
ai-reverse-engineering
AI-Assisted Reverse Engineering with Ghidra

AI-Assisted Reverse Engineering with Ghidra

MCP server integrating IDA Pro with AI agents, featuring a stateless gateway for multi-session management, a relational SQL query engine for binary…

Injectable real-mode x86 debugger for BIOS reverse engineering and arbitrary real-mode code debugging via serial cable, with GDB integration and…

A Full-Featured HexEditor compatible with Linux/Windows/MacOS

BPF-based Linux IPC tracer for pipes, signals, Unix sockets, loopback, and pseudoterminals with metadata and content capture, filtering, and JSON…

IDA Pro plugin for filtering functions by assembly patterns, byte sequences, string/name references, and size constraints, with rule-based search and…

Toy scripts for playing with WinDbg JS API

An python vm injector with debug tools, based on gdb.

User-mode x86_64 binary emulator for malware analysis and reverse engineering. Supports PE, ELF, memory dumps, and raw binaries with syscall tracing,…

IDA plugin for reverse-engineering and dynamic interactions with the Binsec platform

An interactive disassembler for the CPU 6502, focused on Commodore 8-bit computers. Features a TUI with modern features like x-ref, undo/redo, flow…

Disassembler, decompiler and x64dbg-style debugger for PE/ELF binaries with IDA-style listing, function graphs, Lua plugins, CLI, and a built-in MCP…

Interact with Frida devices, processes, and scripts directly from your browser.

ShowStopper is a tool for helping malware researchers explore and test anti-debug techniques or verify debugger plugins or other solutions that clash…

A proof of concept demonstrating instrumentation callbacks on Windows 10 21h1 with a TLS variable to ensure all syscalls are caught.

Set of scripts to deal with Cisco ASA firmware [pack/unpack etc.]

Define and match user-defined graph patterns against binary control flow graphs using a Capstone-based disassembler, with CLI, Python bindings, and…

Rust port of REA, a local-only reverse-engineering tool with CLI/MCP workflows and a native Ghidra worker