1.WerWolv / ImHex
🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.
- hex-editor
- reverse-engineering
- ips
- dear-imgui
- disassembler
- analyzer
- +14 more
Ranked by Attention Score: stars gained over the last 30 complete days
52 repositories by Attention Score · Oct 5, 2026 – Nov 3, 2026 (UTC)
🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.
KeePassXC is a cross-platform community-driven port of the Windows application “KeePass Password Safe”.
An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
A suite of WiFi/Bluetooth offensive and defensive tools for the ESP32
Free and Open Source Reverse Engineering Platform powered by rizin
SQL powered operating system instrumentation, monitoring, and analytics.
Cloud Native Runtime Security
Advanced usermode anti-anti-debugger. Forked from https://bitbucket.org/NtQuery/scyllahide
LIEF - Library to Instrument Executable Formats (C++, Python, Rust)
Triton is a dynamic binary analysis library. Build your own program analysis tools, automate your reverse engineering, perform software verification or just emulate code.
A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.
cppcryptfs is an implementation of the gocryptfs encrypted overlay filesystem in C++ for Windows.
Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.
RetDec is a retargetable machine-code decompiler based on LLVM.
Crack legacy zip encryption with Biham and Kocher's known plaintext attack.
A fast & densely stored hashmap and hashset
Wireless keystroke injection attack platform
This is the development tree. Production downloads are at:
Creates up to a thousand WiFi access points with custom SSIDs.
A family of header-only, very fast and memory-friendly hashmap and btree containers.
DRAKVUF Black-box Binary Analysis
Detect deauthentication frames using an ESP8266
Open source Windows x64 PE packer and crypter. Compresses and encrypts executables with a custom virtual machine into a self extracting stub.
PiCCANTE is a powerful tool for exploring and reversing CAN busses of vehicles, based on Raspberry Pi Pico (any model)
A header only library for creating and validating json web tokens in c++
Automated static analysis tools for binary programs
A fast, memory efficient hash map for C++
Forensics artefact collection tool for systems running Microsoft Windows
🔥Open source RASP solution
Remove duplicates from MASSIVE wordlist, without sorting it (for dictionary-based password cracking)
GUI frontend to John the Ripper password cracker
Fast & memory efficient hashtable based on robin hood hashing for C++11/14/17/20
Fast strong hash functions: SipHash/HighwayHash
Andromeda - Interactive Reverse Engineering Tool for Android Applications
Linker/Compiler/Tool detector for Windows, Linux and MacOS.
Very fast, high-quality hash function, discrete-incremental and streamed hashing-capable (non-cryptographic, header-only C/C++) 27GB/s + PRNG
Ultra high-performance secp256k1 ECC engine | Python, Node.js, Rust, Go, C#, Swift, Java bindings | CUDA, Metal, OpenCL GPU | ECDSA, Schnorr, FROST, MuSig2, BIP-352 | 15+ platforms
Binary data analysis and visualization tool
A work-in-progress deobfuscator for movfuscated binaries
JSON Web Token library for C++
Fuzzer for Linux Kernel Drivers
ShowStopper is a tool for helping malware researchers explore and test anti-debug techniques or verify debugger plugins or other solutions that clash with standard anti-debug methods.