Repositories list

• regstr

  Public

  FFRI/regstr’s past year of commit activity
  Sample WinDbg command & UI extensions.

  windbgwindbg-extension

  windbgwindbg-extension

  C#

  •

  Apache License 2.0

  •00 forks•55 stars•00 issues•00 pull requests•Updated Mar 30, 2026Mar 30, 2026

• XPRSecretConfigs

  Public

  FFRI/XPRSecretConfigs’s past year of commit activity
  XProtect Remediator "secret" configurations

  Apache License 2.0

  •11 fork•1212 stars•00 issues•00 pull requests•Updated Nov 17, 2025Nov 17, 2025

• binja-missinglink

  Public

  FFRI/binja-missinglink’s past year of commit activity
  A Binary Ninja plugin for analyzing indirect branch targets in x86_64 binaries.

  Python

  •

  Apache License 2.0

  •11 fork•22 stars•00 issues•00 pull requests•Updated Nov 17, 2025Nov 17, 2025

• binja-xpr-analyzer

  Public

  FFRI/binja-xpr-analyzer’s past year of commit activity
  A Binary Ninja plugin for analyzing XProtect Remediator binaries.

  Python

  •

  Apache License 2.0

  •11 fork•55 stars•00 issues•00 pull requests•Updated Nov 6, 2025Nov 6, 2025

• binja-swift-analyzer

  Public
  A Binary Ninja plugin for analyzing Swift binaries

  Python

  •

  Apache License 2.0

  •00 forks•2727 stars•00 issues•00 pull requests•Updated Oct 20, 2025Oct 20, 2025

• PoC-public

  Public
  Python

  •

  Apache License 2.0

  •11 fork•3131 stars•00 issues•00 pull requests•Updated Oct 14, 2025Oct 14, 2025

• FFRI-NFLabs-Cybersecurity-Challenge-2025-Public

  Public
  FFRI×NFLabs Cybesecurity Challenge 2025の公式リポジトリです。

  PHP

  •

  Apache License 2.0

  •11 fork•11 star•00 issues•00 pull requests•Updated Oct 7, 2025Oct 7, 2025

• CVE-2025-24204

  Public

  FFRI/CVE-2025-24204’s past year of commit activity
  PoC and technical details of CVE-2025-24204

  Python

  •

  Apache License 2.0

  •1717 forks•106106 stars•00 issues•00 pull requests•Updated Oct 7, 2025Oct 7, 2025

• XPRTestSuite

  Public

  FFRI/XPRTestSuite’s past year of commit activity
  A collection of scripts and documents to help future XProtect Remediator (XPR) research

