{ "category": "native-analysis", "count": 837, "kind": "repository-category", "labels": [ "Native binaries", "原生二进制" ], "note": "Automatically discovered repository index, unreviewed. Stars, licenses and last-push times are collection-time snapshots.", "note_zh": "自动发现的仓库索引，未审核。星标、许可证与最近推送时间均为采集时快照。", "page_url": "https://awesomerea.org/browse/native-analysis/", "page_url_zh": "https://awesomerea.org/zh/browse/native-analysis/", "repositories": [ { "category": "native-analysis", "description_en": "Ghidra is a software reverse engineering (SRE) framework", "description_language": "bilingual", "description_zh": "Ghidra 是一个软件逆向工程（SRE）框架。", "full_name": "NationalSecurityAgency/ghidra", "id": "scan-173228436", "license": "Apache-2.0", "observed_at": "2026-10-16T01:35:23.780247Z", "pushed_at": "2026-10-15T12:02:03Z", "readme_sha256": "8d4cc75b5c6d0d6ce218bbfa45adc36029d4719d6bcabb33499a36d66ccbf3ec", "readme_url": "https://github.com/NationalSecurityAgency/ghidra/blob/master/README.md", "stars": 88799, "targets": [ "binary", "firmware", "game" ], "topics": [ "disassembler", "reverse-engineering", "software-analysis" ], "url": "https://github.com/NationalSecurityAgency/ghidra", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.", "description_language": "bilingual", "description_zh": "🔍 面向逆向工程师、程序员，以及凌晨 3 点工作时仍爱护视力的人士的十六进制编辑器。", "full_name": "WerWolv/ImHex", "id": "scan-311683390", "license": "GPL-2.0", "observed_at": "2026-10-16T01:35:32.378247Z", "pushed_at": "2026-10-09T00:56:24Z", "readme_sha256": "8f4c89c636606543b6396cbca436a7586bd662ef52eb365a00bc8b2f88ad5e97", "readme_url": "https://github.com/WerWolv/ImHex/blob/master/README.md", "stars": 55252, "targets": [ "binary", "firmware", "game" ], "topics": [ "analyzer", "binary-analysis", "c-plus-plus", "cpp", "cybersecurity", "dark-mode", "dear-imgui", "disassembler", "forensics", "hacking", "hacktoberfest", "hex-editor", "ips", "linux", "macos", "multi-platform", "pattern-language", "reverse-engineering", "static-analysis", "windows" ], "url": "https://github.com/WerWolv/ImHex", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "UNIX-like reverse engineering framework and command-line toolset", "description_language": "bilingual", "description_zh": "类 UNIX 的逆向工程框架和命令行工具集。", "full_name": "radareorg/radare2", "id": "scan-4869294", "license": "NOASSERTION", "observed_at": "2026-10-16T01:35:24.215366Z", "pushed_at": "2026-10-16T01:20:27Z", "readme_sha256": "dc86af03a0eb92735a59fa18e397520a90d593683abd504d5f85f4f80db1b7c9", "readme_url": "https://github.com/radareorg/radare2/blob/master/README.md", "stars": 25054, "targets": [ "binary", "game" ], "topics": [ "binary-analysis", "c", "commandline", "disassembler", "forensics", "hacktoberfest", "malware-analysis", "radare2", "reverse-engineering", "security" ], "url": "https://github.com/radareorg/radare2", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Free and Open Source Reverse Engineering Platform powered by rizin", "description_language": "bilingual", "description_zh": "由 rizin 驱动的自由开源逆向工程平台。", "full_name": "rizinorg/cutter", "id": "scan-104732438", "license": "GPL-3.0", "observed_at": "2026-10-16T01:35:24.309264Z", "pushed_at": "2026-09-11T12:44:05Z", "readme_sha256": "c8c8b1e5c4e1970bbc6d56232b9b408d64952926078ecda5e5135973ef31530f", "readme_url": "https://github.com/rizinorg/cutter/blob/dev/README.md", "stars": 20030, "targets": [ "binary", "game" ], "topics": [ "cutter", "debugger", "gui", "reverse-engineering", "security" ], "url": "https://github.com/rizinorg/cutter", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A FREE comprehensive reverse engineering tutorial covering x86, x64, 32-bit/64-bit ARM, 8-bit AVR and 32-bit RISC-V architectures.", "description_language": "bilingual", "description_zh": "免费的全面逆向工程教程，涵盖 x86、x64、32 位/64 位 ARM、8 位 AVR 和 32 位 RISC-V 架构。", "full_name": "mytechnotalent/Reverse-Engineering", "id": "scan-240507922", "license": "Apache-2.0", "observed_at": "2026-10-16T01:35:24.540143Z", "pushed_at": "2026-10-15T14:02:30Z", "readme_sha256": "8329cdc675eb7f75666c293ea5259303b044c2ac5ebdb0279a49cd18237c3469", "readme_url": "https://github.com/mytechnotalent/Reverse-Engineering/blob/main/README.md", "stars": 14719, "targets": [ "binary", "firmware" ], "topics": [ "arm", "assembly", "assembly-language", "assembly-language-programming", "avr", "c", "c-plus-plus", "cyber-security", "cybersecurity", "go", "golang", "hacking", "malware", "reverse-engineering", "reverse-engineering-tutorial", "risc-v", "rust", "wasm", "x64", "x86" ], "url": "https://github.com/mytechnotalent/Reverse-Engineering", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.", "description_language": "bilingual", "description_zh": "通过 MCP 将 IDA Pro 与语言模型连接起来的 AI 逆向工程助手。", "full_name": "mrexodia/ida-pro-mcp", "id": "scan-954963562", "license": "MIT", "observed_at": "2026-10-16T01:35:24.673588Z", "pushed_at": "2026-09-26T15:42:10Z", "readme_sha256": "52ba58c0203be594781db71b595585c15e0352f331d4aef2563602e0b151bf26", "readme_url": "https://github.com/mrexodia/ida-pro-mcp/blob/main/README.md", "stars": 12922, "targets": [ "binary" ], "topics": [ "ai", "aiagent", "binary-analysis", "ida-plugin", "ida-pro", "mcp", "mcp-server", "modelcontextprotocol", "reverse-engineering" ], "url": "https://github.com/mrexodia/ida-pro-mcp", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Program for determining types of files for Windows, Linux and MacOS.", "description_language": "bilingual", "description_zh": "用于识别文件类型的程序，支持 Windows、Linux 和 macOS。", "full_name": "horsicq/Detect-It-Easy", "id": "scan-20387062", "license": "MIT", "observed_at": "2026-10-16T01:35:32.980284Z", "pushed_at": "2026-10-15T14:50:32Z", "readme_sha256": "8e9d7c20ef98bb8e3000a9782c126fa4d8294e5ac55afcbac1800efdb551ff3e", "readme_url": "https://github.com/horsicq/Detect-It-Easy/blob/master/README.md", "stars": 11732, "targets": [ "binary", "game" ], "topics": [ "binary-analysis", "debugger", "detect", "detector", "disassembler", "elf", "entropy", "hacktoberfest", "hacktoberfest2023", "mach-o", "macho", "malware-analysis", "malware-research", "packer", "pentest", "program-analysis", "reverse-engineering", "scanner", "static-analysis", "unpacker" ], "url": "https://github.com/horsicq/Detect-It-Easy", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "MCP Server for Ghidra", "description_language": "bilingual", "description_zh": "Ghidra 的 MCP 服务器。", "full_name": "LaurieWired/GhidraMCP", "id": "scan-953335676", "license": "Apache-2.0", "observed_at": "2026-10-16T07:14:44.605223Z", "pushed_at": "2026-10-10T20:08:37Z", "readme_sha256": "b82f32e9e36d55c9a7b0d7578a650312b5f319551e2d4a0870552e4895e61850", "readme_url": "https://github.com/LaurieWired/GhidraMCP/blob/main/README.md", "stars": 11297, "targets": [ "binary" ], "topics": [], "url": "https://github.com/LaurieWired/GhidraMCP", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Unicorn CPU emulator framework (ARM, AArch64, M68K, Mips, Sparc, PowerPC, RiscV, S390x, TriCore, X86)", "description_language": "bilingual", "description_zh": "Unicorn CPU 模拟器框架，支持 ARM、AArch64、M68K、Mips、Sparc、PowerPC、RiscV、S390x、TriCore 和 X86。", "full_name": "unicorn-engine/unicorn", "id": "scan-41107037", "license": "GPL-2.0", "observed_at": "2026-10-16T01:35:33.369937Z", "pushed_at": "2026-08-28T09:09:56Z", "readme_sha256": "c7e58da94d42ecb66fb2e1e5a3c365188f02f1d5e191ca15e6962c3c16b525df", "readme_url": "https://github.com/unicorn-engine/unicorn/blob/master/README.md", "stars": 9451, "targets": [ "binary", "firmware", "game" ], "topics": [ "arm", "arm64", "cpu", "cpu-emulator", "emulator", "framework", "m68k", "mips", "powerpc", "reverse-engineering", "riscv", "s390x", "security", "sparc", "systemz", "tricore", "x86", "x86-64" ], "url": "https://github.com/unicorn-engine/unicorn", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A powerful and user-friendly binary analysis platform!", "description_language": "bilingual", "description_zh": "功能强大且易于使用的二进制分析平台！", "full_name": "angr/angr", "id": "scan-40328394", "license": "BSD-2-Clause", "observed_at": "2026-10-16T07:14:43.582939Z", "pushed_at": "2026-10-16T07:07:13Z", "readme_sha256": "fb2cc79a308bd478c3420db0bb54d38df5c9f4c1c1db1405515849a50b1ba4a4", "readme_url": "https://github.com/angr/angr/blob/master/README.md", "stars": 9189, "targets": [ "binary" ], "topics": [ "analysis", "angr", "binary" ], "url": "https://github.com/angr/angr", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.", "description_language": "bilingual", "description_zh": "面向 Windows 系统的软件安装脚本合集，便于在虚拟机上搭建和维护逆向工程环境。", "full_name": "mandiant/flare-vm", "id": "scan-96361940", "license": "Apache-2.0", "observed_at": "2026-10-16T01:35:24.926177Z", "pushed_at": "2026-10-07T14:43:37Z", "readme_sha256": "03e612cdbd82953db487de593c621f619eec38d819ac4bae761a6ac3afff57de", "readme_url": "https://github.com/mandiant/flare-vm/blob/main/README.md", "stars": 9147, "targets": [ "binary" ], "topics": [ "flare", "malware-analysis", "reverse-engineering" ], "url": "https://github.com/mandiant/flare-vm", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Capstone disassembly/disassembler framework for ARM, ARM64 (ARMv8), Alpha, BPF, Ethereum VM, HPPA, LoongArch, M68K, M680X, Mips, MOS65XX, PPC, RISC-V(rv32G/rv64G), SH, Sparc, SystemZ, TMS320C64X, TriCore, Webassembly, XCore and X86.", "description_language": "bilingual", "description_zh": "Capstone 反汇编框架，支持 ARM、ARM64（ARMv8）、Alpha、BPF、Ethereum VM、HPPA、LoongArch、M68K、M680X、Mips、MOS65XX、PPC、RISC-V（rv32G/rv64G）、SH、Sparc、SystemZ、TMS320C64X、TriCore、WebAssembly、XCore 和 X86。", "full_name": "capstone-engine/capstone", "id": "scan-14735429", "license": null, "observed_at": "2026-10-16T01:35:33.447936Z", "pushed_at": "2026-10-14T17:49:20Z", "readme_sha256": "260842bb24a1f4f45594dc3a1960b53e7d26769bfc382eaf2ecc33f1e0facec7", "readme_url": "https://github.com/capstone-engine/capstone/blob/next/README.md", "stars": 9107, "targets": [ "binary" ], "topics": [ "arm", "arm64", "bpf", "disassembler", "ethereum", "framework", "m0s65xx", "m680x", "m68k", "mips", "powerpc", "reverse-engineering", "riscv", "security", "sparc", "systemz", "tms320c64x", "webassembly", "x86", "x86-64" ], "url": "https://github.com/capstone-engine/capstone", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Reverse Engineering: Decompiling Binary Code with Large Language Models", "description_language": "bilingual", "description_zh": "逆向工程：利用大语言模型反编译二进制代码。", "full_name": "albertan017/LLM4Decompile", "id": "scan-764418725", "license": "MIT", "observed_at": "2026-10-16T01:35:25.135357Z", "pushed_at": "2026-02-12T03:02:03Z", "readme_sha256": "b84e442df5d1212640a5286c2f715c44d76bba469d8af31aaadee68ad87803dd", "readme_url": "https://github.com/albertan017/LLM4Decompile/blob/main/README.md", "stars": 7134, "targets": [ "binary" ], "topics": [ "binary", "decompile", "large-language-models", "reverse-engineering" ], "url": "https://github.com/albertan017/LLM4Decompile", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "The FLARE team's open-source tool to identify capabilities in executable files.", "description_language": "bilingual", "description_zh": "FLARE 团队的开源工具，用于识别可执行文件的能力。", "full_name": "mandiant/capa", "id": "scan-272815213", "license": "Apache-2.0", "observed_at": "2026-10-16T01:35:34.036794Z", "pushed_at": "2026-10-15T10:00:24Z", "readme_sha256": "e3dc86527f193f95f56a405f6b2c35ef6f5102be937b03834827d908664faf11", "readme_url": "https://github.com/mandiant/capa/blob/master/README.md", "stars": 6247, "targets": [ "binary" ], "topics": [ "binary-analysis", "gsoc-2026", "malware-analysis", "reverse-engineering", "threat-intelligence" ], "url": "https://github.com/mandiant/capa", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Reverse engineering focusing on x64 Windows.", "description_language": "bilingual", "description_zh": "专注于 x64 Windows 的逆向工程。", "full_name": "0xZ0F/Z0FCourse_ReverseEngineering", "id": "scan-190000625", "license": "AGPL-3.0", "observed_at": "2026-10-16T01:35:25.387451Z", "pushed_at": "2026-07-25T18:49:51Z", "readme_sha256": "72a886873bcbfd6e5dc5d5a1577ce8fff400a866d42d3a7b42f2f176339d2796", "readme_url": "https://github.com/0xZ0F/Z0FCourse_ReverseEngineering/blob/master/README.md", "stars": 5962, "targets": [ "binary" ], "topics": [], "url": "https://github.com/0xZ0F/Z0FCourse_ReverseEngineering", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Ghidra MCP Server — 200+ MCP tools for AI-powered reverse engineering. GUI plugin + headless server, lazy tool loading, convention enforcement, batch operations, Ghidra Server integration, and Docker deployment.", "description_language": "bilingual", "description_zh": "Ghidra MCP Server：提供 200 多个 MCP 工具，支持 AI 逆向工程。包含 GUI 插件与无界面服务器、工具延迟加载、约定约束、批量操作、Ghidra Server 集成和 Docker 部署。", "full_name": "bethington/ghidra-mcp", "id": "scan-1047320420", "license": "Apache-2.0", "observed_at": "2026-10-16T01:35:25.528525Z", "pushed_at": "2026-10-16T01:17:04Z", "readme_sha256": "fc403cf8bda0f63a89d39584626c740f5413a869a9ca07922a6e0284141ea1f2", "readme_url": "https://github.com/bethington/ghidra-mcp/blob/dev/README.md", "stars": 5659, "targets": [ "binary" ], "topics": [ "ai", "binary-analysis", "ghidra", "ghidra-extension", "java", "mcp", "mcp-server", "model-context-protocol", "python", "reverse-engineering", "static-analysis" ], "url": "https://github.com/bethington/ghidra-mcp", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "LIEF - Library to Instrument Executable Formats (C++, Python, Rust)", "description_language": "bilingual", "description_zh": "LIEF：用于可执行文件格式插桩的库，支持 C++、Python 和 Rust。", "full_name": "lief-project/LIEF", "id": "scan-85205851", "license": "Apache-2.0", "observed_at": "2026-10-16T01:35:34.342290Z", "pushed_at": "2026-10-10T05:38:28Z", "readme_sha256": "87a2f48da19dabcc24c9015ddec20a2fef6b67f041131954e04a413f69c68c19", "readme_url": "https://github.com/lief-project/LIEF/blob/main/README.md", "stars": 5595, "targets": [ "app", "binary" ], "topics": [ "android", "art", "binary-analysis", "dex", "elf", "executable-formats", "lief", "macho", "malware-analysis", "modification", "oat", "parser", "parsing", "pe", "python", "reverse-engineering", "rust", "sdk", "vdex" ], "url": "https://github.com/lief-project/LIEF", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Disassembly of Pokémon Red/Blue", "description_language": "bilingual", "description_zh": "《宝可梦 红/蓝》的反汇编代码。", "full_name": "pret/pokered", "id": "scan-11211886", "license": null, "observed_at": "2026-10-16T01:35:34.715156Z", "pushed_at": "2026-10-06T17:56:05Z", "readme_sha256": "84a3c89fc54d7e5bedf8f2c8b61a6c4a9efccde611de2235f626dc43c347d243", "readme_url": "https://github.com/pret/pokered/blob/master/README.md", "stars": 4993, "targets": [ "binary", "game" ], "topics": [ "disassembly", "gameboy", "gbz80", "pokemon", "reverse-engineering" ], "url": "https://github.com/pret/pokered", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Kaitai Struct: declarative language to generate binary data parsers in C++ / C# / Go / Java / JavaScript / Lua / Nim / Perl / PHP / Python / Ruby / Rust", "description_language": "bilingual", "description_zh": "Kaitai Struct：用于生成二进制数据解析器的声明式语言，支持 C++ / C# / Go / Java / JavaScript / Lua / Nim / Perl / PHP / Python / Ruby / Rust。", "full_name": "kaitai-io/kaitai_struct", "id": "scan-52159512", "license": null, "observed_at": "2026-10-16T01:35:34.801183Z", "pushed_at": "2026-10-14T01:01:34Z", "readme_sha256": "e01327380ffa5ae91313fd89d335622517d92a3df444280ad5f7b518a6437b62", "readme_url": "https://github.com/kaitai-io/kaitai_struct/blob/master/README.md", "stars": 4712, "targets": [ "app", "binary", "firmware", "protocol" ], "topics": [ "c-plus-plus", "cpp", "csharp", "declarative-language", "file-format", "go", "golang", "graphviz", "java", "javascript", "lua", "nim", "perl", "php", "protocol-analyser", "python", "reverse-engineering", "ruby", "rust" ], "url": "https://github.com/kaitai-io/kaitai_struct", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "C++ python bytecode disassembler and decompiler", "description_language": "bilingual", "description_zh": "以 C++ 编写的 Python 字节码反汇编器与反编译器。", "full_name": "zrax/pycdc", "id": "scan-2408045", "license": "GPL-3.0", "observed_at": "2026-10-16T01:36:06.895021Z", "pushed_at": "2026-04-07T05:58:13Z", "readme_sha256": "cac41eb44b5e6f836a294bc258d0a29546abad13ee6123b8e6c6ae66d6dc8cff", "readme_url": "https://github.com/zrax/pycdc/blob/master/README.markdown", "stars": 4651, "targets": [ "app", "binary" ], "topics": [ "cxx", "decompiler", "disassembler", "hacktoberfest", "python" ], "url": "https://github.com/zrax/pycdc", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "PyInstaller Extractor", "description_language": "bilingual", "description_zh": "PyInstaller 提取工具。", "full_name": "extremecoders-re/pyinstxtractor", "id": "scan-249959615", "license": "GPL-3.0", "observed_at": "2026-10-16T01:35:35.212811Z", "pushed_at": "2026-07-22T09:09:38Z", "readme_sha256": "9d9a7764a8a8df7964cafeb161392290955ee12d2c82dcca0d7c5f7837b4a19e", "readme_url": "https://github.com/extremecoders-re/pyinstxtractor/blob/master/README.md", "stars": 4505, "targets": [ "app", "binary" ], "topics": [ "decompile", "pyc", "pyc-files", "pyinstaller", "pyinstaller-extractor", "python", "python-decompiler", "reverse-engineering" ], "url": "https://github.com/extremecoders-re/pyinstxtractor", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures. ", "description_language": "bilingual", "description_zh": "在二进制文件中搜索 gadget，方便进行 ROP 漏洞利用。