← All tools

AutoPiff

https://github.com/splintersfury/AutoPiff

Open Source

Categories

Forensics Reverse Engineering

Description

Semantic analysis engine for detecting vulnerability fixes in Windows kernel driver patches — 58 YAML rules, Ghidra decompilation, reachability tracing, and scoring

Keywords

driver-analysis ghidra karton malware-analysis patch-diffing security-research vulnerability-research windows-kernel python

Example Usage

Vendor releases 500 driver updates/year
├── 490 are feature/performance/cosmetic changes
├── 8 are minor bug fixes
└── 2 are silent security fixes (no CVE assigned)

Without automation: Manually review 500 to find 2
With AutoPiff:      Review 10 high-scorers to find 2