Add ddisam

This commit is contained in:
Romain Thomas 2021-01-14 05:54:39 +01:00
parent cd286e1c08
commit 1e914cd86e

View File

@ -9,7 +9,7 @@ Blog posts related to LIEF
:class: strike :class: strike
* 2020-10-23: `[Write-up] Using a PIE binary as a Shared Library — HCSC-2020 CTF Writeup <https://medium.com/bugbountywriteup/using-a-pie-binary-as-a-shared-library-hcsc-2020-ctf-writeup-390a8a437f31>`_ by `István Tóth <https://twitter.com/an0n_r0>`_ * 2020-10-23: `[Write-up] Using a PIE binary as a Shared Library — HCSC-2020 CTF Writeup <https://medium.com/bugbountywriteup/using-a-pie-binary-as-a-shared-library-hcsc-2020-ctf-writeup-390a8a437f31>`_ by `István Tóth <https://twitter.com/an0n_r0>`_
* 2020-02-04: `x0rro — A PE/ELF/MachO Crypter for x86 and x86_64 Based on Radare2 by phra <https://iwantmore.pizza/posts/x0rro.html>`_ * 2020-02-04: x0rro — A PE/ELF/MachO Crypter for x86 and x86_64 Based on Radare2 by phra
* 2019-11-01: `Isolating the logic of an encrypted protocol with LIEF and kaitai <https://x-c3ll.github.io/posts/blackbox-lief-kaitai/>`_ by `@TheXC3LL <https://twitter.com/THEXC3LL>`_ * 2019-11-01: `Isolating the logic of an encrypted protocol with LIEF and kaitai <https://x-c3ll.github.io/posts/blackbox-lief-kaitai/>`_ by `@TheXC3LL <https://twitter.com/THEXC3LL>`_
* 2018-10-26: `[Write-up] HITCON 2018 - Unexecutable <https://github.com/pwning/public-writeup/tree/21b31d1aa916f07a16423a1c2944c498a29271fb/hitcon2018/unexecutable/>`_ by `Andrew Wesie <https://github.com/awesie>`_ * 2018-10-26: `[Write-up] HITCON 2018 - Unexecutable <https://github.com/pwning/public-writeup/tree/21b31d1aa916f07a16423a1c2944c498a29271fb/hitcon2018/unexecutable/>`_ by `Andrew Wesie <https://github.com/awesie>`_
* 2018-10-06: `[Write-up] Flare-on Challenge (Level 3) <https://bruce30262.github.io/flare-on-challenge-2018-write-up/>`_ * 2018-10-06: `[Write-up] Flare-on Challenge (Level 3) <https://bruce30262.github.io/flare-on-challenge-2018-write-up/>`_
@ -26,42 +26,46 @@ Blog posts related to LIEF
Projects using LIEF Projects using LIEF
------------------- -------------------
+---------------------------------+----------+------------------------------------------------------------------------------------------------------------------------------+----------------------+----------------------------------------------------------------------------------+ +---------------------------------+----------+------------------------------------------------------------------------------------------------------------------------------+----------------------+----------------------------------------------------------------------------------------------+
| Name | Language | Link | Topic | Summarize | | Name | Language | Link | Topic | Summarize |
+=================================+==========+==============================================================================================================================+======================+==================================================================================+ +=================================+==========+==============================================================================================================================+======================+==============================================================================================+
| Mobile-Security-Framework-MobSF | Python | https://github.com/MobSF/Mobile-Security-Framework-MobSF | Mobile Analysis | Mobile Security Framework (MobSF) is an automated, all-in-one mobile application | | Datalog Disassembly | C++ | https://github.com/GrammaTech/ddisasm | Binary Analysis | DDisasm is a fast disassembler which is accurate enough for the resulting |
| | | | | (Android/iOS/Windows) pen-testing, malware analysis and security assessment | | | | | | assembly code to be reassembled. DDisasm is implemented using the datalog |
| | | | | framework capable of performing static and dynamic analysis. | | | | | | (souffle) declarative logic programming language to compile disassembly rules and heuristics |
+---------------------------------+----------+------------------------------------------------------------------------------------------------------------------------------+----------------------+----------------------------------------------------------------------------------+ +---------------------------------+----------+------------------------------------------------------------------------------------------------------------------------------+----------------------+----------------------------------------------------------------------------------------------+
| checksec.py | Python | https://github.com/Wenzel/checksec.py | Static Analysis | A simple tool to verify the security properties of your binaries. | | Mobile-Security-Framework-MobSF | Python | https://github.com/MobSF/Mobile-Security-Framework-MobSF | Mobile Analysis | Mobile Security Framework (MobSF) is an automated, all-in-one mobile application |
| | | | | These properties can be enabled by your compiler | | | | | | (Android/iOS/Windows) pen-testing, malware analysis and security assessment |
| | | | | to enforce the security of your executables, and mitigate exploits | | | | | | framework capable of performing static and dynamic analysis. |
+---------------------------------+----------+------------------------------------------------------------------------------------------------------------------------------+----------------------+----------------------------------------------------------------------------------+ +---------------------------------+----------+------------------------------------------------------------------------------------------------------------------------------+----------------------+----------------------------------------------------------------------------------------------+
| youarespecial | Python | https://github.com/endgameinc/youarespecial | Machine Learning | Machine learning models on | | checksec.py | Python | https://github.com/Wenzel/checksec.py | Static Analysis | A simple tool to verify the security properties of your binaries. |
| | | | | Malwares | | | | | | These properties can be enabled by your compiler |
+---------------------------------+----------+------------------------------------------------------------------------------------------------------------------------------+----------------------+----------------------------------------------------------------------------------+ | | | | | to enforce the security of your executables, and mitigate exploits |
| gym-malware | Python | https://github.com/endgameinc/gym-malware | Machine Learning | Learn how to bypass AV through | +---------------------------------+----------+------------------------------------------------------------------------------------------------------------------------------+----------------------+----------------------------------------------------------------------------------------------+
| | | | | machine learning. | | youarespecial | Python | https://github.com/endgameinc/youarespecial | Machine Learning | Machine learning models on |
+---------------------------------+----------+------------------------------------------------------------------------------------------------------------------------------+----------------------+----------------------------------------------------------------------------------+ | | | | | Malwares |
