1.WerWolv / ImHex
🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.
- hex-editor
- reverse-engineering
- ips
- dear-imgui
- disassembler
- analyzer
- +14 more
Ranked by Attention Score: stars gained over the last 30 complete days
52 repositories by Attention Score · Oct 5, 2026 – Nov 3, 2026 (UTC)
🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.
KeePassXC is a cross-platform community-driven port of the Windows application “KeePass Password Safe”.
An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
A suite of WiFi/Bluetooth offensive and defensive tools for the ESP32
Free and Open Source Reverse Engineering Platform powered by rizin
SQL powered operating system instrumentation, monitoring, and analytics.
Cloud Native Runtime Security
A lightweight, high-performance, industrial-grade cross-language logging library (C++/Java/C#/Kotlin/TS/Python/Go), battle-tested in Honor of Kings.
Advanced usermode anti-anti-debugger. Forked from https://bitbucket.org/NtQuery/scyllahide
LIEF - Library to Instrument Executable Formats (C++, Python, Rust)
Triton is a dynamic binary analysis library. Build your own program analysis tools, automate your reverse engineering, perform software verification or just emulate code.
A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.
Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.
RetDec is a retargetable machine-code decompiler based on LLVM.
Multi Theft Auto is a game engine that turns Grand Theft Auto: San Andreas into networked multiplayer.
Crack legacy zip encryption with Biham and Kocher's known plaintext attack.
open-appsec is a machine learning security engine that preemptively and automatically prevents threats against Web Application & APIs. This repo include the main code and logic.
A fast & densely stored hashmap and hashset
A family of header-only, very fast and memory-friendly hashmap and btree containers.
DRAKVUF Black-box Binary Analysis
Detect deauthentication frames using an ESP8266
Tenzir is the data pipeline engine for security teams.
C++ Discord API Bot Library - D++ is Lightweight and scalable for small and huge bots!
Open source Windows x64 PE packer and crypter. Compresses and encrypts executables with a custom virtual machine into a self extracting stub.
PiCCANTE is a powerful tool for exploring and reversing CAN busses of vehicles, based on Raspberry Pi Pico (any model)
A header only library for creating and validating json web tokens in c++
Automated static analysis tools for binary programs
A fast, memory efficient hash map for C++
Forensics artefact collection tool for systems running Microsoft Windows
🔥Open source RASP solution
Remove duplicates from MASSIVE wordlist, without sorting it (for dictionary-based password cracking)
GUI frontend to John the Ripper password cracker
TCP/IP packet demultiplexer. Download from:
Network file transfer application for Windows, OS X, & Linux
Ultra fast and low latency asynchronous socket server & client C++ library with support TCP, SSL, UDP, HTTP, HTTPS, WebSocket protocols and 10K connections problem solution
Fast & memory efficient hashtable based on robin hood hashing for C++11/14/17/20
C++ library for creating an embedded Rest HTTP server (and more)
Andromeda - Interactive Reverse Engineering Tool for Android Applications
Linker/Compiler/Tool detector for Windows, Linux and MacOS.
Very fast, high-quality hash function, discrete-incremental and streamed hashing-capable (non-cryptographic, header-only C/C++) 27GB/s + PRNG
Ultra high-performance secp256k1 ECC engine | Python, Node.js, Rust, Go, C#, Swift, Java bindings | CUDA, Metal, OpenCL GPU | ECDSA, Schnorr, FROST, MuSig2, BIP-352 | 15+ platforms
Binary data analysis and visualization tool
SSH/HTTP(S) multiplexer. Run a webserver and a sshd on the same port w/o changes.
JSON Web Token library for C++
Fuzzer for Linux Kernel Drivers
ShowStopper is a tool for helping malware researchers explore and test anti-debug techniques or verify debugger plugins or other solutions that clash with standard anti-debug methods.