Repository Index

An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.

• debugger
• windows
• x64
• disassembler

Capstone disassembly/disassembler framework for ARM, ARM64 (ARMv8), Alpha, BPF, Ethereum VM, HPPA, LoongArch, M68K, M680X, Mips, MOS65XX, PPC, RISC-V(rv32G/rv64G), SH, Sparc, SystemZ, TMS320C64X, TriCore, Webassembly, XCore and X86.

• reverse-engineering
• disassembler
• security
• framework

This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.

• reverse-engineering
• rop
• rop-exploitation
• rop-gadgets

The repository host gives no description.

Plasma is an interactive disassembler for x86/ARM/MIPS. It can generates indented pseudo-code with colored syntax.

• reverse-engineering
• disassembler
• capstone
• x86

Reko is a binary decompiler.

• decompiler
• dotnet
• decompiler-engine
• decompile

LKM rootkit for Linux Kernels 2.6.x-7.x (x86/x86_64 and ARM/ARM64)

• rootkit
• lkm-rootkit
• c
• kernel

Binary Analysis Platform

• binary-analysis
• reverse-engineering
• program-analysis
• static-analysis

BARF : A multiplatform open source Binary Analysis and Reverse engineering Framework

• binary-analysis
• reverse-engineering
• python
• x86

The repository host gives no description.

Disassembler Library for x86 and x86-64

Boomerang Decompiler - Fighting the code-rot :)

• c-plus-plus
• qt5
• reverse-engineering
• decompiler

Delphi Detours Library

• hooks
• detours
• x86-64
• windows

An automated Themida / Code Virtualizer / WinLicense (v3.0-v4) unpacker and dump fixer tool

🗜️ A packer for Windows x86 executable files written in C and Intel x86 Assembly. The new file after packing can obstruct reverse engineering（使用C和Intel x86汇编开发的Windows x86可执行文件打包工具，打包后的新文件可以阻碍逆向工程）

• windows
• reverse-engineering
• security
• pe

Delphi debug framework

• debug
• stacktrace
• disassembler
• portable-executable

SuperGhidra: Autonomous Agent Reverse Engineering, Lock-Free Ghidra Daemon & C++ Recovery Suite

• arm64
• binary-analysis
• decompiler
• disassembler

x86 emulation and shellcode detection

Tool to find code cave in PE image (x86 / x64) - Find empty space to place code in PE files

• codecave
• cpp
• pe
• winapi

VBA WebSocket, WSS and TCP client with native TLS 1.2/1.3, MQTT, proxy, x86/x64. No COM, no DLLs, no installs.

• excel
• office
• real-time
• tls

Capstone Disassembler Library Binding for Delphi

• disassembler
• assembler
• pascal
• delphi