工具

ngwg/ceasta

disassembler, decompiler and debugger in one, with a built-in mcp server: point an ai at a binary and it can debug it, not just read it. ida-style…

gaasedelen/lighthouse

面向逆向工程师的覆盖率浏览器

recurse-labs/recurse

Agentic reverse engineering IDE with a pure-Rust multi-architecture disassembler, native decompiler, debugger, and LLM agent for binary analysis and…

akatorich/kernelflirt

Windows 内核级调试器，具有 OllyDbg/IDA 风格的 UI、软件和硬件断点、PDB 符号、反编译器，以及 17 个用于在虚拟机中进行逆向工程和恶意软件分析的插件。

wxxsfxyzm/ghostlock-galaxy

Root your Galaxy using CVE-2026-43499

bifrost-proxy/bifrost

High-performance HTTP/HTTPS/SOCKS5 MITM proxy in Rust with TLS interception, rule-based request rewriting, traffic capture, breakpoints, script…

bkerler/mtkclient

Mediatek 刷写与修复工具

itm4n/pentest-windows

Windows 内部研究与利用技术合集，涵盖权限提升、令牌滥用以及面向红队和渗透测试人员的后渗透技巧。

hack-with-github/awesome-hacking

面向黑客、渗透测试人员和安全研究人员的各类精彩资源列表合集。

tekkenbugattii/linusware-source-code-internal

逆向工程的 Roblox/Luau 运行时引擎，具备 VM 挂钩、操作码重映射、能力提升以及 UNC 脚本环境，用于执行任意脚本。

rasetsuu/vmp-devirt

Trace-assisted VMProtect devirtualization research platform: version front-ends feed a shared Remill/LLVM backend to lift handlers, recover dataflow,…

tihanyin/rex-skill

REx@Skill - 面向二进制漏洞发现的智能体逆向工程执行技能

blacktop/ipsw

iOS/macOS 研究瑞士军刀

1-3-7/disrobe

Rust CLI 套件，通过一条自动流水线对 15+ 生态系统中的原生代码、字节码、脚本、固件和应用包进行静态反编译、去混淆和解包。

gmh5225/awesome-game-security

Curated index of game security research: anti-cheat internals, DMA attacks, reverse engineering, kernel/mobile protections, and graphics API hooking…

tomer8007/widevine-l3-decryptor

一个演示绕过Widevine L3 DRM的Chrome扩展程序

hfiref0x/kdu

Windows 内核驱动工具，利用存在漏洞的已签名驱动（BYOVD）绕过 DSE、加载未签名驱动、劫持受保护进程并转储进程内存。