ROPgadget 支持 x86、x64、ARM、ARM64、PowerPC、SPARC、MIPS、RISC-V 64 和 RISC-V Compressed 架构上的 ELF、PE 与 Mach-O 格式。", "full_name": "JonathanSalwan/ROPgadget", "id": "scan-2234715", "license": "NOASSERTION", "observed_at": "2026-10-16T01:35:35.332056Z", "pushed_at": "2026-06-24T05:49:04Z", "readme_sha256": "002747788e580e23d73d6bf18694f029f237f76ea6f953c71673b8cd376d82df", "readme_url": "https://github.com/JonathanSalwan/ROPgadget/blob/master/README.md", "stars": 4498, "targets": [ "binary" ], "topics": [ "binary-exploitation", "reverse-engineering", "rop", "rop-exploitation", "rop-gadgets" ], "url": "https://github.com/JonathanSalwan/ROPgadget", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Analyze ELF binaries like a boss 😼🕵️‍♂️", "description_language": "bilingual", "description_zh": "像高手一样分析 ELF 二进制文件 😼🕵️‍♂️。", "full_name": "orhun/binsider", "id": "scan-678562120", "license": "Apache-2.0", "observed_at": "2026-10-16T01:35:35.370531Z", "pushed_at": "2026-10-11T00:20:10Z", "readme_sha256": "2b5529cffefc9f55e109ab3e4ac7560c97449f8d8a4b66ac325314f1a4a340ae", "readme_url": "https://github.com/orhun/binsider/blob/main/README.md", "stars": 4481, "targets": [ "binary" ], "topics": [ "analysis", "binary", "binary-data", "dynamic-analysis", "elf", "hex-editor", "hexdump", "linux", "ratatui", "reverse-engineering", "rust", "static-analysis", "terminal", "terminal-ui", "terminal-user-interface", "tui" ], "url": "https://github.com/orhun/binsider", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Diaphora, the most advanced Free and Open Source program diffing tool.", "description_language": "bilingual", "description_zh": "Diaphora：最先进的自由开源程序差异比较工具。", "full_name": "joxeankoret/diaphora", "id": "scan-32557376", "license": "AGPL-3.0", "observed_at": "2026-10-16T07:14:44.506633Z", "pushed_at": "2026-10-11T11:01:24Z", "readme_sha256": "92a2ad198d60a4b27d4e6249ce2e84f3ad9d531a6b4c1ef803062d5c9e375bb3", "readme_url": "https://github.com/joxeankoret/diaphora/blob/master/README.md", "stars": 4428, "targets": [ "binary", "game" ], "topics": [], "url": "https://github.com/joxeankoret/diaphora", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Fast and lightweight x86/x86-64 disassembler and code generation library", "description_language": "bilingual", "description_zh": "快速、轻量的 x86/x86-64 反汇编与代码生成库。", "full_name": "zyantific/zydis", "id": "scan-25708163", "license": "MIT", "observed_at": "2026-10-16T01:36:13.107218Z", "pushed_at": "2026-07-27T13:04:16Z", "readme_sha256": "205d609fd4a52a9fa82e346f70f4b77097a2c01c34c38b720ca53972a67c2a80", "readme_url": "https://github.com/zyantific/zydis/blob/master/README.md", "stars": 4393, "targets": [ "binary" ], "topics": [ "amd", "c", "codegen", "disassembler", "intel", "x86", "x86-64" ], "url": "https://github.com/zyantific/zydis", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Triton is a dynamic binary analysis library. Build your own program analysis tools, automate your reverse engineering, perform software verification or just emulate code.", "description_language": "bilingual", "description_zh": "Triton 是动态二进制分析库。可用它构建程序分析工具、自动化逆向工程、执行软件验证或模拟代码运行。", "full_name": "JonathanSalwan/Triton", "id": "scan-29811166", "license": "Apache-2.0", "observed_at": "2026-10-16T01:35:26.304749Z", "pushed_at": "2026-10-12T05:16:58Z", "readme_sha256": "dad3a27f0db982a33920b1f88b79ca4c13a574279243a24cb10361b72ecf1fd0", "readme_url": "https://github.com/JonathanSalwan/Triton/blob/master/README.md", "stars": 4332, "targets": [ "binary" ], "topics": [ "binary-analysis", "binary-translation", "deobfuscation", "dynamic-analysis", "emulator", "instruction-semantics", "lifter", "program-analysis", "reverse-engineering", "symbolic-execution", "taint-analysis" ], "url": "https://github.com/JonathanSalwan/Triton", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A cross-version Python bytecode decompiler", "description_language": "bilingual", "description_zh": "跨版本 Python 字节码反编译器。", "full_name": "rocky/python-uncompyle6", "id": "scan-47907821", "license": "GPL-3.0", "observed_at": "2026-10-16T01:36:06.995615Z", "pushed_at": "2026-10-05T11:56:59Z", "readme_sha256": "1da5f2c0d24bc31f673618028ffcd85bbad395abe77803e2bfab66028d6c7198", "readme_url": "https://github.com/rocky/python-uncompyle6/blob/master/README.rst", "stars": 4331, "targets": [ "app", "binary" ], "topics": [ "bytecode", "decompiler", "python" ], "url": "https://github.com/rocky/python-uncompyle6", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.", "description_language": "bilingual", "description_zh": "FLARE 混淆字符串求解器：自动提取恶意软件中的混淆字符串。", "full_name": "mandiant/flare-floss", "id": "scan-52993349", "license": "Apache-2.0", "observed_at": "2026-10-16T01:36:46.560411Z", "pushed_at": "2026-10-15T14:58:21Z", "readme_sha256": "a64aeef5c0441206f667b2543329f9329fefd8770f1044b6b332c6dda5edb4d8", "readme_url": "https://github.com/mandiant/flare-floss/blob/master/README.md", "stars": 4189, "targets": [ "binary" ], "topics": [ "deobfuscation", "flare", "gsoc-2026", "malware", "malware-analysis", "strings" ], "url": "https://github.com/mandiant/flare-floss", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Reverse engineering framework in Python", "description_language": "bilingual", "description_zh": "Python 逆向工程框架。", "full_name": "cea-sec/miasm", "id": "scan-25875083", "license": "GPL-2.0", "observed_at": "2026-10-16T01:35:26.521187Z", "pushed_at": "2026-09-21T14:04:26Z", "readme_sha256": "856300544798b4f44238ee6b50741785077742e8c059c6518b9e32adaa530a0d", "readme_url": "https://github.com/cea-sec/miasm/blob/master/README.md", "stars": 3992, "targets": [ "binary" ], "topics": [ "assembler", "disassembler", "emulator", "hacktoberfest", "intermediate-representation", "python", "reverse-engineering", "symbolic-execution" ], "url": "https://github.com/cea-sec/miasm", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "UNIX-like reverse engineering framework and command-line toolset.", "description_language": "bilingual", "description_zh": "类 UNIX 的逆向工程框架和命令行工具集。", "full_name": "rizinorg/rizin", "id": "scan-299867499", "license": "LGPL-3.0", "observed_at": "2026-10-16T01:35:26.579277Z", "pushed_at": "2026-10-15T18:49:35Z", "readme_sha256": "b91344710837f17f14fa9c40a4a3ced5a48d7faec3b0ba325a9e83ff8c6818c0", "readme_url": "https://github.com/rizinorg/rizin/blob/dev/README.md", "stars": 3972, "targets": [ "binary", "game" ], "topics": [ "debugging", "exploitation", "program-analysis", "reverse-engineering", "security" ], "url": "https://github.com/rizinorg/rizin", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Blazing fast and correct x86/x64 disassembler, assembler, decoder, encoder for Rust, .NET, Java, Python, Lua", "description_language": "bilingual", "description_zh": "极速且准确的 x86/x64 反汇编器、汇编器、解码器和编码器，支持 Rust、.NET、Java、Python 和 Lua。", "full_name": "icedland/iced", "id": "scan-147866440", "license": "MIT", "observed_at": "2026-10-16T01:36:13.113004Z", "pushed_at": "2026-10-13T01:10:07Z", "readme_sha256": "07384fa50b81df1295ae7ed7b1b5fc72f067906c594c0c68ec8cb5fbdee86ee4", "readme_url": "https://github.com/icedland/iced/blob/master/README.md", "stars": 3592, "targets": [ "app", "binary" ], "topics": [ "assembler", "decoder", "disassembler", "encoder", "x64", "x86" ], "url": "https://github.com/icedland/iced", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Open-source code analysis platform for C/C++/Java/Binary/Javascript/Python/Kotlin based on code property graphs. Discord https://discord.gg/vv4MH284Hc", "description_language": "bilingual", "description_zh": "基于代码属性图的开源代码分析平台，支持 C/C++/Java/二进制文件/JavaScript/Python/Kotlin。Discord：https://discord.gg/vv4MH284Hc", "full_name": "joernio/joern", "id": "scan-175681313", "license": "Apache-2.0", "observed_at": "2026-10-16T01:35:45.033638Z", "pushed_at": "2026-10-15T16:28:20Z", "readme_sha256": "42c388cc58dd9099155781075ae4bab17f7bf3a42095a985709302f1c3b2095f", "readme_url": "https://github.com/joernio/joern/blob/master/README.md", "stars": 3576, "targets": [ "app", "binary" ], "topics": [ "binary", "c", "code-analysis", "code-browser", "code-property-graph", "controlflow", "cpg", "cpp", "dataflow", "fuzzy-parsing", "ghidra", "graph", "java", "javabytecode", "javascript", "llvm", "query-language", "scala", "syntax-tree" ], "url": "https://github.com/joernio/joern", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "IDA plugin which queries language models to speed up reverse-engineering", "description_language": "bilingual", "description_zh": "通过查询语言模型来加速逆向工程的 IDA 插件。", "full_name": "JusticeRage/Gepetto", "id": "scan-574156195", "license": "GPL-3.0", "observed_at": "2026-10-16T01:35:26.835562Z", "pushed_at": "2026-08-15T17:09:38Z", "readme_sha256": "7ce22add97bb1544b5890df4dfccae95c1fe3f9c1e9a2c40b967edabc762a065", "readme_url": "https://github.com/JusticeRage/Gepetto/blob/main/README.md", "stars": 3487, "targets": [ "binary" ], "topics": [ "gpt-5-api", "ida-pro", "openai", "python", "reverse-engineering" ], "url": "https://github.com/JusticeRage/Gepetto", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Agent skills for solving CTF challenges - web exploitation, binary pwn, crypto, reverse engineering, forensics, OSINT, and more", "description_language": "bilingual", "description_zh": "用于解决 CTF 挑战的智能体技能，涵盖 Web 漏洞利用、二进制 pwn、密码学、逆向工程、取证、OSINT 等。", "full_name": "ljagiello/ctf-skills", "id": "scan-1147566999", "license": "MIT", "observed_at": "2026-10-16T01:35:26.897562Z", "pushed_at": "2026-10-15T16:29:10Z", "readme_sha256": "c984b0e0b516f0fef666b0d4b3f8fb53d0a57017497bedc04f67d179e429f492", "readme_url": "https://github.com/ljagiello/ctf-skills/blob/main/README.md", "stars": 3459, "targets": [ "binary", "website" ], "topics": [ "agent-skills", "claude-code", "claude-code-skills", "codex", "codex-cli", "ctf", "ctf-challenges", "ctf-tools", "gemini", "gemini-cli", "opencode", "security" ], "url": "https://github.com/ljagiello/ctf-skills", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "DIE engine", "description_language": "bilingual", "description_zh": "DIE 引擎。", "full_name": "horsicq/DIE-engine", "id": "scan-25164176", "license": "MIT", "observed_at": "2026-10-16T01:35:37.696463Z", "pushed_at": "2026-10-15T05:15:58Z", "readme_sha256": "12addeb997162c46a16759fe24aa69f05d6fa36c522c0d69c039e5e6b8ea4ada", "readme_url": "https://github.com/horsicq/DIE-engine/blob/master/README.md", "stars": 3314, "targets": [ "binary" ], "topics": [ "binary-analysis", "disassembler", "elf", "entropy", "hacktoberfest", "hacktoberfest22", "program-analysis", "reverse-engineering", "signature", "unpacker", "yara" ], "url": "https://github.com/horsicq/DIE-engine", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Quickly find differences and similarities in disassembled code", "description_language": "bilingual", "description_zh": "快速找出反汇编代码中的异同。", "full_name": "google/bindiff", "id": "scan-694009642", "license": "Apache-2.0", "observed_at": "2026-10-16T01:35:37.912282Z", "pushed_at": "2026-09-18T12:05:48Z", "readme_sha256": "607b8d95f0a0bbac3899e38406033a8cfd98025ebb5bcc24ec01b9417825e787", "readme_url": "https://github.com/google/bindiff/blob/main/README.md", "stars": 3207, "targets": [ "binary", "game" ], "topics": [ "bindiff", "binexport", "c-plus-plus", "diffing", "ida-plugin", "ida-pro", "java", "program-analysis", "program-differencing", "reverse-engineering", "vxsig" ], "url": "https://github.com/google/bindiff", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Plasma is an interactive disassembler for x86/ARM/MIPS. It can generates indented pseudo-code with colored syntax.", "description_language": "bilingual", "description_zh": "Plasma 是面向 x86/ARM/MIPS 的交互式反汇编器，可生成带缩进和语法着色的伪代码。", "full_name": "plasma-disassembler/plasma", "id": "scan-31923165", "license": "GPL-3.0", "observed_at": "2026-10-16T01:35:38.143273Z", "pushed_at": "2021-08-31T16:57:42Z", "readme_sha256": "6420f2be6002d1db11fc2de703200232fb22c113bf1a72479df4a0a7f25c0540", "readme_url": "https://github.com/plasma-disassembler/plasma/blob/master/README.md", "stars": 3071, "targets": [ "binary" ], "topics": [ "arm", "capstone", "disassembler", "mips", "reverse-engineering", "x86", "x86-64" ], "url": "https://github.com/plasma-disassembler/plasma", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Reko is a binary decompiler.", "description_language": "bilingual", "description_zh": "Reko 是一款二进制反编译器。", "full_name": "uxmal/reko", "id": "scan-39718308", "license": "GPL-2.0", "observed_at": "2026-10-16T01:36:07.108895Z", "pushed_at": "2026-10-14T19:41:59Z", "readme_sha256": "104012f2dc01246e1ff7cb64a36136ab1730a20d7db2cdcc1898f3070418324d", "readme_url": "https://github.com/uxmal/reko/blob/master/README.md", "stars": 2617, "targets": [ "app", "binary", "firmware" ], "topics": [ "aarch64", "arm", "decompile", "decompiler", "decompiler-engine", "disassemble", "disassembler", "dotnet", "m68k", "reverse-engineering", "risc-v", "x86", "x86-64" ], "url": "https://github.com/uxmal/reko", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Binary Analysis Platform", "description_language": "bilingual", "description_zh": "二进制分析平台。", "full_name": "BinaryAnalysisPlatform/bap", "id": "scan-25968851", "license": "MIT", "observed_at": "2026-10-16T01:35:38.553598Z", "pushed_at": "2026-05-07T15:28:41Z", "readme_sha256": "c857467856acfe101ccddfb8b3929c30f7713b5b8563c8b87ff6e086ef89689a", "readme_url": "https://github.com/BinaryAnalysisPlatform/bap/blob/master/README.md", "stars": 2262, "targets": [ "binary" ], "topics": [ "arm", "bap", "binary-analysis", "disassembler", "dynamic-analysis", "emulator", "instruction-semantics", "lifter", "mips", "ocaml", "powerpc", "program-analysis", "program-verification", "reverse-engineering", "security", "static-analysis", "symbolic-execution", "taint-analysis", "x86" ], "url": "https://github.com/BinaryAnalysisPlatform/bap", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Reconstruct and validate C/C++ code from compiled programs with AI.", "description_language": "bilingual", "description_zh": "利用 AI 从已编译程序中重建并验证 C/C++ 代码。", "full_name": "Dryxio/reagent", "id": "scan-1160245783", "license": "MIT", "observed_at": "2026-10-16T01:35:38.671621Z", "pushed_at": "2026-09-09T20:39:32Z", "readme_sha256": "ba66cef64fb57b9ab15e2ff1bee595f8a654059bf79cece400dec01a744e5929", "readme_url": "https://github.com/Dryxio/reagent/blob/main/README.md", "stars": 2100, "targets": [ "binary", "game" ], "topics": [ "ai-agent", "autonomous-agent", "binary-analysis", "c-plus-plus", "claude", "codex", "cybersecurity", "decompilation", "ghidra", "llm", "reverse-engineering", "source-code-recovery", "static-analysis" ], "url": "https://github.com/Dryxio/reagent", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "IDA Pro plugin with a rich set of features: decryption, deobfuscation, patching, lib code recognition and various pseudocode transformations", "description_language": "bilingual", "description_zh": "功能丰富的 IDA Pro 插件，支持解密、去混淆、打补丁、库代码识别及各种伪代码转换。", "full_name": "KasperskyLab/hrtng", "id": "scan-837149190", "license": "GPL-3.0", "observed_at": "2026-10-16T01:35:38.699143Z", "pushed_at": "2026-09-17T09:18:29Z", "readme_sha256": "4f09c4831390d71a2ba83a50b0c2c286cc04b9d8ba763bc90f0f35af5aa1445c", "readme_url": "https://github.com/KasperskyLab/hrtng/blob/master/README.md", "stars": 1949, "targets": [ "binary" ], "topics": [ "binary-analysis", "decryption", "deobfuscation", "hexrays", "ida", "ida-plugin", "idapro", "malware-analysis", "reverse-engineering" ], "url": "https://github.com/KasperskyLab/hrtng", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "An Agent Skill for designing cross-platform desktop apps that feel native — distilled from Raycast's 2.0 deep-dive and reverse engineering of Raycast Beta.app. Eight architectural tenets, four-layer architecture, WebKit/WebView2 survival guide, 75-item ship audit.", "description_language": "bilingual", "description_zh": "用于设计具有原生体验的跨平台桌面应用的智能体技能，提炼自对 Raycast 2.0 的深入研究与 Raycast Beta.app 的逆向分析。