#1Binary reverse engineering, disassembly, decompilation, and patching tools.
Kitploit recommended

Open source Windows x64 PE packer and crypter. Compresses and encrypts executables with a custom virtual machine into a self extracting stub.
A utility for playing with cryptography, geared towards ransomware analysis.

FileInsight-plugins: decoding toolbox of McAfee FileInsight hex editor for malware analysis

eBPF-based Linux rootkit detector using multi-channel cross-view analysis (sched_switch, NMI, /proc) to detect DKOM, tracepoint tampering, and…

Platform security assessment tool for dumping and analyzing UEFI/SMM registers, PCI config space, physical memory, SPI flash, and S3 bootscripts with…

CERT Kaiju is a binary analysis framework extension for the Ghidra software reverse engineering suite. This repository is a "mirror" -- please file…

Native multi-arch disassembler & decompiler - PE/ELF/Mach-O, x86/x64/ARM64, Lua scripting, RTTI recovery


A powerful decompiler that lets you reverse-engineer React Native mobile apps by converting their compiled Hermes bytecode (.hbc) files back into…

Anti-LLM obfuscation via finger counting

Vulnerability research assistant that extracts pseudocode from the IDA Hex-Rays decompiler.

Disassembler, decompiler and x64dbg-style debugger for PE/ELF binaries with IDA-style listing, function graphs, Lua plugins, CLI, and a built-in MCP…

A .NET malware loader, using API-Hashing to evade static analysis

An automatic unpacker and logger for DotNet Framework targeting files

Efficient Deobfuscation of Linear Mixed Boolean-Arithmetic Expressions

Checker for Lifetimes and other Refinement types

Binary & scripts associated with "The Poor Man's Obfuscator" presentation