Tools

lifting-bits/sleigh

CMake build of Ghidra's SLEIGH processor specification library, providing standalone disassembly and p-code lifting engines for reverse engineering…

ejfkdev/jscd

Reverse bytenode .jsc (V8 code cache) to JavaScript — static, pure Rust, no patched V8/Node. Node 8→26 / V8 5.8–14.6; 25k .jsc tested, 0 fail.

atomdrift-project/scan

0-day malware detection for binaries, source & scripts (that doesn't suck)

ylca0/idalib-cli

Agent-native CLI wrapping IDA Pro IDALib for stateless, JSON-output binary analysis: disassembly, Hex-Rays decompilation, CFG, xrefs, strings, and…

jaf0rk/cve-2026-3909

Proof-of-concept exploit for CVE-2026-3909, a Chromium Skia out-of-bounds vulnerability, with patches and crash analysis for reliable triggering in…

trailofbits/polytracker

An LLVM-based instrumentation tool for universal taint tracking, dataflow analysis, and tracing.

chichou/grapefruit

Open-source mobile security testing suite for iOS and Android. Previously Passionfruit

1rhino2/fnprint

match functions in binaries by what they do, not what their bytes look like. behavioral function fingerprinting via microexecution.

worksbutnottested/lightkeeper

Maps execution-coverage data onto Ghidra disassembly to highlight visited code paths and accelerate reverse-engineering workflows.

zxgio/ghidra_stack_strings

A script to detect stack-strings by using emulation (leveraging Unicorn)

fuzzysecurity/fermion

Fermion, an electron wrapper for Frida & Monaco.

binsec/xyntia

Xyntia, the black-box deobfuscator

zer0condition/reversekit

x64 Dynamic Reverse Engineering Toolkit

hasherezade/pesieve-go

Golang bindings for PE-sieve

hari-prasaanth/thick-client-pentest-checklist

A OWASP Based Checklist With 80+ Test Cases

redteamsocietegenerale/dllirant

DLLirant is a tool to automatize the DLL Hijacking researches on a specified binary.

r00tkitsmm/pishi

Pishi is a code coverage tool like kcov for macOS.

void-stack/vmunprotect.dumper

VMUnprotect.Dumper can dynamically untamper VMProtected Assembly.