
capa
Rule-based static and dynamic analysis tool that identifies capabilities in PE, ELF, .NET, and shellcode files, mapping them to MITRE ATT&CK…

Rule-based static and dynamic analysis tool that identifies capabilities in PE, ELF, .NET, and shellcode files, mapping them to MITRE ATT&CK…

Program for determining types of files for Windows, Linux and MacOS.


Portable Executable reversing tool with a friendly GUI

A reversing plugin for cross-decompiler collaboration, built on git.

Universal Windows extraction tool that detects unknown files and routes them to the right bundled extractor.

Command-line and GUI tool for decompiling Android Dex and APK files into readable Java source code, with resource decoding, deobfuscation, and Smali…

Package database for r2pm, the radare2 package manager, providing install hooks and binary packages for radare2 plugins, scripts, and related…

UPX - the Ultimate Packer for eXecutables

Tool that allows comparing symbol, type and syscall information of Microsoft Windows binaries across different versions of the OS, using a Web UI…

A binary and file access authorization system for macOS.

Windows privilege escalation discovery tool that parses Process Monitor boot logs to identify DLL hijacking, weak ACLs, and other elevation paths,…

An automated Themida / Code Virtualizer / WinLicense (v3.0-v4) unpacker and dump fixer tool

A tool for reverse engineering Android apk files

An intelligent reverse engineering and AI-assisted analysis tool for HarmonyOS NEXT (HAP/APP/ABC), Android (APK/AAB), iOS (IPA), and native…

ELEGANTBOUNCER is a detection tool for file-based mobile exploits.

Record and replay framework for deterministic debugging of multi-threaded applications, enabling reverse execution, hardware watchpoints, and…

Rust port of REA, a local-only reverse-engineering tool with CLI/MCP workflows and a native Ghidra worker