
Process-Dump
Windows tool for dumping malware PE files from memory back to disk for analysis.

Windows tool for dumping malware PE files from memory back to disk for analysis.

IDAPython tool for creating automatic C++ virtual tables in IDA Pro

SigFlip is a tool for patching authenticode signed PE files (exe, dll, sys ..etc) without invalidating or breaking the existing signature.

Tool for reverse engineering macOS/OS X

DR.CHECKER : A Soundy Vulnerability Detection Tool for Linux Kernel Drivers

Robber is open source tool for finding executables prone to DLL hijacking

An LLVM-based instrumentation tool for universal taint tracking, dataflow analysis, and tracing.

A fuzzing tool for closed-source binaries based on Unicorn and LibFuzzer


ELEGANTBOUNCER is a detection tool for file-based mobile exploits.

ATrace is a tool for tracing execution of binaries on Windows.

Automated differential fuzzing tool for cryptographic software that detects implementation errors, compliance failures, and side-channel leaks…

A Reverse Engineering Tool for py2exe applications.

Static-first research tool for unpacking Nuitka-compiled binaries: extracts constants, modules, recovers .pyc files, and generates analysis reports.

Runtime schema + RTTI extraction tool for Deadlock, CS2, Dota, and others (Source 2). No source2gen required.

C-shellcode to hex converter, handy tool for paste & execute shellcodes in IDA PRO, gdb, windbg, radare2, ollydbg, x64dbg, immunity debugger & 010…

A command line Windows API tracing tool for Golang binaries.
