Sitelet https://github.com/orgs/FFRI/repositories
Skip to content

@FFRI FFRI Security, Inc.

All

    Repositories list

    35 repositories

    • regstr

      Public
      Sample WinDbg command & UI extensions.
      windbgwindbg-extension
      windbgwindbg-extension
      C#
      •
      Apache License 2.0
      •0•15•0•0•Updated Sep 28, 2026Sep 28, 2026

    • ffridataset-scripts

      Public
      Make datasets like FFRI Dataset
      Python
      •
      Apache License 2.0
      •4•14•2•1•Updated Aug 28, 2026Aug 28, 2026

    • XPRSecretConfigs

      Public
      XProtect Remediator "secret" configurations
      Apache License 2.0
      •1•12•0•0•Updated Nov 17, 2025Nov 17, 2025

    • binja-missinglink

      Public
      A Binary Ninja plugin for analyzing indirect branch targets in x86_64 binaries.
      Python
      •
      Apache License 2.0
      •2•2•0•1•Updated Nov 17, 2025Nov 17, 2025

    • binja-xpr-analyzer

      Public
      A Binary Ninja plugin for analyzing XProtect Remediator binaries.
      Python
      •
      Apache License 2.0
      •1•6•0•0•Updated Nov 6, 2025Nov 6, 2025

    • binja-swift-analyzer

      Public
      A Binary Ninja plugin for analyzing Swift binaries
      Python
      •
      Apache License 2.0
      •1•28•0•0•Updated Oct 20, 2025Oct 20, 2025

    • PoC-public

      Public
      Python
      •
      Apache License 2.0
      •1•32•0•0•Updated Oct 14, 2025Oct 14, 2025

    • FFRI-NFLabs-Cybersecurity-Challenge-2025-Public

      Public
      FFRI×NFLabs Cybesecurity Challenge 2025の公式リポジトリです。
      PHP
      •
      Apache License 2.0
      •1•2•0•0•Updated Oct 7, 2025Oct 7, 2025

    • CVE-2025-24204

      Public
      PoC and technical details of CVE-2025-24204
      Python
      •
      Apache License 2.0
      •17•113•0•0•Updated Oct 7, 2025Oct 7, 2025

    • XPRTestSuite

      Public
      A collection of scripts and documents to help future XProtect Remediator (XPR) research
      C++
      •
      Apache License 2.0
      •1•12•0•0•Updated Oct 2, 2025Oct 2, 2025

    • ShadeBIOS

      Public
      PoC code of Shade BIOS (stripped) presented at Black Hat USA 2025
      C
      •
      Apache License 2.0
      •8•68•0•0•Updated Jul 16, 2025Jul 16, 2025

    • ShowProvenanceInfo

      Public
      A tool to show the provenance information of a file or directory
      Swift
      •
      Apache License 2.0
      •0•7•0•0•Updated Jul 10, 2025Jul 10, 2025

    • RemediationBuilderDSLSpec

      Public
      A reverse-engineered RemediationBuilder DSL specification
      Swift
      •
      Apache License 2.0
      •0•2•0•0•Updated Jul 10, 2025Jul 10, 2025

    • OpenRemediationBuilder

      Public
      A Swift reimplementation of the RemediationBuilder DSL
      Swift
      •
      Apache License 2.0
      •0•1•0•0•Updated Jul 10, 2025Jul 10, 2025

    • ProvenanceChecker

      Public
      A simple tool to check how provenance sandbox works
      C
      •
      Apache License 2.0
      •0•2•0•0•Updated Jul 10, 2025Jul 10, 2025

    • FEXRD

      Public
      Feature Extractor for FFRI Dataset
      feature-extractorffri-dataset
      feature-extractorffri-dataset
      Python
      •
      Apache License 2.0
      •4•7•0•0•Updated Aug 5, 2024Aug 5, 2024

    • FEXRD-test-files

      Public
      Test files for FEXRD
      Apache License 2.0
      •1•0•0•0•Updated Aug 5, 2024Aug 5, 2024

    • orom-backdoor-research

      Public
      PoC code and tools for Black Hat USA 2024
      C
      •
      Apache License 2.0
      •3•26•0•0•Updated Aug 1, 2024Aug 1, 2024

    • pypeid

      Public
      Yet another implementation of PEiD with yara-python
      Python
      •
      Apache License 2.0
      •2•6•2•0•Updated Jun 17, 2024Jun 17, 2024

    • LIEF

      Public
      LIEF - Library to Instrument Executable Formats
      C++
      •
      Apache License 2.0
      •751•0•0•0•Updated Apr 23, 2024Apr 23, 2024

    • eolh

      Public
      Bring Security Observability to Windows Containers
      Go
      •
      Apache License 2.0
      •512•2•0•0•Updated Apr 2, 2024Apr 2, 2024

    • eolh-docs

      Public
      HTML
      •0•0•0•0•Updated Apr 2, 2024Apr 2, 2024

    • ProjectChameleon

      Public archive
      Analyzing CHPEV2 ARM64EC and ARM64X
      Python
      •
      Apache License 2.0
      •9•57•1•1•Updated Nov 2, 2023Nov 2, 2023

    • XtacPoisoning

      Public
      PoC code of XTA Cache Poisoning presented at Black Hat Asia 2023
      C++
      •
      Apache License 2.0
      •1•4•0•0•Updated May 10, 2023May 10, 2023

    • AotPoisoning

      Public
      PoC code of AOT poisoning presented at Black Hat Asia 2023
      Python
      •
      Apache License 2.0
      •2•12•0•0•Updated May 10, 2023May 10, 2023

    • radare2

      Public archive
      UNIX-like reverse engineering framework and command-line toolset
      radare2binary-translationradare2-plugin
      radare2binary-translationradare2-pluginwindows10-armxta-cache
      C
      •
      GNU Lesser General Public License v3.0
      •3.3k•9•0•0•Updated Feb 17, 2023Feb 17, 2023

    • JSAC2023-GolangMalwareAnalysis

      Public
      Scripts introduced in JSAC2023 presentation on analysis of Go language malware
      Python
      •
      Apache License 2.0
      •2•7•0•0•Updated Jan 24, 2023Jan 24, 2023

    • magne-flame

      Public archive
      A fast and extensible fuzzing framework
      Rust
      •
      Apache License 2.0
      •0•2•0•4•Updated Jun 6, 2022Jun 6, 2022

    • ProjectChampollion

      Public archive
      Reverse engineering Rosetta 2 on M1 Mac
      macosreverse-engineeringmacosx
      macosreverse-engineeringmacosxghidramacos-m1rosetta2
      Python
      •
      Apache License 2.0
      •25•437•1•0•Updated Aug 3, 2021Aug 3, 2021

    • visualize-package

      Public archive
      Compare npm packages by their development momentum
      TypeScript
      •
      Apache License 2.0
      •2•2•1•1•Updated May 7, 2021May 7, 2021
    ProTip! When viewing an organization's repositories, you can use the props. filter to filter by custom property.