mastg

OWASP Mobile Application Security Testing Guide MASTG The OWASP Mobile Application Security Testing Guide MASTG is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration MASWE...

pip3line

Pip3line Codacy Badge Linux / MacOS Builds Windows Builds Raw bytes manipulation utility, able to apply well known and less well known transformations, quick binary search, network proxy interception and more. Install on Windows: Download the release zip here Remember to install/repair the VS...

nili

Nili Nili is a Tool for Network Scan, Man in the Middle, Protocol Reverse Engineering and Fuzzing. Prerequisites Python - Python Programming Language Scapy - Interactive Packet Manipulation Program Netzob - Protocol Reverse Engineering, Modeling and Fuzzing Installing Here is some Instructions...

LLM4Decompile

📊 Results | 🤗 Models | 🚀 Quick Start | 📚 HumanEval-Decompile | 📎 Citation | 📝 Paper | 🖥️ Colab | ▶️ YouTube Reverse Engineering: Decompiling Binary Code with Large Language Models Updates 2025-10-04: Release SK²Decompile: LLM-based Two-Phase Binary Decompilation from Skeleton to Skin. Phase 1...

ScratchABit

ScratchABit ScratchABit is an interactive incremental disassembler with data/control flow analysis capabilities. ScratchABit is dedicated to the efforts of the OpenSource reverse engineering community reverse engineering to produce OpenSource drivers/firmware for hardware not properly supported b...

rematch

|Read The Docs| |Gitter Chat| |Build Status| |Codacy Badge| |idaplugin PyPI| |server PyPI| rematch REmatch, yet another binary comparison tool. Rematch is still a work in progress and is not as feature-rich as we'd like it to be. Basic functionality is available at this point and more advanced...

httptoolkit

HTTP Toolkit...

ghidra

Dockerized Ghidra 构建 在 Ghidra 版本目录的根目录下运行以下命令。 root@kitploit: ./docker/build-docker-image.sh 这将构建一个 Ghidra Docker 镜像，其标签与 Ghidra 的发布版本相对应。 MODE 环境变量 Ghidra Docker 容器支持以下执行 MODE： gui headless ghidra-server bsim bsim-server pyghidra MODE 环境变量指定执行 Ghidra 的哪个入口点。 entrypoint.sh 脚本在容器启动时执行。 配置容器...

ghidra

Dockerized Ghidra Build From the root directory of your Ghidra release, run the following command. root@kitploit: ./docker/build-docker-image.sh This will build the ghidra docker image with a tag corresponding to the release version of Ghidra. The MODE environment variable The Ghidra Docker...

ida-pro-mcp

IDA Pro MCP Servidor MCP sencillo para permitir el vibe reversing en IDA Pro. https://github.com/user-attachments/assets/6ebeaa92-a9db-43fa-b756-eececce2aca0 Los binarios y el prompt del vídeo están disponibles en el repositorio mcp-reversing-dataset. Requisitos previos Python 3.11 o superior Usa...

rizin

Rizin Rizin es un framework de ingeniería inversa, nacido como un fork de radare2, con un enfoque en la usabilidad, las funcionalidades y la limpieza. Rizin es portátil y se puede utilizar para analizar binarios, desensamblar código, depurar programas, como herramienta forense, como editor...

AlphaGolang

AlphaGolang by Juan Andres Guerrero-Saade JAG-S @ SentinelLabs Description: AlphaGolang is a collection of IDAPython scripts to help malware reverse engineers master Go binaries. The idea is to break the scripts into concrete steps, thus avoiding brittle monolithic scripts, and mimicking the...

exploitation-course

OFFENSIVE SECURITY & REVERSE ENGINEERING OSRE Course This repository is for the Offensive Security and Reverse Engineering Offensive Software Exploitation Course I used to teaching at Champlain College and currently sharing it for free online check the YouTube channel for the recordings. Most of...

Firmware-analysis

Este repositorio no tiene un README...

gftrace

gftrace 一个用于 Golang 二进制文件的命令行 Windows API 跟踪工具。 注意： 此工具是一个概念验证和工作进行中的原型，请相应对待。欢迎反馈！ 工作原理？ 尽管 Golang 程序在构建方式和运行时行为方面包含许多细微差别，但它们仍然需要与操作系统层交互，这意味着在某些时候它们确实需要调用 Windows API 的函数。 Go 运行时包包含一个名为 asmstdcall 的函数，该函数是用于与 Windows API 交互的一种“网关”。由于这个函数预计会调用 Windows API...

barf-project

BARF : 二进制分析与逆向工程框架 二进制代码分析是计算机科学和软件工程许多领域中的关键活动，涵盖软件安全、程序分析到逆向工程。手动二进制分析是一项困难且耗时的任务，存在一些旨在自动化或协助人类分析师的软件工具。然而，大多数这些工具具有若干技术和商业限制，限制了学术界和从业者社区大部分人的访问和使用。 BARF...

protobuf-inspector

protobuf-inspector Simple program that can parse Google Protobuf encoded blobs version 2 or 3 without knowing their accompanying definition. It will print a nice, colored representation of their contents. Example: As you can see, the field names are obviously lost, together with some high-level...

lst2x64dbg

lst2x64dbg 此命令提取给定 LST 文件中的所有标签（该文件作为单一参数提供）。根据提取的标签，在当前目录中创建一个 x64dbg 数据库。 LST 文件可以在 IDA 中通过 文件 菜单生成：生成文件 - 创建 LST 文件... 示例 root@kitploit: $ lst2x64dbg sample.lst ghidra2x64dbg 此命令提取给定 CSV 文件中的所有标签（该文件作为单一参数提供）。根据提取的标签，在当前目录中创建一个 x64dbg 数据库。必须提供镜像基址值。 CSV 文件可以在 Ghidra 中通过 窗口 菜单选择 符号表 生成。...

replica

REPLICA TAME THE DRAGON ✨Features ⚡ Disassemble missed instructions - Define code that Ghidra's auto analysis missed ⚡ Detect and fix missed functions - Define functions that Ghidra's auto analysis missed ⚡ Fix 'undefinedN' datatypes - Enhance Disassembly and Decompilation by fixing 'undefinedN'...

ghidra-evm

Ghidra EVM Module In the last few years, attacks on deployed smart contracts in the Ethereum blockchain have ended up in a significant amount of stolen funds due to programming mistakes. Since smart contracts, once compiled and deployed, are complex to modify and update different practitioners ha...