#1
burrowers/garbleObfuscates Go builds by wrapping the Go toolchain, replacing identifiers, package paths, and position data with hashes and stripping debug and build…
mandiant/speakeasyWindows恶意软件仿真框架，可在建模运行时环境中执行二进制文件、驱动程序和Shellcode，模拟API、进程/线程行为、文件系统、注册表和网络活动，生成结构化JSON报告。
yuatemycat/superghidraPython toolkit accelerating Ghidra with a cached daemon, ARM64 P-code lifting, Z3 equivalence proofs, GPU-accelerated scanning, binary diffing, and…
gallopsled/pwntoolsCTF框架与漏洞利用开发库
joernio/joern基于代码属性图的 C/C++/Java/二进制/JavaScript/Python/Kotlin 开源代码分析平台。Discord https://discord.gg/vv4MH284Hc
gchq/cyberchef网络瑞士军刀 - 用于加密、编码、压缩和数据分析的网络应用
ch0pin/rdxA native APK and DEX decompiler written in Rust
radareorg/radare2类 UNIX 逆向工程框架与命令行工具集
st0rn/siglensWindows artifact analysis toolkit that maps AV detections to PE offsets, sections, RVA/VA and strings, with YARA, AMSI, capa and multi-engine…
mwemuorg/mwemuPure Rust x86 hardware emulator and Windows process simulator for malware analysis, shellcode emulation, and payload unpacking. Supports 32/64-bit PE…
recurse-labs/recurseAgentic reverse engineering IDE with a pure-Rust multi-architecture disassembler, native decompiler, debugger, and LLM agent for binary analysis and…
faicalom/zte-mf904q-reverse-engineeringZTE MF904Q 引导加载程序、固件提取与逆向工程的公开研究文档及源码审查。
tjnel/certgraveyard_yara从 Cert Central 受损证书数据库中自动生成 YARA 规则。
pwndbg/pwndbg借助 GDB 和 LLDB 轻松实现漏洞利用开发与逆向工程
