Ghidra is an NSA-created software reverse engineering framework with disassembly, decompilation, graphing, and scripting for compiled code.
Decodes Android APK files to near-original resources and smali code, and rebuilds them after modifications.
MCP server and Ghidra plugin that lets LLM clients decompile binaries, rename symbols, and list functions, classes, imports, and exports.
Command-line and GUI tools that decompile Android Dex, APK and Java bytecode into readable Java source.
MCP server that exposes Ghidra's reverse engineering capabilities as 200+ tools for AI assistants, via a GUI plugin and headless server.
An Xposed/LSPosed module for Instagram that adds privacy controls, media downloads, feed cleanup, and theming via an in-app menu.