberChallenge.IT 2017

meminterval. A simple interval-tree in Rust made to store memory mappings

Superion. A backup of the Superion fuzzer cause the original repo (https://github.com/zhunki/Superion) was deleted

qasan-examples. Collection of QASan examples

angrkd. angrdbg + pykd to be used in WinDBG

Reverse80. Open a reverse shell in a web page using HTTP

andreafioraldi.

IdaMSDNHelp. IdaPython plugin to open MSDN Help Search page