mmiotic

mmiotic MMIO タイミングを探索するためのツール — 任意の物理アドレスを計時し、レイテンシからハードウェアを解析します。 ハードウェアリバースエンジニアリング、ハイパーバイザーのフィンガープリンティング、デバイスアクティビティのサイドチャネル解析、レジスタ特性評価、悪意あるトリガーの校正、そして冗長極まりないマシン命令の作成に、驚くほど役立ちます。 例 メモリ範囲のリバースエンジニアリング 物理メモリの最初の 1 メガバイトは、その構造が既によく知られているにもかかわらず、始めるのに手頃な例です。...

Awesome-Android-Reverse-Engineering

Awesome Android Reverse Engineering A curated list of awesome Android Reverse Engineering training, resources, and tools. How to Use Awesome-Android-Reverse-Engineering is an amazing list for people who work in taking apart Android applications, systems, or components. Simply press ctrl + F to...

droidlysis

DroidLysis DroidLysis는 Android 앱을 위한 사전 분석 도구 입니다. 리버스 엔지니어링 초반에 일반적으로 수행하는 반복적이고 지루한 작업을 자동화합니다. Android 샘플을 디스어셈블하고, 출력을 디렉터리로 정리하며, 코드에서 의심스러운 부분을 검색합니다. 출력 결과는 리버스 엔지니어가 분석 초기 단계를 빠르게 진행하는 데 도움을 줍니다. DroidLysis는 Android 패키지apk, Dalvik 실행 파일dex, Zip 파일zip, Rar 파일rar 또는 파일 디렉터리에서 사용할 수 있습니다...

droidlysis

DroidLysis DroidLysis is a pre-analysis tool for Android apps : it performs repetitive and boring tasks we'd typically do at the beginning of any reverse engineering. It disassembles the Android sample, organizes output in directories, and searches for suspicious spots in the code to look at. The...

auto-re-agent

re-agent Autonomous reverse-engineering agent — source-aware reverser/checker loop, objective verifier, parity engine, and Ghidra backend. Overview Demo: YouTube re-agent automates a reverse-engineering workflow by combining a reverser/checker loop with Ghidra decompilation through...

Google-Tensor-Chips

Google Tensor Chips — DarWINN NPU Access Direct-access tooling for the Google Tensor NPU DarWINN, reverse-engineered across two generations: Tensor G2 Pixel 7, codename Janeiro and Tensor G3 Pixel 8, codename Rio. Why this exists I was trying to get LLM inference running on the phone and wanted t...

Obfusk8

Obfusk8: C++17-Based Obfuscation Library Obfusk8 is a lightweight, header-only C++17 library designed to significantly enhance the obfuscation of your applications, making reverse engineering a substantially more challenging endeavor. It achieves this through a diverse set of compile-time and...

Triton

Triton is a dynamic binary analysis library. It provides internal components that allow you to build your program analysis tools, automate reverse engineering, perform software verification or just emulate code. Dynamic symbolic execution Dynamic taint analysis AST representation of the x86 ,...

pycdc

Decompyle++ A Python Byte-code Disassembler/Decompiler Decompyle++ aims to translate compiled Python byte-code back into valid and human-readable Python source code. While other projects have achieved this with varied success, Decompyle++ is unique in that it seeks to support byte-code from any...

pythem

pythem - Penetration Testing Framework pythem is a multi-purpose pentest framework written in Python. It has been developed to be used by security researchers and security professionals. The tool intended to be used only for acts within the law. I am not liable for any undue and unlawful act...

