Krakatau

Krakatau 提供了 Java 字节码的汇编器和反汇编器，使你可以将二进制类文件转换为人类可读的文本格式，进行修改，然后转换回类文件，即使是混淆代码也能处理。你也可以通过手动编写字节码从头创建自己的类文件，并检查和比较 Java 二进制文件的底层细节。与 javap 不同，Krakatau 反汇编器甚至可以处理高度混淆的代码，并且反汇编后的输出可以重新汇编成类文件。 Krakatau 还提供了一个反编译器，用于将 Java 二进制文件转换为可读的源代码。与其他反编译器不同，Krakatau 反编译器专门设计用于处理混淆代码，并能轻松应对其他反编译器无法处理的技巧。然而，Krakata...

patching

Patching - Interactive Binary Patching for IDA Pro Overview Patching assembly code to change the behavior of an existing program is not uncommon in malware analysis, software reverse engineering, and broader domains of security research. This project extends the popular IDA Pro disassembler to...

HexWalk

HexWalk - Editor/Visor/Analizador Hex HexWalk es un editor, visor y analizador hexadecimal. Construido sobre qhexedit2, Capstone y Qt, con un escáner de firmas integrado, HexDig, inspirado en binwalk. Es multiplataforma y tiene muchas funciones: Búsqueda avanzada puede encontrar patrones en...

ScratchABit

ScratchABit ScratchABit 是一个交互式增量反汇编器，具备数据流/控制流分析功能。ScratchABit 致力于支持开源逆向工程社区的努力（即通过逆向工程为未得到厂商适当支持的硬件生成开源驱动/固件，以实现硬件与软件的互操作性，并用于安全研究）。 ScratchABit 支持社区中广为人知的 IDAPython API，用于编写反汇编/扩展模块。 ScratchABit 仍在开发中，功能按需添加，欢迎贡献。 ScratchABit 根据 GNU 通用公共许可证 v3 GPLv3 的条款发布。 需求/宣言 1...

retdec

Warning The RetDec project is currently in a limited maintenance mode due to a lack of resources: Pull Requests are welcomed. They are reviewed with priority, if possible without delays. Issues are reacted on with delays up to one quarter. Issues are not actively solved unless they relate to a...

access_updated

Singular Access Fork actualizado debtbd/access con búsqueda dinámica de patrones basada en Zydis para compatibilidad con Windows 10/11 Un envoltorio de llamadas al sistema en modo kernel que permite operaciones privilegiadas sobre procesos sin necesidad de manejadores. Utiliza el enganche del...

dsync

dsync IDAPython plugin that synchronizes decompiled and disassembled code views. Please refer to comments in source code for more details. Requires IDA Pro 7.3 N.B.: You may want to use the official synchronization feature introduced with IDA 7.3 instead...

dsync

dsync IDAPython 插件，用于同步反编译与反汇编代码视图。 更多详情请参阅源代码中的注释。 需要 IDA Pro 7.3 注意：你可能希望改用 IDA 7.3 引入的官方同步功能。...

ceasta

ceasta a disassembler, decompiler and debugger in one — for windows, linux and macos, x86, x64 and arm64 ida-style listing, a decompiler, a function graph, an x64dbg-style debugger, lua plugins, and a built-in MCP server so you can point an AI at a binary — one small program, everything vendored,...

panopticon

DEPRECATED The Panopticon project moved toGitlab and was restructed into multiple crates. The Qt GUI was replaced with Verso. I will merge PRs but won't do any substantial work on this version. Most links below are dead. Panopticon - A Libre Cross Platform Disassembler Panopticon is a cross...

panopticon

已弃用 Panopticon 项目已迁移至Gitlab，并重组为多个 crate。Qt GUI 已被 Verso 替代。 我会合并拉取请求，但不会再对此版本进行实质性工作。下方大多数链接已失效。 Panopticon - 一个自由的跨平台反汇编器 Panopticon 是一个使用 Rust 编写的跨平台逆向工程反汇编器。它支持 AMD64、x86、AVR 和 MOS 6502 指令集，并能打开 ELF 文件。Panopticon 自带 Qt GUI，用于浏览和注释控制流图。 安装 如果你只是想使用 Panopticon，请访问官网查看安装说明。 编译 Panopticon 使用 Rust...

smali

关于 smali/baksmali 是用于 Dalvik（Android 的 Java 虚拟机实现）的 DEX 格式的汇编器/反汇编器。其语法大致基于 Jasmin/dedexer 的语法，并支持 DEX 格式的全部功能（注解、调试信息、行信息等）。 下载地址：https://bitbucket.org/JesusFreke/smali/downloads/。如果您有兴趣提交补丁，欢迎在此处向我发送拉取请求。 更多信息/新闻/发布说明等请参阅 wiki。 支持 github 问题跟踪器 – 用于报告任何 bug/问题/功能需求 smali on freenode –...

detaped

Detaped Introducción Detaped es un desensamblador y decompilador de Python para Duktape GitHub. El uso previsto es para la revisión y el análisis de código fuente en situaciones donde solo se dispone del binario de bytecode compilado de Duktape, como en una evaluación de caja negra. Característic...

IODIDE

IODIDE - El Entorno de Depuración y Desensamblador Integrado para iOS Publicado como código abierto por NCC Group Plc - http://www.nccgroup.com/ Desarrollado por Andy Davis, andy dot davis at nccgroup dot com https://github.com/nccgroup/IODIDE Publicado bajo AGPL, consulte LICENSE para más...

Astra Linux – Vulnerability in binutils

There is a flaw in binutils /opcodes/tic4x-dis.c. An attacker who can submit a crafted input file for processing by binutils could cause the use of uninitialized memory. The greatest threat is to the availability of the application, with a lower threat to data confidentiality. This flaw affects...

HexWalk v2.2.0

HexWalk - Hex Editor/Viewer/Analyzer HexWalk is an Hex editor, viewer, analyzer. Built on qhexedit2, Capstone and Qt, with a built-in signature scanner, HexDig, inspired by binwalk. It is cross platform and has plenty of features: Advanced Find can find patterns in binary files based on...

CVE-2026-55893

A flaw was found in Capstone, a disassembly framework. The SH floating-point decoders in arch/SH/SHDisassembler.c do not correctly validate the size of the operands array when processing certain instructions. This vulnerability allows a local attacker to provide specially crafted SH2A FPU bytecod...

SUSE CVE-2026-55894

Capstone is a disassembly framework. In 6.0.0-Alpha9 and earlier, Capstone's arch/SH/SHDisassembler.c shdisassemble function computes an idx value from a raw 16-bit instruction without ensuring it is within the active mode-specific decode function-pointer table. An application using CSARCHSH with...

Linux Distros Unpatched Vulnerability : CVE-2026-55894

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Capstone is a disassembly framework. In 6.0.0-Alpha9 and earlier, Capstone's arch/SH/SHDisassembler.c shdisassemble function computes an idx value from a raw...

AZL-96891 CVE-2026-55894 affecting package capstone 4.0.2-4

Capstone is a disassembly framework. In 6.0.0-Alpha9 and earlier, Capstone's arch/SH/SHDisassembler.c shdisassemble function computes an idx value from a raw 16-bit instruction without ensuring it is within the active mode-specific decode function-pointer table. An application using CSARCHSH with...