Section: .. / linux / reverse-engineering /
| /// File Name: |
SN451.tar.gz |
Description:
|
Source-Navigator is a source code analysis tool. With it, you can edit source code, display relationships between classes and functions and members, display call trees, and build projects.
| | Homepage: | http://sources.redhat.com/sourcenav/ | | File Size: | 14510013 | | Last Modified: | Jul 23 05:22:19 2000 |
| MD5 Checksum: | 0db736f55a930b0074c10ad2be79a5eb |
|
| /// File Name: |
bastard-0.08.tgz |
Description:
|
A disassembler written for disassembly of x86 ELF targets on Linux (other file formats/CPUs can be 'plugged in'). Written as a backend or engine -- the UI is a command line; support for controlling the disassembler via pipes or FIFOs is provided. Note that this disassembler does not rely on libopcodes to do its disassembly; rather, the 'libi386' plugin is a standard .so that can be reused by other projects.
| | Homepage: | http://bastard.sourceforge.net | | Changes: | The base functionality is there, but the code is not complete. The program depends upon: libreadline [not included], typhoon RDB [included], and seer interpreter [included]. Basic [non-FPU, non-MMX, etc] x86 instructions are supported. Work is currently being done on adding higher-level disassembly[/decompilation] features. As of .08, address naming, subroutine recognition, xrefs, and library imports are functional. Strings are 'in the works.' Documentation is sparse. | | File Size: | 1825231 | | Last Modified: | Apr 15 20:53:26 2001 |
| MD5 Checksum: | 12d9b2989602954eb53a2ed64f701623 |
|
| /// File Name: |
PaiMei-1.0-REV88.zip |
Description:
|
PaiMei is a reverse engineering framework consisting of multiple extensible components. The goal of the framework is to reduce the time from "idea" to prototype to a matter of minutes, instead of days. PaiMei is written entirely in Python and exposes at the highest level a debugger, a graph based binary abstraction and a set of utilities for accomplishing various repetitive tasks. The framework can essentially be thought of as a reverse engineer's swiss army knife and has already been proven effective for a wide range of both static and dynamic tasks such as: fuzzer assistance, code coverage tracking, data flow tracking and more.
| | Author: | Pedram Amini | | Homepage: | http://www.openrce.org/ | | Related File: | RECON2006-Amini.zip | | File Size: | 1793904 | | Last Modified: | Jul 26 09:44:58 2006 |
| MD5 Checksum: | c6c346b11574ff33f6fd33bb5b843f60 |
|
| /// File Name: |
bastard_src-0.10.tgz |
Description:
|
A disassembler written for disassembly of x86 ELF targets on Linux (other file formats/CPUs can be 'plugged in'). Written as a backend or engine -- the UI is a command line; support for controlling the disassembler via pipes or FIFOs is provided. Note that this disassembler does not rely on libopcodes to do its disassembly; rather, the 'libi386' plugin is a standard .so that can be reused by other projects.
| | Homepage: | http://bastard.sourceforge.net | | Changes: | Added extensions (modules for CPU, assembler, source language, and also plugins). Wrote a basic Tk frontend, and added support for structures. | | File Size: | 1206277 | | Last Modified: | Sep 3 23:12:14 2001 |
| MD5 Checksum: | d9da18ea56712f37e641bda4019cea79 |
|
| /// File Name: |
bastard-0.14.tgz |
Description:
|
A disassembler written for disassembly of x86 ELF targets on Linux (other file formats/CPUs can be 'plugged in'). Written as a backend or engine -- the UI is a command line; support for controlling the disassembler via pipes or FIFOs is provided. Note that this disassembler does not rely on libopcodes to do its disassembly; rather, the 'libi386' plugin is a standard .so that can be reused by other projects.
| | Homepage: | http://bastard.sourceforge.net | | Changes: | Bugs in the disassembler (disp32, 0x0F bugs) have been fixed. A GUI frontend has been added to the main Makefile, and autogen/configure has been replaced with more simple, more reliable Makefiles. | | File Size: | 1186234 | | Last Modified: | Dec 9 05:23:07 2001 |
| MD5 Checksum: | b3ccebb3fab7124cfd58ecf43782c7c2 |
|
| /// File Name: |
procshow-1.0.tar.gz |
Description:
|
Procshow is a tool to analyze live processes. It shows ELF information as objdump, nm, readelf, etc but using a file in a runtime state. It helps an end user learn about a process, detect anomalies, backdoors, and holds various other uses.