IDAssist

IDAssist AI-Powered Reverse Engineering Plugin for IDA Pro Author: Jason Tang Description IDAssist is an IDA Pro plugin that integrates LLM-powered analysis directly into IDA's interface, providing AI-assisted binary reverse engineering through configurable LLM providers, semantic knowledge graph...

awesome-reverse-engineering-and-malware-analysis

Awesome Reverse Engineering & Malware Analysis A map of reverse engineering and malware analysis that's actually been read. Every link was opened and checked before it went in, and it gets pulled the moment it rots - no dead pages, no one-word notes, no "great resource!" filler. unpacked covers a...

sass-king

SASS King Reverse engineering NVIDIA SASS from controlled kernels to production audits. Article 1 · Article 2 · Knowledge base · Pattern library · SM120 instruction glossary · Encoding notes · Start here · Project structure · Tensor-core chapters · Contributing SASS King is a systematic...

de4py

de4py ⚠️ de4py is FREE & OPEN SOURCE CC BY-NC 4.0. Any paid versions sold elsewhere or commercial use are NOT permitted. If you paid for de4py, you were misled. De4py is an advanced Python deobfuscator with a beautiful UI PySide6 and a robust set of features for malware analysts and reverse...

ratbag-toolbox

ratbag-toolbox Random reverse engineering knowledge and tools Instructions See our wiki page. Overview Dissectors Protocol| Version| Name ---|---|--- HID++| 1.0/2.0| hidpp-dissector.lua Dumps Brand| Model| Description| Driver| Name| Notes ---|---|---|---|---|--- Logitech| G500| Init sequence|...

pyghidra-mcp

PyGhidra-MCP - Ghidra Model Context Protocol Server Overview pyghidra-mcp is a command-line Model Context Protocol MCP server that brings the full analytical power of Ghidra, a robust software reverse engineering SRE suite, into the world of intelligent agents and LLM-based tooling. It bridges...

pyghidra-mcp

PyGhidra-MCP - Ghidra Model Context Protocol サーバー 概要 pyghidra-mcp は、堅牢なソフトウェアリバースエンジニアリング（SRE）スイートである Ghidra の分析機能のすべてを、インテリジェントエージェントや LLM ベースのツールの世界にもたらすコマンドライン Model Context Protocol MCP サーバーです。 pyghidra と jpype を使用して Ghidra の ProgramAPI と FlatProgramAPI を Python に橋渡しし、その機能を Model Context...

uofw

uOFW 이 프로젝트는 PSP 기본 커널과 하드웨어를 리버스 엔지니어링하여 시스템에 대한 최신 기술 문서를 작성하고, 자유롭고 오픈 소스인 순정 펌웨어를 제공하는 것을 목표로 합니다. uOFW에 대해 더 자세히 알아보려면 PSP 커뮤니티에서 사용된 사례 포함 이 프레젠테이션을 확인해 주세요. 프로젝트의 현재 진행 상황은 Current Modules Status 위키 페이지에서 확인할 수 있습니다. 문서 PSP 커널 API 문서 PSP 하드웨어 및 소프트웨어 정보는 uofw/upspd에서 확인할 수 있습니다. 설치 uOFW의 구...

CMF-Watch-Pro-2-BLE-Protocol

CMF Watch Pro 2 — BLE Protocol reverse-engineered Unofficial. This document describes the Bluetooth Low Energy BLE protocol of the CMF Watch Pro 2 CMF by Nothing, reconstructed by reverse engineering for an alternative companion app. It is not affiliated with or endorsed by Nothing/CMF. Use at yo...

r2frida

r2frida Radare2와 Frida를 더 잘 함께 사용하기 설명 frida를 포함하는 radare2용 자체 완결형 플러그인으로, Frida 스크립트를 사용하는 대신또는 그에 국한되지 않고 r2 명령을 사용하여 로컬 또는 원격 프로세스를 계측할 수 있게 해줍니다. radare 프로젝트는 리버스 엔지니어링을 위한 완전한 툴체인을 제공하며, 활발하게 유지 관리되고 있고, 잘 관리된 기능을 제공하며 다른 프로그래밍 언어와 도구로 기능을 확장합니다. Frida는 동적 계측 툴킷으로, 자체 JavaScript를 주입하여 실행 중인...