Curated reverse-engineering tools and learning resources for binaries, apps, firmware, formats, and protocols.
Awesome Reverse Engineering Anything: tools, projects, case studies and research papers for websites, games, apps, binaries, firmware and communication protocols.
AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.
Pull-based C2 framework with ten native transports, concurrent multi-profile handlers, and end-to-end ECDSA-signed tasking. Single Go binary agent with every property baked in at build time. Multi-operator team server with RBAC, audit chain, and a Qt/CLI console. Linux + Windows, amd64 + arm64.
Agent skills for solving CTF challenges - web exploitation, binary pwn, crypto, reverse engineering, forensics, OSINT, and more
Stop your AI from making things up β it proposes, deterministic tools decide, every claim checked against ground truth with evidence. Grounded facts and context survive resets. Reverse engineering is the proving ground. MCP server + CLI.
Exploit Development and Reverse Engineering with GDB & LLDB Made Easy
A True Instrumentable Binary Emulation Framework
Open-source AI reverse-engineering agent platform and MCP server for Ghidra, Frida, x64dbg and Rizin β automated PE/APK/binary analysis, CTF and malware research, with 100+ MCP tools and a 194-article runnable knowledge base.
A system-level, binary package and environment manager running on all major operating systems and platforms.
The FLARE team's open-source tool to identify capabilities in executable files.
SABnzbd - The automated Usenet download tool
Decompiler Explorer! Compare tools on the forefront of static analysis, now in your web browser!
The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.
Simplifying encrypted traffic analysis for researchers by making protocol decryption effortless.
Ablation is an autonomous reverse engineering system.
A powerful and user-friendly binary analysis platform!
A high-performance ASCII video rendering engine featuring real-time WebSocket binary streaming and an isolated compiler for serverless static generation. Built for low-latency 30 FPS playback on HTML5 Canvas.
HDF5 for Python -- The h5py package is a Pythonic interface to the HDF5 binary data format.
Fast and customizable framework for automatic ML model creation (AutoML)
Neo4j Bolt driver for Python
Compile fonts from sources (UFO, Glyphs) to binary (OpenType, TrueType).
SickGear has proven the most reliable stable TV fork of the great Sick-Beard to fully automate TV enjoyment with innovation.
A reverse-engineering agent for IDA Pro and Binary Ninja
Hachoir is a Python library to view and edit a binary stream field by field
Repository for community provided Binary Ninja plugins
The official binary distribution format for Python
Binary Analysis Next Generation (BANG)
NumPy-based text/binary PLY file reader/writer for Python
Every binary nixpkgs ever shipped, on your PATH.
Niimbot B1 unlocked binary
REx@Skill - Agentic Reverse Engineering eXecution Skill for binary vulnerability discovery
Binary Ninja diffing tool
Maybe the headless Ghidra MCP you are looking for.
Reconstructing DX-Ball 1.07 with REA, backed by original-x86 differential tests and pinned MSVC byte-exact oracles.
SigLens is a Windows binary analysis tool designed to pinpoint the exact regions responsible for antivirus detections. It narrows detections down to precise offsets and maps them to PE sections, RVA, VA, hexdump, and nearby strings, making evasion faster and easier. Built for fast AV signature triage on Windows
A Windows x64 exe Hello World program fully written by hand in binary
Source reconstruction of ζ±ζΉεΉ»ζ³ι· ο½ Lotus Land Story
A python proof of concept tool to assist in your payloads classification against EDR/AV's machine learning models
Autonomous 23-Source Zero-Cost OSINT, Binary Image Forensics (EXIF/GPS/Stego), Data Breach/Leak & Threat Intelligence Engine in Pure Python
LLVM 21 pass plugin for AΒ²MBA architectural and anti-generalization hardening of mixed Boolean-arithmetic expressions.
ClickMyPayload creates realistic browser verification pages that silently copy PowerShell or CMD commands to the clipboard, display decoy tokens, and guide users to execute them via Win+R. Optional binary payloads can download automatically on page load