| | Author: | zb0, cuco | | Homepage: | http://procshow.whatever.org.ar | | File Size: | 1094726 | | Last Modified: | Oct 9 08:01:49 2003 |
| MD5 Checksum: | a289e7404f6725f20f3d49406b4b0660 |
|
| /// File Name: |
gvd-1.0.1-linux.gz |
Description:
|
GVD is a general purpose graphical debugger frontend. It features advanced data display and visualization capabilities, and allows the debugging of multi-process/multi-threaded applications in the same debugging session. GVD works with native and cross-debuggers and can handle several languages in the same debugging session and the same application. C and Ada are supported. GVD can run on a host different from the machine where the debugger is running and provides friendly support for cross-debuggers (VxWorks, Lynx, etc.). For instance, you can use Linux or Windows to debug an application running on a Power PC board with a debugger running on a Sun workstation.
| | Homepage: | http://libre.act-europe.fr | | File Size: | 1080416 | | Last Modified: | Dec 2 21:47:55 2000 |
| MD5 Checksum: | d5a4f12782f729048d9b1af98f4725e9 |
|
| /// File Name: |
valgrind-2.0.0.tar.bz2 |
Description:
|
Valgrind is a GPL'd tool to help you find memory-management problems in your programs. When a program is run under Valgrind's supervision, all reads and writes of memory are checked, and calls to malloc/new/free/delete are intercepted. You can use it to debug most dynamically linked ELF x86 executable, without modification, recompilation, or anything. If you want, Valgrind can start GDB and attach it to your program at the point(s) where errors are detected, so that you can poke around and figure out what was going on at the time.
| | Author: | Nick Nethercote | | Homepage: | http://valgrind.kde.org | | File Size: | 710902 | | Last Modified: | Nov 21 20:04:02 2003 |
| MD5 Checksum: | 1f6a90d0ca494fb75eaeef498e8252b5 |
|
| /// File Name: |
fenris-0.2.tgz |
Description:
|
Fenris is a multipurpose tracer, stateful analyzer and partial decompiler intended to simplify bug tracking, security audits, code, algorithm, protocol analysis and computer forensics by providing a structural program trace, general information about internal constructions, execution path, memory operations, I/O, conditional expression info, and much more. A small demonstration how this tool works can be found here.
| | Author: | Michal Zalewski | | Homepage: | http://razor.bindview.com/tools/fenris/ | | Changes: | Many fixes, new fingerprints, op5ionw and several optimizations. | | File Size: | 627018 | | Last Modified: | May 15 07:06:56 2002 |
| MD5 Checksum: | 24ee1e381afc257d01778820be79d88d |
|
| /// File Name: |
biew-520.tar.bz2 |
Description:
|
Biew is Binary vIEWer with built-in editor for binary, hexadecimal and disassembler modes. It contains a PentiumIII/K7Athlon/Cyrix-M2 disassembler, full preview of MZ, NE, PE, LE, LX, DOS.SYS, NLM, arch, ELF, a.out, coff32, PharLap, and rdoff executable formats, a code guider, a text viewer with russian codepages support, and many other features.
| | Author: | Nick Kurshev | | Homepage: | http://biew.sourceforge.net | | Changes: | A Pentium IV disassembler, improved documentation, and lots of various enhancements and bugfixes. | | File Size: | 424983 | | Last Modified: | Oct 31 00:38:49 2000 |
| MD5 Checksum: | fa1a992ce9abd7538e7fc4ac23023c4d |
|
| /// File Name: |
kdbg-1.1.3.tar.gz |
Description:
|
KDbg is a graphical user interface to gdb, the GNU debugger. It provides an intuitive interface for setting breakpoints, inspecting variables, and stepping through code.
