Ghidra is a software reverse engineering (SRE) framework
- software-analysis
- disassembler
- reverse-engineering
47,133 repositories indexed
1–24 of 24 · Most stars
Ghidra is a software reverse engineering (SRE) framework
🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.
An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.
UNIX-like reverse engineering framework and command-line toolset
Program for determining types of files for Windows, Linux and MacOS.
Unofficial revival of the well known .NET debugger and assembly editor, dnSpy
📱 objection - runtime mobile exploration
Capstone disassembly/disassembler framework for ARM, ARM64 (ARMv8), Alpha, BPF, Ethereum VM, HPPA, LoongArch, M68K, M680X, Mips, MOS65XX, PPC, RISC-V(rv32G/rv64G), SH, Sparc, SystemZ, TMS320C64X, TriCore, Webassembly, XCore and X86.
Triton is a dynamic binary analysis library. Build your own program analysis tools, automate your reverse engineering, perform software verification or just emulate code.
UNIX-like reverse engineering framework and command-line toolset.
DIE engine
Cecil is a library to inspect, modify and create .NET programs and libraries.
Binary Analysis Platform
Automated static analysis tools for binary programs
TranslatedBased on an in-depth REA teardown, a high-fidelity recreation of the official Claude desktop UI. Recreates 30 independent React components and 8 hardcore interaction physics algorithms, and comes with a 3000+ line reverse-engineering analysis manual.
BARF : A multiplatform open source Binary Analysis and Reverse engineering Framework
cwe_checker finds vulnerable patterns in binary executables
Procyon is a suite of Java metaprogramming tools, including a rich reflection API, a LINQ-inspired expression tree API for runtime code generation, and a Java decompiler.
DECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope dynamic Android malware analysis platform. DroidScope is now an extension to DECAF.
Bluetooth experimentation framework for Broadcom and Cypress chips.
MARA is a Mobile Application Reverse engineering and Analysis Framework. It is a toolkit that puts together commonly used mobile application reverse engineering and analysis tools to assist in testing mobile applications against the OWASP mobile security threats.
A collection of programs that access and manipulate ELF files.
Delphi Detours Library
ROPMEMU is a framework to analyze, dissect and decompile complex code-reuse attacks.