ZZipLib is a library based on zlib for accessing zip files.

Ming is a Flash (SWF) output library. It can be used from PHP, Perl, Ruby, Python, C, C++ and Java.

The JasPer Project is an initiative to provide a reference implementation of the codec specified in the JPEG-2000 Part-1 standard (i.e., ISO/IEC 15444-1).

GNU Coreutils package includes all of the basic command-line tools that are expected in a POSIX system, excluding shell. This package is the union of the GNU fileutils, sh-utils, and textutils packages. Most of these tools offer extended functionality beyond that which is outlined in the POSIX standard.

Libtiff provides support for the Tag Image File Format (TIFF), a format used for storing image data. Included are a library, libtiff, for reading and writing TIFF and a small collection of tools for doing simple manipulations of TIFF images.

GNU Coreutils package includes all of the basic command-line tools that are expected in a POSIX system, excluding shell. This package is the union of the GNU fileutils, sh-utils, and textutils packages. Most of these tools offer extended functionality beyond that which is outlined in the POSIX standard.

Z3 is a theorem prover and satisfiability modulo theories (SMT) solver. It provides a C/C++ API, as well as Python bindings.

Fuzzy SAT is an approximate solver that borrows ideas from the fuzzing domain. It is tailored to the symbolic expressions generated by concolic engines and can replace classic SMT solvers in this context. By analyzing the expressions contained in symbolic queries, Fuzzy SAT performs informed mutations to possibly generate new valuable inputs.

QEMU is a generic machine emulator and virtualizer.

When used as a machine emulator, QEMU can run OSes and programs made for one machine (e.g. an ARM board) on a different machine---e.g., your own PC. By using dynamic translation, it achieves very good performance.

When used as a virtualizer, QEMU achieves near native performances by executing the guest code directly on the host CPU. QEMU supports virtualization when executing under the Xen hypervisor or using the KVM kernel module in Linux. When using KVM, QEMU can virtualize x86, server and embedded PowerPC, and S390 guests.

QEMU is a generic machine emulator and virtualizer.

When used as a machine emulator, QEMU can run OSes and programs made for one machine (e.g. an ARM board) on a different machine---e.g., your own PC. By using dynamic translation, it achieves very good performance.

When used as a virtualizer, QEMU achieves near native performances by executing the guest code directly on the host CPU. QEMU supports virtualization when executing under the Xen hypervisor or using the KVM kernel module in Linux. When using KVM, QEMU can virtualize x86, server and embedded PowerPC, and S390 guests.

Evocatio is a bug analyzer built on top of AFL++ and AddressSanitizer. It automatically discovers a bug's capabilities: analyzing a crashing test case (i.e., an input exposing a bug) to understand the full extent of how an attacker can exploit a bug.

Evocatio leverages a capability-guided fuzzer to efficiently uncover new bug capabilities (rather than only generating a single crashing test case for a given bug, as a traditional greybox fuzzer does).

AFLplusplus is a security-oriented fuzzer that employs a novel type of compile-time instrumentation and genetic algorithms to automatically discover clean, interesting test cases that trigger new internal states in the targeted binary. This substantially improves the functional coverage for the fuzzed code. The compact synthesized corpora produced by the tool are also useful for seeding other, more labor- or resource-intensive testing regimes down the road. It is a fork of American Fuzzy Lop fuzzer and features:

• A more recent qemu version.

• More algorithms like collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, etc.

FUZZOLIC is a concolic executor based on QEMU.

It can instrument binary programs at runtime in order to build symbolic expressions and queries. To reduce the runtime overhead and improve accuracy of the queries, it devises three analysis modes that are dynamically enabled during the program execution based on the running context.

Moreover, differently from other concolic executors, FUZZOLIC runs the solver component, which reasons over the symbolic queries generated when analyzing a program, inside another process to reduce execution interferences that may be caused by the solver and negatively affect the analyzed application.

AFLplusplus is a security-oriented fuzzer that employs a novel type of compile-time instrumentation and genetic algorithms to automatically discover clean, interesting test cases that trigger new internal states in the targeted binary. This substantially improves the functional coverage for the fuzzed code. The compact synthesized corpora produced by the tool are also useful for seeding other, more labor- or resource-intensive testing regimes down the road. It is a fork of American Fuzzy Lop fuzzer and features:

• A more recent qemu version.

• More algorithms like collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, etc.

Dyninst integration for AFL++

E9Patch is a static binary rewriting tool for x86-64 ELF binaries. E9Patch is:

• Scalable: E9Patch can reliably rewrite large/complex binaries including web browsers (>100MB in size).

• Compatible: The rewritten binary is a drop-in replacement of the original, with no additional dependencies.

• Fast: E9Patch can rewrite most binaries in a few seconds.

• Low Overheads: Both performance and memory.

• Programmable: E9Patch is designed so that it can be easily integrated into other projects.

Taosc generates emergent fixes for binaries.

Pacfix systhesizes predicate expressions for program repair from values in possitive and negative examples using a PAC learning algorithm.

Rust programming language toolchain

Liber is a template parser for Scheme List to HTML

A web framework for Igropyr

Pattern matching in Chez Scheme

Scheme's commonly used small functions

Igropyr is a single-threaded server based on libuv asynchronous events.