
Capsulith
Run preserved ARM64 code in Node or a browser; inspect decoded image pixels and initialized memory.

Run preserved ARM64 code in Node or a browser; inspect decoded image pixels and initialized memory.
Use Prolog to analyze memory dumps and stopped live processes in WinDbg.

Rust port of REA, a local-only reverse-engineering tool with CLI/MCP workflows and a native Ghidra worker

Decompile and disassemble Python bytecode (.pyc/.pyo) back to readable source. Supports Python 2.0 - 3.15 (CPython, PyPy and other implementations).…

Python bindings for the Icicle emulator, enabling grey-box firmware fuzzing, binary emulation, and reverse-engineering workflows across x64 and ARM64…

Binary, coverage-guided fuzzer for Windows, macOS, Linux and Android

Disassembler, decompiler and x64dbg-style debugger for PE/ELF binaries with IDA-style listing, function graphs, Lua plugins, CLI, and a built-in MCP…

Cross-platform CUI process memory scanner built on Frida for finding, filtering, patching, and dumping live process memory during reverse engineering…

A helper script for unpacking and decompiling EXEs compiled from python code.

MCP server integrating IDA Pro with AI agents, featuring a stateless gateway for multi-session management, a relational SQL query engine for binary…

Evidence-focused malware reverse engineering with deep PE/.NET inspection, Ghidra reconstruction, AI cross-checks, YARA, and ELF debugging

PJSIP DNS Compression Pointer Heap OOB Read (Remote DoS)

Desktop workbench for AFL++ fuzzing, cross-architecture QEMU emulation, harness development, Ghidra headless analysis, custom mutators, and patch…

Low-level library for encoding and decoding IA32/Intel64 x86 instructions, exposing APIs for instruction length, operands, categories, control-flow…

Dynamic unpacker and import fixer for Themida/WinLicense 2.x and 3.x.

Dynamic unpacker based on PE-sieve

Analysis Plugin and Tools for Vivisect

Static config extractor for SmokeLoader samples that deobfuscates, unpacks, and emulates protected routines to recover final-stage C2 settings.