
pe_tree
Python module for viewing Portable Executable (PE) files in a tree-view using pefile and PyQt5. Can also be used with IDA Pro and Rekall to dump…

Reverse engineering framework in Python

Browser-based frontend to gdb (gnu debugger). Add breakpoints, view the stack, visualize data structures, and more in C, C++, Go, Rust, and Fortran.…

A reverse engineering framework written in Python.

IDAPython tool for creating automatic C++ virtual tables in IDA Pro

Open source memory scanner written in C++

An LLM extension for Ghidra to enable AI assistance in RE.

Vibe Reverse Engineer with IDA SQL: An interface for IDA in SQL via live virtual tables

This is the main repository for metasm, a free assembler / disassembler / compiler written in ruby

Detect, analyze and uniquely identify crashes in Windows applications

Wireshark for MCP. A transparent proxy that shows every real tool call between your AI client and your MCP servers, live in your terminal.

A pure-Python library that lets you inspect, modify and search the memory of any running process in a few lines of Python :snake: .

Technical analysis and proof-of-concept exploit for CVE-2023-28252, a Windows Common Log File System (CLFS) driver privilege escalation vulnerability…

Live kernel signal observability tool using eBPF tracepoints to stream every signal raised on a Linux host, showing sender, target, disposition,…

Tool to make in memory man in the middle

Live, system-wide USB transfer sniffer in eBPF — decodes USB traffic inline (control SETUP, SCSI, HID) from two universal URB hooks. No usbmon, no…

A generic game/software hacking tool written from the ground up in Rust.

User-mode x86_64 binary emulator for malware analysis and reverse engineering. Supports PE, ELF, memory dumps, and raw binaries with syscall tracing,…