| | Homepage: | http://members.telecom.at/~johsixt/kdbg.html | | Changes: | This is the newest developmental version. | | File Size: | 374115 | | Last Modified: | Jun 1 06:37:00 2000 |
| MD5 Checksum: | d88148a3c5fd93d5245e6abd34b0206f |
|
| /// File Name: |
biew511.tar.bz2 |
Description:
|
Biew is Binary vIEWer with built-in editor for binary, hexadecimal and disassembler modes. It contains a PentiumIII/K7Athlon/Cyrix-M2 disassembler, full preview of MZ, NE, PE, LE, LX, DOS.SYS, NLM, arch, ELF, a.out, coff32, PharLap, and rdoff executable formats, a code guider, a text viewer with russian codepages support, and many other features.
| | Author: | Nick Kurshev | | Homepage: | http://biew.sourceforge.net | | Changes: | Bugfixes, minor changes and optimizations, and a Watcom C and DOS/4GW port. | | File Size: | 364990 | | Last Modified: | Jun 24 02:19:40 2000 |
| MD5 Checksum: | 4bfc1ad694c81e85739608366d071acc |
|
| /// File Name: |
rec16lx.zip |
Description:
|
REC is a portable reverse engineering decompiler which reads an executable file and attempts to produce a C-like representation of the code and data used to build it. It can decompile 386, 68k, PowerPC, and MIPS R3000 programs and recognizes the following file formats: ELF (System V Rel. 4, e.g. Linux, Solaris, etc.), COFF (System V Rel. 3.x, e.g. SCO), PE (Win32 .EXE and .DLL for Microsoft Windows 95 and NT), AOUT (BSD derivatives, e.g. SunOS 4.x), Playstation PS-X (MIPS target only), and raw binary data (via .cmd files).
| | Homepage: | http://www.backerstreet.com/rec/rec.htm | | File Size: | 311993 | | Last Modified: | Dec 14 23:46:32 2003 |
| MD5 Checksum: | a347303252e10cba03e8f0d29d91d33d |
|
| /// File Name: |
biew503.tar.bz2 |
Description:
|
Biew is Binary vIEWer with built-in editor for binary, hexadecimal and disassembler modes. It contains a PentiumIII/K7Athlon/Cyrix-M2 disassembler, full preview of MZ, NE, PE, LE, LX, DOS.SYS, NLM, arch, ELF, a.out, coff32, PharLap, and rdoff executable formats, a code guider, a text viewer with russian codepages support, and many other features.
| | Author: | Nick Kurshev | | Homepage: | http://biew.sourceforge.net | | Changes: | Mouse reporting on xterms, eterm improvements, and bug fixes. | | File Size: | 278725 | | Last Modified: | Apr 1 05:05:00 2000 |
| MD5 Checksum: | b7897ccd5e64bb0c3b63c00ca2e8eb28 |
|
| /// File Name: |
elfsh-0.5b6-pre1-LINUX.tgz |
Description:
|
Unavailable.
| | File Size: | 266678 | | Last Modified: | Mar 27 09:49:20 2003 |
| MD5 Checksum: | fe9f3735511c7910cf35b7c2a9408ace |
|
| /// File Name: |
biew501.tar.bz2 |
Description:
|
Biew is Binary vIEWer with built-in editor for binary, hexadecimal and disassembler modes. It contains a PentiumIII/K7Athlon/Cyrix-M2 disassembler, full preview of MZ, NE, PE, LE, LX, DOS.SYS, NLM, arch, ELF, a.out, coff32, PharLap, and rdoff executable formats, a code guider, a text viewer with russian codepages support, and many other features.
| | Author: | Nick Kurshev | | Homepage: | http://biew.sourceforge.net | | File Size: | 260701 | | Last Modified: | Mar 4 03:56:21 2000 |
| MD5 Checksum: | b2ce070901ee1e0b2949a595bf3c087f |
|
| /// File Name: |
biew500.tar.bz2 |
Description:
|
The best of the Linux hexeditors, with integrated assembler and disassembler.
