morluto / rea
MCP server and CLI that lets AI agents reverse engineer native binaries, JavaScript/Electron apps, .NET assemblies, and websites.
morluto / rea
NationalSecurityAgency / ghidra
Ghidra is an NSA-created software reverse engineering framework with disassembly, decompilation, graphing, and scripting for compiled code.
ifixai-ai / iFixAi
Python CLI and agent plugin that audits whether an AI agent does the job it is supposed to do, using adversarial and operational tests.
vxcontrol / pentagi
Self-hosted multi-agent system that autonomously plans and runs penetration tests using tools like nmap, Metasploit and sqlmap in Docker.
danielmiessler / SecLists
A collection of security testing wordlists covering usernames, passwords, URLs, fuzzing payloads, web shells, and sensitive data patterns.
SimoneAvogadro / android-reverse-engineering-skill
Claude Code skill that decompiles Android APK/XAPK/JAR/AAR files and extracts the HTTP APIs an app uses.
OWASP / wstg
A community-written guide covering methods and test cases for security testing web applications and web services.