#1Tools for examining malware binaries and code without executing them (e.g., disassemblers, unpackers).
Kitploit recommended
nationalsecurityagency/ghidraGhidra is a software reverse engineering (SRE) framework
morluto/reaReverse engineer anything with agents, from app behavior down to native binaries.
skylot/jadxCommand-line and GUI tool for decompiling Android Dex and APK files into readable Java source code, with resource decoding, deobfuscation, and Smali…
x64dbg/x64dbgAn open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.
cloudflare/security-audit-skillA coding-agent skill for multi-phase security audits with independently verified, machine-readable findings
werwolv/imhex🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.
radareorg/radare2UNIX-like reverse engineering framework and command-line toolset
icsharpcode/ilspy.NET Decompiler with support for PDB generation, ReadyToRun, Metadata (&more) - cross-platform!
gitleaks/gitleaksFast, open-source static analysis tool for detecting hardcoded secrets like passwords, API keys, and tokens in git repositories, files, and stdin…
analysis-tools-dev/static-analysisCurated directory of static analysis (SAST) tools and linters for programming languages, configs, build tools, and CI, focused on improving code…
mobsf/mobile-security-framework-mobsfAutomated mobile application security testing framework for Android, iOS, and Windows. Performs static and dynamic analysis, malware detection, and…
ashishb/android-security-awesomeA collection of android security related resources
facebook/inferA static analyzer for Java, C, C++, and Objective-C
nvidia/skillspectorSecurity scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and…
owasp/mastgComprehensive OWASP guide for mobile app security testing, reverse engineering, and verifying MASVS/MASWE weaknesses through static, dynamic, and…
trailofbits/skillsTrail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows
google/magikaFast and accurate AI powered file content types detection
rizinorg/cutterFree and Open Source Reverse Engineering Platform powered by rizin
