
IDAssist
AI-Powered Reverse Engineering Plugin for IDA Pro

AI-Powered Reverse Engineering Plugin for IDA Pro

Rust-based XSS scanner with context-aware payload selection, WAF detection and bypass, crawling, blind XSS callbacks, and static DOM sink analysis.

UNIX-like reverse engineering framework and command-line toolset

An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.

MCP server packaging a three-tier penetration-testing methodology: attack-surface reconnaissance, source-to-sink static analysis, and live finding…

Know what changed inside your Electron release: diff two builds for IPC, preload, windows, fuses and hosts, with file:line. CLI, CI gate, MCP server.

A curated list of awesome Android Reverse Engineering training, resources, and tools.

GUI analyzer for deep-diving into PDF files. Detect malicious payloads, understand object relationships, and extract key information for threat…

Extracts dynamically loaded JavaScript files by statically analyzing website HTML and JS, detecting webpack chunks, import() lazy loading, and source…

FortinetHunter (@YogSoth0) binary cracking application. Part of CTF for FortinetHunter. ELF door: a stripped Nuitka onefile, an XOR-scrambled…

Browser-local security monorepo with six modules for mobile APK/IPA triage, client-side DAST fuzzing, OSINT directories, offline AI threat scoring,…

Offline single-binary web app that ingests CycloneDX, SPDX and syft SBOMs, runs an ensemble of CVE scanners, enriches findings with EPSS, CISA-KEV…

Static analyzer for Flutter/Dart AOT snapshots — recovers function names, class hierarchies, call graphs, and behavioral signals from libapp.so…

A MCP Debugger Server for Windows executables (x86 and x64). Exposes debugger functionality as MCP Tools for static / dynamic analysis of the…

Cross-check the views of your attack surface and find the endpoints that cannot corroborate each other.

A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on…

Penetration testing and auditing toolkit for Android apps.

Find every API request a web app makes, from the JavaScript it ships: method, URL, body, headers and GraphQL operations. One command.