An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.
AI-driven malware analysis framework with 30+ integrated tools, web REPL, and MCP server
Find, verify, and analyze leaked credentials
Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.
The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.
Android Full-Stack Device Control Platform: WebRTC/H.264 remote desktop, UI/OCR/image-matching automation, one-click MITM, built-in Frida, proxy/VPN/frp/P2P networking, MCP/Agent, 160+ APIs, designed for multi-device clusters and engineered deployments.
Analyze ELF binaries like a boss πΌπ΅οΈββοΈ
Triton is a dynamic binary analysis library. Build your own program analysis tools, automate your reverse engineering, perform software verification or just emulate code.
Platform for Architecture-Neutral Dynamic Analysis
Mobile Edge-Dynamic Unified Security Analysis
Find leaked secrets everywhere.
Mutation testing for Ruby. AI writes your code. AI writes your tests. But who tests the tests?
Radare2 and Frida better together.
Aircraft design optimization made fast through computational graph transformations (e.g., automatic differentiation). Composable analysis tools for aerodynamics, propulsion, structures, trajectory design, and much more.
An analysis tool for Python that blurs the line between testing and type systems.
Detect secrets + live validation. Map blast radius. Revoke fast. Use the CLI or embed in Rust and Python.
βοΈ A curated list of dynamic analysis tools and linters for all programming languages, binaries, and more.
Curated reverse-engineering tools and learning resources for binaries, apps, firmware, formats, and protocols.
match functions in binaries by what they do, not what their bytes look like. behavioral function fingerprinting via microexecution.
Browser-based Android console, APK decompiler and security analyzer. Mirror, logcat, shell, Frida, jadx, and static and dynamic analysis, with no drivers or adb server.