| MISP | Python | https://github.com/MISP/MISP | Malware | Malware Information Sharing | +---------------------------------+----------+------------------------------------------------------------------------------------------------------------------------------+----------------------+----------------------------------------------------------------------------------------------+
| | | | | Platform and Threat Sharing | | gym-malware | Python | https://github.com/endgameinc/gym-malware | Machine Learning | Learn how to bypass AV through |
+---------------------------------+----------+------------------------------------------------------------------------------------------------------------------------------+----------------------+----------------------------------------------------------------------------------+ | | | | | machine learning. |
| Virus Disinfector KIT | Python | https://github.com/Fare9/Virus_Disinfector_KIT | Malware | Tool to disinfect PE files | +---------------------------------+----------+------------------------------------------------------------------------------------------------------------------------------+----------------------+----------------------------------------------------------------------------------------------+
+---------------------------------+----------+------------------------------------------------------------------------------------------------------------------------------+----------------------+----------------------------------------------------------------------------------+ | MISP | Python | https://github.com/MISP/MISP | Malware | Malware Information Sharing |
| lief-sys | Rust | https://github.com/tathanhdinh/lief-sys | Binding | Rust binding for LIEF | | | | | | Platform and Threat Sharing |
+---------------------------------+----------+------------------------------------------------------------------------------------------------------------------------------+----------------------+----------------------------------------------------------------------------------+ +---------------------------------+----------+------------------------------------------------------------------------------------------------------------------------------+----------------------+----------------------------------------------------------------------------------------------+
| Ledger-Donjon/rainbow | Python | https://github.com/Ledger-Donjon/rainbow | Dynamic Analysis | Trace generator based on Unicorn | | Virus Disinfector KIT | Python | https://github.com/Fare9/Virus_Disinfector_KIT | Malware | Tool to disinfect PE files |
| | | | | and LIEF as loader. | +---------------------------------+----------+------------------------------------------------------------------------------------------------------------------------------+----------------------+----------------------------------------------------------------------------------------------+
+---------------------------------+----------+------------------------------------------------------------------------------------------------------------------------------+----------------------+----------------------------------------------------------------------------------+ | lief-sys | Rust | https://github.com/tathanhdinh/lief-sys | Binding | Rust binding for LIEF |
| smda | Python | https://github.com/danielplohmann/smda | Static Analysis | Recursive disassembler using LIEF as | +---------------------------------+----------+------------------------------------------------------------------------------------------------------------------------------+----------------------+----------------------------------------------------------------------------------------------+
| | | | | ELF and PE loader | | Ledger-Donjon/rainbow | Python | https://github.com/Ledger-Donjon/rainbow | Dynamic Analysis | Trace generator based on Unicorn |
+---------------------------------+----------+------------------------------------------------------------------------------------------------------------------------------+----------------------+----------------------------------------------------------------------------------+ | | | | | and LIEF as loader. |
| conan-io/hooks | Python | `binary-linter.py <https://github.com/conan-io/hooks/blob/7f2882299cbdb545c397a0f37dc9394a7bbc0902/hooks/binary-linter.py>`_ | Static Analysis | Binary linter | +---------------------------------+----------+------------------------------------------------------------------------------------------------------------------------------+----------------------+----------------------------------------------------------------------------------------------+
+---------------------------------+----------+------------------------------------------------------------------------------------------------------------------------------+----------------------+----------------------------------------------------------------------------------+ | smda | Python | https://github.com/danielplohmann/smda | Static Analysis | Recursive disassembler using LIEF as |
| Wiggle | Python | https://github.com/ChiChou/wiggle | Binary search engine | An executable binary metadata search engine. | | | | | | ELF and PE loader |
+---------------------------------+----------+------------------------------------------------------------------------------------------------------------------------------+----------------------+----------------------------------------------------------------------------------+ +---------------------------------+----------+------------------------------------------------------------------------------------------------------------------------------+----------------------+----------------------------------------------------------------------------------------------+
| ANBU | C++ | https://github.com/Fare9/ANBU | Unpacking | Automatic New Binary Unpacker with PIN DBI Framework | | conan-io/hooks | Python | `binary-linter.py <https://github.com/conan-io/hooks/blob/7f2882299cbdb545c397a0f37dc9394a7bbc0902/hooks/binary-linter.py>`_ | Static Analysis | Binary linter |
+---------------------------------+----------+------------------------------------------------------------------------------------------------------------------------------+----------------------+----------------------------------------------------------------------------------+ +---------------------------------+----------+------------------------------------------------------------------------------------------------------------------------------+----------------------+----------------------------------------------------------------------------------------------+
| Wiggle | Python | https://github.com/ChiChou/wiggle | Binary search engine | An executable binary metadata search engine. |
+---------------------------------+----------+------------------------------------------------------------------------------------------------------------------------------+----------------------+----------------------------------------------------------------------------------------------+
| ANBU | C++ | https://github.com/Fare9/ANBU | Unpacking | Automatic New Binary Unpacker with PIN DBI Framework |
+---------------------------------+----------+------------------------------------------------------------------------------------------------------------------------------+----------------------+----------------------------------------------------------------------------------------------+
Similar Projects Similar Projects
---------------- ----------------