包含八项架构原则、四层架构、WebKit/WebView2 生存指南和 75 项发布审核清单。", "full_name": "yetone/native-feel-skill", "id": "scan-1239119721", "license": "MIT", "observed_at": "2026-10-16T01:35:28.552526Z", "pushed_at": "2026-05-30T15:12:34Z", "readme_sha256": "baf22beb054e70a9fcaf90ffeb6c607dedae973dafbace44c56b16c4b0536b00", "readme_url": "https://github.com/yetone/native-feel-skill/blob/master/README.md", "stars": 1931, "targets": [ "app", "binary" ], "topics": [], "url": "https://github.com/yetone/native-feel-skill", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Multi-architecture assembler for IDA Pro. Powered by Keystone Engine.", "description_language": "bilingual", "description_zh": "面向 IDA Pro 的多架构汇编器，由 Keystone Engine 驱动。", "full_name": "keystone-engine/keypatch", "id": "scan-64392573", "license": "GPL-2.0", "observed_at": "2026-10-18T14:37:54.627943Z", "pushed_at": "2024-09-06T01:42:20Z", "readme_sha256": "de7b85a97038d380766945119b194f6b492617907882cee1ca033e9d372eb03e", "readme_url": "https://github.com/keystone-engine/keypatch/blob/e7ecb93a4d242e83b9356b8258108773464646d4/README.md", "stars": 1882, "targets": [ "binary" ], "topics": [ "arm", "arm64", "assembler", "ida", "ida-pro", "idapro", "keystone", "mips", "powerpc", "reverse-engineering", "security", "sparc", "x86", "x86-64" ], "url": "https://github.com/keystone-engine/keypatch", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Binary code static analyser, with IDA integration. Performs value and taint analysis, type reconstruction, use-after-free and double-free detection", "description_language": "bilingual", "description_zh": "集成 IDA 的二进制代码静态分析器，可执行值分析、污点分析、类型重建、释放后使用及重复释放检测。", "full_name": "airbus-seclab/bincat", "id": "scan-92752493", "license": null, "observed_at": "2026-10-16T01:35:52.340622Z", "pushed_at": "2025-02-25T16:54:39Z", "readme_sha256": "e8391e9e5b2f910a3c9de49456fde146ca5aae5cae311fd076247343135d7c5b", "readme_url": "https://github.com/airbus-seclab/bincat/blob/master/README.md", "stars": 1880, "targets": [ "binary" ], "topics": [ "disassembly", "ida-plugin", "reverse-engineering", "taint-analysis" ], "url": "https://github.com/airbus-seclab/bincat", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "The Open Source Disassembler", "description_language": "bilingual", "description_zh": "开源反汇编器。", "full_name": "redasm-dev/redasm", "id": "scan-112006109", "license": "GPL-3.0", "observed_at": "2026-10-16T01:35:38.716548Z", "pushed_at": "2026-10-14T09:42:34Z", "readme_sha256": "ad3ed4d5751f4bdfc747f29e36460b6c0b1841c6b2a6cf06adfd3a4dfc4632e3", "readme_url": "https://github.com/redasm-dev/redasm/blob/master/README.md", "stars": 1822, "targets": [ "binary", "game" ], "topics": [ "binary-analysis", "disassembler", "qt6", "retrocomputing", "romhacking", "software-preservation" ], "url": "https://github.com/redasm-dev/redasm", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Automated static analysis tools for binary programs", "description_language": "bilingual", "description_zh": "面向二进制程序的自动化静态分析工具。", "full_name": "cmu-sei/pharos", "id": "scan-37336218", "license": "NOASSERTION", "observed_at": "2026-10-16T01:35:38.803439Z", "pushed_at": "2026-09-16T15:47:25Z", "readme_sha256": "a0877f4d58e62fc032541957060cc872edab65574a4b7c79a1e56b4beeddc539", "readme_url": "https://github.com/cmu-sei/pharos/blob/master/README.md", "stars": 1739, "targets": [ "binary" ], "topics": [ "binary-analysis", "reverse-engineering" ], "url": "https://github.com/cmu-sei/pharos", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "BinAbsInspector: Vulnerability Scanner for Binaries", "description_language": "bilingual", "description_zh": "BinAbsInspector：二进制文件漏洞扫描器。", "full_name": "KeenSecurityLab/BinAbsInspector", "id": "scan-474228289", "license": "GPL-3.0", "observed_at": "2026-10-16T01:35:38.859948Z", "pushed_at": "2024-06-17T15:29:24Z", "readme_sha256": "2023b2c97a0646c6c98237192c583a32bc7bbe252a17a7b60342fb5ae2e2eb1f", "readme_url": "https://github.com/KeenSecurityLab/BinAbsInspector/blob/main/README.md", "stars": 1681, "targets": [ "binary" ], "topics": [ "abstract-interpretation", "binary-analysis", "ghidra", "reverse-engineering", "security", "static-analyzer", "vulnerability-scanner" ], "url": "https://github.com/KeenSecurityLab/BinAbsInspector", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A FREE Windows C development course where we will learn the Win32API and reverse engineer each step utilizing IDA Free in both an x86 and x64 environment.", "description_language": "bilingual", "description_zh": "免费的 Windows C 开发课程，在 x86 和 x64 环境中学习 Win32API，并使用 IDA Free 对每一步进行逆向分析。", "full_name": "mytechnotalent/Hacking-Windows", "id": "scan-410567459", "license": "Apache-2.0", "observed_at": "2026-10-18T14:37:54.629248Z", "pushed_at": "2026-10-18T13:32:47Z", "readme_sha256": "0af47d45e7acaf42f329f2665cbc780d36618de8ccbf35715addb4e0e4c1b25e", "readme_url": "https://github.com/mytechnotalent/Hacking-Windows/blob/6ccbc76d71497a1ce0100c8301f70e83821275e2/README.md", "stars": 1637, "targets": [ "binary" ], "topics": [ "assembler", "assembly", "blue-team", "cplusplus", "cpp", "cyber", "cyber-threat-intelligence", "cybersecurity", "hack", "hacking", "ida", "ida-pro", "idapro", "microsoft-windows", "reverse-engineering", "training", "training-material", "training-materials", "win32api", "windows" ], "url": "https://github.com/mytechnotalent/Hacking-Windows", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Heimdall is an advanced EVM smart contract toolkit specializing in bytecode analysis and extracting information from unverified contracts.", "description_language": "bilingual", "description_zh": "Heimdall 是高级 EVM 智能合约工具包，专注于字节码分析与从未经验证的合约中提取信息。", "full_name": "Jon-Becker/heimdall-rs", "id": "scan-499880203", "license": "MIT", "observed_at": "2026-10-16T01:36:07.593551Z", "pushed_at": "2026-10-11T00:23:02Z", "readme_sha256": "a591028211992197e0cc9cb9925d055631853e1871cde614e1889b089cfe6cc0", "readme_url": "https://github.com/Jon-Becker/heimdall-rs/blob/main/README.md", "stars": 1626, "targets": [ "binary" ], "topics": [ "cfg", "decoder", "decompiler", "disassembler", "eth", "ethereum", "evm", "rust", "security", "solidity", "toolkit", "yul" ], "url": "https://github.com/Jon-Becker/heimdall-rs", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Virtual-machine Translation Intermediate Language", "description_language": "bilingual", "description_zh": "虚拟机翻译中间语言。", "full_name": "vtil-project/VTIL-Core", "id": "scan-252052557", "license": "BSD-3-Clause", "observed_at": "2026-10-16T01:36:46.670710Z", "pushed_at": "2026-07-27T04:06:06Z", "readme_sha256": "7e7d977d870839a6bad4292d531c7c8ace75101858081ddd0096ffdbddf47745", "readme_url": "https://github.com/vtil-project/VTIL-Core/blob/master/README.md", "stars": 1607, "targets": [ "binary" ], "topics": [ "compiler", "deobfuscation", "devirtualizer", "intermediate-language", "optimizer", "optimizing-compilers", "virtual-machine-translation" ], "url": "https://github.com/vtil-project/VTIL-Core", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "An impish, cross-platform binary parsing crate, written in Rust", "description_language": "bilingual", "description_zh": "使用 Rust 编写的轻巧跨平台二进制解析 crate。", "full_name": "m4b/goblin", "id": "scan-58722558", "license": "MIT", "observed_at": "2026-10-16T01:35:39.127850Z", "pushed_at": "2026-08-30T17:40:25Z", "readme_sha256": "cd7d8f00cd53ee7f05a16684cb4372adcb9e09fa4cfb3a198e6e7740238dcfe8", "readme_url": "https://github.com/m4b/goblin/blob/master/README.md", "stars": 1555, "targets": [ "binary" ], "topics": [ "archive", "binary-analysis", "cross-platform", "elf", "mach", "pe", "reverse-engineering" ], "url": "https://github.com/m4b/goblin", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "IDA Pro plugin which improves work with HexRays decompiler and helps in process of reconstruction structures and classes", "description_language": "bilingual", "description_zh": "IDA Pro 插件，可改善 Hex-Rays 反编译器的使用体验，并辅助重建结构体和类。", "full_name": "igogo-x86/HexRaysPyTools", "id": "scan-71180721", "license": null, "observed_at": "2026-10-16T01:35:52.482298Z", "pushed_at": "2024-08-11T21:59:34Z", "readme_sha256": "7aec3f4448f3f3193d967b0da27fc03515b45d541ca3ed32f4b117a0699aa78a", "readme_url": "https://github.com/igogo-x86/HexRaysPyTools/blob/master/readme.md", "stars": 1541, "targets": [ "binary" ], "topics": [ "hex-rays-decompiler", "ida", "ida-plugin", "idapython" ], "url": "https://github.com/igogo-x86/HexRaysPyTools", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Free educational content on reverse engineering and malware analysis from the FLARE team", "description_language": "bilingual", "description_zh": "FLARE 团队提供的免费逆向工程与恶意软件分析教学内容。", "full_name": "mandiant/flare-learning-hub", "id": "scan-1185620041", "license": "Apache-2.0", "observed_at": "2026-10-16T01:35:29.479576Z", "pushed_at": "2026-03-31T14:36:02Z", "readme_sha256": "f38a34bbde2d6c2b322663d89f1a73abf92a62f135aaffa114159e82961e8373", "readme_url": "https://github.com/mandiant/flare-learning-hub/blob/main/README.md", "stars": 1496, "targets": [ "binary" ], "topics": [ "assembly", "assembly-language", "assembly-language-programming", "binary-analysis", "c", "cyber-security", "cybersecurity", "flare", "go", "golang", "malware", "malware-analysis", "reverse-engineering", "threat-intelligence", "x64", "x86" ], "url": "https://github.com/mandiant/flare-learning-hub", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Agent-Native multi-platform reverse engineering and CWE-602 client-side authorization audit workbench.", "description_language": "bilingual", "description_zh": "面向智能体原生设计的多平台逆向工程与 CWE-602 客户端授权审计工作台。", "full_name": "angusdevgo/Seep-Reverse-Lab", "id": "scan-1383979298", "license": "GPL-3.0", "observed_at": "2026-10-16T01:35:29.565832Z", "pushed_at": "2026-10-14T17:39:29Z", "readme_sha256": "16a4b31f0de4a4067b3476ec14d7a1e19f227197af899f290d1dc2afab8a5c73", "readme_url": "https://github.com/angusdevgo/Seep-Reverse-Lab/blob/main/README.md", "stars": 1462, "targets": [ "binary" ], "topics": [], "url": "https://github.com/angusdevgo/Seep-Reverse-Lab", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "This project has been moved to:", "description_language": "bilingual", "description_zh": "本项目已迁移至：", "full_name": "hteso/iaito", "id": "scan-86488003", "license": "GPL-3.0", "observed_at": "2026-10-16T01:37:04.325132Z", "pushed_at": "2021-04-07T07:55:50Z", "readme_sha256": "502c466c40d9f73ccd8d36161feb9ad57dc92646c3507120e9792a33b76851d5", "readme_url": "https://github.com/hteso/iaito/blob/master/README.md", "stars": 1461, "targets": [ "binary" ], "topics": [ "gui", "qt5", "radare2", "reverse-engineering" ], "url": "https://github.com/hteso/iaito", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "BARF : A multiplatform open source Binary Analysis and Reverse engineering Framework", "description_language": "bilingual", "description_zh": "BARF：跨平台开源二进制分析与逆向工程框架。", "full_name": "programa-stic/barf-project", "id": "scan-25641440", "license": "BSD-2-Clause", "observed_at": "2026-10-16T01:35:29.706984Z", "pushed_at": "2019-11-24T16:06:27Z", "readme_sha256": "a9306ac80353005f1459a96a9f1e0abc4920c6448c084a727e71317a4b85d29f", "readme_url": "https://github.com/programa-stic/barf-project/blob/master/README.md", "stars": 1455, "targets": [ "binary" ], "topics": [ "arm", "binary-analysis", "python", "reil", "reverse-engineering", "x86" ], "url": "https://github.com/programa-stic/barf-project", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Make your IDA Lazy!", "description_language": "bilingual", "description_zh": "让你的 IDA 更省事！", "full_name": "L4ys/LazyIDA", "id": "scan-60972397", "license": "MIT", "observed_at": "2026-10-16T01:35:52.522903Z", "pushed_at": "2026-01-31T11:20:56Z", "readme_sha256": "f69d0251a63ed7370efe63d38e392f0d3409d588629d2ed8b4b6beb5830894fe", "readme_url": "https://github.com/L4ys/LazyIDA/blob/master/README.md", "stars": 1447, "targets": [ "binary" ], "topics": [ "ida", "ida-plugin", "idapro", "idapython", "python" ], "url": "https://github.com/L4ys/LazyIDA", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "An IDA plugin for binary file analysis, powered by AI models such as OpenAI and DeepSeek.", "description_language": "bilingual", "description_zh": "由 OpenAI、DeepSeek 等 AI 模型驱动的 IDA 二进制文件分析插件。", "full_name": "WPeace-HcH/WPeGPT", "id": "scan-607527484", "license": null, "observed_at": "2026-10-16T01:35:39.312680Z", "pushed_at": "2026-05-27T08:46:06Z", "readme_sha256": "a7365a0ba4dca89c6438e91ac0f622d25279c7111c4b2c358de74f2c2d10ecb5", "readme_url": "https://github.com/WPeace-HcH/WPeGPT/blob/main/README.md", "stars": 1425, "targets": [ "binary" ], "topics": [ "binary-analysis", "chatgpt", "ida", "ida-plugin", "openai", "reverse-engineering" ], "url": "https://github.com/WPeace-HcH/WPeGPT", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Python decompiler for modern Python versions.", "description_language": "bilingual", "description_zh": "支持现代 Python 版本的 Python 反编译器。", "full_name": "syssec-utd/pylingual", "id": "scan-944725659", "license": "GPL-3.0", "observed_at": "2026-10-16T01:36:07.612548Z", "pushed_at": "2026-10-15T16:35:04Z", "readme_sha256": "207176f4c8fe1f268132d4e9125a601f350a2b9a4d46ce5dec5a9501a0215a22", "readme_url": "https://github.com/syssec-utd/pylingual/blob/main/README.md", "stars": 1420, "targets": [ "app", "binary" ], "topics": [ "bytecode", "decompiler", "pyc", "python", "reverse-engineering" ], "url": "https://github.com/syssec-utd/pylingual", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "cwe_checker finds vulnerable patterns in binary executables", "description_language": "bilingual", "description_zh": "cwe_checker 可在二进制可执行文件中查找易受攻击的模式。", "full_name": "fkie-cad/cwe_checker", "id": "scan-152072866", "license": "LGPL-3.0", "observed_at": "2026-10-16T01:35:39.358557Z", "pushed_at": "2026-09-28T13:43:29Z", "readme_sha256": "8bb65f12078f4641170518eb285e34f8f836b15440b9002c224e1887a1a3f1f9", "readme_url": "https://github.com/fkie-cad/cwe_checker/blob/master/README.md", "stars": 1362, "targets": [ "binary", "firmware" ], "topics": [ "binary-analysis", "cwe", "cwe-checker", "ghidra", "program-analysis", "reverse-engineering", "security", "security-scanner", "static-analyzer", "vulnerability-scanner" ], "url": "https://github.com/fkie-cad/cwe_checker", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Powerful Disassembler Library For x86/AMD64", "description_language": "bilingual", "description_zh": "功能强大的 x86/AMD64 反汇编库。", "full_name": "gdabah/distorm", "id": "scan-32611857", "license": "NOASSERTION", "observed_at": "2026-10-16T01:36:13.244756Z", "pushed_at": "2023-10-10T22:28:13Z", "readme_sha256": "d08e2732e6129ba2acfa1fc69525be0c96d1397e3a989bf6b59304dbb9845780", "readme_url": "https://github.com/gdabah/distorm/blob/master/README.md", "stars": 1340, "targets": [ "binary" ], "topics": [ "disassembler", "disassembler-distorm", "disassembler-library", "disassembly", "distorm", "distorm3", "distorm64", "x64", "x86", "x86-64" ], "url": "https://github.com/gdabah/distorm", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A reverse engineering tool to restore stripped symbol table for iOS app.", "description_language": "bilingual", "description_zh": "用于恢复 iOS 应用中已剥离符号表的逆向工程工具。", "full_name": "tobefuturer/restore-symbol", "id": "scan-66298021", "license": null, "observed_at": "2026-10-16T01:35:29.854447Z", "pushed_at": "2020-08-21T13:45:49Z", "readme_sha256": "3035ba41e74203b6531d60fbf7a4eef414d82d39de6b9a4a08b6dcd64b98864f", "readme_url": "https://github.com/tobefuturer/restore-symbol/blob/master/README.md", "stars": 1338, "targets": [ "app", "binary" ], "topics": [], "url": "https://github.com/tobefuturer/restore-symbol", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Lua Decompiler for lua 5.1 , 5.2 and 5.3", "description_language": "bilingual", "description_zh": "支持 Lua 5.1、5.2 和 5.3 的 Lua 反编译器。", "full_name": "viruscamp/luadec", "id": "scan-22335906", "license": null, "observed_at": "2026-10-16T01:36:07.732289Z", "pushed_at": "2024-02-25T04:13:19Z", "readme_sha256": "03734bfbc3492b5b38a7d9205efcae65df77422bf44bd7b1196f5887c070e0c7", "readme_url": "https://github.com/viruscamp/luadec/blob/master/ReadMe.md", "stars": 1334, "targets": [ "binary", "game" ], "topics": [ "decompiler", "lua", "lua-decompiler" ], "url": "https://github.com/viruscamp/luadec", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Public API, examples, documentation and issues for Binary Ninja", "description_language": "bilingual", "description_zh": "Binary Ninja 的公共 API、示例、文档与问题跟踪。", "full_name": "Vector35/binaryninja-api", "id": "scan-45279022", "license": "MIT", "observed_at": "2026-10-16T01:35:39.400982Z", "pushed_at": "2026-10-15T23:08:14Z", "readme_sha256": "dae1cc6702f5effbac4fd19cc33cf7b1d19b708cc12175854ee5b0e998bb9199", "readme_url": "https://github.com/Vector35/binaryninja-api/blob/dev/README.md", "stars": 1327, "targets": [ "binary", "firmware" ], "topics": [ "binary-analysis", "binaryninja", "decompilation", "intermediate-representation", "reverse-engineering", "reverseengineering", "software-analysis" ], "url": "https://github.com/Vector35/binaryninja-api", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Stop your AI from making things up — it proposes, deterministic tools decide, every claim checked against ground truth with evidence. Grounded facts and context survive resets. Reverse engineering is the proving ground. MCP server + CLI.", "description_language": "bilingual", "description_zh": "阻止 AI 凭空编造：由 AI 提出建议，确定性工具作出判定，每项断言均依据真实数据与证据核验。