#1Tools for decompiling, disassembling, and understanding malware internals and complex binaries.
Kitploit recommended

External read-only game overlay for Linux. Derived offsets, composed skeletons, optional kernel module for ptrace-independent memory reads and…
HTTP Proxy Analysis for reverse engineering protocol communication

A repository of SLEIGH support for rare processor ISAs

A tool to extract RTTI information from Delphi executables, written in pure Python

A lightweight hex editor and decompiler to solve your binary file analysis problems.

Live memory analysis detecting malware IOCs in processes, modules, handles, tokens, threads, .NET assemblies, memory address space and environment…

Wireshark plugin for dissecting the Telegram protocol

Android Malware Tracker

Modified luadec version to decompile TP-Link Archer C7 LUA firmware.

Decrypt and extract voice guidance MP3 prompts from Sony WH-1000XM4 encrypted voice packs. AES key extracted via Bluetooth firmware dump of the…

Human-friendly Thrift encoder/decoder

WinDbg plugin to trace module transitions from a debugged driver.

Walk x86-64 page tables by hand in qemu and gdb. Decompose a virtual address, follow cr3 through all levels of physical memory, and extract a flag…

WITCHCRAFT is a cyberdeck toolkit built for runners who dive deep into the mesh. It’s your all-in-one rig for data-ghosting, ICE-breaking, and…

WordPress CVE-2026-87902 LFI-to-RCE toolkit with a weaponized exploit chain (PEAR RCE, webshell, admin creation, loot) and a non-intrusive…

Local-first, deterministic MCP server for IDA Pro/Home: 109 strict-schema reverse-engineering operations, evidence-backed findings, and policy-gated…

Linux libfprint driver for the Focal-systems FT9201 (2808:93a9) USB fingerprint reader — runs FocalTech's own Windows matching engine natively on…

Visualizes repeated byte sequences in binary files to reveal hidden structure, supporting reverse engineering and pattern discovery without…