PulseAPK-Core

PulseAPK 🌍 Languages English | Deutsch | Español | Français | עברית | 한국어 | Беларуская | Suomi | Latviešu | Eesti | Lietuvių | Čeština | Slovenčina | Magyar | العربية | Português | Русский | Українська | 中文 PulseAPK is a professional-grade, cross-platform GUI for Android reverse engineering and...

trape

trape stable v2.0 People tracker on the Internet: Learn to track the world, to avoid being traced. Trape is an OSINT analysis and research tool, which allows people to track and execute intelligent social engineering attacks in real time. It was created with the aim of teaching the world how larg...

Flutter-Reverse-Engineering-Labs

Flutter Reverse Engineering Labs This repository contains a series of progressive challenges designed to introduce the reverse engineering of Flutter applications. Since there aren't many blog posts or tutorials that explain Flutter reversing in detail, I decided to create this repo as a hands-on...

OWASP-Subtractive-Hardening-Top-10

OWASP Subtractive Security Top 10 Project Overview The OWASP Subtractive Security Top 10 Project is an initiative to identify, document, and promote the highest-impact opportunities for reducing cyber risk through the elimination of attack paths. Unlike traditional security guidance that focuses...

Dwarf

Dwarf A debugger for reverse engineers, crackers and security analyst. Or you can call it damn, why are raspberries so fluffy or yet, duck warriors are rich as fuck. Whatever you like! Built on top of pyqt5, frida and some terrible code. Known Issues JavaTraceView is distorted JavaTraceView shows...

ImHex

A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM. /ˈɪmhɛks/ Supporting If you like my work, please consider supporting me on GitHub Sponsors, Ko-Fi or PayPal. Thanks a lot! Notable Sponsors | ---|--- | JetBrains, providing us with free All...

r2ai

R2AI - Augmented reversing with LLM for radare2 ╭─────────────────────────────────╮ │ , . . , │ ╭──╮ │ : \ \ |: \ : | │ │ │ │ | |/ || , || : | │ │ O O | : \ \ . || : || | │ │ │╷ │ | |\ :||| || | │ │ ││ │ || : |||| │ │ ─╯│ ╰─────────────────────────────────╯ ╰───╯ Components This repository...

datadome-vm-internals

DataDome VM DataDome embeds a custom VM in their bundle to hide what they're actually doing. I got curious and pulled it apart. Sharing it here for anyone who's interested in the same kind of reverse engineering puzzle. DataDome ships a heavily obfuscated JavaScript bundle to your browser. Inside...

ME2-Writeup

Reverse Engineering ME2's USB with a Heat Gun and a Knife Background In 2024, bjiru uploaded a video about the ME2 handheld device, a toy produced around 2008 that featured the ability to use USB to synchronize points and gems between your device and an online world. The game was extremely niche,...

reverse-engineering

Reverse Engineering resources A curated list of awesome reversing resources Awesome Reversing Books Courses Practice Hex Editors Binary Format Disassemblers Binary Analysis Bytecode Analysis Import Reconstruction Dynamic Analysis Debugging Mac Decrypt Document Analysis Scripting Android Yara Book...

machofile

machofile machofile is a module to parse Mach-O binary files, with a focus on malware analysis and reverse engineering. Inspired by Ero Carrera's pefile, this module aims to provide similar capabilities but for Mach-O binaries instead. Reference material and documentation used to gain the file...

hexcymatix

hexcymatix hexcymatix is an exploratory research project, loosely envisioned as a binary reverse engineering tool for extracting structural information from repeated byte patterns in binary files. The idea never materialized into a usable tool, but still yields some fascinating representations of...

android-reverse-engineering-skill

Android Reverse Engineering & API Extraction — Claude Code skill A Claude Code skill that decompiles Android APK/XAPK/JAR/AAR files and extracts the HTTP APIs used by the app — Retrofit endpoints, OkHttp calls, hardcoded URLs, authentication patterns — so you can document and reproduce them witho...

efiXplorer

efiXplorer - IDA plugin and loader for UEFI firmware analysis and reverse engineering automation Documentation Plugin wiki Loader wiki Build instructions and installation Publications efiXplorer: Hunting for UEFI Firmware Vulnerabilities at Scale with Automated Static Analysis Static...

fluxion

Fluxion is the future of MITM WPA attacks Fluxion is a security auditing and social-engineering research tool. It is a remake of linset by vk496 with hopefully fewer bugs and more functionality. The script attempts to retrieve the WPA/WPA2 key from a target access point by means of a social...

apkprobe

APKprobe APK decompiler and secrets scanner for Android security research. Automatically extract API keys , endpoints , tokens , and other leaked credentials from Android applications. Works with .apk, .xapk, .dex, .jar, .class, .smali, .zip, .aar, .arsc, .aab files. Perfect for apk2url extractio...

silverboxcc

Reverse engineered android malware called Red Alert V2.0. At the time of analysis, there were no longer any C2 servers running and so we were unable to observe any traffic between the malware and the C2 server. So we figured out the C2 protocol and wrote this control panel. Bot's traffic from the...

mastg

OWASP Mobile Application Security Testing Guide MASTG The OWASP Mobile Application Security Testing Guide MASTG is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration MASWE...

Apktool

Apktool This is the repository for Apktool. The website is at theapktool.org repository. Apktool is a tool for reverse engineering third-party, closed, binary, Android apps. It can decode resources to nearly original form and rebuild them after making some modifications; it makes it possible to...

class-dump

class-dump class-dump is a command-line utility for examining the Objective-C segment of Mach-O files. It generates declarations for the classes, categories and protocols. This is the same information provided by using 'otool -ov', but presented as normal Objective-C declarations. The latest...