Ghidra is an NSA-created software reverse engineering framework with disassembly, decompilation, graphing, and scripting for compiled code.
A cross-platform hex editor with a C++-like pattern language for parsing and highlighting binary file structures.
Curated reverse-engineering tools and learning resources for binaries, apps, firmware, formats, and protocols.
Open-source user-mode binary debugger for Windows, built for reverse engineering and malware analysis of executables without source.
Offline disassembler for ARM64, ARM32, x86-64, x86 (32-bit), WebAssembly, .NET (CIL), and Java bytecode. Supports Mach-O, ELF, PE, APK, and IPA files from macOS, iOS, Linux, Android, and Windows. Runs entirely in your browser from a single HTML file. No installation, no internet connection, no file uploads.
UNIX-like reverse engineering framework and command-line toolset
An intelligent reverse engineering and AI-assisted analysis tool for HarmonyOS NEXT (HAP/APP/ABC), Android (APK/AAB), iOS (IPA), and native PE/ELF/Mach-O binaries.
Stop your AI from making things up — it proposes, deterministic tools decide, every claim checked against ground truth with evidence. Grounded facts and context survive resets. Reverse engineering is the proving ground. MCP server + CLI.
Agent-first reverse engineering for macOS, Windows and Linux: any ACP agent reads, renames and patches binaries, Android apps and GPU kernels next to you.
Exploit Development and Reverse Engineering with GDB & LLDB Made Easy
Capstone disassembly/disassembler framework for ARM, ARM64 (ARMv8), Alpha, BPF, Ethereum VM, HPPA, LoongArch, M68K, M680X, Mips, MOS65XX, PPC, RISC-V(rv32G/rv64G), SH, Sparc, SystemZ, TMS320C64X, TriCore, Webassembly, XCore and X86.
Reverse engineering framework in Python
Reko is a binary decompiler.
Driver 2 Playstation game reverse engineering effort
Ablation is an autonomous reverse engineering system
Guide pédagogique non officiel en français sur REA (Reverse Engineer Anything) : analyser des applications et des binaires avec un agent de code via MCP et CLI, Hopper ou Ghidra, preuves à l'appui. Inclut le cadre légal de la rétro-ingénierie. Projet amont : morluto/rea.
Program for determining types of files for Windows, Linux and MacOS.
Blazing fast and correct x86/x64 disassembler, assembler, decoder, encoder for Rust, .NET, Java, Python, Lua
DIE engine
Java decompiler, assembler, and disassembler
Heimdall is an advanced EVM smart contract toolkit specializing in bytecode analysis and extracting information from unverified contracts.
PE file viewer/editor for Windows, Linux and MacOS.
A library for creating, reading and editing PE files and .NET modules.
bddisasm is a fast, lightweight, x86/x64 instruction decoder. The project also features a fast, basic, x86/x64 instruction emulator, designed specifically to detect shellcode-like behavior.
—
Deep ghidra decompiler and sleigh disassembler integration for rizin
A fast and accurate disassembler
Reverse engineer and rewrite real mode DOS programs!
A local diffing tool for decompilation projects
B2R2 is a fully managed binary analysis framework written in F#. It provides a rich set of algorithms, functions, and tools for reverse engineering, program analysis, and binary-level inspection.
Rust implementation of SPIR-V module processing functionalities
A terminal-first reverse engineering toolkit in Rust: PE/ELF/Mach-O analysis through CLI, TUI, and MCP. Installs as knife.
Best Open-Source Luau Obfuscator and Decompiler Suite 2026
VMP分析工具
A practical guide to navigating a binary in IDA Pro
The Open Source Disassembler