经过验证的事实和上下文可在重置后保留，以逆向工程作为验证场景。提供 MCP 服务器与命令行工具。", "full_name": "2akouwu/reverify", "id": "scan-1351859098", "license": "MIT", "observed_at": "2026-10-16T01:35:29.904554Z", "pushed_at": "2026-10-01T11:31:02Z", "readme_sha256": "8fd7fcdf624bb22a36f8f24006fed0206c08ace4bf90825fa357034de8094cf7", "readme_url": "https://github.com/2akouwu/reverify/blob/main/README.md", "stars": 1297, "targets": [ "binary" ], "topics": [ "ai", "ai-agents", "ai-coding", "anti-hallucination", "binary-analysis", "context-engineering", "ctf", "developer-tools", "disassembler", "grounding", "hallucination", "hallucination-detection", "llm", "malware-analysis", "mcp", "mcp-server", "python", "reverse-engineering", "security-tools", "verification" ], "url": "https://github.com/2akouwu/reverify", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Python decompiler for 3.7-3.8 Stripped down from uncompyle6 so we can refactor and start to fix up some long-standing problems", "description_language": "bilingual", "description_zh": "适用于 Python 3.7–3.8 的反编译器，从 uncompyle6 精简而来，以便重构并着手修复一些长期存在的问题。", "full_name": "rocky/python-decompile3", "id": "scan-187480317", "license": "GPL-3.0", "observed_at": "2026-10-16T01:36:07.794219Z", "pushed_at": "2026-07-21T20:31:39Z", "readme_sha256": "196bed2abfd92d6a44acfa2e0339b2d57fa6fc09a4301a513b5113fa5d0633e7", "readme_url": "https://github.com/rocky/python-decompile3/blob/master/README.rst", "stars": 1275, "targets": [ "app", "binary" ], "topics": [ "bytecode", "decompiler", "python" ], "url": "https://github.com/rocky/python-decompile3", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Advanced Game Hacking Library for C, Modern C++, Rust and Python (Windows/Linux/FreeBSD) (Process/Memory Hacking) (Hooking/Detouring) (Cross Platform) (x86/x64) (DLL/SO Injection) (Internal/External) (Assembler/Disassembler)", "description_language": "bilingual", "description_zh": "适用于 C、现代 C++、Rust 和 Python 的高级游戏破解库，支持 Windows/Linux/FreeBSD、进程/内存操作、Hook/Detour、跨平台、x86/x64、DLL/SO 注入、内部/外部模式及汇编/反汇编。", "full_name": "rdbo/libmem", "id": "scan-285150189", "license": "AGPL-3.0", "observed_at": "2026-10-16T01:36:13.298346Z", "pushed_at": "2026-08-30T14:26:36Z", "readme_sha256": "2bc2bf753c822a10dd145a711fbbd5100dfb583c024a12835aea57f17cc16b53", "readme_url": "https://github.com/rdbo/libmem/blob/master/README.md", "stars": 1263, "targets": [ "binary", "game" ], "topics": [ "assembler", "c", "c-plus-plus", "code-injection", "detour-hook", "disassembler", "function-call", "game-hacking", "hook", "library-injection", "memory", "process", "python", "rust", "syscall" ], "url": "https://github.com/rdbo/libmem", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "PE file viewer/editor for Windows, Linux and MacOS.", "description_language": "bilingual", "description_zh": "适用于 Windows、Linux 和 macOS 的 PE 文件查看器与编辑器。", "full_name": "horsicq/XPEViewer", "id": "scan-213965467", "license": "MIT", "observed_at": "2026-10-16T01:36:13.360990Z", "pushed_at": "2026-10-15T06:05:41Z", "readme_sha256": "f4481b177b922894cd6f1d11981b8e6a4d3c66c80e6eee4da69badac692f9d27", "readme_url": "https://github.com/horsicq/XPEViewer/blob/master/README.md", "stars": 1241, "targets": [ "binary" ], "topics": [ "disassembler", "hacktoberfest", "hacktoberfest2023", "pe", "pe-format", "portable-executable", "reverse-engineering", "windows-system" ], "url": "https://github.com/horsicq/XPEViewer", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "The world's first agentic reverse engineer.", "description_language": "bilingual", "description_zh": "全球首个智能体式逆向工程师。", "full_name": "amruth-sn/kong", "id": "scan-1164459351", "license": "Apache-2.0", "observed_at": "2026-10-16T01:35:45.489621Z", "pushed_at": "2026-04-03T02:39:01Z", "readme_sha256": "936a0ad667f52cd9739c166f9ac37529324726bc9ff4d8d7b808b4bfca7bff95", "readme_url": "https://github.com/amruth-sn/kong/blob/main/README.md", "stars": 1227, "targets": [ "binary" ], "topics": [ "agentic-ai", "ghidra", "reverse-engineering" ], "url": "https://github.com/amruth-sn/kong", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Export disassemblies into Protocol Buffers", "description_language": "bilingual", "description_zh": "将反汇编结果导出为 Protocol Buffers。", "full_name": "google/binexport", "id": "scan-41831522", "license": "Apache-2.0", "observed_at": "2026-10-16T01:35:45.607668Z", "pushed_at": "2026-10-13T15:35:58Z", "readme_sha256": "af9fc396e0dd753e7482b0bb5e6ee1a11567bd73b5ff39455934b9cf37f5b25e", "readme_url": "https://github.com/google/binexport/blob/main/README.md", "stars": 1214, "targets": [ "binary" ], "topics": [ "binary-ninja", "binary-ninja-plugin", "bindiff", "binexport", "binnavi", "c-plus-plus", "database", "ghidra", "ghidra-extension", "ghidra-plugin", "ida-plugin", "ida-pro", "java", "protobuf", "reverse-engineering", "vxsig" ], "url": "https://github.com/google/binexport", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "PE Tools - Portable executable (PE) manipulation toolkit", "description_language": "bilingual", "description_zh": "PE Tools：可移植可执行文件（PE）操作工具包。", "full_name": "petoolse/petools", "id": "scan-102133147", "license": "MIT", "observed_at": "2026-10-16T01:36:13.536136Z", "pushed_at": "2025-10-21T10:10:41Z", "readme_sha256": "378177730098feb3e9b47e7fc8faf8858faa80a294c32aa428b27f9b79677e55", "readme_url": "https://github.com/petoolse/petools/blob/master/README.md", "stars": 1201, "targets": [ "binary" ], "topics": [ "analysis", "disassembler", "dumper", "entropy", "hex-editor", "pefile", "rebuilder", "resources" ], "url": "https://github.com/petoolse/petools", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Official Hex-Rays IDA MCP Server.", "description_language": "bilingual", "description_zh": "Hex-Rays 官方 IDA MCP 服务器。", "full_name": "HexRaysSA/ida-mcp", "id": "scan-1348481678", "license": "MIT", "observed_at": "2026-10-16T07:14:44.393043Z", "pushed_at": "2026-10-08T20:24:11Z", "readme_sha256": "22a5046aaaa1bd9fdf2a073cad68b055fee5d769aa3eb1bdae4fe1cdddd98c1e", "readme_url": "https://github.com/HexRaysSA/ida-mcp/blob/main/README.md", "stars": 1196, "targets": [ "binary" ], "topics": [], "url": "https://github.com/HexRaysSA/ida-mcp", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Scripts for the Ghidra software reverse engineering suite.", "description_language": "bilingual", "description_zh": "适用于 Ghidra 软件逆向工程套件的脚本。", "full_name": "ghidraninja/ghidra_scripts", "id": "scan-174371514", "license": "GPL-3.0", "observed_at": "2026-10-16T01:35:30.609931Z", "pushed_at": "2020-10-07T09:38:51Z", "readme_sha256": "800b43b4e5c40f4c59dbff7e7dd6d3f654e79546d287f0ed1d93821a273daa11", "readme_url": "https://github.com/ghidraninja/ghidra_scripts/blob/master/README.md", "stars": 1177, "targets": [ "binary" ], "topics": [], "url": "https://github.com/ghidraninja/ghidra_scripts", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "bddisasm is a fast, lightweight, x86/x64 instruction decoder. The project also features a fast, basic, x86/x64 instruction emulator, designed specifically to detect shellcode-like behavior.", "description_language": "bilingual", "description_zh": "bddisasm 是快速、轻量的 x86/x64 指令解码器。项目还提供快速、基础的 x86/x64 指令模拟器，专门用于检测类似 shellcode 的行为。", "full_name": "bitdefender/bddisasm", "id": "scan-278359094", "license": "Apache-2.0", "observed_at": "2026-10-16T01:36:13.677608Z", "pushed_at": "2026-10-14T07:10:57Z", "readme_sha256": "2220c5433d7b1ef82bc5305bf39c42bc4023d1340c44f9b3a45c569a6140870e", "readme_url": "https://github.com/bitdefender/bddisasm/blob/master/README.md", "stars": 1089, "targets": [ "binary" ], "topics": [ "decoder", "disassembler", "emulator", "instruction", "shellcode", "x64", "x86" ], "url": "https://github.com/bitdefender/bddisasm", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "An open source interactive disassembler", "description_language": "bilingual", "description_zh": "开源交互式反汇编器。", "full_name": "wisk/medusa", "id": "scan-2891767", "license": "NOASSERTION", "observed_at": "2026-10-16T01:36:13.781512Z", "pushed_at": "2026-04-10T03:11:54Z", "readme_sha256": "0b06ddaadb1beafa490e80563b1e4f3194ac853cbdc61e85217eff47052ab2c8", "readme_url": "https://github.com/wisk/medusa/blob/dev/README.rst", "stars": 1089, "targets": [ "binary" ], "topics": [ "c-plus-plus", "disassembler", "emulator", "reverse-engineering", "symbolic-execution" ], "url": "https://github.com/wisk/medusa", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "The ultimate AI-powered toolkit for python reverse engineering", "description_language": "bilingual", "description_zh": "全面的 AI 驱动 Python 逆向工程工具包。", "full_name": "Fadi002/de4py", "id": "scan-697999787", "license": "NOASSERTION", "observed_at": "2026-10-16T01:35:31.553949Z", "pushed_at": "2026-08-25T12:28:28Z", "readme_sha256": "180aa9e243fa71f0bd98ce3223422d132c8b2f6894d9828000cb06afd9983112", "readme_url": "https://github.com/Fadi002/de4py/blob/main/README.md", "stars": 1009, "targets": [ "app", "binary" ], "topics": [ "ai", "ai-deobfuscators", "de4py", "deobfuscator", "engine", "injector", "llm-deobfuscator", "obfuscation", "patcher", "protector", "python", "python-deobfuscator", "python-injector", "python-obfuscator", "python-protector", "python-unprotector", "reverse-engineering" ], "url": "https://github.com/Fadi002/de4py", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Static recompilation of Link's Awakening (Switch) to native macOS, Windows and Linux", "description_language": "bilingual", "description_zh": "将 Switch 版《Link's Awakening》静态重编译为 macOS、Windows 和 Linux 原生程序", "full_name": "peiikai/LASRecomp", "id": "scan-1411026273", "license": "NOASSERTION", "observed_at": "2026-10-16T10:47:47.349547Z", "pushed_at": "2026-10-16T02:14:04Z", "readme_sha256": "a23eed1805b2b65f851d8dab102cad380c2cf8985a1777510b40846bbd847343", "readme_url": "https://github.com/peiikai/LASRecomp/blob/main/README.md", "stars": 1009, "targets": [ "binary", "game" ], "topics": [], "url": "https://github.com/peiikai/LASRecomp", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "", "description_language": "bilingual", "description_zh": "", "full_name": "vivisect/vivisect", "id": "scan-26651759", "license": "Apache-2.0", "observed_at": "2026-10-16T01:36:13.791679Z", "pushed_at": "2026-10-07T16:23:23Z", "readme_sha256": "066d17b3c3be08a506af94960b9f1bed798dcdf32aa3727cfe562d0e43a401e5", "readme_url": "https://github.com/vivisect/vivisect/blob/master/README.md", "stars": 1003, "targets": [ "binary", "firmware" ], "topics": [ "disassembler", "emulation", "reverse-engineering" ], "url": "https://github.com/vivisect/vivisect", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "An integration for IDA and VS Code which connects both to easily execute and debug IDAPython scripts.", "description_language": "bilingual", "description_zh": "连接 IDA 与 VS Code 的集成工具，便于执行和调试 IDAPython 脚本。", "full_name": "ioncodes/idacode", "id": "scan-265598151", "license": null, "observed_at": "2026-10-16T01:35:52.624094Z", "pushed_at": "2025-09-16T20:01:32Z", "readme_sha256": "e901369975a1f75c12989ff3ca8c686590d62dbd816fe4866480d0194bb39e92", "readme_url": "https://github.com/ioncodes/idacode/blob/master/README.md", "stars": 994, "targets": [ "binary" ], "topics": [ "ida", "ida-plugin", "ida-pro", "idapython", "python", "reverse-engineering", "reversing" ], "url": "https://github.com/ioncodes/idacode", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Deep ghidra decompiler and sleigh disassembler integration for rizin", "description_language": "bilingual", "description_zh": "为 rizin 深度集成 Ghidra 反编译器与 Sleigh 反汇编器。", "full_name": "rizinorg/rz-ghidra", "id": "scan-196547485", "license": "LGPL-3.0", "observed_at": "2026-10-16T01:35:45.629272Z", "pushed_at": "2026-10-12T12:35:16Z", "readme_sha256": "aa1e881e005db400841dff782b43da4825fbab1bbd7cf6e0db6a48dba65fe19b", "readme_url": "https://github.com/rizinorg/rz-ghidra/blob/dev/README.md", "stars": 993, "targets": [ "binary" ], "topics": [ "decompiler", "disassembler", "ghidra", "hacktoberfest", "reverse-engineering", "rizin", "sleigh" ], "url": "https://github.com/rizinorg/rz-ghidra", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Reverse Engineering and Malware Analysis Roadmap", "description_language": "bilingual", "description_zh": "逆向工程与恶意软件分析学习路线图。", "full_name": "x86byte/RE-MA-Roadmap", "id": "scan-837947388", "license": null, "observed_at": "2026-10-16T01:35:31.842903Z", "pushed_at": "2025-10-02T15:10:10Z", "readme_sha256": "6693b69308089ee020bccde4168a5b7af55e09403bc66d536b2de4f5ba1d8b0e", "readme_url": "https://github.com/x86byte/RE-MA-Roadmap/blob/main/README.md", "stars": 951, "targets": [ "binary" ], "topics": [ "assembly", "binary-exploitation", "binary-reversing", "compiler", "exploit-development", "malware", "malware-analysis", "malware-analyzer", "malware-detection", "malware-development", "malware-research", "malware-reverse", "obfuscation", "reverse", "reverse-engineering", "virtualization" ], "url": "https://github.com/x86byte/RE-MA-Roadmap", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "The Official Radare2 Book", "description_language": "bilingual", "description_zh": "Radare2 官方书籍。", "full_name": "radareorg/radare2-book", "id": "scan-22724464", "license": "CC-BY-SA-4.0", "observed_at": "2026-10-16T01:37:04.377697Z", "pushed_at": "2026-09-13T21:47:53Z", "readme_sha256": "01671c064f91028a58d0bc5568cd5659a3c23f6462f5d9131c8856eb7c6779be", "readme_url": "https://github.com/radareorg/radare2-book/blob/master/README.md", "stars": 921, "targets": [ "binary" ], "topics": [ "book", "radare", "radare2", "reverse-engineering", "reversing" ], "url": "https://github.com/radareorg/radare2-book", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Karta - source code assisted fast binary matching plugin for IDA", "description_language": "bilingual", "description_zh": "Karta：借助源代码进行快速二进制匹配的 IDA 插件。", "full_name": "CheckPointSW/Karta", "id": "scan-160047555", "license": "MIT", "observed_at": "2026-10-16T01:35:52.758508Z", "pushed_at": "2026-03-31T10:39:06Z", "readme_sha256": "4f2fd81dfe108620366648d0ad2f0b69ad6d1ae60bca2536660c5c65e5f694bb", "readme_url": "https://github.com/CheckPointSW/Karta/blob/master/README.md", "stars": 912, "targets": [ "binary", "firmware" ], "topics": [ "ida-plugin", "idapython-plugin", "research" ], "url": "https://github.com/CheckPointSW/Karta", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Deobfuscation via optimization with usage of LLVM IR and parsing assembly.", "description_language": "bilingual", "description_zh": "使用 LLVM IR 并解析汇编，通过优化实现去混淆。", "full_name": "NaC-L/Mergen", "id": "scan-718127083", "license": "GPL-3.0", "observed_at": "2026-10-16T01:36:47.158056Z", "pushed_at": "2026-09-22T06:43:37Z", "readme_sha256": "c4c8ea2451b0a96feeb93f93cccabffa8f0f137cbe3b8f3dba81c1c619cae0a7", "readme_url": "https://github.com/NaC-L/Mergen/blob/main/README.md", "stars": 912, "targets": [ "binary" ], "topics": [ "deobfuscation", "devirtualization", "llvm", "optimization" ], "url": "https://github.com/NaC-L/Mergen", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Python snippets for Ghidra's Program and Decompiler APIs", "description_language": "bilingual", "description_zh": "适用于 Ghidra Program 和 Decompiler API 的 Python 代码片段。", "full_name": "HackOvert/GhidraSnippets", "id": "scan-224438500", "license": "CC0-1.0", "observed_at": "2026-10-16T01:35:45.814094Z", "pushed_at": "2023-07-19T16:07:24Z", "readme_sha256": "acf6c479a1ad34f631248b275a592cfba1d92d2c6ca8d1ab8b3a52144e09c7f6", "readme_url": "https://github.com/HackOvert/GhidraSnippets/blob/master/README.md", "stars": 893, "targets": [ "binary" ], "topics": [ "decompiler", "ghidra", "ghidra-snippets" ], "url": "https://github.com/HackOvert/GhidraSnippets", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Vulnerability detection framework by Binarly's REsearch team", "description_language": "bilingual", "description_zh": "Binarly 研究团队开发的漏洞检测框架。", "full_name": "vulhunt-re/vulhunt", "id": "scan-1173869985", "license": "GPL-3.0", "observed_at": "2026-10-16T01:35:39.644590Z", "pushed_at": "2026-08-25T15:39:17Z", "readme_sha256": "77deba65d68d1056d0f1a1cccfa07b76f3c83055797efe441dfc7f40004c066c", "readme_url": "https://github.com/vulhunt-re/vulhunt/blob/dev/README.md", "stars": 893, "targets": [ "binary", "firmware" ], "topics": [ "binary-analysis", "reverse-engineering", "vulnerability-research" ], "url": "https://github.com/vulhunt-re/vulhunt", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "An easy-to-use library for emulating memory dumps. Useful for malware analysis (config extraction, unpacking) and dynamic analysis in general (sandboxing).", "description_language": "bilingual", "description_zh": "用于模拟内存转储的易用库。