├── LICENSE ├── README.md ├── centrifuge ├── __pycache__ │ ├── binfile.cpython-36.pyc │ ├── binfile.cpython-37.pyc │ ├── dataID.cpython-37.pyc │ └── datablock.cpython-37.pyc ├── binfile.py ├── datablock.py ├── distributions │ ├── cpu_architectures │ │ ├── AMD64_reference │ │ ├── ARM64_reference │ │ ├── ARMEL_reference │ │ ├── MIPS64EL_reference │ │ ├── MIPSEL_reference │ │ ├── PPC64_reference │ │ ├── PowerPC_reference │ │ ├── SH4_reference │ │ └── i386_reference │ └── data_types │ │ ├── archive │ │ └── readme.txt │ │ ├── machine_code │ │ ├── max_entropy │ │ └── utf8_english └── utils │ └── plotutils.py ├── gallery ├── 1.png ├── 10.png ├── 11.png ├── 12.png ├── 13.png ├── 14.png ├── 15.png ├── 16.png ├── 17.png ├── 18.png ├── 19.png ├── 2.png ├── 3.png ├── 4.png ├── 5.png ├── 6.png ├── 7.png ├── 8.png └── 9.png ├── images ├── approach.png ├── approach_2.png └── approach_3.png ├── notebooks ├── Analyzing Firmware with Centrifuge Example 2.ipynb ├── Analyzing Firmware with Centrifuge.ipynb ├── Analyzing Machine Code Targeting an Usupported Architecture.ipynb ├── CPU Architecture Reference Distributions │ ├── Comparing CPU Architecture Reference Distributions.ipynb │ ├── Exploring Machine Code Byte Value Distributions.ipynb │ └── architectures │ │ ├── AMD64 reference distribution construction.ipynb │ │ ├── ARM64 reference distribution construction.ipynb │ │ ├── ARMEL reference distribution construction.ipynb │ │ ├── MIPS64EL reference distribution construction.ipynb │ │ ├── MIPSEL reference distribution construction.ipynb │ │ ├── PPC64 reference distribution construction.ipynb │ │ ├── PowerPC reference distribution construction.ipynb │ │ ├── SH4 reference distribution construction.ipynb │ │ └── i386 reference distribution construction.ipynb ├── Data Type Reference Distributions │ ├── The Machine Code Reference Distribution.ipynb │ ├── The Max Entropy Reference Distribution.ipynb │ └── The UTF-8 (English) Reference Distribution.ipynb ├── Introduction to Centrifuge.ipynb ├── Using DBSCAN to Cluster File Data.ipynb └── archive │ ├── Analyzing Executable Binaries with DBSCAN.ipynb │ └── readme.txt └── scripts ├── basic_DBSCAN_clustering.py ├── entropy_plot.py ├── entropy_plot_text_section.py ├── identify_clusters.py ├── plot_all_variables.py ├── plot_cluster_cdfs.py ├── plot_two_variables.py ├── readme.txt └── small_elf.py /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/LICENSE -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/README.md -------------------------------------------------------------------------------- /centrifuge/__pycache__/binfile.cpython-36.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/centrifuge/__pycache__/binfile.cpython-36.pyc -------------------------------------------------------------------------------- /centrifuge/__pycache__/binfile.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/centrifuge/__pycache__/binfile.cpython-37.pyc -------------------------------------------------------------------------------- /centrifuge/__pycache__/dataID.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/centrifuge/__pycache__/dataID.cpython-37.pyc -------------------------------------------------------------------------------- /centrifuge/__pycache__/datablock.cpython-37.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/centrifuge/__pycache__/datablock.cpython-37.pyc -------------------------------------------------------------------------------- /centrifuge/binfile.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/centrifuge/binfile.py -------------------------------------------------------------------------------- /centrifuge/datablock.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/centrifuge/datablock.py -------------------------------------------------------------------------------- /centrifuge/distributions/cpu_architectures/AMD64_reference: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/centrifuge/distributions/cpu_architectures/AMD64_reference -------------------------------------------------------------------------------- /centrifuge/distributions/cpu_architectures/ARM64_reference: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/centrifuge/distributions/cpu_architectures/ARM64_reference -------------------------------------------------------------------------------- /centrifuge/distributions/cpu_architectures/ARMEL_reference: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/centrifuge/distributions/cpu_architectures/ARMEL_reference -------------------------------------------------------------------------------- /centrifuge/distributions/cpu_architectures/MIPS64EL_reference: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/centrifuge/distributions/cpu_architectures/MIPS64EL_reference -------------------------------------------------------------------------------- /centrifuge/distributions/cpu_architectures/MIPSEL_reference: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/centrifuge/distributions/cpu_architectures/MIPSEL_reference -------------------------------------------------------------------------------- /centrifuge/distributions/cpu_architectures/PPC64_reference: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/centrifuge/distributions/cpu_architectures/PPC64_reference -------------------------------------------------------------------------------- /centrifuge/distributions/cpu_architectures/PowerPC_reference: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/centrifuge/distributions/cpu_architectures/PowerPC_reference -------------------------------------------------------------------------------- /centrifuge/distributions/cpu_architectures/SH4_reference: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/centrifuge/distributions/cpu_architectures/SH4_reference -------------------------------------------------------------------------------- /centrifuge/distributions/cpu_architectures/i386_reference: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/centrifuge/distributions/cpu_architectures/i386_reference -------------------------------------------------------------------------------- /centrifuge/distributions/data_types/archive/readme.