I'm Robin - I am Research Lead & Security Researcher @ Epsilon Sec. You can find below some projects I am developing or contributing to.
Fuzzing / Symbolic Execution:
- PASTIS: Collaborative fuzzing infrastructure. It leverages AFL++, Honggfuzz and TritonDSE (thus greybox and whitebox fuzzing) for program coverage and bug discovery.
- TritonDSE: Symbolic Execution engine based on Triton built for automatic program coverage exploration. It has been design to encompass multiple program analysis use-cases.
Deobfuscation / Program Synthesis:
- Qsynthesis: Program synthesizer geared for deobfuscation. It leverages, Triton for symbolic execution, and also LevelDB, Z3llvmlite, capstone
- idasec: (unmaintained anymore), opaque predicate deobfuscation, trace generation via an IDA Pro plugin (using Binsec)
Diffing / Firmware Analysis: Portal
- QBinDiff: Binary differ, based on Network Alignment and Belief Propagation
- python-bindiff: Python wrapper and API for Bindiff
- python-binexport: Python wrapper and API for BinExport
- Pyrrha: Firmware cartography (using Numbat
Binary Analysis / Scripting:
- Quokka: Binary exporter (for IDA, Ghidra, Binary Ninja), and Python API for binary analysis
- idascript: IDA Pro scripting layer (for scripting parrallelization)
Other:
- pydimacs, simple module to manipule CNF (Conjonctive Normal Form), graphs using Z3 Python API
⬅️ just here
- Our Pwn2Own journey against time and randomnessPt.2
- PASTIS: for Distributed Ensemble Fuzzing
- QBinDiff: A modular diffing toolkit
- Introducing TritonDSE for Dynamic Symbolic Execution
- A Brief Overview of Auditing Polkadot XCMv2
- Audit of the MimbleWimble Integration Inside Litecoin
- Remote Denial-of-Service on CycloneTCP : CVE-2021-26788
- An Experimental Study of Different Binary Exporters