适用于恶意软件分析（配置提取、脱壳）和一般动态分析（沙箱）。", "full_name": "mrexodia/dumpulator", "id": "scan-430220430", "license": "BSL-1.0", "observed_at": "2026-10-18T14:36:09.923693Z", "pushed_at": "2024-02-02T13:14:58Z", "readme_sha256": "5d1c10e2e689fe3f4bfa2b9f81442471f4d7ea1acf5e91a81d4dcb77589b502e", "readme_url": "https://github.com/mrexodia/dumpulator/blob/18a64d7ab6ccded24c5ffe72ba17ac03fd853f8b/README.md", "stars": 887, "targets": [ "binary" ], "topics": [ "cross-platform", "debugging-tools", "easy-to-use", "emulator", "hacktoberfest", "malware", "malware-analysis", "malware-analyzer", "malware-research", "minidump", "python", "python3", "reverse-engineering", "sandbox", "unicorn", "unpacking", "windows", "windows-internals", "x64" ], "url": "https://github.com/mrexodia/dumpulator", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "An OSINT tool to quickly extract IP and URL endpoints from APKs by disassembling and decompiling", "description_language": "bilingual", "description_zh": "通过反汇编与反编译，快速从 APK 中提取 IP 和 URL 端点的 OSINT 工具。", "full_name": "n0mi1k/apk2url", "id": "scan-670264280", "license": "MIT", "observed_at": "2026-10-16T01:37:30.319170Z", "pushed_at": "2024-02-24T03:56:10Z", "readme_sha256": "f6c1048244ecdc5b1ebcfa26e547a2d312042bee30845c9ff39487eee2364055", "readme_url": "https://github.com/n0mi1k/apk2url/blob/main/README.md", "stars": 880, "targets": [ "app", "binary" ], "topics": [ "android", "android-security", "apk", "apktool", "bugbounty", "endpoint-discovery", "jadx", "osint-tool", "redteam-tools" ], "url": "https://github.com/n0mi1k/apk2url", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "AI-Powered Reverse Engineering Plugin for IDA Pro", "description_language": "bilingual", "description_zh": "面向 IDA Pro 的 AI 驱动逆向工程插件。", "full_name": "symgraph/IDAssist", "id": "scan-1167005651", "license": "MIT", "observed_at": "2026-10-16T01:35:52.821304Z", "pushed_at": "2026-09-20T19:31:57Z", "readme_sha256": "0004b572eac0b99b0ee361f0813270a529d3cf437d309629f73bad7ec4dfa770", "readme_url": "https://github.com/symgraph/IDAssist/blob/master/README.md", "stars": 880, "targets": [ "binary" ], "topics": [ "ida-plugin", "ida-plugins", "idapro", "llm" ], "url": "https://github.com/symgraph/IDAssist", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A fast and accurate disassembler", "description_language": "bilingual", "description_zh": "快速且准确的反汇编器。", "full_name": "GrammaTech/ddisasm", "id": "scan-148640580", "license": "AGPL-3.0", "observed_at": "2026-10-16T01:35:39.780172Z", "pushed_at": "2026-10-13T15:07:50Z", "readme_sha256": "99b1abfcb39182a139f8b8e2fb9ef9594e88d61954fcca0372a1bb1f842516c4", "readme_url": "https://github.com/GrammaTech/ddisasm/blob/main/README.md", "stars": 876, "targets": [ "binary" ], "topics": [ "analysis", "binary", "binary-analysis", "binary-rewriting", "disassembler", "gtirb", "intermediate-representation", "reverse-engineering" ], "url": "https://github.com/GrammaTech/ddisasm", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "MCP server for reverse engineering tasks in Ghidra 👩‍💻", "description_language": "bilingual", "description_zh": "用于 Ghidra 逆向工程任务的 MCP 服务器 👩‍💻。", "full_name": "cyberkaida/reverse-engineering-assistant", "id": "scan-680027364", "license": "Apache-2.0", "observed_at": "2026-10-16T01:35:45.803458Z", "pushed_at": "2026-10-13T04:13:00Z", "readme_sha256": "0d853c01afdadd1bdc7a338e27ce589846fcdaebe4cf92fc60bd340e70e85dd6", "readme_url": "https://github.com/cyberkaida/reverse-engineering-assistant/blob/main/README.md", "stars": 875, "targets": [ "binary" ], "topics": [ "assistant", "binaryninja", "ghidra", "llm", "mcp", "mcp-server", "reverse-engineering" ], "url": "https://github.com/cyberkaida/reverse-engineering-assistant", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "CTF Cheat Sheet + Writeups / Files for some of the Security CTFs that I've done", "description_language": "bilingual", "description_zh": "CTF 速查表，以及我参加过的一些安全 CTF 的题解和文件。", "full_name": "Adamkadaban/CTFs", "id": "scan-299143611", "license": null, "observed_at": "2026-10-16T01:37:12.029962Z", "pushed_at": "2025-11-18T18:02:01Z", "readme_sha256": "b8516167069ec16cf0e5601b09166f79ad89b6b84126be718658beda97095d3b", "readme_url": "https://github.com/Adamkadaban/CTFs/blob/master/README.md", "stars": 869, "targets": [ "binary" ], "topics": [ "binary-exploitation", "cheatsheet", "cloud", "crypto", "cryptography", "cryptohack", "ctf", "ctf-challenges", "ctf-tools", "ctf-writeups", "cybersecurity", "hackthebox", "pentesting", "pwn", "resources", "reverse-engineering", "reversing", "ssti", "steganography", "tryhackme" ], "url": "https://github.com/Adamkadaban/CTFs", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "IDA7.0_SP is ida's bugfix", "description_language": "bilingual", "description_zh": "IDA7.0_SP 是 IDA 的错误修复补丁。", "full_name": "fjh658/IDA7.0_SP", "id": "scan-144138946", "license": "Apache-2.0", "observed_at": "2026-10-16T01:35:52.863502Z", "pushed_at": "2022-09-10T06:08:45Z", "readme_sha256": "77215a2ebdb5ace36c9bd17ebd6a7a382d76d639d7c1ea15c6c75767975b4734", "readme_url": "https://github.com/fjh658/IDA7.0_SP/blob/master/README.md", "stars": 863, "targets": [ "binary" ], "topics": [ "ida", "ida-plugin", "ida-pro" ], "url": "https://github.com/fjh658/IDA7.0_SP", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "IPython console integration for IDA Pro", "description_language": "bilingual", "description_zh": "为 IDA Pro 集成 IPython 控制台。", "full_name": "eset/ipyida", "id": "scan-60036204", "license": "NOASSERTION", "observed_at": "2026-10-16T01:35:53.041868Z", "pushed_at": "2026-08-27T15:38:03Z", "readme_sha256": "575c7f1ccc4b24075b233a31cffe394c3bad6977052453216fd523dccfcdc2f1", "readme_url": "https://github.com/eset/ipyida/blob/master/README.adoc", "stars": 857, "targets": [ "binary" ], "topics": [ "ida", "ida-plugin", "ida-pro", "idapython", "ipython", "python" ], "url": "https://github.com/eset/ipyida", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "DECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope dynamic Android malware analysis platform. DroidScope is now an extension to DECAF.", "description_language": "bilingual", "description_zh": "DECAF（Dynamic Executable Code Analysis Framework，动态可执行代码分析框架）是基于 QEMU 的二进制分析平台。这里也托管 DroidScope 动态 Android 恶意软件分析平台，DroidScope 现已成为 DECAF 的扩展。", "full_name": "decaf-project/DECAF", "id": "scan-28116165", "license": "GPL-3.0", "observed_at": "2026-10-16T01:35:39.701250Z", "pushed_at": "2024-11-19T03:58:17Z", "readme_sha256": "c930d934fdfffa4fe880be0f8e4c6b0fe11d414185bd7a2a1cd2860e457c5288", "readme_url": "https://github.com/decaf-project/DECAF/blob/master/README.md", "stars": 841, "targets": [ "app", "binary" ], "topics": [ "binary-analysis", "taint-analysis" ], "url": "https://github.com/decaf-project/DECAF", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Integrate LLM models directly into Ghidra for AI-enhanced reverse engineering.", "description_language": "bilingual", "description_zh": "将 LLM 模型直接集成到 Ghidra 中，以 AI 增强逆向工程。", "full_name": "weirdmachine64/GhidraGPT", "id": "scan-1055778057", "license": "Apache-2.0", "observed_at": "2026-10-16T01:35:45.863843Z", "pushed_at": "2026-07-22T13:46:37Z", "readme_sha256": "7e0681d685e357b8ac0e072648575f0bc1ee5ef9324ac23b006045b24e358419", "readme_url": "https://github.com/weirdmachine64/GhidraGPT/blob/main/README.md", "stars": 826, "targets": [ "binary" ], "topics": [ "agent", "ghidra", "ghidra-extension", "ghidra-plugin", "gpt", "java", "reverse-engineering" ], "url": "https://github.com/weirdmachine64/GhidraGPT", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "", "description_language": "bilingual", "description_zh": "", "full_name": "Cisco-Talos/GhIDA", "id": "scan-206115779", "license": "Apache-2.0", "observed_at": "2026-10-16T01:36:13.906405Z", "pushed_at": "2021-02-19T03:30:46Z", "readme_sha256": "66da7dbbbb6d0123350ff3d5e492aef4f9b730a72270dc6abcaf2fadf580c628", "readme_url": "https://github.com/Cisco-Talos/GhIDA/blob/master/README.md", "stars": 820, "targets": [ "binary" ], "topics": [ "disassembler", "ghidra-decompiler", "ida" ], "url": "https://github.com/Cisco-Talos/GhIDA", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A bunch of Windows anti-debugging tricks for x86 and x64.", "description_language": "bilingual", "description_zh": "一组面向 x86 和 x64 的 Windows 反调试技巧。", "full_name": "HackOvert/AntiDBG", "id": "scan-124140216", "license": "CC0-1.0", "observed_at": "2026-10-18T14:37:23.703993Z", "pushed_at": "2021-05-07T12:56:08Z", "readme_sha256": "6658b006ca60b8ccde0214841127cc371bd73063e8c92bdb1c2fa42ee69b8c37", "readme_url": "https://github.com/HackOvert/AntiDBG/blob/75de1f3d8e7d7488ff2e07244e3abda699d0528b/README.md", "stars": 818, "targets": [ "binary" ], "topics": [ "anti-debugging", "malware-analysis", "reverse-engineering" ], "url": "https://github.com/HackOvert/AntiDBG", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Python Command-Line Ghidra Binary Diffing Engine", "description_language": "bilingual", "description_zh": "基于 Python 命令行的 Ghidra 二进制差异比较引擎。", "full_name": "clearbluejar/ghidriff", "id": "scan-523736759", "license": "GPL-3.0", "observed_at": "2026-10-16T01:35:46.041514Z", "pushed_at": "2026-05-11T23:16:00Z", "readme_sha256": "3efc1a671ae2ed7e9b17724bdf0e3c2df1f2d4a44389f0f21d6743c82f3976a9", "readme_url": "https://github.com/clearbluejar/ghidriff/blob/main/README.md", "stars": 813, "targets": [ "binary", "firmware" ], "topics": [ "binary-diffing", "bindiff", "ghidra", "patchdiff", "python", "vulnerability-research" ], "url": "https://github.com/clearbluejar/ghidriff", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "The PE file analysis toolkit", "description_language": "bilingual", "description_zh": "PE 文件分析工具包。", "full_name": "mentebinaria/readpe", "id": "scan-3456770", "license": "GPL-2.0", "observed_at": "2026-10-16T01:35:39.889473Z", "pushed_at": "2026-08-25T19:22:31Z", "readme_sha256": "bb43e8664ce7ff20bb80bb9347ecdd55d1a84e89c93478525335051f11b23bd5", "readme_url": "https://github.com/mentebinaria/readpe/blob/master/README.md", "stars": 789, "targets": [ "binary" ], "topics": [ "binary-analysis", "malware-analysis", "malware-research", "pe-file", "portable-executable", "reverse-engineering" ], "url": "https://github.com/mentebinaria/readpe", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "An native MCP server extension for Ghidra", "description_language": "bilingual", "description_zh": "Ghidra 的原生 MCP 服务器扩展。", "full_name": "symgraph/GhidrAssistMCP", "id": "scan-1016401361", "license": "MIT", "observed_at": "2026-10-16T01:35:46.080277Z", "pushed_at": "2026-10-09T18:32:10Z", "readme_sha256": "838dc3a26ebbf827a0fb693ae6b520405723dd134694298090231eea56833eb1", "readme_url": "https://github.com/symgraph/GhidrAssistMCP/blob/master/README.md", "stars": 774, "targets": [ "binary" ], "topics": [ "ghidra", "ghidra-extension", "ghidra-plugin", "llm", "mcp", "mcp-server", "reverse-engineering" ], "url": "https://github.com/symgraph/GhidrAssistMCP", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "IDA Pro plugin to examine the glibc heap, focused on exploit development", "description_language": "bilingual", "description_zh": "用于检查 glibc 堆的 IDA Pro 插件，专注于漏洞利用开发。", "full_name": "danigargu/heap-viewer", "id": "scan-132489731", "license": "GPL-3.0", "observed_at": "2026-10-16T01:35:53.121496Z", "pushed_at": "2022-07-25T09:21:47Z", "readme_sha256": "054ab68e8baf060b10aa01103ea8e98f8ef176094cb1822ef00f243480c767ba", "readme_url": "https://github.com/danigargu/heap-viewer/blob/master/README.md", "stars": 773, "targets": [ "binary" ], "topics": [ "exploit", "exploitation", "glibc", "heap", "ida-plugin", "ida-pro", "idapython", "idapython-plugin", "python" ], "url": "https://github.com/danigargu/heap-viewer", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "An optimizing decompiler", "description_language": "bilingual", "description_zh": "支持优化的反编译器。", "full_name": "fay59/fcd", "id": "scan-40014691", "license": "NOASSERTION", "observed_at": "2026-10-16T01:36:08.193561Z", "pushed_at": "2021-03-29T09:52:12Z", "readme_sha256": "1cbebbaa05adc6a8eec100e63292362fd6992c42ed1b27689c25cf6ae96602de", "readme_url": "https://github.com/fay59/fcd/blob/master/README.md", "stars": 773, "targets": [ "binary" ], "topics": [ "clang", "decompiler", "elf", "llvm", "mach-o", "x86-64" ], "url": "https://github.com/fay59/fcd", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "An LLM extension for Ghidra to enable AI assistance in RE.", "description_language": "bilingual", "description_zh": "为 Ghidra 提供 AI 逆向工程辅助的 LLM 扩展。", "full_name": "symgraph/GhidrAssist", "id": "scan-862642098", "license": "MIT", "observed_at": "2026-10-16T01:35:46.173933Z", "pushed_at": "2026-09-20T19:28:18Z", "readme_sha256": "44a1ee91d9fc21460a2219c530d74a1576a7e84289d275195850436253b84abc", "readme_url": "https://github.com/symgraph/GhidrAssist/blob/master/README.md", "stars": 760, "targets": [ "binary" ], "topics": [ "chatgpt", "ghidra", "ghidra-extension", "ghidra-plugin", "llm", "ml", "openai", "re", "reverse-engineering" ], "url": "https://github.com/symgraph/GhidrAssist", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A reversing plugin for cross-decompiler collaboration, built on git. ", "description_language": "bilingual", "description_zh": "基于 Git 的逆向工程插件，支持跨反编译器协作。", "full_name": "binsync/binsync", "id": "scan-196040127", "license": "BSD-2-Clause", "observed_at": "2026-10-16T01:35:53.274171Z", "pushed_at": "2026-08-31T03:40:31Z", "readme_sha256": "c26e92a7fe90a47935d30f10d3fd331e93f912de8b3ab3b1d7d047c3017b44dc", "readme_url": "https://github.com/binsync/binsync/blob/main/README.md", "stars": 752, "targets": [ "binary" ], "topics": [ "angr-plugin", "binary-ninja-plugin", "collaboration", "decompiler", "ghidra-extension", "ida-plugin", "reverse-engineering" ], "url": "https://github.com/binsync/binsync", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "RetroWrite -- Retrofitting compiler passes through binary rewriting", "description_language": "bilingual", "description_zh": "RetroWrite：通过二进制重写将编译器处理流程应用于现有程序。", "full_name": "HexHive/retrowrite", "id": "scan-146674758", "license": "NOASSERTION", "observed_at": "2026-10-16T01:36:14.067844Z", "pushed_at": "2025-04-26T16:48:55Z", "readme_sha256": "49d2832677fc437325253aaff4f180397c17668df1deea0a8a2d19f7d4993f5b", "readme_url": "https://github.com/HexHive/retrowrite/blob/master/README.md", "stars": 751, "targets": [ "binary" ], "topics": [ "aarch64", "assembly", "binary-rewriting", "disassembler", "reverse-engineering", "security", "x86-64" ], "url": "https://github.com/HexHive/retrowrite", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "PyInstaller Extractor Next Generation", "description_language": "bilingual", "description_zh": "新一代 PyInstaller 提取工具。", "full_name": "pyinstxtractor/pyinstxtractor-ng", "id": "scan-538050621", "license": "GPL-3.0", "observed_at": "2026-10-16T01:36:08.306548Z", "pushed_at": "2026-10-08T18:04:05Z", "readme_sha256": "1b0ac7141861b32770dcdfd5ed601a2c2d234d63e4e3957dce3f1fd96f1b92d1", "readme_url": "https://github.com/pyinstxtractor/pyinstxtractor-ng/blob/main/README.md", "stars": 741, "targets": [ "app", "binary" ], "topics": [ "decompiler", "pyc-files", "pyinstaller", "pyinstaller-extractor", "python", "python-decompiler", "reverse-engineering" ], "url": "https://github.com/pyinstxtractor/pyinstxtractor-ng", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A curated list of awesome projects, articles and the other materials powered by Radare2", "description_language": "bilingual", "description_zh": "精选基于 Radare2 的优质项目、文章及其他资料列表。", "full_name": "radareorg/awesome-radare2", "id": "scan-134911045", "license": "CC0-1.0", "observed_at": "2026-10-16T01:37:04.508312Z", "pushed_at": "2020-04-30T09:52:08Z", "readme_sha256": "2b50e6d81f507fe44a03265a1576c7029cc55a425e57b49276446a54aa3a157a", "readme_url": "https://github.com/radareorg/awesome-radare2/blob/master/README.md", "stars": 739, "targets": [ "binary" ], "topics": [ "awesome", "awesome-list", "r2", "radare2", "reverse-engineering" ], "url": "https://github.com/radareorg/awesome-radare2", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "RISC-V simulator for x86-64", "description_language": "bilingual", "description_zh": "面向 x86-64 的 RISC-V 