
pe_tree
Python module for viewing Portable Executable (PE) files in a tree-view using pefile and PyQt5. Can also be used with IDA Pro and Rekall to dump…

Cross-platform library to parse, modify, and abstract ELF, PE, and MachO executable formats. Supports C++, Python, and Rust APIs with disassembler,…

C++ python bytecode disassembler and decompiler

Reverse engineering framework in Python

A cross-version Python bytecode decompiler

Python decompiler for 3.7-3.8 Stripped down from uncompyle6 so we can refactor and start to fix up some long-standing problems

A Python pickling decompiler and static analyzer

The ultimate AI-powered toolkit for python reverse engineering

IATelligence is a Python script that will extract the IAT of a PE file and request GPT to get more information about the API and the ATT&CK matrix…

A pure-Python library that lets you inspect, modify and search the memory of any running process in a few lines of Python :snake: .

An python vm injector with debug tools, based on gdb.

Python library for dissecting and parsing Cobalt Strike related data such as Beacon payloads and Malleable C2 Profiles

Python Command-Line Ghidra Decompiler

Python dumper/explorer for MCD Runtime Projects used by ODIS

A tool to extract RTTI information from Delphi executables, written in pure Python

AST-based Python code transformation & deobfuscation framework

Scanner: CVE-2026-31431 Linux kernel algif_aead Copy Fail vulnerability checker — Python PoC for heap overflow path

Modular GDB interface providing a visual dashboard with customizable panels for inspecting registers, source code, assembly, and program state during…