Ghidra is a software reverse engineering (SRE) framework
- software-analysis
- disassembler
- reverse-engineering
47,133 repositories indexed
1–24 of 36 · Most stars
Ghidra is a software reverse engineering (SRE) framework
🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.
An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.
UNIX-like reverse engineering framework and command-line toolset
Program for determining types of files for Windows, Linux and MacOS.
Exploit Development and Reverse Engineering with GDB & LLDB Made Easy
Capstone disassembly/disassembler framework for ARM, ARM64 (ARMv8), Alpha, BPF, Ethereum VM, HPPA, LoongArch, M68K, M680X, Mips, MOS65XX, PPC, RISC-V(rv32G/rv64G), SH, Sparc, SystemZ, TMS320C64X, TriCore, Webassembly, XCore and X86.
Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.
CAUTION: END OF SUPPORT ON 14 AUG 2026. The 'jsrsasign' (RSA-Sign JavaScript Library) is an opensource free cryptography library supporting RSA/RSAPSS/ECDSA/DSA signing/validation, ASN.1, PKCS#1/5/8 private/public key, X.509 certificate, CRL, OCSP, CMS SignedData, TimeStamp, CAdES and JSON Web Signature/Token in pure JavaScript.
DIE engine
Reverse engineering tool for Linux
Plasma is an interactive disassembler for x86/ARM/MIPS. It can generates indented pseudo-code with colored syntax.
Reko is a binary decompiler.
Binary Analysis Platform
Java decompiler, assembler, and disassembler
Binary code static analyser, with IDA integration. Performs value and taint analysis, type reconstruction, use-after-free and double-free detection
Kippo - SSH Honeypot
PE Tools - Portable executable (PE) manipulation toolkit
Disassembler Library for x86 and x86-64
The repository host gives no description.
Detect deauthentication frames using an ESP8266
Agent-first reverse engineering for macOS, Windows and Linux: any ACP agent reads, renames and patches binaries, Android apps and GPU kernels next to you.
Integrated certification via Let's encrypt for Elixir-powered sites
Easily retargetable and hackable interactive disassembler with IDAPython-compatible plugin API