模拟器。", "full_name": "larkmjc/rv8", "id": "scan-50712020", "license": "MIT", "observed_at": "2026-10-16T01:36:14.108293Z", "pushed_at": "2022-02-05T21:18:49Z", "readme_sha256": "5bea4faa7e137035288a042061175d589b0c29c32e562f8b567718de9463e111", "readme_url": "https://github.com/larkmjc/rv8/blob/master/README.md", "stars": 727, "targets": [ "binary" ], "topics": [ "binary-translation", "disassembler", "emulator", "histogram", "isa", "linux", "macro-op-fusion", "metadata", "risc", "riscv", "rv-jit", "rv-meta", "rv-sim", "rv-sys", "rv8", "simulator" ], "url": "https://github.com/larkmjc/rv8", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A collection of pwn/CTF related utilities for Ghidra", "description_language": "bilingual", "description_zh": "Ghidra 的 pwn/CTF 相关实用工具合集。", "full_name": "0xb0bb/pwndra", "id": "scan-233063183", "license": "Apache-2.0", "observed_at": "2026-10-16T01:35:46.232638Z", "pushed_at": "2024-09-10T08:40:52Z", "readme_sha256": "2c447fb10366ef2eafc67ebc424fe123611a81375f78a1e460a903604194a5a5", "readme_url": "https://github.com/0xb0bb/pwndra/blob/master/README.md", "stars": 710, "targets": [ "binary" ], "topics": [ "ctf", "ctf-tools", "exploitation", "ghidra", "ghidra-scripts", "pwn", "reverse-engineering" ], "url": "https://github.com/0xb0bb/pwndra", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "iblessing is an iOS security exploiting toolkit, it mainly includes application information gathering, static analysis and dynamic analysis. It can be used for reverse engineering, binary analysis and vulnerability mining.", "description_language": "bilingual", "description_zh": "iblessing 是一个 iOS 安全利用工具集，主要包括应用信息收集、静态分析和动态分析，可用于逆向工程、二进制分析和漏洞挖掘。", "full_name": "Soulghost/iblessing", "id": "scan-281391604", "license": "GPL-3.0", "observed_at": "2026-10-16T10:47:35.893150Z", "pushed_at": "2022-02-08T13:02:20Z", "readme_sha256": "f225f023b90f4d98031b321e1f7035e198949142c4d7ff151a2982294bda1db2", "readme_url": "https://github.com/Soulghost/iblessing/blob/master/README.md", "stars": 687, "targets": [ "app", "binary" ], "topics": [ "exploit", "ios", "reverse-engineering", "scanner", "vulnerability", "vulnerability-scanners" ], "url": "https://github.com/Soulghost/iblessing", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": ":dart: Advanced debugging skills used in iOS project development, including dynamic debugging, static analysis, and decompilation of third-party libraries.", "description_language": "bilingual", "description_zh": ":dart: iOS 项目开发过程中用到的高级调试技巧，涉及第三方库的动态调试、静态分析和反编译等领域。", "full_name": "aozhimin/iOS-Debug-Hacks", "id": "scan-93843247", "license": "MIT", "observed_at": "2026-10-16T10:47:34.667070Z", "pushed_at": "2017-09-29T14:43:38Z", "readme_sha256": "3a12e133bccc7fe1ba947b28050d341a6b694db371ee3056b187bfcfa08fd071", "readme_url": "https://github.com/aozhimin/iOS-Debug-Hacks/blob/master/README.md", "stars": 682, "targets": [ "app", "binary" ], "topics": [ "assembly-x86", "debug", "hacking", "ios", "lldb", "reverse-engineering" ], "url": "https://github.com/aozhimin/iOS-Debug-Hacks", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "An Interactive Hex-Rays Microcode Explorer", "description_language": "bilingual", "description_zh": "交互式 Hex-Rays 微代码浏览器。", "full_name": "gaasedelen/lucid", "id": "scan-294729972", "license": "MIT", "observed_at": "2026-10-16T01:36:08.500368Z", "pushed_at": "2024-02-08T02:32:58Z", "readme_sha256": "0cc9c3edb8275da8f6ee96e1d4bb82bae474589729c6e24f9bb7b5a4b5145995", "readme_url": "https://github.com/gaasedelen/lucid/blob/master/README.md", "stars": 679, "targets": [ "binary" ], "topics": [ "decompiler", "hexrays", "ida", "ida-pro", "microcode", "reverse-engineering" ], "url": "https://github.com/gaasedelen/lucid", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "#supply #chain #attack #detection", "description_language": "bilingual", "description_zh": "#供应链 #攻击 #检测", "full_name": "chainguard-dev/malcontent", "id": "scan-753881685", "license": "Apache-2.0", "observed_at": "2026-10-18T14:37:23.712053Z", "pushed_at": "2026-10-18T12:10:55Z", "readme_sha256": "d95ad85fbdcfd0e09d474b412bc2bb045a1d6d7a073b4f968bd757cb651b2107", "readme_url": "https://github.com/chainguard-dev/malcontent/blob/bee0c02a404f543a05476f12942e9b69a7dcc084/README.md", "stars": 678, "targets": [ "binary" ], "topics": [ "binary", "linux", "macos", "malware-analysis", "no-ghaudit-default-permissions", "reverse-engineering" ], "url": "https://github.com/chainguard-dev/malcontent", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "IDApython Scripts for Analyzing Golang Binaries", "description_language": "bilingual", "description_zh": "用于分析 Go 二进制文件的 IDAPython 脚本。", "full_name": "SentineLabs/AlphaGolang", "id": "scan-413830509", "license": "GPL-3.0", "observed_at": "2026-10-16T01:35:53.348939Z", "pushed_at": "2024-08-08T05:45:58Z", "readme_sha256": "0128b6b42a1395527ce74cb1ad0a2d1e21729642c14e8d3ff71372c63a07ad02", "readme_url": "https://github.com/SentineLabs/AlphaGolang/blob/main/README.md", "stars": 675, "targets": [ "binary" ], "topics": [ "go", "ida-plugin", "ida-pro", "idapython", "malware-analysis", "reverse-engineering" ], "url": "https://github.com/SentineLabs/AlphaGolang", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "IDA Pro plugin for query based searching within the binary useful mainly for vulnerability research.", "description_language": "bilingual", "description_zh": "用于在二进制文件中进行查询式搜索的 IDA Pro 插件，主要服务于漏洞研究。", "full_name": "Accenture/VulFi", "id": "scan-464391573", "license": "Apache-2.0", "observed_at": "2026-10-16T01:35:53.409106Z", "pushed_at": "2025-05-13T10:19:31Z", "readme_sha256": "e12a3ddb51b8986bb1a8d625ec6815cb1e5cfb8445ca072422315db4950af43c", "readme_url": "https://github.com/Accenture/VulFi/blob/main/README.md", "stars": 673, "targets": [ "binary" ], "topics": [ "ida-plugin" ], "url": "https://github.com/Accenture/VulFi", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "IDAPython Made Easy", "description_language": "bilingual", "description_zh": "让 IDAPython 变得简单。", "full_name": "tmr232/Sark", "id": "scan-29462715", "license": "MIT", "observed_at": "2026-10-16T01:35:53.539556Z", "pushed_at": "2025-02-22T10:17:16Z", "readme_sha256": "b7d13841e62da7cd901a8fb49683e72f056108b81117b3c5f187f2378cedbd42", "readme_url": "https://github.com/tmr232/Sark/blob/main/README.rst", "stars": 672, "targets": [ "binary" ], "topics": [ "ida-plugin", "ida-pro", "idapython", "reverse-engineering", "static-analysis" ], "url": "https://github.com/tmr232/Sark", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A comprehensive collection of cheatsheets for reverse engineering, binary analysis, and assembly programming tools. This repository serves as a one-stop reference for security researchers, reverse engineers, and low-level programmers.", "description_language": "bilingual", "description_zh": "涵盖逆向工程、二进制分析和汇编编程工具的全面速查表合集，为安全研究人员、逆向工程师和底层程序员提供一站式参考。", "full_name": "mohitmishra786/reversingBits", "id": "scan-881999179", "license": "MIT", "observed_at": "2026-10-16T01:35:40.216351Z", "pushed_at": "2025-07-21T19:05:45Z", "readme_sha256": "cb82be43f50dcc59278e2e65bfc3f034890ca21771da57bbc331f551af4eabb5", "readme_url": "https://github.com/mohitmishra786/reversingBits/blob/main/README.md", "stars": 662, "targets": [ "binary" ], "topics": [ "assembly", "binary-analysis", "binary-exploitation", "ctf-tools", "cybersecurity", "cybersecurity-tools", "debugging", "disassembly", "dynamic-analysis", "malware-analysis", "penetration-testing", "program-analysis", "reverse-engineering", "reversing", "security-tools", "static-analysis", "system-security", "vulnerability-research", "x86-64", "x86-assembly" ], "url": "https://github.com/mohitmishra786/reversingBits", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "BinData - Reading and Writing Binary Data in Ruby", "description_language": "bilingual", "description_zh": "BinData：在 Ruby 中读写二进制数据。", "full_name": "dmendel/bindata", "id": "scan-10114632", "license": "BSD-2-Clause", "observed_at": "2026-10-16T01:35:40.281965Z", "pushed_at": "2026-10-11T14:00:19Z", "readme_sha256": "988dfd8b0228bb4b03e6795eb5bf802526a84f4452e43c60853aa3e7563ec847", "readme_url": "https://github.com/dmendel/bindata/blob/master/README.md", "stars": 653, "targets": [ "binary" ], "topics": [ "binary-analysis", "declarative-language", "file-format", "reverse-engineering", "ruby" ], "url": "https://github.com/dmendel/bindata", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "The Kam1n0 Assembly Analysis Platform", "description_language": "bilingual", "description_zh": "Kam1n0 汇编分析平台。", "full_name": "McGill-DMaS/Kam1n0-Community", "id": "scan-42168266", "license": "Apache-2.0", "observed_at": "2026-10-16T01:35:40.402635Z", "pushed_at": "2023-03-02T15:32:10Z", "readme_sha256": "0b8c0ad7fc2b908e32437db11f2ec6527ba2eb9d643bf549ad263af69686672d", "readme_url": "https://github.com/McGill-DMaS/Kam1n0-Community/blob/master2.x/README.md", "stars": 627, "targets": [ "binary" ], "topics": [ "binary-analysis", "data-mining", "machine-learning", "reverse-engineering" ], "url": "https://github.com/McGill-DMaS/Kam1n0-Community", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Use angr in Ghidra", "description_language": "bilingual", "description_zh": "在 Ghidra 中使用 angr。", "full_name": "Nalen98/AngryGhidra", "id": "scan-290492450", "license": "MIT", "observed_at": "2026-10-16T01:35:46.404547Z", "pushed_at": "2024-07-29T15:41:18Z", "readme_sha256": "445331e6c0a4dcdbc69b641154384978367230d359c3b455ebce99713126ec49", "readme_url": "https://github.com/Nalen98/AngryGhidra/blob/master/README.md", "stars": 623, "targets": [ "binary" ], "topics": [ "angr", "execution", "ghidra", "ghidra-plugin", "symbolic", "symbolic-execution" ], "url": "https://github.com/Nalen98/AngryGhidra", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Rellic produces goto-free C output from LLVM bitcode", "description_language": "bilingual", "description_zh": "Rellic 可从 LLVM bitcode 生成不含 goto 的 C 代码。", "full_name": "lifting-bits/rellic", "id": "scan-161553342", "license": "Apache-2.0", "observed_at": "2026-10-16T01:36:08.675512Z", "pushed_at": "2026-02-12T19:39:32Z", "readme_sha256": "eb5a2148709a993216d32a9036b75ebdabbe50857d7157b7f51c7a9aca6f5273", "readme_url": "https://github.com/lifting-bits/rellic/blob/master/README.md", "stars": 621, "targets": [ "binary" ], "topics": [ "c", "decompiler", "llvm", "reverse-engineering" ], "url": "https://github.com/lifting-bits/rellic", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "An agent-first decompiler designed to be refined by other agents. Kuna is written in Rust and was originally ported from Ghidra.", "description_language": "bilingual", "description_zh": "以智能体为核心、可由其他智能体持续改进的反编译器。Kuna 使用 Rust 编写，最初从 Ghidra 移植而来。", "full_name": "Noelo-Lab/kuna", "id": "scan-1262212892", "license": "Apache-2.0", "observed_at": "2026-10-16T01:35:40.466067Z", "pushed_at": "2026-10-15T14:27:30Z", "readme_sha256": "98dcfc35da659d12d157668616f004509bf88eeda3271ccfe665beb4e615d95a", "readme_url": "https://github.com/Noelo-Lab/kuna/blob/main/README.md", "stars": 614, "targets": [ "binary" ], "topics": [ "autonomous-refinement", "binary-analysis", "decompilation" ], "url": "https://github.com/Noelo-Lab/kuna", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "r2dec-js is a JavaScript-based decompiler that converts assembly code into pseudo-C. It aids users in understanding assembly by providing readable high-level explanations, making low-level programming more accessible and facilitating debugging across diverse hardware platforms.", "description_language": "bilingual", "description_zh": "r2dec-js 是基于 JavaScript 的反编译器，可将汇编代码转换为伪 C 代码。它通过可读的高层解释帮助用户理解汇编，降低底层编程门槛，并辅助在不同硬件平台上调试。", "full_name": "wargio/r2dec-js", "id": "scan-89411088", "license": null, "observed_at": "2026-10-16T01:36:08.795475Z", "pushed_at": "2026-08-16T18:36:14Z", "readme_sha256": "b6ea7ffd4eede223342bf3bc9f86fc4401f3c7d6f326a120ef87c91351e667ef", "readme_url": "https://github.com/wargio/r2dec-js/blob/master/README.md", "stars": 611, "targets": [ "binary", "website" ], "topics": [ "assembly", "converts-asm", "decompiler", "duktape", "javascript", "pseudo", "radare2" ], "url": "https://github.com/wargio/r2dec-js", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Ghidra extension for exporting relocatable object files", "description_language": "bilingual", "description_zh": "用于导出可重定位目标文件的 Ghidra 扩展。", "full_name": "boricj/ghidra-delinker-extension", "id": "scan-679810111", "license": "Apache-2.0", "observed_at": "2026-10-16T01:35:46.548042Z", "pushed_at": "2026-09-26T14:24:25Z", "readme_sha256": "f8d617bc065505dd5b60047f630d8e582a2f787de8d12be82935246bd4b5596d", "readme_url": "https://github.com/boricj/ghidra-delinker-extension/blob/master/README.md", "stars": 608, "targets": [ "binary", "game" ], "topics": [ "delinking", "ghidra", "ghidra-extension", "reverse-engineering" ], "url": "https://github.com/boricj/ghidra-delinker-extension", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A Binary Genetic Traits Lexer Framework", "description_language": "bilingual", "description_zh": "二进制遗传特征词法分析框架。", "full_name": "c3rb3ru5d3d53c/binlex", "id": "scan-376974418", "license": "MIT", "observed_at": "2026-10-16T01:35:40.552220Z", "pushed_at": "2026-07-01T22:58:39Z", "readme_sha256": "a52ac0b6d072bf45fba380917f2ef1e16d9946450f7c49c49f74866ad7f849cc", "readme_url": "https://github.com/c3rb3ru5d3d53c/binlex/blob/master/README.md", "stars": 604, "targets": [ "binary" ], "topics": [ "binary-analysis", "binary-code", "binary-similarity", "binlex", "cybersecurity", "genetic-progamming", "ida-plugin", "malware-analysis", "malware-research", "reverse-engineering", "yara", "yara-rules" ], "url": "https://github.com/c3rb3ru5d3d53c/binlex", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Binary Analysis Framework in Rust", "description_language": "bilingual", "description_zh": "使用 Rust 编写的二进制分析框架。", "full_name": "falconre/falcon", "id": "scan-90289126", "license": "Apache-2.0", "observed_at": "2026-10-16T01:35:40.667709Z", "pushed_at": "2026-03-24T20:03:48Z", "readme_sha256": "9ebaf7cbbcb76fdf734c9952123b7bd60a57bfa9b2e02b9035fc83f97c9a8bd9", "readme_url": "https://github.com/falconre/falcon/blob/master/README.md", "stars": 593, "targets": [ "binary" ], "topics": [ "binary-analysis", "data-flow-analysis", "program-analysis", "rust" ], "url": "https://github.com/falconre/falcon", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Pintool example and PoC for dynamic binary analysis", "description_language": "bilingual", "description_zh": "用于动态二进制分析的 Pintool 示例与概念验证。", "full_name": "JonathanSalwan/PinTools", "id": "scan-26336783", "license": null, "observed_at": "2026-10-16T01:35:40.745873Z", "pushed_at": "2022-02-15T14:47:04Z", "readme_sha256": "b201dc34ee6b4d201a9ef1bc5ba641c022bcbf2217ac1be173c73a5ac75e5262", "readme_url": "https://github.com/JonathanSalwan/PinTools/blob/master/README.rst", "stars": 593, "targets": [ "binary" ], "topics": [ "binary-analysis", "dbi", "pintool" ], "url": "https://github.com/JonathanSalwan/PinTools", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "🔍 Go binary size SVG treemap", "description_language": "bilingual", "description_zh": "🔍 展示 Go 二进制文件大小的 SVG 矩形树图。", "full_name": "nikolaydubina/go-binsize-treemap", "id": "scan-450664461", "license": "MIT", "observed_at": "2026-10-16T01:35:40.864588Z", "pushed_at": "2026-08-15T18:19:38Z", "readme_sha256": "715a88c48f27dcfff4208e161ceaee0131426ac659661cc93159c628d212e751", "readme_url": "https://github.com/nikolaydubina/go-binsize-treemap/blob/main/README.md", "stars": 587, "targets": [ "binary" ], "topics": [ "binary", "binary-analysis", "compiler", "data-visualization", "go", "golang", "svg", "symtab", "treemap" ], "url": "https://github.com/nikolaydubina/go-binsize-treemap", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "B2R2 is a fully managed binary analysis framework written in F#. It provides a rich set of algorithms, functions, and tools for reverse engineering, program analysis, and binary-level inspection.", "description_language": "bilingual", "description_zh": "B2R2 是使用 F# 编写的完全托管二进制分析框架，提供丰富的算法、函数和工具，用于逆向工程、程序分析和二进制级检查。", "full_name": "B2R2-org/B2R2", "id": "scan-168692440", "license": "MIT", "observed_at": "2026-10-16T01:35:41.224468Z", "pushed_at": "2026-10-15T23:20:32Z", "readme_sha256": "e49f86c62bcd6a7e883c8bd560966cb9c3a61e03ed8d533b177387b98a33c9d1", "readme_url": "https://github.com/B2R2-org/B2R2/blob/main/README.md", "stars": 552, "targets": [ "app", "binary" ], "topics": [ "aarch64", "avr", "binary", "binary-analysis", "cfg", "disassembler", "disassembly", "dotnet", "elf-parser", "evm", "fsharp", "mach-o", "mips", "pe-binaries", "reverse-engineering", "risc-v", "x86", "x86-64" ], "url": "https://github.com/B2R2-org/B2R2", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "IDA Pro's FindCrypt ported to Ghidra, with an updated and customizable