Repository Index

UNIX-like reverse engineering framework and command-line toolset

• radare2
• c
• commandline
• reverse-engineering

Capstone disassembly/disassembler framework for ARM, ARM64 (ARMv8), Alpha, BPF, Ethereum VM, HPPA, LoongArch, M68K, M680X, Mips, MOS65XX, PPC, RISC-V(rv32G/rv64G), SH, Sparc, SystemZ, TMS320C64X, TriCore, Webassembly, XCore and X86.

• reverse-engineering
• disassembler
• security
• framework

UNIX-like reverse engineering framework and command-line toolset.

• reverse-engineering
• program-analysis
• security
• exploitation

Platform for Architecture-Neutral Dynamic Analysis

• reverse-engineering
• dynamic-analysis
• qemu
• pandare

Interactive CTF Exploration Tool

• security
• reverse-engineering
• windows
• windows-internals

Android Unpacker presented at Defcon 22: Android Hacker Protection Level 0

• android-unpacker
• gdb
• qemu
• reverse-engineering

The PE file analysis toolkit

• binary-analysis
• reverse-engineering
• pe-file
• portable-executable

🗜️ A packer for Windows x86 executable files written in C and Intel x86 Assembly. The new file after packing can obstruct reverse engineering（使用C和Intel x86汇编开发的Windows x86可执行文件打包工具，打包后的新文件可以阻碍逆向工程）

• windows
• reverse-engineering
• security
• pe

Reverse engineering tool for automatic structure recovering and memory use analysis based on DynamoRIO and Capstone

Android Loadable Kernel Modules - mostly used for reversing and debugging on controlled systems/emulators

• loadable-kernel-modules
• android-lkms
• emulators
• kernel

Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.

• bpf
• ebpf
• forensics
• golang