Reverse Engineering Libraries - Page 2

Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).

C 1616Updated: 2 y ago License: Permissive (BSD-2-Clause)

Interactive CTF Exploration Tool

C 1611Updated: 1 y ago License: Permissive (Apache-2.0)

Python scriptable Reverse Engineering Sandbox, a Virtual Machine instrumentation and inspection framework based on QEMU

C 1601Updated: 2 y ago License: Strong Copyleft (GPL-2.0)

The World's First Universal Mod Loader for Unity Games compatible with both Il2Cpp and Mono

C# 1596Updated: 1 y ago License: Permissive (Apache-2.0)

Decompilation of Pokémon Emerald

C 1594Updated: 1 y ago License: No License (No License)

OFRAK: unpack, modify, and repack binaries.

Python 1577Updated: 1 y ago License: Proprietary (Proprietary)

This project has been moved to:

C++ 1489Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

rp++ is a fast C++ ROP gadget finder for PE/ELF/Mach-O x86/x64/ARM/ARM64 binaries.

C++ 1488Updated: 2 y ago License: Permissive (MIT)

Hook Framework for Android/IOS/Linux/MacOS

C++ 1454Updated: 1 y ago License: Permissive (Apache-2.0)

Windows tool for dumping malware PE files from memory back to disk for analysis.

C 1414Updated: 1 y ago License: Permissive (MIT)

A libre cross-platform disassembler.

Rust 1405Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

The OpenSource Disassembler

C++ 1381Updated: 2 y ago License: Strong Copyleft (GPL-3.0)

CobaltStrike's source code

Java 1373Updated: 4 y ago License: No License (No License)

BARF : A multiplatform open source Binary Analysis and Reverse engineering Framework

Python 1357Updated: 2 y ago License: Permissive (BSD-2-Clause)

Obfuscate Go binaries and packages

Go 1327Updated: 2 y ago License: Permissive (BSD-2-Clause)

The decompilation engine of JustDecompile

C# 1311Updated: 1 y ago License: Proprietary (Proprietary)

Multi-architecture assembler for IDA Pro. Powered by Keystone Engine.

Python 1289Updated: 2 y ago License: Strong Copyleft (GPL-2.0)

Python module for viewing Portable Executable (PE) files in a tree-view using pefile and PyQt5. Can also be used with IDA Pro and Rekall to dump in-memory PE files and reconstruct imports.

Python 1264Updated: 2 y ago License: Permissive (Apache-2.0)

Tools, tips, tricks, and more for exploring ICS Security.

HTML 1255Updated: 2 y ago License: Permissive (CC-BY-4.0)

Squalr Memory Editor - Game Hacking Tool Written in C#

C# 1251Updated: 1 y ago License: No License (No License)

Welcome Coordinator for Android

Java 1250Updated: 2 y ago License: Permissive (Apache-2.0)

C++17, x86/x64 Hooking Libary v2.0

C++ 1225Updated: 1 y ago License: Permissive (MIT)

Android Dynamic Binary Instrumentation Toolkit

C 1224Updated: 2 y ago License: No License (No License)

Decompilation of The Legend of Zelda: Breath of the Wild (Switch 1.5.0)

C++ 1207Updated: 1 y ago License: No License (No License)

PCem

C 1203Updated: 1 y ago License: Strong Copyleft (GPL-2.0)

A Frida based tool that traces usage of the JNI API in Android apps.

TypeScript 1175Updated: 1 y ago License: Permissive (MIT)

IDAPython tool for creating automatic C++ virtual tables in IDA Pro

Python 1123Updated: 1 y ago License: Strong Copyleft (GPL-3.0)

Reverse engineered Linux driver for the FacetimeHD (Broadcom 1570) PCIe webcam

C 1122Updated: 3 y ago License: No License (No License)

ELF file viewer/editor for Windows, Linux and MacOS.

C++ 1089Updated: 1 y ago License: Permissive (MIT)

Frida hook some jni functions

JavaScript 1064Updated: 2 y ago License: Permissive (MIT)

Work-in-progress tool to reverse unity's IL2CPP toolchain.

C# 1057Updated: 1 y ago License: Permissive (MIT)

iOS Reverse Engineering

Shell 1041Updated: 2 y ago License: Proprietary (Proprietary)

Binary instrumentation framework based on FRIDA

Python 1027Updated: 1 y ago License: Strong Copyleft (GPL-3.0)

Flutter Reverse Engineering Framework

Python 1014Updated: 1 y ago License: Strong Copyleft (GPL-3.0)

Flutter Reverse Engineering Framework

Python 1013Updated: 1 y ago License: Strong Copyleft (GPL-3.0)

An open source interactive disassembler

C++ 955Updated: 3 y ago License: Proprietary (Proprietary)

Radare2 and Frida better together.

TypeScript 953Updated: 1 y ago License: Permissive (MIT)

Full featured multi arch/os debugger built on top of PyQt5 and frida

Python 951Updated: 3 y ago License: Strong Copyleft (GPL-3.0)

A VBA parser and emulation engine to analyze malicious macros.

Python 950Updated: 2 y ago License: No License (No License)

Microsoft.Diagnostics.Runtime is a set of APIs for introspecting processes and dumps.

C# 949Updated: 2 y ago License: Permissive (MIT)

[Official] Android reverse engineering tool focused on dynamic instrumentation automation leveraging Frida. It disassembles dex, analyzes it statically, generates hooks, discovers reflected methods, stores intercepted data and does new things from it. Its aim is to be an all-in-one Android reverse engineering platform.

JavaScript 938Updated: 1 y ago License: Permissive (Apache-2.0)

Superfast Genshin Impact artifacts scanner

Rust 938Updated: 1 y ago License: No License (No License)

A tool to recover a fully analyzable .ELF from a raw kernel, through extracting the kernel symbol table (kallsyms)

Python 926Updated: 1 y ago License: Strong Copyleft (GPL-3.0)

Obfuscate specific windows apis with different apis

C++ 906Updated: 1 y ago License: No License (No License)

DRAKVUF Black-box Binary Analysis

C++ 897Updated: 1 y ago License: Proprietary (Proprietary)

Driver 2 Playstation game reverse engineering effort

C 863Updated: 1 y ago License: Permissive (MIT)

Dumping processes using the power of kernel space !

C# 830Updated: 2 y ago License: Permissive (MIT)

Python 818Updated: 2 y ago License: Permissive (Apache-2.0)

🕵️ Tool to reverse-engineer Protocol Buffers with unknown definition

Python 811Updated: 1 y ago License: Permissive (ISC)

Include binary files in C/C++

C 800Updated: 2 y ago License: Permissive (Unlicense)