signature database", "description_language": "bilingual", "description_zh": "将 IDA Pro 的 FindCrypt 移植到 Ghidra，附带更新且可自定义的特征库。", "full_name": "d3v1l401/FindCrypt-Ghidra", "id": "scan-178957839", "license": "GPL-3.0", "observed_at": "2026-10-16T01:35:46.784784Z", "pushed_at": "2023-06-25T03:37:00Z", "readme_sha256": "fe95d44d891575cce49840aab8eddd40666b61f6472cc857ea60815f098b6aab", "readme_url": "https://github.com/d3v1l401/FindCrypt-Ghidra/blob/master/README.md", "stars": 550, "targets": [ "binary" ], "topics": [ "cryptoanalysis", "cryptography", "cryptography-tools", "ghidra", "plugin", "reverse-engineering" ], "url": "https://github.com/d3v1l401/FindCrypt-Ghidra", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "BeaEngine disasm project", "description_language": "bilingual", "description_zh": "BeaEngine 反汇编项目。", "full_name": "BeaEngine/beaengine", "id": "scan-28780363", "license": null, "observed_at": "2026-10-16T01:36:14.507697Z", "pushed_at": "2020-12-17T17:40:10Z", "readme_sha256": "481e42c503a83fd04b9e5069e3978cb87675a77b09fa38086ee8254ac32f73aa", "readme_url": "https://github.com/BeaEngine/beaengine/blob/master/README.md", "stars": 549, "targets": [ "binary" ], "topics": [ "c99", "control-flow-analysis", "data-flow-analysis", "disassembler", "intel", "library", "reverse-engineering", "x86-64" ], "url": "https://github.com/BeaEngine/beaengine", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Framework for Automating Fuzzable Target Discovery with Static Analysis.", "description_language": "bilingual", "description_zh": "利用静态分析自动发现可模糊测试目标的框架。", "full_name": "ex0dus-0x/fuzzable", "id": "scan-367959114", "license": "MIT", "observed_at": "2026-10-16T01:35:41.422852Z", "pushed_at": "2026-06-11T09:42:51Z", "readme_sha256": "c1f19bf9b3dd8d9ba9083f5d37ec7b721f8fefe4fe67e289e3354e729fe507d3", "readme_url": "https://github.com/ex0dus-0x/fuzzable/blob/main/README.md", "stars": 548, "targets": [ "binary" ], "topics": [ "binary-analysis", "fuzzing", "reverse-engineering", "security", "security-tools", "static-analysis" ], "url": "https://github.com/ex0dus-0x/fuzzable", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Binee: binary emulation environment", "description_language": "bilingual", "description_zh": "Binee：二进制模拟环境。", "full_name": "carbonblack/binee", "id": "scan-193735522", "license": "GPL-2.0", "observed_at": "2026-10-16T01:35:41.479506Z", "pushed_at": "2023-02-25T04:34:18Z", "readme_sha256": "2ea2e35aeebd3c6d49b8ef4780d454b8c8933f3703f036f5e661f1e597edbefe", "readme_url": "https://github.com/carbonblack/binee/blob/master/README.md", "stars": 531, "targets": [ "binary" ], "topics": [ "analysis", "binary", "binary-analysis", "emulation", "hooks", "malware", "mock", "static-analysis", "testing", "unicorn-emulator" ], "url": "https://github.com/carbonblack/binee", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A series of tutorials about radare2 framework from https://www.megabeets.net", "description_language": "bilingual", "description_zh": "来自 https://www.megabeets.net 的一系列 radare2 框架教程。", "full_name": "ITAYC0HEN/A-journey-into-Radare2", "id": "scan-86309539", "license": null, "observed_at": "2026-10-16T01:37:04.543780Z", "pushed_at": "2021-01-17T20:05:02Z", "readme_sha256": "66e0838f3c385e0e3bd36fe8558e5765710b0a6e19771abc8b8d35074d5179ed", "readme_url": "https://github.com/ITAYC0HEN/A-journey-into-Radare2/blob/master/README.md", "stars": 528, "targets": [ "binary" ], "topics": [ "radare2", "tutorials" ], "url": "https://github.com/ITAYC0HEN/A-journey-into-Radare2", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "An ad-free BiliBili client implemented through iOS reverse engineering. Thanks for using it; stars are welcome.", "description_language": "bilingual", "description_zh": "一个通过 iOS 逆向分析实现的无广告版哔哩哔哩客户端，感谢使用，欢迎 Star。", "full_name": "TouchFriend/BiliBiliMApp", "id": "scan-996796621", "license": "MIT", "observed_at": "2026-10-16T10:47:39.073514Z", "pushed_at": "2026-07-04T02:12:56Z", "readme_sha256": "c712aec0bbc068b29b0de95405c8acb38fbfa651ffb5ef5aa49188dff5835092", "readme_url": "https://github.com/TouchFriend/BiliBiliMApp/blob/main/README.md", "stars": 518, "targets": [ "app", "binary" ], "topics": [ "arm64", "bilibili", "hook", "ios", "ios-reverse", "ios-tweak", "objective-c", "reverse-engineering" ], "url": "https://github.com/TouchFriend/BiliBiliMApp", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "The multiplayer AI offensive security OS - open, self-improving, extensible. Find, verify, and fix vulnerabilities.", "description_language": "bilingual", "description_zh": "支持多人协作的 AI 进攻性安全操作系统：开放、可自我改进、可扩展。发现、验证并修复漏洞。", "full_name": "0sec-labs/0", "id": "scan-1339271188", "license": "NOASSERTION", "observed_at": "2026-10-16T01:35:41.473830Z", "pushed_at": "2026-10-15T23:17:30Z", "readme_sha256": "20bfe912bd63feba331f1d08e3e8366224e128c8f5b4f9311fda990261f10bdb", "readme_url": "https://github.com/0sec-labs/0/blob/main/README.md", "stars": 513, "targets": [ "app", "binary" ], "topics": [ "ai-security", "application-security", "autonomous-agents", "binary-analysis", "cve", "cybersecurity", "devsecops", "fuzzing", "llm-agents", "llm-security", "mcp", "owasp", "penetration-testing", "prompt-injection", "red-team", "sast", "security", "security-research", "security-tools", "vulnerability-scanner" ], "url": "https://github.com/0sec-labs/0", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Yet Another Ghidra Integration for IDA", "description_language": "bilingual", "description_zh": "又一个面向 IDA 的 Ghidra 集成。", "full_name": "airbus-cert/Yagi", "id": "scan-403906808", "license": "Apache-2.0", "observed_at": "2026-10-16T01:35:46.748319Z", "pushed_at": "2024-08-20T18:54:08Z", "readme_sha256": "341150555208adc5ed3ccaca75713fa3287938d81a3dc09558f443e1dbb0c77c", "readme_url": "https://github.com/airbus-cert/Yagi/blob/main/README.md", "stars": 511, "targets": [ "binary" ], "topics": [ "decompiler", "disassembler", "ghidra", "ida-plugin", "reverse-engineering" ], "url": "https://github.com/airbus-cert/Yagi", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Rust implementation of SPIR-V module processing functionalities", "description_language": "bilingual", "description_zh": "SPIR-V 模块处理功能的 Rust 实现。", "full_name": "gfx-rs/rspirv", "id": "scan-70991953", "license": "Apache-2.0", "observed_at": "2026-10-16T01:36:14.695660Z", "pushed_at": "2026-09-29T09:40:34Z", "readme_sha256": "e36bb8d97a06df032b3ed5b830c05419c4e6dcd36ec52a2810ea5e824a3e0deb", "readme_url": "https://github.com/gfx-rs/rspirv/blob/master/README.md", "stars": 504, "targets": [ "binary" ], "topics": [ "binary", "disassembler", "module", "opencl", "opengl", "rust", "spirv", "vulkan" ], "url": "https://github.com/gfx-rs/rspirv", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "IFL - Interactive Functions List (plugin for IDA Pro)", "description_language": "bilingual", "description_zh": "IFL：交互式函数列表（IDA Pro 插件）。", "full_name": "hasherezade/ida_ifl", "id": "scan-42967353", "license": null, "observed_at": "2026-10-16T01:35:53.577010Z", "pushed_at": "2026-06-25T18:54:46Z", "readme_sha256": "eaa6ea552528acce0a507f7aa93d8b3018df39b2a58179c8714fb952ead8d7cb", "readme_url": "https://github.com/hasherezade/ida_ifl/blob/master/README.md", "stars": 502, "targets": [ "binary" ], "topics": [ "ida-plugin", "ida-pro", "idapython-plugin" ], "url": "https://github.com/hasherezade/ida_ifl", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Port of devttyS0's IDA plugins to the Ghidra plugin framework, new plugins as well.", "description_language": "bilingual", "description_zh": "将 devttyS0 的 IDA 插件移植到 Ghidra 插件框架，并提供新插件。", "full_name": "grayhatacademy/ghidra_scripts", "id": "scan-205236572", "license": null, "observed_at": "2026-10-16T01:35:46.807688Z", "pushed_at": "2021-05-03T16:41:07Z", "readme_sha256": "fd628b9c15f0513f33d967d53f58bdcc15611116446faaede0d9073238f209e4", "readme_url": "https://github.com/grayhatacademy/ghidra_scripts/blob/master/README.md", "stars": 498, "targets": [ "binary" ], "topics": [ "arm-rop", "ghidra", "ghidra-plugin", "ghidra-plugins", "ghidra-scripts", "mips-rop" ], "url": "https://github.com/grayhatacademy/ghidra_scripts", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Components of a decompilation pipeline.", "description_language": "bilingual", "description_zh": "反编译流程的各个组件。", "full_name": "decomp/decomp", "id": "scan-24204065", "license": "Unlicense", "observed_at": "2026-10-16T01:35:41.562538Z", "pushed_at": "2023-02-26T05:04:03Z", "readme_sha256": "0f2ea67c242d9659cb09a04db74e79a74734525f614e8e5f2ca8c6321dc691eb", "readme_url": "https://github.com/decomp/decomp/blob/master/README.md", "stars": 493, "targets": [ "binary" ], "topics": [ "binary-analysis", "compositional-decompilation", "decompilation", "decompilation-pipeline", "decompiler", "go", "golang", "llvm", "llvm-ir", "reverse-engineering" ], "url": "https://github.com/decomp/decomp", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A VBA p-code disassembler", "description_language": "bilingual", "description_zh": "VBA p-code 反汇编器。", "full_name": "bontchev/pcodedmp", "id": "scan-68512805", "license": "GPL-3.0", "observed_at": "2026-10-16T01:36:14.849186Z", "pushed_at": "2021-06-12T18:24:32Z", "readme_sha256": "80a9c47e23a7d1b2e73f05c810157d934de46d9dfd952f53341959a85cd3736d", "readme_url": "https://github.com/bontchev/pcodedmp/blob/master/README.md", "stars": 492, "targets": [ "binary" ], "topics": [ "disassembler", "macros", "office", "p-code", "vba" ], "url": "https://github.com/bontchev/pcodedmp", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "SHAREM is a shellcode analysis framework, capable of emulating more than 45,000 WinAPIs and virutally all Windows syscalls. It also contains its own custom disassembler, with many innovative features, such as being able to show the deobfuscated disassembly of an encoded shellcode, or integrating emulation data to enhance the disassembly.", "description_language": "bilingual", "description_zh": "SHAREM 是 shellcode 分析框架，可模拟 45,000 多个 WinAPI 及几乎所有 Windows 系统调用。它还包含自定义反汇编器，具备多项创新功能，例如展示编码后 shellcode 去混淆后的反汇编结果，或结合模拟执行数据增强反汇编。", "full_name": "Bw3ll/sharem", "id": "scan-322717458", "license": "GPL-3.0", "observed_at": "2026-10-16T01:36:14.772377Z", "pushed_at": "2026-03-22T22:21:27Z", "readme_sha256": "857f379829a2a947c9f070117d5dac83cab8a1bf7d0ad0e654f40231e6ca456c", "readme_url": "https://github.com/Bw3ll/sharem/blob/testing/README.md", "stars": 492, "targets": [ "binary" ], "topics": [ "disassembler", "emulation", "shellcode" ], "url": "https://github.com/Bw3ll/sharem", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "LLM-based reversing for radare2", "description_language": "bilingual", "description_zh": "基于 LLM 的 radare2 逆向分析。", "full_name": "radareorg/r2ai", "id": "scan-705649405", "license": "MIT", "observed_at": "2026-10-16T01:37:04.698963Z", "pushed_at": "2026-10-13T06:09:10Z", "readme_sha256": "09235614bc547ce1829e290cb1865ad5dafdcb0453cfc8b85392677c6b0104a6", "readme_url": "https://github.com/radareorg/r2ai/blob/master/README.md", "stars": 490, "targets": [ "binary" ], "topics": [ "ai", "llm", "radare2", "radare2-plugin" ], "url": "https://github.com/radareorg/r2ai", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Enhanced IDA Pro signature generator plugin.", "description_language": "bilingual", "description_zh": "增强版 IDA Pro 签名生成插件。", "full_name": "kweatherman/sigmakerex", "id": "scan-445696273", "license": "MIT", "observed_at": "2026-10-16T01:35:53.803642Z", "pushed_at": "2025-10-22T23:01:58Z", "readme_sha256": "e440bfd8806d52d901c8d9f5c68dcf888084f2894ee09b9cfcbf6f408004ae8b", "readme_url": "https://github.com/kweatherman/sigmakerex/blob/master/README.md", "stars": 485, "targets": [ "binary", "game" ], "topics": [ "game-hacking", "ida-plugin", "reverse-engineering" ], "url": "https://github.com/kweatherman/sigmakerex", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Hexrays Toolbox - Find code patterns within the Hexrays ctree", "description_language": "bilingual", "description_zh": "Hexrays Toolbox：在 Hex-Rays ctree 中查找代码模式。", "full_name": "patois/HexraysToolbox", "id": "scan-272186275", "license": "CC0-1.0", "observed_at": "2026-10-16T01:36:09.253199Z", "pushed_at": "2023-06-20T18:40:34Z", "readme_sha256": "64c46be52909b28450c55449162a08240e6412b8d97b2c4e7915a015a15173d3", "readme_url": "https://github.com/patois/HexraysToolbox/blob/master/Readme.md", "stars": 483, "targets": [ "binary" ], "topics": [ "ast", "bug-finding", "code-comparison", "code-pattern-matching", "code-similarity", "ctree", "decompiler", "hex-rays", "hexrays", "hexrays-decompiler", "hexrays-toolbox", "ida-pro", "idapython", "idapython-script", "loops", "pattern-matching", "plagiarism-detection", "reverse-engineering", "variant-analysis", "vulnerability-scanner" ], "url": "https://github.com/patois/HexraysToolbox", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Signature maker plugin for IDA 9.x and 8.x", "description_language": "bilingual", "description_zh": "适用于 IDA 9.x 和 8.x 的签名生成插件。", "full_name": "A200K/IDA-Pro-SigMaker", "id": "scan-574606003", "license": "NOASSERTION", "observed_at": "2026-10-16T01:35:41.661996Z", "pushed_at": "2025-09-16T23:07:48Z", "readme_sha256": "50caa32d4d4ac8d5d00cf03ba4a79403683c263a0e710df3d89d9aa8afd7f718", "readme_url": "https://github.com/A200K/IDA-Pro-SigMaker/blob/main/README.md", "stars": 481, "targets": [ "binary" ], "topics": [ "binary-analysis", "ida", "ida-plugin", "ida-pro", "idapro", "pattern", "pattern-matching", "plugin", "signature", "signature-maker" ], "url": "https://github.com/A200K/IDA-Pro-SigMaker", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Agent-first reverse engineering for macOS, Windows and Linux: any ACP agent reads, renames and patches binaries, Android apps and GPU kernels next to you.", "description_language": "bilingual", "description_zh": "面向智能体的 macOS、Windows 和 Linux 逆向工程工具：任意 ACP 智能体均可与你协作，读取、重命名并修补二进制文件、Android 应用和 GPU 内核。", "full_name": "Zfinix/eleven", "id": "scan-1417155242", "license": "Apache-2.0", "observed_at": "2026-10-16T01:35:46.848405Z", "pushed_at": "2026-10-15T15:38:11Z", "readme_sha256": "a41b5acc9e2570bf18149c0b86221b0d6b7f7bd83690f9e833b29d9de6207f2d", "readme_url": "https://github.com/Zfinix/eleven/blob/main/README.md", "stars": 478, "targets": [ "app", "binary" ], "topics": [ "acp", "ai-agents", "android", "decompiler", "disassembler", "ghidra", "hopper", "macos", "rea", "reverse-engineering" ], "url": "https://github.com/Zfinix/eleven", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Driver Buddy Reloaded is an IDA Pro Python plugin that helps automate some tedious Windows Kernel Drivers reverse engineering tasks", "description_language": "bilingual", "description_zh": "Driver Buddy Reloaded 是 IDA Pro 的 Python 插件，可自动完成部分繁琐的 Windows 内核驱动逆向工程任务。", "full_name": "VoidSec/DriverBuddyReloaded", "id": "scan-420138711", "license": "NOASSERTION", "observed_at": "2026-10-16T01:35:53.826266Z", "pushed_at": "2026-07-10T08:38:58Z", "readme_sha256": "eb9a5fdbe61ab29e15faaa6a1334278791b4592017afaf4aca2914af8434f1e2", "readme_url": "https://github.com/VoidSec/DriverBuddyReloaded/blob/main/README.MD", "stars": 472, "targets": [ "binary" ], "topics": [ "driver-exploitation", "ida", "ida-plugin", "idapython", "reverse-engineering", "windows-driver", "windows-kernel" ], "url": "https://github.com/VoidSec/DriverBuddyReloaded", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "The dissection of a simple \"hello world\" ELF binary.", "description_language": "bilingual", "description_zh": "剖析一个简单的“hello world” ELF 二进制文件。", "full_name": "mewmew/dissection", "id": "scan-25742117", "license": null, "observed_at": "2026-10-16T01:35:41.821849Z", "pushed_at": "2020-12-02T00:51:29Z", "readme_sha256": "6742f293a446114f5c0a31d735a0cf76222437fd79a743429a7d7badc5d02822", "readme_url": "https://github.com/mewmew/dissection/blob/master/README.md", "stars": 470, "targets": [ "binary" ], "topics": [ "assembly", "binary-analysis", "disassembly", "dissection", "elf", "hello", "hello-world", "pe" ], "url": "https://github.com/mewmew/dissection", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Access radare2 via pipe from any programming language!", "description_language": "bilingual", "description_zh": "通过管道从任意编程语言访问 radare2！", "full_name": "radareorg/radare2-r2pipe", "id": "scan-70247098", "license": null, "observed_at": "2026-10-16T01:37:04.738647Z", "pushed_at": "2026-10-15T19:15:24Z", "readme_sha256": "4cca15aeaa0eb4bd31213b8184cab0cb41e2ffc2dddb9530fed6e1899a25f835", "readme_url": "https://github.com/radareorg/radare2-r2pipe/blob/master/README.md", "stars": 466, "targets": [ "binary" ], "topics": [ "r2pipe", "radare2" ], "url": "https://github.com/radareorg/radare2-r2pipe", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "IDAPython plugin that synchronizes