
z3
High-performance SMT solver for automated theorem proving, constraint solving, and program verification. Supports multiple theories and language…

High-performance SMT solver for automated theorem proving, constraint solving, and program verification. Supports multiple theories and language…

pefile is a Python module to read and work with PE (Portable Executable) files

.NET Decompiler with support for PDB generation, ReadyToRun, Metadata (&more) - cross-platform!

PE file viewer/editor for Windows, Linux and MacOS.

Program for determining types of files for Windows, Linux and MacOS.

User-mode x86_64 binary emulator for malware analysis and reverse engineering. Supports PE, ELF, memory dumps, and raw binaries with syscall tracing,…

An interactive disassembler for the CPU 6502, focused on Commodore 8-bit computers. Features a TUI with modern features like x-ref, undo/redo, flow…

LLVM-native binary analysis and emulation platform that lifts AArch64 and x86_64 machine code to LLVM IR for instrumentation, deobfuscation, and…

Walk any memory dump. Find what's hidden. Linux + Windows kernel forensics from a single static Rust binary — no Python required.

Weight-level LLM forensics: diff model weights, detect fine-tunes, merges and disguised derivatives, and surface tokens a fine-tune promotes or…

Runtime instrumentation framework for building dynamic analysis tools: tracing, profiling, code coverage, memory debugging, fuzzing, and disassembly…

Cross-platform instrumentation and introspection library written in C

Desktop GUI for the REA reverse engineering MCP: code browser with listing, decompiler and function graph, plus 229 analysis tools and an AI agent in…

XMachOViewer is a Mach-O viewer for Windows, Linux and MacOS

A pure-Python library, app and MCP that lets you inspect, modify and search the memory of any running process in a few lines of Python :snake: .

Free and Open Source Reverse Engineering Platform powered by rizin

Automated DLL Hijacking Discovery, Validation, and Confirmation. Turning local misconfigurations into weaponized, confirmed attack paths.

Static deobfuscation toolkit for compiled V8 JavaScript bytecode, focusing on JSCeal payloads. Provides pattern-driven filters, control-flow…