MCP server and CLI that lets AI agents reverse engineer native binaries, JavaScript/Electron apps, .NET assemblies, and websites.
Tool that automatically ports PS5 executables to run natively on Linux and Windows, with a macOS-capable relinker build.
Ghidra is an NSA-created software reverse engineering framework with disassembly, decompilation, graphing, and scripting for compiled code.
Decodes Android APK files to near-original resources and smali code, and rebuilds them after modifications.
A cross-platform hex editor with a C++-like pattern language for parsing and highlighting binary file structures.
A kernel-based root solution for Android devices, providing su and root access management via a kernel module and manager app.
Early-stage PlayStation 4 emulator core for Windows, Linux, macOS and FreeBSD, written in C++.
MCP server and Ghidra plugin that lets LLM clients decompile binaries, rename symbols, and list functions, classes, imports, and exports.
Command-line and GUI tools that decompile Android Dex, APK and Java bytecode into readable Java source.
Static recompiler that translates PlayStation 2 ELF binaries into C++ and provides a runtime to execute the generated code.
Magisk is a open-source root solution for Android that modifies the system at boot without altering the system partition.
Runs a virtual iPhone on an Apple Silicon Mac using Apple's Virtualization.framework, for security research and debugging.
Open-source ESP32 firmware that turns a board into a multi-protocol hardware hacking tool with a serial or web-based CLI.
Open-source user-mode binary debugger for Windows, built for reverse engineering and malware analysis of executables without source.
Claude Code skill that decompiles Android APK/XAPK/JAR/AAR files and extracts the HTTP APIs an app uses.
Work-in-progress decompilation of PokΓ©mon HeartGold and SoulSilver for the Nintendo DS, reconstructing the game's source code.
Static recompiler toolkit that translates original Xbox XBE game binaries into native C code buildable as Windows, Linux, or macOS executables.
An open-source, Alpha-stage operating system that aims for binary and driver compatibility with Windows NT-family applications.
Android app that exploits CVE-2026-43499 to gain temporary root on supported kernels and load KernelSU.
MCP server that exposes Ghidra's reverse engineering capabilities as 200+ tools for AI assistants, via a GUI plugin and headless server.
Cross-platform .NET assembly browser and decompiler that turns compiled assemblies back into readable C#.
Custom firmware for the Nintendo Switch that replaces and modifies several layers of the console's boot and system software.
An Xposed/LSPosed module for Instagram that adds privacy controls, media downloads, feed cleanup, and theming via an in-app menu.
Kernel-based root solution for Android devices, with a Kernel Patch Module (KPM) system for loadable kernel extensions.
A PC port of The Legend of Zelda: Ocarina of Time that runs on modern systems, built on a decompilation and a custom libultra-compatible library.
Modified kstuff-lite PS4 kernel-exploit toolkit (1.11-opt) that optimizes UELF/KELF transitions, FPU/CR0 handling, and adds opt-in diagnostics.
macOS framework and app for creating custom Bluetooth tags that are located through Apple's Find My offline finding network.
Work-in-progress tool that reverses Unity's IL2CPP build output back into managed .NET DLLs.
GUI application that extracts and converts assets from Unity game files into the native Unity engine format for analysis.