
p0tools
Collection of Google Project Zero vulnerability research documents and small standalone security tools, including exploitation and…

Collection of Google Project Zero vulnerability research documents and small standalone security tools, including exploitation and…

Fast Android APK decompiler front-end that queries compiled DEX artifacts directly, extracting classes and cross-references in milliseconds without…

Top-level repository for LFI: Practical, Efficient, and Secure Software-based Sandboxing

MCP server integrating IDA Pro with AI agents, featuring a stateless gateway for multi-session management, a relational SQL query engine for binary…

Python bindings for the Icicle emulator, enabling grey-box firmware fuzzing, binary emulation, and reverse-engineering workflows across x64 and ARM64…

Ghidra Extension to integrate BinDiff for function matching

A byte code analyzer for finding deserialization gadget chains in Java applications

A MCP Debugger Server for Windows executables (x86 and x64). Exposes debugger functionality as MCP Tools for static / dynamic analysis of the…

Research project reverse-engineering Windows Security Center COM interfaces to trace AV registration through ATL, vtable, WSCAPI, and RPC, with…

A Full-Featured HexEditor compatible with Linux/Windows/MacOS

RetDec is a retargetable machine-code decompiler based on LLVM.

Windows BYOVD research on DCRCVDrv.sys and Alinubx.sys, reverse engineering their kernel primitives, IOCTL surfaces, and detection opportunities.

Unofficial revival of the well known .NET debugger and assembly editor, dnSpy

This is an experimental project for [resmack](https://gitlab.com/d0c-s4vage/resmack) to figure out the best methods for instrumenting target…

Tools to work with android .dex and java .class files

Cross-platform library to parse, modify, and abstract ELF, PE, and MachO executable formats. Supports C++, Python, and Rust APIs with disassembler,…

This repo contains instructions to reproduce CVE-2025-13425: Null Pointer dereference / Array over-indexing vulnerability that I found in Google's…

Disassemble ANY files including .so (NDK, JNI), Windows PE(EXE, DLL, SYS, etc), linux binaries, libraries, and any other files such as pictures,…