apkprobe

APKprobe APK decompiler and secrets scanner for Android security research. Automatically extract API keys , endpoints , tokens , and other leaked credentials from Android applications. Works with .apk, .xapk, .dex, .jar, .class, .smali, .zip, .aar, .arsc, .aab files. Perfect for apk2url extractio...

awesome-ida-x64-olly-plugin

Awesome IDA, Ghidra, x64DBG, GDB & OllyDBG plugins A curated list of IDA, x64DBG, Ghidra, GDB and OllyDBG plugins. IDA is a powerful disassembler and debugger that allows to analyze binary, it also includes a decompiler. X64DBG is an open-source x64/x32 debugger for Windows. OllyDbg is a 32-bit...

drift-corpus

El Corpus Drift: Ring 0 Drift Corpus es el repositorio definitivo de código abierto de diferencias de parches del kernel de Windows. Estos artefactos se producen utilizando Drift Agent , el motor automático de ingeniería inversa de ByteRay y parte de la plataforma Argus-Systems. Con Drift, hemos...

ChaseHQ

Pulling apart Chase H.Q. for the ZX Spectrum Reverse engineering by David Thomas, 2023-2024 Project started: March 2023 This is an in-progress disassembly of the ZX Spectrum conversion of Chase H.Q. by Ocean Software. So far this only covers the 48K version and the first stage of the game. The 12...

VivisectION

VivisectION Emulation-Driven Reversing Toolset VivisectION is the cross-section of GUI Reversing, Emulation and Debugging, with an emphasis on using Emulation and other powerful Vivisect toys to aid in Reverse Engineering and Vulnerability Research. Among other things, VivisectION aka Ion is a...

Triton

Triton es una librería de análisis binario dinámico. Proporciona componentes internos que permiten construir herramientas de análisis de programas, automatizar la ingeniería inversa, realizar verificación de software o simplemente emular código. Ejecución simbólica dinámica Análisis dinámico de...

ida_kernelcache

idakernelcache: Un kit de IDA para analizar kernelcaches de iOS idakernelcache es un módulo de IDAPython para IDA Pro que facilita el trabajo con kernelcaches de iOS. El módulo proporciona funciones para: Convertir los nuevos punteros estáticos etiquetados de iOS 12 en punteros de kernel normales...

ida_kernelcache

idakernelcache: An IDA Toolkit for analyzing iOS kernelcaches idakernelcache is an IDAPython module for IDA Pro to make working with iOS kernelcaches easier. The module provides functions to: Convert iOS 12's new static tagged pointers into normal kernel pointers. Parse the kernel's PRELINKINFO...

JObfuscator

JObfuscator — Java Source Code Obfuscation & Protection JObfuscator is a source code obfuscator for the Java programming language. It can protect your Java source code and algorithms from hacking, cracking, reverse engineering, decompilation, and technology theft. JObfuscator employs a variety of...

hidden

Hidden 🇺🇦 Hidden ha sido desarrollado como una solución para tareas de ingeniería inversa e investigación. Es un controlador de Windows con una interfaz de modo de usuario que se utiliza para ocultar entornos específicos en su máquina Windows, como programas RCE instalados ej. procmon, wireshark,...

Reversecore_MCP

Reversecore MCP AI-Powered Reverse Engineering & Security Analysis via Model Context Protocol An MCP server that gives AI assistants like Claude and Cursor the ability to perform reverse engineering, malware analysis, vulnerability research, digital forensics, and source code auditing through...

protobuf-inspector

protobuf-inspector Programa simple que puede analizar blobs codificados en Google Protobuf versión 2 o 3 sin conocer su definición acompañante. Imprimirá una representación agradable y coloreada de su contenido. Ejemplo: Como puede ver, los nombres de los campos se pierden obviamente, junto con...

machofile

machofile machofile is a module to parse Mach-O binary files, with a focus on malware analysis and reverse engineering. Inspired by Ero Carrera's pefile, this module aims to provide similar capabilities but for Mach-O binaries instead. Reference material and documentation used to gain the file...

osx-re-101

osx & ios re 101 Work in progress as I am actively collecting these. Must read https://reverse.put.as/ https://blog.paloaltonetworks.com/tag/mac-os-x/ https://www.synack.com/blog/r-d-projects/os-x-security-research/ https://pewpewthespells.com/re.html https://github.com/bx/machO-tools...

ida-pro-mcp

IDA Pro MCP Servidor MCP sencillo para permitir el vibe reversing en IDA Pro. https://github.com/user-attachments/assets/6ebeaa92-a9db-43fa-b756-eececce2aca0 Los binarios y el prompt del vídeo están disponibles en el repositorio mcp-reversing-dataset. Requisitos previos Python 3.11 o superior Usa...

Hooketh

Hooketh Un conjunto de scripts que facilitan el trabajo con Frida, diseñados para ayudar a encontrar la función correcta a la que engancharse y luego modificarla. Uso Para ambos scripts, asumo que tienes un dispositivo conectado por USB o que tienes un emulador ejecutándose en la misma máquina...

paimei

PaiMei, is a reverse engineering framework consisting of multiple extensible components. The framework can essentially be thought of as a reverse engineer's swiss army knife and has already been proven effective for a wide range of both static and dynamic tasks such as fuzzer assistance, code...

binder-trace

Binder Trace Binder Trace is a tool for intercepting and parsing Android Binder messages. Think of it as "Wireshark for Binder". Requirements python version = 3.9 ⚙️ Installation You'll need a rooted Android device or emulator. Linux only - install xclip or xsel for "copy to clipboard"...

bincat

Introduction What is BinCAT? BinCAT is a static Binary Code Analysis Toolkit, designed to help reverse engineers, directly from IDA or using Python for automation. It features: value analysis registers and memory taint analysis type reconstruction and propagation backward and forward analysis...

rematch

|Read The Docs| |Gitter Chat| |Build Status| |Codacy Badge| |idaplugin PyPI| |server PyPI| rematch REmatch, otra herramienta de comparación binaria. Rematch todavía está en desarrollo y no tiene tantas funcionalidades como nos gustaría. La funcionalidad básica ya está disponible y se están...