  C++

  •

  Apache License 2.0

  •11 fork•1212 stars•00 issues•00 pull requests•Updated Oct 2, 2025Oct 2, 2025

• ShadeBIOS

  Public
  PoC code of Shade BIOS (stripped) presented at Black Hat USA 2025

  C

  •

  Apache License 2.0

  •88 forks•6666 stars•00 issues•00 pull requests•Updated Jul 16, 2025Jul 16, 2025

• ShowProvenanceInfo

  Public
  A tool to show the provenance information of a file or directory

  Swift

  •

  Apache License 2.0

  •00 forks•77 stars•00 issues•00 pull requests•Updated Jul 10, 2025Jul 10, 2025

• RemediationBuilderDSLSpec

  Public
  A reverse-engineered RemediationBuilder DSL specification

  Swift

  •

  Apache License 2.0

  •00 forks•22 stars•00 issues•00 pull requests•Updated Jul 10, 2025Jul 10, 2025

• OpenRemediationBuilder

  Public
  A Swift reimplementation of the RemediationBuilder DSL

  Swift

  •

  Apache License 2.0

  •00 forks•11 star•00 issues•00 pull requests•Updated Jul 10, 2025Jul 10, 2025

• ProvenanceChecker

  Public
  A simple tool to check how provenance sandbox works

  C

  •

  Apache License 2.0

  •00 forks•11 star•00 issues•00 pull requests•Updated Jul 10, 2025Jul 10, 2025

• FEXRD

  Public
  Feature Extractor for FFRI Dataset

  feature-extractorffri-dataset

  feature-extractorffri-dataset

  Python

  •

  Apache License 2.0

  •44 forks•77 stars•00 issues•00 pull requests•Updated Aug 5, 2024Aug 5, 2024

• FEXRD-test-files

  Public
  Test files for FEXRD

  Apache License 2.0

  •11 fork•00 stars•00 issues•00 pull requests•Updated Aug 5, 2024Aug 5, 2024

• orom-backdoor-research

  Public
  PoC code and tools for Black Hat USA 2024

  C

  •

  Apache License 2.0

  •33 forks•2424 stars•00 issues•00 pull requests•Updated Aug 1, 2024Aug 1, 2024

• ffridataset-scripts

  Public
  Make datasets like FFRI Dataset

  Python

  •

  Apache License 2.0

  •44 forks•1313 stars•22 issues•11 pull request•Updated Jul 23, 2024Jul 23, 2024

• pypeid

  Public
  Yet another implementation of PEiD with yara-python

  Python

  •

  Apache License 2.0

  •22 forks•77 stars•22 issues•00 pull requests•Updated Jun 17, 2024Jun 17, 2024

• LIEF

  Public
  LIEF - Library to Instrument Executable Formats

  C++

  •

  Apache License 2.0

  •725725 forks•00 stars•00 issues•00 pull requests•Updated Apr 23, 2024Apr 23, 2024

• eolh

  Public
  Bring Security Observability to Windows Containers

  Go

  •

  Apache License 2.0

  •493493 forks•22 stars•00 issues•00 pull requests•Updated Apr 2, 2024Apr 2, 2024

• eolh-docs

  Public
  HTML

  •00 forks•00 stars•00 issues•00 pull requests•Updated Apr 2, 2024Apr 2, 2024

• ProjectChameleon

  Public archive
  Analyzing CHPEV2 ARM64EC and ARM64X

  Python

  •

  Apache License 2.0

  •99 forks•5454 stars•11 issue•11 pull request•Updated Nov 2, 2023Nov 2, 2023

• XtacPoisoning

  Public
  PoC code of XTA Cache Poisoning presented at Black Hat Asia 2023

  C++

  •

  Apache License 2.0

  •11 fork•44 stars•00 issues•00 pull requests•Updated May 10, 2023May 10, 2023

• AotPoisoning

  Public
  PoC code of AOT poisoning presented at Black Hat Asia 2023

  Python

  •

  Apache License 2.0

  •22 forks•1212 stars•00 issues•00 pull requests•Updated May 10, 2023May 10, 2023

• radare2

  Public archive
  UNIX-like reverse engineering framework and command-line toolset

  radare2binary-translationradare2-plugin+ 2

  radare2binary-translationradare2-pluginwindows10-armxta-cache

  C

  •

  GNU Lesser General Public License v3.0

  •3.2k3.2k forks•88 stars•00 issues•00 pull requests•Updated Feb 17, 2023Feb 17, 2023

• JSAC2023-GolangMalwareAnalysis

  Public
  Scripts introduced in JSAC2023 presentation on analysis of Go language malware

  Python

  •

  Apache License 2.0

  •22 forks•77 stars•00 issues•00 pull requests•Updated Jan 24, 2023Jan 24, 2023

• magne-flame

  Public archive
  A fast and extensible fuzzing framework

  Rust

  •

  Apache License 2.0

  •00 forks•22 stars•00 issues•44 pull requests•Updated Jun 6, 2022Jun 6, 2022

• ProjectChampollion

  Public archive
  Reverse engineering Rosetta 2 on M1 Mac

  macosreverse-engineeringmacosx+ 3

  macosreverse-engineeringmacosxghidramacos-m1rosetta2

  Python

  •

  Apache License 2.0

  •2525 forks•429429 stars•11 issue•00 pull requests•Updated Aug 3, 2021Aug 3, 2021

• visualize-package

  Public archive
  Compare npm packages by their development momentum

  TypeScript

  •

  Apache License 2.0

  •22 forks•22 stars•11 issue•11 pull request•Updated May 7, 2021May 7, 2021