morluto / rea
Reverse engineer anything with agents, from app behavior down to native binaries.
morluto / rea
WerWolv / ImHex
🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.
x64dbg / x64dbg
An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.
reacher-z / Awesome-REA
Awesome Reverse Engineering Anything: tools, projects, case studies and research papers for websites, games, apps, binaries, firmware and communication protocols.
Networkapbridge / dll-decryptor
dll decryptor — dumps encrypted DLL payloads, resolves imports, rebuilds PE headers, exports or memory-maps the decrypted module
radareorg / radare2
UNIX-like reverse engineering framework and command-line toolset
mrexodia / ida-pro-mcp
AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.
horsicq / Detect-It-Easy
Program for determining types of files for Windows, Linux and MacOS.
We5ter / Scanners-Box
The Ultimate Open-Source Security Arsenal for Hackers, Enterprises, and AI Agents——面向极客、企业与 AI 智能体的全域开源网络安全工具矩阵
mandiant / capa
The FLARE team's open-source tool to identify capabilities in executable files.
bethington / ghidra-mcp
Ghidra MCP Server — 200+ MCP tools for AI-powered reverse engineering. GUI plugin + headless server, lazy tool loading, convention enforcement, batch operations, Ghidra Server integration, and Docker deployment.
lief-project / LIEF
LIEF - Library to Instrument Executable Formats (C++, Python, Rust)
JonathanSalwan / Triton
Triton is a dynamic binary analysis library. Build your own program analysis tools, automate your reverse engineering, perform software verification or just emulate code.
HyperDbg / HyperDbg
State-of-the-art native debugging tools
e-m-b-a / emba
EMBA - The firmware security analyzer
horsicq / DIE-engine
DIE engine
DynamoRIO / dynamorio
Dynamic Instrumentation Tool Platform
duty1g / x64dbg-mcp-server
x64dbg-MCP Server is a native MCP (Model Context Protocol) plugin for x64dbg that exposes the debugger's full functionality over HTTP. Connect any MCP-compatible AI assistant and control x64dbg programmatically: set breakpoints, step through code, read memory, dump registers, and more. Built with Zig — zero dependencies, single-binary output, cros
redasm-dev / redasm
The Open Source Disassembler
cmu-sei / pharos
Automated static analysis tools for binary programs
packing-box / awesome-executable-packing
A curated list of awesome resources related to executable packing
attify / firmware-analysis-toolkit
Firmware security research platform combining binary analysis, taint tracing, and emulation across IoT, edge AI, mobile devices, and robotics.
fkie-cad / cwe_checker
cwe_checker finds vulnerable patterns in binary executables
Vector35 / binaryninja-api
Public API, examples, documentation and issues for Binary Ninja
2akouwu / reverify
Stop your AI from making things up — it proposes, deterministic tools decide, every claim checked against ground truth with evidence. Grounded facts and context survive resets. Reverse engineering is the proving ground. MCP server + CLI.
LING71671 / open-reverselab
Open-source AI reverse-engineering agent platform and MCP server for Ghidra, Frida, x64dbg and Rizin — automated PE/APK/binary analysis, CTF and malware research, with 100+ MCP tools and a 194-article runnable knowledge base.
reversenseorg / dexcalibur
Reversense (Dexcalibur2) is a fully rewriting and rethinking of Dexcalibur. Reversense is a binary intelligence platform that automates the reverse engineering of mobile and embedded applications.
morluto / awesome-reverse-engineering
Curated reverse-engineering tools and learning resources for binaries, apps, firmware, formats, and protocols.
GrammaTech / ddisasm
A fast and accurate disassembler
dyninst / dyninst
DyninstAPI: Tools for binary instrumentation, analysis, and modification.
lkimuk / ReArk
An intelligent reverse engineering and AI-assisted analysis tool for HarmonyOS NEXT (HAP/APP/ABC), Android (APK/AAB), iOS (IPA), and native PE/ELF/Mach-O binaries.
Noelo-Lab / kuna
An agent-first decompiler designed to be refined by other agents. Kuna is written in Rust and was originally ported from Ghidra.
dmendel / bindata
BinData - Reading and Writing Binary Data in Ruby
fkie-cad / friTap
Simplifying encrypted traffic analysis for researchers by making protocol decryption effortless.
B2R2-org / B2R2
B2R2 is a fully managed binary analysis framework written in F#. It provides a rich set of algorithms, functions, and tools for reverse engineering, program analysis, and binary-level inspection.
0sec-labs / 0
The multiplayer AI offensive security OS - open, self-improving, extensible. Find, verify, and fix vulnerabilities.
bl4ckr0ss3 / knife
A terminal-first reverse engineering toolkit in Rust: PE/ELF/Mach-O analysis through CLI, TUI, and MCP. Installs as knife.
Ablation-Tool / ablation
Ablation is an autonomous reverse engineering system.
elliottophellia / Ryuumonbuchi
Maybe the headless Ghidra MCP you are looking for.
N0zoM1z0 / dx-ball
Reconstructing DX-Ball 1.07 with REA, backed by original-x86 differential tests and pinned MSVC byte-exact oracles.
1rhino2 / fnprint
match functions in binaries by what they do, not what their bytes look like. behavioral function fingerprinting via microexecution.
claimore22 / ps5rs
PS5 binary analysis, virtual loading, and host-side emulation framework: SELF/ELF/PRX parsing, NID resolver, import analysis, interactive dashboards, and a loader + emulator pipeline with pure-Rust HLE modules.
HexLasso / FF-16-TUI
Interactive static pattern discovery tool to locate structures from frequent patterns
valorisa / Reverse-Engineer-Anything
Guide pédagogique non officiel en français sur REA (Reverse Engineer Anything) : analyser des applications et des binaires avec un agent de code via MCP et CLI, Hopper ou Ghidra, preuves à l'appui. Inclut le cadre légal de la rétro-ingénierie. Projet amont : morluto/rea.
xqzme69 / A2MBA-LLVM
LLVM 21 pass plugin for A²MBA architectural and anti-generalization hardening of mixed Boolean-arithmetic expressions.
czcdr / dsh-plugin-rea
第三方适配插件：把上游 REA（github.com/morluto/rea）的 MCP 服务接入 DeepSeek Harness，提供 mcp__rea__* 工具。2.x 会自动准备 Node、REA CLI、JDK 与 Ghidra 并把那一行接好；逆向分析能力全部由上游 REA 提供。