Tools

bootleg/ret-sync

ret-sync is a set of plugins that helps to synchronize a debugging session (WinDbg/GDB/LLDB/OllyDbg2/x64dbg) with IDA/Ghidra/Binary Ninja…

b2r2-org/b2r2

B2R2 is a fully managed binary analysis framework written in F#. It provides a rich set of algorithms, functions, and tools for reverse engineering,…

nccgroup/blackboxprotobuf

Blackbox Protobuf is a set of tools for working with encoded Protocol Buffers (protobuf) without the matching protobuf definition.

nccgroup/asafw

Set of scripts to deal with Cisco ASA firmware [pack/unpack etc.]

withsecurelabs/garbageman

GarbageMan is a set of tools for analyzing .NET binaries through heap analysis.

dodo-sec/kpot-string-decrypter

IDA python scripts to decrypt strings from KPOT and set those as comments

cmatthewbrooks/r2kit

A set of scripts for a radare-based malware code analysis workflow

radareorg/radare2

UNIX-like reverse engineering framework and command-line toolset

hugsy/gef

GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux

xoreaxeaxeax/sandsifter

The x86 processor fuzzer

theopolis/uefi-firmware-parser

Parse BIOS/Intel ME/UEFI firmware related structures: Volumes, FileSystems, Files, etc

matthieu-hackwitharts/win32_offensive_cheatsheet

Win32 and Kernel abusing techniques for pentesters

battelle/sandsifter

The x86 processor fuzzer

theqmaks/phantom-frida

Build anti-detection Frida server from source. ~90 patches covering 16 detection vectors, weekly auto-builds with random names.

zeromemoryex/amsi-killer

Lifetime AMSI bypass

denuvosoftwaresolutions/simba

Efficient Deobfuscation of Linear Mixed Boolean-Arithmetic Expressions

nmantani/fileinsight-plugins

FileInsight-plugins: decoding toolbox of McAfee FileInsight hex editor for malware analysis