
pwndbg
Exploit Development and Reverse Engineering with GDB & LLDB Made Easy

Exploit Development and Reverse Engineering with GDB & LLDB Made Easy

Radare2 AI plugin using local or remote LLMs for decompilation, function explanation, vulnerability detection, renaming, and scripted reverse…

Ghidra is a software reverse engineering (SRE) framework

XMachOViewer is a Mach-O viewer for Windows, Linux and MacOS

Open-source malware analysis platform with static PE analysis, YARA pattern matching, VirusTotal integration, REST API, and Docker deployment for…

Reverse engineering assistant that uses a locally running LLM to aid with pseudocode analysis.

Pure-Go Java Decompiler and Serialization Operator

Headless-Ghidra toolkit for reverse engineering 32-bit DOS and Win32 games (1993-2010): own LE/LX loader, Watcom calling conventions, library…

Minimal machine architecture with LLVM compiler backend, Linux port, and virtual machine for creating self-contained software capsules that remain…

Portable Executable reversing tool with a friendly GUI

pefile is a Python module to read and work with PE (Portable Executable) files


Python Command-Line Ghidra MCP

A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on…

Quarkslab conference talks

A list of Capture The Flag (CTF) frameworks, libraries, resources and software for started/experienced CTF players 🚩

Windows tool for dumping malware PE files from memory back to disk for analysis.

Windows BYOVD research on DCRCVDrv.sys and Alinubx.sys, reverse engineering their kernel primitives, IOCTL surfaces, and detection opportunities.