reko

reko - a general purpose decompiler. Reko Swedish: "decent, obliging" is a decompiler for machine code binaries. This project is freely available under the GNU General Public License. The project consists of front ends, core decompiler engine, and back ends to help it achieve its goals. A...

LLM4Decompile

📊 Results | 🤗 Models | 🚀 Quick Start | 📚 HumanEval-Decompile | 📎 Citation | 📝 Paper | 🖥️ Colab | ▶️ YouTube Reverse Engineering: Decompiling Binary Code with Large Language Models Updates 2025-10-04: Release SK²Decompile: LLM-based Two-Phase Binary Decompilation from Skeleton to Skin. Phase 1...

apkstudio

APK Studio Open-source, cross platform Qt6 based IDE for reverse-engineering Android application packages. It features a friendly IDE-like layout including code editor with syntax highlighting support for .smali code files. Features Cross platform, run on Linux , Mac OS X & Windows...

android-reverse-engineering-skill

Android Reverse Engineering & API Extraction — Claude Code skill A Claude Code skill that decompiles Android APK/XAPK/JAR/AAR files and extracts the HTTP APIs used by the app — Retrofit endpoints, OkHttp calls, hardcoded URLs, authentication patterns — so you can document and reproduce them witho...

pyREtic

pyREtic 0.5.1 README Rich Smith - [email protected] Latest version of pyREtic can be found at: https://github.com/MyNameIsMeerkat/pyREtic What is it ? pyREtic is an extensible framework to assist in performing various reverse engineering tasks for Python language projects. It assists a rever...

ghidra-evm

Ghidra EVM Module In the last few years, attacks on deployed smart contracts in the Ethereum blockchain have ended up in a significant amount of stolen funds due to programming mistakes. Since smart contracts, once compiled and deployed, are complex to modify and update different practitioners ha...

replica

REPLICA TAME THE DRAGON ✨Features ⚡ Disassemble missed instructions - Define code that Ghidra's auto analysis missed ⚡ Detect and fix missed functions - Define functions that Ghidra's auto analysis missed ⚡ Fix 'undefinedN' datatypes - Enhance Disassembly and Decompilation by fixing 'undefinedN'...

APKLab

APKLab The ultimate Android RE experience right inside your VS Code. APKLab seamlessly integrates the best open-source tools: Apktool, smali-lsp, Jadx, uber-apk-signer, apk-mitm and more to the excellent VS Code so you can focus on app analysis and get it done without leaving the IDE. Features...

dexcalibur

WiP : Moving to dexcalibur 2.0 | codename : Reversense Dexcalibur Dexcalibur is an Android reverse engineering platform focus on instrumentation automation. Its particularity is to use dynamic analysis to improve static analysis heuristics. It aims automate boring tasks related to dynamic...

ReverseAPK

ReverseAPK Credits: @xer0dayz Website: https://sn1persecurity.com Version: 1.2 ABOUT: Quickly analyze and reverse engineer Android applications. FEATURES: Displays all extracted files for easy reference Automatically decompile APK files to Java and Smali format Analyze AndroidManifest.xml for...

python-decompile3

|buildstatus| |Pypi Installs| |Latest Version| |Supported Python Versions| |packagestatus| .. contents:: decompyle3 A native Python cross-version decompiler and fragment decompiler. A reworking of uncompyle6. I gave a talk on this at BlackHat Asia 2024 . Introduction decompyle3 translates Python...

APKDeepLens

APKDeepLens Android security insights in full spectrum. Features • Detection • Installation • Usage • Reports Featured atBlack Hat MEA 2023 and Black Hat ASIA 2024 What is APKDeepLens? APKDeepLens is a Python-based static analysis tool for Android APK files. It decompiles APKs using JADX and runs...

Apkatshu

Apkatshu Apkatshu its a Tool for extracting urls , emails , ip address , and interesting data from APK files Apkatshu : tool written in bash/python for extracting urls, emails, ip addresses, and interesting data from APK files. The user can choose either JADX or APKTOOL for de-compilation. USAGE ...

apkx

apkx - Android APK Decompilation for the Lazy A Python wrapper to popular free dex converters and Java decompilers. Extracts Java source code directly from the APK. Useful for experimenting with different converters/decompilers without having to worry about classpath settings and command line arg...

JarHunter

JarHunter – Advanced JAR Analysis & Extraction Tool JarHunter is a tool designed to explore, search and extract specific classes from large JAR files quickly and efficiently. Instead of manually browsing thousands of classes, JarHunter allows you to search keywords across the entire JAR file and...

elfxtract

ELFXtract ELFXtract is an automated analysis tool used for enumerating ELF binaries Powered by Radare2 and r2ghidra This is specially developed for PWN challenges and it has many automated features It almost displays every details of the ELF and also decompiles its ASM to C code using r2ghidra...

pyjadx

pyjadx Python bindings for JADX via JPype. Decompile Android APK and DEX files to Java source from Python. from pyjadx import Jadx with Jadx"app.apk" as jadx: for cls in jadx.classes: printcls.fullname printcls.code Why pyjadx? JADX is the leading open-source Android decompiler — it produces clea...

aparoid

Aparoid Aparoid is a framework designed for Android application analysis. It offers an automated set of tools to discover vulnerabilities and other risks in mobile applications. It is built using the Flask framework and offers a web GUI to upload APK files and explore the contents / results. The...

PulseAPK-Core

PulseAPK 🌍 Languages English | Deutsch | Español | Français | עברית | 한국어 | Беларуская | Suomi | Latviešu | Eesti | Lietuvių | Čeština | Slovenčina | Magyar | العربية | Português | Русский | Українська | 中文 PulseAPK is a professional-grade, cross-platform GUI for Android reverse engineering and...

universal-flutter-ssl-pinning

universal-flutter-ssl-pinning Reverse-engineers libflutter.so with PyGhidra to locate the SSL certificate verification function, then emits ready-to-use bypass scripts for both Frida and Renef. How it works 1. PyGhidra loads libflutter.so headlessly and scans all defined strings for sslclient 2...