| | Author: | Nick Kurshev | | Homepage: | http://biew.sourceforge.net | | File Size: | 259820 | | Last Modified: | Feb 17 21:55:18 2000 |
| MD5 Checksum: | e1b4b6b7f3a83ed1e28c3396d33b3a2e |
|
| /// File Name: |
elfsh-0.43a.tgz |
Description:
|
Unavailable.
| | File Size: | 171524 | | Last Modified: | Jun 3 07:56:31 2002 |
| MD5 Checksum: | 49dee4f85a2bf8fd8599fdd7ae32bb6f |
|
| /// File Name: |
sdebug.tgz |
Description:
|
Segment debugger is an ELF binary segment scanner with a console ncurses interface. its currently in alpha stages and features only stack phrase, and double word searching.
| | Author: | Sector X | | Homepage: | http://xorteam.cjb.net | | File Size: | 162871 | | Last Modified: | Nov 10 22:35:51 2000 |
| MD5 Checksum: | d9d6a874652a1b7427ba07f6df3c257f |
|
| /// File Name: |
elfsh-0.5b8-linux.tgz |
Description:
|
Unavailable.
| | File Size: | 145327 | | Last Modified: | May 23 17:54:49 2003 |
| MD5 Checksum: | 40109b53481ca28c7f708834fe19e765 |
|
| /// File Name: |
elfsh-0.51b3-portable.tgz |
Description:
|
Elf Shell v0.51b3-portable is an automated reverse engineering tool with read/write capability for the ELF format. Sophisticated output with cross references using .got, .ctors, .dtors, .symtab, .dynsym, .dynamic, .rel.* and many other with an integrated hexdump. Designed for Linux. All calls encapsulated in libelfsh.a, so the elfsh API is really reusable.
| | Author: | mayhem | | Homepage: | http://elfsh.devhell.org/ | | Changes: | It works on Linux, NetBSD, FreeBSD, and Solaris for the INTEL and SPARC architectures. It provides ET_REL injection into ET_EXEC for both arch, and INTEL control flow graphs, as well as a lot of new improvements, as featured lastly in The Cerberus ELF interface article in phrack #61. | | File Size: | 136679 | | Last Modified: | Sep 13 08:32:48 2003 |
| MD5 Checksum: | e8073d475e82dc911a7ebfa6f2567719 |
|
| /// File Name: |
elfsh-0.39b.tgz |
Description:
|
Unavailable.
| | File Size: | 136419 | | Last Modified: | Mar 4 18:00:48 2002 |
| MD5 Checksum: | 5490f25e1c75932334959b5ce29c3634 |
|
| /// File Name: |
hypersrc-3.0.3.tar.gz |
Description:
|
hypersrc is a GUI program for browsing source code, which uses GTK+. It provides a list widget containing sorted source code tags. A programmer can click a tag to hyperlink to a particular tagged line in a source code file. Screenshot here.
| | Author: | Jim Brooks | | Homepage: | http://www.jimbrooks.org/web/hypersrc/hypersrc.html | | Changes: | Hypersrc now displays a tree view of function call relationships in the source code. | | File Size: | 116305 | | Last Modified: | Jan 25 08:56:14 2001 |
| MD5 Checksum: | 5650f70aabbe0c882108300eaa8d9248 |
|
| /// File Name: |
elfsh-0.43b-portable.tgz |
Description:
|
Elf Shell v0.43b-portable is an automated reverse engineering tool with read/write capability for the ELF format. Sophisticated output with cross references using .got, .ctors, .dtors, .symtab, .dynsym, .dynamic, .rel.* and many other with an integrated hexdump. Designed for Linux. All calls encapsulated in libelfsh.a, so the elfsh API is really reusable. Sample output here.
| | Author: | Mayhem | | Homepage: | http://devhell.org/~mayhem | | Changes: | Bigger testsuite, documentation improved, minor bugs and typo fixed, Improved portability - still working on Redhat, Debian, Slackware Linux, NetBSD and FreeBSD current. | | File Size: | 101978 | | Last Modified: | Jul 6 10:00:45 2002 |
| MD5 Checksum: | 328d567e1f0f6c0411ccf51c5ea57a4f |
|
|
|
|
|
![.:[ packet storm ]:.](/images/ps-ani.gif)