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/centrifuge/distributions/data_types/archive/readme.txt -------------------------------------------------------------------------------- /centrifuge/distributions/data_types/machine_code: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/centrifuge/distributions/data_types/machine_code -------------------------------------------------------------------------------- /centrifuge/distributions/data_types/max_entropy: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/centrifuge/distributions/data_types/max_entropy -------------------------------------------------------------------------------- /centrifuge/distributions/data_types/utf8_english: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/centrifuge/distributions/data_types/utf8_english -------------------------------------------------------------------------------- /centrifuge/utils/plotutils.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/centrifuge/utils/plotutils.py -------------------------------------------------------------------------------- /gallery/1.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/gallery/1.png -------------------------------------------------------------------------------- /gallery/10.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/gallery/10.png -------------------------------------------------------------------------------- /gallery/11.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/gallery/11.png -------------------------------------------------------------------------------- /gallery/12.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/gallery/12.png -------------------------------------------------------------------------------- /gallery/13.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/gallery/13.png -------------------------------------------------------------------------------- /gallery/14.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/gallery/14.png -------------------------------------------------------------------------------- /gallery/15.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/gallery/15.png -------------------------------------------------------------------------------- /gallery/16.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/gallery/16.png -------------------------------------------------------------------------------- /gallery/17.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/gallery/17.png -------------------------------------------------------------------------------- /gallery/18.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/gallery/18.png -------------------------------------------------------------------------------- /gallery/19.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/gallery/19.png -------------------------------------------------------------------------------- /gallery/2.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/gallery/2.png -------------------------------------------------------------------------------- /gallery/3.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/gallery/3.png -------------------------------------------------------------------------------- /gallery/4.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/gallery/4.png -------------------------------------------------------------------------------- /gallery/5.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/gallery/5.png -------------------------------------------------------------------------------- /gallery/6.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/gallery/6.png -------------------------------------------------------------------------------- /gallery/7.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/gallery/7.png -------------------------------------------------------------------------------- /gallery/8.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/gallery/8.png -------------------------------------------------------------------------------- /gallery/9.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/gallery/9.png -------------------------------------------------------------------------------- /images/approach.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/images/approach.png -------------------------------------------------------------------------------- /images/approach_2.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/images/approach_2.png -------------------------------------------------------------------------------- /images/approach_3.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/images/approach_3.png -------------------------------------------------------------------------------- /notebooks/Analyzing Firmware with Centrifuge Example 2.ipynb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/notebooks/Analyzing Firmware with Centrifuge Example 2.ipynb -------------------------------------------------------------------------------- /notebooks/Analyzing Firmware with Centrifuge.ipynb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/notebooks/Analyzing Firmware with Centrifuge.ipynb -------------------------------------------------------------------------------- /notebooks/Analyzing Machine Code Targeting an Usupported Architecture.ipynb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/notebooks/Analyzing Machine Code Targeting an Usupported Architecture.ipynb -------------------------------------------------------------------------------- /notebooks/CPU Architecture Reference Distributions/Comparing CPU Architecture Reference Distributions.ipynb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/notebooks/CPU Architecture Reference Distributions/Comparing CPU Architecture Reference Distributions.ipynb -------------------------------------------------------------------------------- /notebooks/CPU Architecture Reference Distributions/Exploring Machine Code Byte Value Distributions.ipynb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/notebooks/CPU Architecture Reference Distributions/Exploring Machine Code Byte Value Distributions.ipynb -------------------------------------------------------------------------------- /notebooks/CPU Architecture Reference Distributions/architectures/AMD64 reference distribution construction.ipynb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/notebooks/CPU Architecture Reference Distributions/architectures/AMD64 reference distribution construction.ipynb -------------------------------------------------------------------------------- /notebooks/CPU Architecture Reference Distributions/architectures/ARM64 reference distribution construction.ipynb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/notebooks/CPU