morluto / awesome-reverse-engineering

# Awesome Reverse Engineering 
> **Featured: REA** — Agent-oriented reverse-engineering tools, from application behavior to native binaries. By the creators of awesome-reverse-engineering.
A curated starting point for understanding binaries, applications, firmware, file formats, and protocols.
Find a tool by the work you need to do. Each entry describes its purpose; commercial tools are marked **commercial**. This is an initial selection, open to additions and corrections.
## Start here
| Your task | Start with |
| --- | --- |
| Learn assembly and reversing fundamentals | Learning |
| Identify an executable and its capabilities | File identification and triage |
| Read native code or step through it | Native analysis and Debuggers |
| Trace calls or instrument a running program | Dynamic instrumentation and tracing |
| Examine a suspicious file, process, or memory image | Malware analysis |
| Inspect an APK, .NET assembly, or Java program | Android and managed code |
| Inspect an iOS app, macOS binary, or Apple firmware | iOS and macOS |
| Unpack a Python, Go, Unity, Godot, or obfuscated .NET program | Language runtimes and packagers |
| Understand browser behavior or an undocumented protocol | Web and protocols |
| Extract firmware or inspect a binary format | Firmware and hardware and File formats |
| Compare builds or automate an investigation | Diffing and analysis frameworks and AI-assisted analysis |
## Contents
- Learning
 - Books
- File identification and triage
- Native analysis
- Debuggers
- Dynamic instrumentation and tracing
- Malware analysis
- Android and managed code
- iOS and macOS
- Language runtimes and packagers
- Web and protocols
- Firmware and hardware
- File formats
- Diffing and analysis frameworks
- AI-assisted analysis
- Practice and communities
- Related lists
- Contributing and maintenance
- License
## Learning
- Azeria Labs - ARM assembly tutorials with exercises for learning registers, memory, and calling conventions.
- Compiler Explorer - Compiles code in the browser with many compilers and shows the generated assembly, for seeing how source constructs and optimization levels translate to machine code.
- Corkami - Visual references and posters explaining binary formats and file structures, including executable-format layouts.
- Nightmare - Course built from annotated CTF challenges, progressing from assembly and reversing basics to binary exploitation.
- OpenSecurityTraining2 - Structured courses in assembly, architecture, debugging, and reverse engineering.
- pwn.college - Free courses with hands-on challenges in Linux, assembly, reverse engineering, and binary exploitation, run in a browser-accessible environment.
- Reverse Engineering for Beginners - Free book connecting compiled C and C++ examples to assembly across several architectures.
- RPISEC Modern Binary Exploitation - Course materials and labs covering reverse engineering, memory corruption, and exploitation; no commits since December 2021, so labs may n