809 Open source projects that are alternatives of or similar to Crosshair

A unit test-like interface for fuzzing and symbolic execution

Binary Analysis Platform

No description or website provided.

A cross-platform browser fuzzing framework

coverage guided fuzz testing for java

This project contains the source code for the CERT Basic Fuzzing Framework (BFF) and the CERT Failure Observation Engine (FOE).

This repo aims at providing practical examples on how to use r2frida

Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.

Sys: A Static/Symbolic Tool for Finding Good Bugs in Good (Browser) Code

A hackable malware sandbox for the 21st Century

TIRO - A hybrid iterative deobfuscation framework for Android applications

Custom memory allocator that helps discover reads from uninitialized memory

coverage guided fuzz testing for python

coverage guided fuzz testing for javascript

CLI to integrate continuous fuzzing with Fuzzit

HaboMalHunter is a sub-project of Habo Malware Analysis System (https://habo.qq.com), which can be used for automated malware analysis and security assessment on the Linux system.

APISan: Sanitizing API Usages through Semantic Cross-Checking

Automated code reviews via mutation testing - semantic code coverage.

Angora is a mutation-based fuzzer. The main goal of Angora is to increase branch coverage by solving path constraints without symbolic execution.

Defund the Police.

A graph-based static-dynamic hybrid DEX code analysis tool

The radare2 + frida book for Mobile Application assessment

Towards Measuring Supply Chain Attacks on Package Managers for Interpreted Languages

OPEM (Open Source PEM Fuel Cell Simulation Tool)

A curated list of awesome Fuzzing(or Fuzz Testing) for software security

Android malware detection using static and dynamic analysis

Randomly mutate JSON, XML, HTML forms, text and binary data for fuzz testing

The fuzzer afl++ is afl with community patches, qemu 5.1 upgrade, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and a lot more!

AFL-based fuzz testing for .NET

A Not So Very Intelligent Fuzzer: An advanced fuzzing framework designed to find vulnerabilities in C/C++ code.

🏆 Collection of bugs uncovered by fuzzing Rust code

Fuzz your Rust code with Google-developed Honggfuzz !

🤖 Repeat tests. Repeat tests. Repeat tests.

ClusterFuzzLite - Simple continuous fuzzing that runs in CI.

Web Pentesting Fuzz 字典,一个就够了。

Radare2 and Frida better together.

A curated list of awesome symbolic execution resources including essential research papers, lectures, videos, and tools.

A targeted input generator for Android that improves the effectiveness of dynamic malware analysis.

Seeding fuzzers with symbolic execution

Dynamic definitions and types provider for ruby static analysis

Setup scripts for my Malware Analysis VMs

A curated list of awesome directed fuzzing research papers

🎯 A collection of fuzzing targets written in Rust.

Static and dynamic Android application security analysis

libdft for Intel Pin 3.x and 64 bit platform. (Dynamic taint tracking, taint analysis)

SDA is a rich cross-platform tool for reverse engineering that focused firstly on analysis of computer games. I'm trying to create a mix of the Ghidra, Cheat Engine and x64dbg. My tool will combine static and dynamic analysis of programs. Now SDA is being developed.

Find exploitable PHP files by parameter fuzzing and function call tracing

Fuzz testing for jest

A 6502-oriented low-level programming language supporting advanced static analysis

Tool that generates unit test by C/C++ source code, trying to reach all branches and maximize code coverage

An ethereum evm bytecode disassembler and static/dynamic analysis tool

Your performance & security consultant, an artisan command away.

History of symbolic execution (as well as SAT/SMT solving, fuzzing, and taint data tracking)

Super Fast Concolic Execution Engine based on Source Code Taint Tracing

BurpSuite收集：包括不限于 Burp 文章、破解版、插件(非BApp Store)、汉化等相关教程，欢迎添砖加瓦---burpsuite-pro burpsuite-extender burpsuite cracked-version hackbar hacktools fuzzing fuzz-testing burp-plugin burp-extensions bapp-store brute-force-attacks brute-force-passwords waf sqlmap jar

📖 Guides and tutorials on how to fuzz Rust code

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration testing topics.

Fuzzing Unification Framework

syzkaller is an unsupervised coverage-guided kernel fuzzer

Droidefense: Advance Android Malware Analysis Framework