Grow your team on GitHub
GitHub is home to over 28 million developers working together. Join them to grow your own development teams, manage permissions, and collaborate on projects.Sign up
Concolic tracer to detect flag leaks and create Type-2 POVs.
QEMU modified to run CGC binaries.
POV templates and compilation support for CGC binaries.
POV simulation for CGC.
Scaffolding for actually launching the various analysis, exploitation, and patching tasks.
pykube fork with features required for mechaphish
Fledgling human interaction component for the CGC, written under fire at DEFCON.
Server for the CGC game API. Forked from DARPA, with lots of bells and whistles added
The central scheduler component of the Mechanical Phish.
Targeted patcher for CGC binaries. CGrex was used only during the CGC qualifier event, and is OBSOLETE. For the CFE, we used patcherex (github.com/shellphish/patcherex).
Semantic-aware exploit reconstruction techniques with meta fuzzer integration.
Network listener for the CGC.
Documentation for the Mechanical Phish.
Submission decision component for the Mechanical Phish.
Some common util functionality that didn't fit anywhere else.
API interaction component for the Mechanical Phish.
Scaffolding for workers that require the use of the CGC DECREE VM (i.e., final POV testing).
Component that listens to network input and injects it into the Mechanical Phish.
AFL, modified to support multi-CB challenge sets for CGC.
A simulator to help us think about strategies.
Database ORM models for the Mechanical Phish.
Our backup exploitation technique: fuzzing for POVs!
a small, expressive orm -- supports postgresql, mysql and sqlite