#1Binary reverse engineering, disassembly, decompilation, and patching tools.
Kitploit recommended

Automated firmware analysis and exploit toolkit for CVE-2022-27255, a Realtek eCos SDK SIP ALG buffer overflow affecting 30+ router models. Includes…

Kernel-mode Windows driver for real-time detection of process injection techniques, including shellcode, DLL, and reflective injection, with syscall…

Proof-of-concept for CVE-2023-4863, a heap buffer overflow in WebP image decoding. Demonstrates the code_lengths trigger mechanism discovered by…

DrSemu - Sandboxed Malware Detection and Classification Tool Based on Dynamic Behavior

A stealthy, fully syscalled C/C++ userland anti-debugging library for Windows, designed to protect software from reverse engineering

A security-first MCP server that empowers AI agents to perform automated reverse engineering, malware analysis, forensics, vulnerability research,…

Use IDA PRO HexRays decompiler with OpenAI(ChatGPT) to find possible vulnerabilities in binaries

ELEGANTBOUNCER is a detection tool for file-based mobile exploits.

Easily retargetable and hackable interactive disassembler with IDAPython-compatible plugin API

Frida-based in-process fuzzing suite with AFL++ proxy, standalone active/passive modes, and shared memory communication for high-performance…

C++ library to load DLLs directly from memory without touching disk, with exception handling support, enabling stealthy code execution and evasion of…

CMake build of Ghidra's SLEIGH processor specification library, providing standalone disassembly and p-code lifting engines for reverse engineering…

Quokka: A Fast and Accurate Binary Exporter

ATrace is a tool for tracing execution of binaries on Windows.

cerberus-re is a local Apple-focused reverse-engineering workbench for building a repeatable three-headed static/dynamic/instrumentation loop around…

Simulate the behavior of AV/EDR for malware development training.

Ghidra plugin that enhances reverse engineering by fixing missed disassembly, detecting functions, labeling crypto constants, and renaming functions…

A blazing fast™ multithreaded ROP Gadget finder. ropper / ropgadget alternative (currently x86 only)