reverse-engineering-tool

The reverse-engineering framework you can run anywhere, with nothing installed, and actually trust.

match functions in binaries by what they do, not what their bytes look like. behavioral function fingerprinting via microexecution.

MCP server exposing WinDbg/DbgEng (live user-mode, kernel, crash dumps, Time Travel Debugging) to AI agents over stdio or over HTTP with --listen

USB service-mode toolkit for Sony ZV-E10: full-partition backup/restore, remote shell, and Jiritsu dlopen payload tooling.

DomoScope lets developers paste any public GitHub repository URL and instantly explore its architecture, file relationships, dependencies, database ERD, branches, and security audit in a single unified workspace.

Emulate an NFC tag on the Flipper Zero and log every APDU a phone sends, plus the tag's reply — capture both sides to reverse-engineer your own NFC devices.

Reverse-engineering and research on PyArmor

The Java RE cockpit — decompile, attach, diff, patch. Modern desktop tool for JVM bytecode with 4 decompilers, live JVM attach, hex viewer with structure overlay, deobfuscation pipeline, and headless CLI.

Obfuscates Dart enums into zero-cost extension types backed by high-entropy integers, eliminating enum metadata from Flutter AOT binaries.

BinaryAnalyzerCLI — console static analysis tool for first-pass triage of PE/ELF/raw binaries. Streaming disassembly, semantic function statistics, string/suspicious API extraction, and optional AI-assisted review. Supports interchangeable Iced/Capstone backends. Early alpha, actively developed.

Forensic analytics for disassembly, reassembly, reverse engineering and auditing of Android apps

x64dbg fork: export execution traces to JSON/CSV (TraceExport), drive the debugger from Python (pybridge), headless automation templates, bundled ScyllaHide/xAnalyzer. For malware analysis, RE and CTF.

Binary reverse engineering toolkit in C - file analysis, ELF/PE parsing, entropy scanning, string extraction, and optional disassembly.

A GUI switch for the REA MCP server in DeepSeek Harness — turn its 229 mcp__rea__* tools on or off, so unrelated chats stop paying their context cost.

Given a compiler listing, recover C that behaves the same — and prove it mechanically.

Enigma, the Java remapping tool, for VS Code.

Ghidra for local AI models — decompile, inspect, and patch GGUF / LoRA / Ollama models in a visual workbench, and build new ones from modular "sector" adapters. No retraining required.

C++20 reverse-engineering workbench with a wxWidgets desktop UI and CLI for binary analysis, disassembly, decompilation, and debugging.

[jadx-emu] Extension to unpack and decrypt hidden dex files from dexguard protected applications.