Reverse Engineering Libraries - Page 1

Ghidra is a software reverse engineering (SRE) framework

Java 40166Updated: 10 mo ago License: Permissive (Apache-2.0)

🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

C++ 28827Updated: 10 mo ago License: Strong Copyleft (GPL-2.0)

UNIX-like reverse engineering framework and command-line toolset

C 18192Updated: 10 mo ago License: Weak Copyleft (LGPL-3.0)

.NET Decompiler with support for PDB generation, ReadyToRun, Metadata (&more) - cross-platform!

C# 17990Updated: 10 mo ago License: No License (No License)

Linux shell for iOS

C 14117Updated: 10 mo ago License: Proprietary (Proprietary)

A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)

Java 13773Updated: 10 mo ago License: Strong Copyleft (GPL-3.0)

Free and Open Source Reverse Engineering Platform powered by rizin

C++ 13571Updated: 10 mo ago License: Strong Copyleft (GPL-3.0)

Clone this repo to build Frida

Python 9541Updated: 2 y ago License: Proprietary (Proprietary)

Leaked Mirai Source Code for Research/IoC Development Purposes

C 7806Updated: 10 mo ago License: Strong Copyleft (GPL-3.0)

.NET deobfuscator and unpacker.

C# 6350Updated: 10 mo ago License: Strong Copyleft (GPL-3.0)

Unity il2cpp reverse engineer

C# 5334Updated: 10 mo ago License: Permissive (MIT)

OpenArk is an open source anti-rookit(ARK) tool for Windows.

C++ 5198Updated: 10 mo ago License: Weak Copyleft (LGPL-2.1)

Cuckoo Sandbox is an automated dynamic malware analysis system

JavaScript 5187Updated: 11 mo ago License: Proprietary (Proprietary)

Program for determining types of files for Windows, Linux and MacOS.

JavaScript 5118Updated: 10 mo ago License: Permissive (MIT)

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

C++ 4850Updated: 10 mo ago License: Strong Copyleft (GPL-2.0)

Reverse engineering and pentesting for Android applications

Python 4481Updated: 10 mo ago License: Permissive (Apache-2.0)

Android virtual machine and deobfuscator

Java 4179Updated: 11 mo ago License: Proprietary (Proprietary)

Decompilation of The Legend of Zelda: Ocarina of Time

C 4089Updated: 11 mo ago License: No License (No License)

LIEF - Library to Instrument Executable Formats

C++ 3738Updated: 10 mo ago License: Permissive (Apache-2.0)

QEMU Interactive Runtime Analyser

C 3720Updated: 11 mo ago License: Permissive (MIT)

Patch PE, ELF, Mach-O binaries with shellcode new version in development, available only to sponsors

Python 3144Updated: 11 mo ago License: Permissive (BSD-3-Clause)

Reverse engineering framework in Python

Python 3079Updated: 10 mo ago License: Strong Copyleft (GPL-2.0)

The FLARE team's open-source tool to identify capabilities in executable files.

Python 3068Updated: 10 mo ago License: Permissive (Apache-2.0)

Plasma is an interactive disassembler for x86/ARM/MIPS. It can generates indented pseudo-code with colored syntax.

Python 3008Updated: 11 mo ago License: Strong Copyleft (GPL-3.0)

Unofficial mirror of FernFlower Java decompiler (All pulls should be submitted upstream)

Java 2915Updated: 10 mo ago License: No License (No License)

Triton is a dynamic binary analysis library. Build your own program analysis tools, automate your reverse engineering, perform software verification or just emulate code.

C++ 2881Updated: 10 mo ago License: Permissive (Apache-2.0)

pull decrypted ipa from jailbreak device

JavaScript 2846Updated: 10 mo ago License: Permissive (MIT)

PowerShell 2844Updated: 3 y ago License: Permissive (Apache-2.0)

Dumps decrypted mach-o files from encrypted iPhone applications from memory to disk. This tool is necessary for security researchers to be able to look under the hood of encryption.

C 2783Updated: 11 mo ago License: No License (No License)

BinNavi is a binary analysis IDE that allows to inspect, navigate, edit and annotate control flow graphs and call graphs of disassembled code.

Java 2742Updated: 3 y ago License: Permissive (Apache-2.0)

Decompilation of 3D Pinball for Windows – Space Cadet

C++ 2738Updated: 10 mo ago License: Permissive (MIT)

Pafish is a testing tool that uses different techniques to detect virtual machines and malware analysis environments in the same way that malware families do

C 2730Updated: 10 mo ago License: Strong Copyleft (GPL-3.0)

The Iceman fork of Proxmark3 / RFID / NFC reader, writer, sniffer and emulator

C 2699Updated: 10 mo ago License: Strong Copyleft (GPL-3.0)

Open-source, cross platform Qt based IDE for reverse-engineering Android application packages.

C++ 2559Updated: 1 y ago License: Weak Copyleft (LGPL-3.0)

Reverse engineering SARS-CoV-2

Python 2375Updated: 11 mo ago License: No License (No License)

Dynamic Instrumentation Tool Platform

C 2300Updated: 10 mo ago License: Proprietary (Proprietary)

MachOView fork

PHP 2284Updated: 1 y ago License: No License (No License)

Powerful automated tool for reverse engineering Unity IL2CPP binaries

C 2224Updated: 11 mo ago License: Strong Copyleft (AGPL-3.0)

Reverse Engineers' Hex Editor

C++ 2133Updated: 10 mo ago License: Strong Copyleft (GPL-2.0)

一行代码检测XP/调试/多开/模拟器/root

Java 2047Updated: 11 mo ago License: Permissive (Apache-2.0)

C++ python bytecode disassembler and decompiler

C++ 1987Updated: 10 mo ago License: Strong Copyleft (GPL-3.0)

UNIX-like reverse engineering framework and command-line toolset.

C 1943Updated: 10 mo ago License: Weak Copyleft (LGPL-3.0)

reverse engineering tools for android（android 逆向工程工具集）

Shell 1904Updated: 12 mo ago License: No License (No License)

A Coverage Explorer for Reverse Engineers

Python 1892Updated: 11 mo ago License: Permissive (MIT)

Android Reverse-Engineering Workbench for VS Code

TypeScript 1835Updated: 11 mo ago License: Strong Copyleft (AGPL-3.0)

PyInstaller Extractor

Python 1750Updated: 10 mo ago License: Strong Copyleft (GPL-3.0)

Reko is a binary decompiler.

C# 1718Updated: 10 mo ago License: Strong Copyleft (GPL-2.0)

DIE engine

C++ 1691Updated: 10 mo ago License: Permissive (MIT)

The FLARE team's open-source tool to identify capabilities in executable files.

Python 1645Updated: 3 y ago License: Permissive (Apache-2.0)

ret-sync is a set of plugins that helps to synchronize a debugging session (WinDbg/GDB/LLDB/OllyDbg2/x64dbg) with IDA/Ghidra/Binary Ninja disassemblers.

C 1636Updated: 10 mo ago License: Strong Copyleft (GPL-3.0)