Architecture Reference Distributions/architectures/ARM64 reference distribution construction.ipynb -------------------------------------------------------------------------------- /notebooks/CPU Architecture Reference Distributions/architectures/ARMEL reference distribution construction.ipynb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/notebooks/CPU Architecture Reference Distributions/architectures/ARMEL reference distribution construction.ipynb -------------------------------------------------------------------------------- /notebooks/CPU Architecture Reference Distributions/architectures/MIPS64EL reference distribution construction.ipynb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/notebooks/CPU Architecture Reference Distributions/architectures/MIPS64EL reference distribution construction.ipynb -------------------------------------------------------------------------------- /notebooks/CPU Architecture Reference Distributions/architectures/MIPSEL reference distribution construction.ipynb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/notebooks/CPU Architecture Reference Distributions/architectures/MIPSEL reference distribution construction.ipynb -------------------------------------------------------------------------------- /notebooks/CPU Architecture Reference Distributions/architectures/PPC64 reference distribution construction.ipynb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/notebooks/CPU Architecture Reference Distributions/architectures/PPC64 reference distribution construction.ipynb -------------------------------------------------------------------------------- /notebooks/CPU Architecture Reference Distributions/architectures/PowerPC reference distribution construction.ipynb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/notebooks/CPU Architecture Reference Distributions/architectures/PowerPC reference distribution construction.ipynb -------------------------------------------------------------------------------- /notebooks/CPU Architecture Reference Distributions/architectures/SH4 reference distribution construction.ipynb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/notebooks/CPU Architecture Reference Distributions/architectures/SH4 reference distribution construction.ipynb -------------------------------------------------------------------------------- /notebooks/CPU Architecture Reference Distributions/architectures/i386 reference distribution construction.ipynb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/notebooks/CPU Architecture Reference Distributions/architectures/i386 reference distribution construction.ipynb -------------------------------------------------------------------------------- /notebooks/Data Type Reference Distributions/The Machine Code Reference Distribution.ipynb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/notebooks/Data Type Reference Distributions/The Machine Code Reference Distribution.ipynb -------------------------------------------------------------------------------- /notebooks/Data Type Reference Distributions/The Max Entropy Reference Distribution.ipynb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/notebooks/Data Type Reference Distributions/The Max Entropy Reference Distribution.ipynb -------------------------------------------------------------------------------- /notebooks/Data Type Reference Distributions/The UTF-8 (English) Reference Distribution.ipynb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/notebooks/Data Type Reference Distributions/The UTF-8 (English) Reference Distribution.ipynb -------------------------------------------------------------------------------- /notebooks/Introduction to Centrifuge.ipynb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/notebooks/Introduction to Centrifuge.ipynb -------------------------------------------------------------------------------- /notebooks/Using DBSCAN to Cluster File Data.ipynb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/notebooks/Using DBSCAN to Cluster File Data.ipynb -------------------------------------------------------------------------------- /notebooks/archive/Analyzing Executable Binaries with DBSCAN.ipynb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/notebooks/archive/Analyzing Executable Binaries with DBSCAN.ipynb -------------------------------------------------------------------------------- /notebooks/archive/readme.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/notebooks/archive/readme.txt -------------------------------------------------------------------------------- /scripts/basic_DBSCAN_clustering.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/scripts/basic_DBSCAN_clustering.py -------------------------------------------------------------------------------- /scripts/entropy_plot.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/scripts/entropy_plot.py -------------------------------------------------------------------------------- /scripts/entropy_plot_text_section.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/scripts/entropy_plot_text_section.py -------------------------------------------------------------------------------- /scripts/identify_clusters.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/scripts/identify_clusters.py -------------------------------------------------------------------------------- /scripts/plot_all_variables.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/scripts/plot_all_variables.py -------------------------------------------------------------------------------- /scripts/plot_cluster_cdfs.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/scripts/plot_cluster_cdfs.py -------------------------------------------------------------------------------- /scripts/plot_two_variables.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/scripts/plot_two_variables.py -------------------------------------------------------------------------------- /scripts/readme.txt: -------------------------------------------------------------------------------- 1 | example: 2 | 3 | $ python3 plot_all_variables.py 4 | -------------------------------------------------------------------------------- /scripts/small_elf.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/BinaryResearch/centrifuge-toolkit/HEAD/scripts/small_elf.py --------------------------------------------------------------------------------