
ida-pro-mcp
Local-first, deterministic MCP server for IDA Pro/Home: 109 strict-schema reverse-engineering operations, evidence-backed findings, and policy-gated…

Local-first, deterministic MCP server for IDA Pro/Home: 109 strict-schema reverse-engineering operations, evidence-backed findings, and policy-gated…

iOS Syscall Explorer for IDA 9.X

Use Prolog to analyze memory dumps and stopped live processes in WinDbg.

Minimal ELF inspector written in C for quick binary layout inspection

research on finding the bug and fix of CVE-2026-84616 and CVE-2026-84607

Frida-based tool that ports Cheat Engine's MonoDataCollector to Android and iOS, enabling runtime Mono/IL2CPP data collection and memory inspection…

Heap analysis tooling for mempool

A tool to manipulate Schneider Electric PLC archive files

Walk any memory dump. Find what's hidden. Linux + Windows kernel forensics from a single static Rust binary — no Python required.

IDA Pro processor modules adding disassembly support for uncommon CPU, DSP, and GPU architectures including XMOS xCORE, TI C7x/PRU, MicroBlaze, and…

Reverse engineering research of ASRock AsrDrv103.sys (CVE-2020-15368), covering its driver interface, encrypted request protocol, and privileged…

Static Decryptor for IcedID Malware

Benchmark datasets and synthesis artifacts for QSynth, containing Tigress-obfuscated C functions, x86_64 binaries, execution traces, ground truth,…

Universal signature generation for any system function from all Windows Builds using Winbindex

Python tool for decrypting W32/Phase modules

Ghidra processor description module for NEC/Renesas v810 and v830 families

An updated Frida iOS dump tool supporting the latest Frida 17.5.2 APIs