
Manalyze
Static analyzer for PE executables with plugin-based detection of packers, compilers, suspicious imports, cryptographic constants, and ClamAV…

Static analyzer for PE executables with plugin-based detection of packers, compilers, suspicious imports, cryptographic constants, and ClamAV…

x64 binary obfuscator for PE files with control flow flattening, anti-disassembly, import obfuscation, and instruction mutation to hinder reverse…

Custom PE loading and manipulation library for manual mapping, IAT hooking, memory dumping, and rebuilding imports for malware analysis and reverse…

Hex-Rays Decompiler plugin for better code navigation

Library for lifting machine code to LLVM bitcode

A Coverage Explorer for Reverse Engineers

Lua Decompiler for lua 5.1 , 5.2 and 5.3

A library for creating, reading and editing PE files and .NET modules.

Distributed, code-coverage guided snapshot-based fuzzer for user and kernel-mode targets on Windows and Linux, with emulator and hypervisor backends.

Low-level library for encoding and decoding IA32/Intel64 x86 instructions, exposing APIs for instruction length, operands, categories, control-flow…

PE file viewer/editor for Windows, Linux and MacOS.

IDA plugin and loader for UEFI firmware analysis and reverse engineering automation

Deep ghidra decompiler and sleigh disassembler integration for rizin

Run Beacon Object Files (BOFs) outside Cobalt Strike by parsing 64-bit COFF object files, with Beacon-compatible argument generation and helper…

SigFlip is a tool for patching authenticode signed PE files (exe, dll, sys ..etc) without invalidating or breaking the existing signature.

A helper script for unpacking and decompiling EXEs compiled from python code.

IDAPython tool for creating automatic C++ virtual tables in IDA Pro

Decrypts Intel Atom microcode updates and unpacks XuCode with recovered RC4 keys, revealing internal CPU microcode structures for hardware security…