disassembler and decompiler views", "description_language": "bilingual", "description_zh": "同步反汇编与反编译视图的 IDAPython 插件。", "full_name": "patois/dsync", "id": "scan-185786725", "license": "MIT", "observed_at": "2026-10-16T01:35:53.951318Z", "pushed_at": "2021-01-20T10:12:24Z", "readme_sha256": "4c41d22a657974b993ab04b8b5fb2ce5d4d8004f48ec66af309b9689e563f35a", "readme_url": "https://github.com/patois/dsync/blob/master/README.md", "stars": 459, "targets": [ "binary" ], "topics": [ "decompiler", "hexrays", "highlight", "ida", "ida-plugin", "synchronization" ], "url": "https://github.com/patois/dsync", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": ":notebook: Some security related notes", "description_language": "bilingual", "description_zh": ":notebook: 一些安全相关笔记。", "full_name": "jaybosamiya/security-notes", "id": "scan-86937218", "license": null, "observed_at": "2026-10-16T01:35:41.987752Z", "pushed_at": "2017-08-13T01:54:57Z", "readme_sha256": "4968ad81209f063a337552121bd117ab150ef50724bcba710c5e9efd4bb2118a", "readme_url": "https://github.com/jaybosamiya/security-notes/blob/master/README.md", "stars": 458, "targets": [ "binary" ], "topics": [ "binary-analysis", "hacking", "notes", "pwning", "reverse-engineering", "security" ], "url": "https://github.com/jaybosamiya/security-notes", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Precompiled Decompyle++ (pycdc) binaries for Windows & Linux", "description_language": "bilingual", "description_zh": "适用于 Windows 与 Linux 的预编译 Decompyle++（pycdc）二进制文件。", "full_name": "extremecoders-re/decompyle-builds", "id": "scan-502728450", "license": null, "observed_at": "2026-10-16T01:36:09.304297Z", "pushed_at": "2026-05-28T16:26:51Z", "readme_sha256": "a9853572eb41eb8d76b12a14b448a88c849c5b3972634847f996bebd566887da", "readme_url": "https://github.com/extremecoders-re/decompyle-builds/blob/main/README.md", "stars": 454, "targets": [ "binary" ], "topics": [ "decompiler", "pyc-decompiler", "pyc-files", "python" ], "url": "https://github.com/extremecoders-re/decompyle-builds", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A Binary Ninja plugin containing an MCP server that enables seamless integration with your favorite LLM/MCP client.", "description_language": "bilingual", "description_zh": "内置 MCP 服务器的 Binary Ninja 插件，可与你偏好的 LLM/MCP 客户端无缝集成。", "full_name": "fosdickio/binary_ninja_mcp", "id": "scan-956799403", "license": "GPL-3.0", "observed_at": "2026-10-16T07:14:44.321824Z", "pushed_at": "2026-10-06T17:12:35Z", "readme_sha256": "48f23ca6e02c0bdab9659b62a53fa5045de0166931bfefc25583c781921637e9", "readme_url": "https://github.com/fosdickio/binary_ninja_mcp/blob/main/README.md", "stars": 454, "targets": [ "binary" ], "topics": [], "url": "https://github.com/fosdickio/binary_ninja_mcp", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": ":wolf: Malware analysis platform", "description_language": "bilingual", "description_zh": ":wolf: 恶意软件分析平台。", "full_name": "cristianzsh/freki", "id": "scan-283624144", "license": "AGPL-3.0", "observed_at": "2026-10-16T01:35:41.959298Z", "pushed_at": "2024-01-29T19:05:34Z", "readme_sha256": "12fab15f00fcbcdd63393cf8ec2e9139c37cfcb2fc709ef441ce89c05bd6f3d6", "readme_url": "https://github.com/cristianzsh/freki/blob/master/README.md", "stars": 446, "targets": [ "binary" ], "topics": [ "binary-analysis", "docker", "flask", "hacktoberfest", "malware", "malware-analysis", "malware-research", "python3", "reverse-engineering", "self-hosted", "self-hosted-api", "self-hosting", "static-analysis", "threat-intelligence", "virustotal", "yara" ], "url": "https://github.com/cristianzsh/freki", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Remove OLLVM control-flow flattening obfuscation using Binary Ninja.", "description_language": "bilingual", "description_zh": "使用 Binary Ninja 去除 OLLVM 控制流平坦化混淆。", "full_name": "amimo/ollvm-breaker", "id": "scan-226291453", "license": "MIT", "observed_at": "2026-10-16T01:36:47.842792Z", "pushed_at": "2020-02-17T11:53:20Z", "readme_sha256": "974d5d86d6cf865125f32ea21355c947eefa8b89707acf4ac7c94e50d4169546", "readme_url": "https://github.com/amimo/ollvm-breaker/blob/master/README.md", "stars": 445, "targets": [ "binary" ], "topics": [ "binary-ninja", "deobfuscation", "ollvm" ], "url": "https://github.com/amimo/ollvm-breaker", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "HexRays ctree visualization plugin", "description_language": "bilingual", "description_zh": "Hex-Rays ctree 可视化插件。", "full_name": "patois/HRDevHelper", "id": "scan-188281972", "license": "NOASSERTION", "observed_at": "2026-10-16T01:36:09.487760Z", "pushed_at": "2024-09-06T16:14:25Z", "readme_sha256": "3942c1a4e3475393d4e5b26e6a287476421d09f2d0cbbcee0bb045ed59883217", "readme_url": "https://github.com/patois/HRDevHelper/blob/master/README.md", "stars": 443, "targets": [ "binary" ], "topics": [ "ast", "ctree", "debugging", "decompiler", "graph", "hexrays", "hexrays-decompiler", "ida", "ida-pro", "idapython", "visualization" ], "url": "https://github.com/patois/HRDevHelper", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A Full-Featured HexEditor compatible with Linux/Windows/MacOS", "description_language": "bilingual", "description_zh": "兼容 Linux、Windows 和 macOS 的全功能十六进制编辑器。", "full_name": "echo-devim/fhex", "id": "scan-214864089", "license": "GPL-3.0", "observed_at": "2026-10-16T01:36:14.958529Z", "pushed_at": "2024-11-06T16:02:44Z", "readme_sha256": "0645871ffe4fee238e443505c100125cf14580ed6caabeb60c21d73bc581412b", "readme_url": "https://github.com/echo-devim/fhex/blob/master/README.md", "stars": 436, "targets": [ "binary" ], "topics": [ "assembler", "capstone", "cplusplus-11", "disassembler", "gui", "hexeditor", "keystone", "qt5", "reverse-engineering" ], "url": "https://github.com/echo-devim/fhex", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Karonte is a static analysis tool to detect multi-binary vulnerabilities in embedded firmware", "description_language": "bilingual", "description_zh": "Karonte 是一个静态分析工具，用于检测嵌入式固件中跨多个二进制文件的漏洞", "full_name": "ucsb-seclab/karonte", "id": "scan-215886167", "license": "BSD-2-Clause", "observed_at": "2026-10-16T10:47:49.443584Z", "pushed_at": "2021-09-18T17:15:47Z", "readme_sha256": "e72e78f3eb78080b654cc9b5b1dbae055d4d4ccae53da90e73b984dbf8e94ed4", "readme_url": "https://github.com/ucsb-seclab/karonte/blob/master/README.md", "stars": 434, "targets": [ "binary", "firmware" ], "topics": [], "url": "https://github.com/ucsb-seclab/karonte", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A collection of types & functions definitions useful for iOS/macOS binaries analysis.", "description_language": "bilingual", "description_zh": "适用于 iOS/macOS 二进制分析的类型与函数定义合集。", "full_name": "PoomSmart/IDAObjcTypes", "id": "scan-163808386", "license": "NOASSERTION", "observed_at": "2026-10-16T01:35:47.039219Z", "pushed_at": "2026-05-03T06:35:09Z", "readme_sha256": "663638bb5019a5b3f6926706604ee058ec4fb03c1989029547c154232724ba47", "readme_url": "https://github.com/PoomSmart/IDAObjcTypes/blob/master/README.md", "stars": 421, "targets": [ "app", "binary" ], "topics": [ "analysis", "binaries", "definitions", "functions", "ghidra", "headers", "ida-pro", "objc", "types" ], "url": "https://github.com/PoomSmart/IDAObjcTypes", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "an ida plugin used to decompile vmp", "description_language": "bilingual", "description_zh": "用于反编译 VMP 的 IDA 插件。", "full_name": "fjqisba/VmpHelper", "id": "scan-683628640", "license": null, "observed_at": "2026-10-16T01:35:47.130832Z", "pushed_at": "2026-07-11T07:57:51Z", "readme_sha256": "2edffab8293927484381fdcb327ae8895dca58477a71a73bc5fad95289a8d37a", "readme_url": "https://github.com/fjqisba/VmpHelper/blob/main/README.md", "stars": 416, "targets": [ "binary" ], "topics": [ "devirtualization", "ghidra", "ida-plugin", "vmprotect" ], "url": "https://github.com/fjqisba/VmpHelper", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Opcode calculator / ASM calculator", "description_language": "bilingual", "description_zh": "操作码计算器 / 汇编计算器。", "full_name": "horsicq/XOpcodeCalc", "id": "scan-192907540", "license": "MIT", "observed_at": "2026-10-16T01:36:14.989333Z", "pushed_at": "2026-10-10T22:14:39Z", "readme_sha256": "ffb7fb3d3cbe010a5ddfed293db13d262a93b8424beb48d57885ff905357aa84", "readme_url": "https://github.com/horsicq/XOpcodeCalc/blob/master/README.md", "stars": 413, "targets": [ "binary" ], "topics": [ "asm", "asmx86", "assembler", "calculator", "disassembler", "dissaseembly", "hacktoberfest", "hacktoberfest2023", "opcode", "x86", "x86-64" ], "url": "https://github.com/horsicq/XOpcodeCalc", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Easily retargetable and hackable interactive disassembler with IDAPython-compatible plugin API", "description_language": "bilingual", "description_zh": "易于适配新目标和修改扩展的交互式反汇编器，提供兼容 IDAPython 的插件 API。", "full_name": "pfalcon/ScratchABit", "id": "scan-33787951", "license": "GPL-3.0", "observed_at": "2026-10-16T01:35:54.084540Z", "pushed_at": "2020-11-25T22:03:17Z", "readme_sha256": "eb6b0d7f005710f6bf0a570d4baee6ee3820ae936a78f821fda20eb229d6bfbb", "readme_url": "https://github.com/pfalcon/ScratchABit/blob/master/README.md", "stars": 413, "targets": [ "binary" ], "topics": [ "disassembler", "ida", "ida-plugin", "idapython", "reverse-engineering" ], "url": "https://github.com/pfalcon/ScratchABit", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Boomerang Decompiler - Fighting the code-rot :)", "description_language": "bilingual", "description_zh": "Boomerang 反编译器：对抗代码腐化 :)。", "full_name": "BoomerangDecompiler/boomerang", "id": "scan-7819729", "license": "NOASSERTION", "observed_at": "2026-10-16T01:36:09.554506Z", "pushed_at": "2020-12-28T17:39:19Z", "readme_sha256": "a885f21aab63ba3f6b81ab7fc6027b2f9c2c5431e34e931aa8efb08b333c254c", "readme_url": "https://github.com/BoomerangDecompiler/boomerang/blob/develop/Readme.md", "stars": 405, "targets": [ "binary" ], "topics": [ "c-plus-plus", "clang", "cmake", "decompiler", "gcc", "ppc", "qt5", "reverse-engineering", "sparc", "visual-studio", "x86" ], "url": "https://github.com/BoomerangDecompiler/boomerang", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "GptHidra is a Ghidra plugin that uses the OpenAI Chat GPT to explain functions. With GptHidra, you can easily understand the purpose and behavior of functions in your codebase. Now with GPT4 Support!", "description_language": "bilingual", "description_zh": "GptHidra 是使用 OpenAI ChatGPT 解释函数的 Ghidra 插件，帮助你轻松理解代码库中函数的用途与行为。现已支持 GPT-4！", "full_name": "evyatar9/GptHidra", "id": "scan-582458494", "license": null, "observed_at": "2026-10-16T01:35:47.270580Z", "pushed_at": "2023-09-16T18:46:45Z", "readme_sha256": "f1749d0da2a01ed565abdbf913d061ea4d86a20bc6cbdbb238932c6f531df759", "readme_url": "https://github.com/evyatar9/GptHidra/blob/main/README.md", "stars": 405, "targets": [ "binary" ], "topics": [ "api", "chatgpt", "extension", "ghidra", "gpt-3", "gpt-4", "plugin", "python", "reverse-engineering" ], "url": "https://github.com/evyatar9/GptHidra", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "a multi-threads tool for decompile exe,elf,pyz,pyc packed by python which is base on pycdc and uncompyle6.", "description_language": "bilingual", "description_zh": "基于 pycdc 和 uncompyle6 的多线程工具，可反编译由 Python 打包的 EXE、ELF、PYZ 和 PYC 文件。", "full_name": "serfend/pydumpck", "id": "scan-495088788", "license": null, "observed_at": "2026-10-16T01:36:09.790339Z", "pushed_at": "2024-05-19T01:43:28Z", "readme_sha256": "1a04fa45daa5303fb0a3b5ebc189886481bb844dcd72838f8eea4437a075ee7f", "readme_url": "https://github.com/serfend/pydumpck/blob/main/README.md", "stars": 400, "targets": [ "binary" ], "topics": [ "auto-detection", "cross-platform", "decompiler", "elf", "exe", "multithreading", "pyc", "pyz" ], "url": "https://github.com/serfend/pydumpck", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "radare2-based decompiler and symbol executor", "description_language": "bilingual", "description_zh": "基于 radare2 的反编译器与符号执行器。", "full_name": "radareorg/radeco", "id": "scan-35782470", "license": null, "observed_at": "2026-10-16T01:36:09.880350Z", "pushed_at": "2026-05-06T10:40:03Z", "readme_sha256": "8ec9b43f2736e77f98b2feecaac32064c08a7e625317a2a2898ca0e8fc0ea5b3", "readme_url": "https://github.com/radareorg/radeco/blob/master/README.md", "stars": 399, "targets": [ "binary" ], "topics": [ "decompiler", "esil", "radare2", "rust" ], "url": "https://github.com/radareorg/radeco", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A :zap: lightweight Go package to parse, analyze and extract metadata from Portable Executable (PE) binaries. Designed for malware analysis tasks and robust against PE malformations.", "description_language": "bilingual", "description_zh": "一个 :zap: 轻量 Go 包，用于解析、分析可移植可执行文件（PE）二进制文件并提取元数据，面向恶意软件分析任务设计，可稳健处理畸形 PE 文件。", "full_name": "saferwall/pe", "id": "scan-334526274", "license": "MIT", "observed_at": "2026-10-16T01:35:42.373212Z", "pushed_at": "2026-05-23T16:23:24Z", "readme_sha256": "9025247aded023bbaa2c5fa35b35e3c84b07f1415cfd1dfe7e243edeebe9e5ac", "readme_url": "https://github.com/saferwall/pe/blob/main/README.md", "stars": 397, "targets": [ "binary" ], "topics": [ "binary-analysis", "coff", "go", "golang", "malware", "malware-analysis", "parser", "parsing", "pe", "pe-file", "pe-format", "pe-malformations", "portable-executable", "reverse-engineering" ], "url": "https://github.com/saferwall/pe", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "idenLib - Library Function Identification [This project is not maintained anymore]", "description_language": "bilingual", "description_zh": "idenLib：库函数识别工具［本项目已停止维护］。", "full_name": "secrary/idenLib", "id": "scan-169627685", "license": "MIT", "observed_at": "2026-10-16T01:35:42.416064Z", "pushed_at": "2019-03-17T00:42:42Z", "readme_sha256": "095ea3be428282597b45884f67c319e2186289ce3f91e430f3fc61797f6b7e1c", "readme_url": "https://github.com/secrary/idenLib/blob/master/README.md", "stars": 395, "targets": [ "binary" ], "topics": [ "binary-analysis", "cpp", "debugging", "malware-analysis", "reverse-engineering", "windows" ], "url": "https://github.com/secrary/idenLib", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A binary lifter and analysis framework for Ethereum smart contracts", "description_language": "bilingual", "description_zh": "面向 Ethereum 智能合约的二进制提升工具与分析框架。", "full_name": "nevillegrech/gigahorse-toolchain", "id": "scan-140270526", "license": "NOASSERTION", "observed_at": "2026-10-16T01:36:09.988507Z", "pushed_at": "2026-10-15T17:05:04Z", "readme_sha256": "1acf96db7efc8278b38833d8155b981828fdd2fce84b0c0f61b1d102ca1ae667", "readme_url": "https://github.com/nevillegrech/gigahorse-toolchain/blob/master/README.md", "stars": 388, "targets": [ "binary" ], "topics": [ "blockchain-technology", "decompiler", "ethereum", "framework", "security-tools" ], "url": "https://github.com/nevillegrech/gigahorse-toolchain", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "GhidRust: Rust decompiler plugin for Ghidra", "description_language": "bilingual", "description_zh": "GhidRust：Ghidra 的 Rust 反编译插件。", "full_name": "DMaroo/GhidRust", "id": "scan-631034636", "license": "MIT", "observed_at": "2026-10-16T01:35:47.317659Z", "pushed_at": "2024-05-18T20:18:09Z", "readme_sha256": "1e32bf228af92f4ce7285eef98f96f31f396a1c7b4020368edba0ff53881b83d", "readme_url": "https://github.com/DMaroo/GhidRust/blob/master/README.md", "stars": 385, "targets": [ "binary" ], "topics": [ "decompiler", "ghidra", "reverse-engineering", "rust" ], "url": "https://github.com/DMaroo/GhidRust", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Intermediate Representation for Binary analysis and transformation", "description_language": "bilingual", "description_zh": "用于二进制分析与转换的中间表示。", "full_name": "GrammaTech/gtirb", "id": "scan-136977182", "license": "NOASSERTION", "observed_at": "2026-10-16T01:35:42.519030Z", "pushed_at": "2026-06-16T19:22:38Z", "readme_sha256": "5106b700717cb7fbbd60839f5c698b68edbebfa458ea18c18b0d646cd6283ff9", "readme_url": "https://github.com/GrammaTech/gtirb/blob/master/README.md", "stars": 382, "targets": [ "binary" ], "topics": [ "analysis", "binary", "binary-analysis", "binary-rewriting", "disassembler", "gtirb", "intermediate-representation", "reverse-engineering" ], "url": "https://github.com/GrammaTech/gtirb", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A terminal-first reverse engineering toolkit in Rust: PE/ELF/Mach-O analysis through CLI, TUI, and MCP. Installs as knife.", "description_language": "bilingual", "description_zh": "以终端为核心、使用 Rust 编写的逆向工程工具包，通过 CLI、TUI 和 MCP 分析 PE/ELF/Mach-O 文件，安装后的命令名为 knife。", "full_name": "bl4ckr0ss3/knife", "id": "scan-1327452849", "license": "MIT", "observed_at": "2026-10-16T01:35:42.617299Z", "pushed_at": "2026-10-15T20:25:53Z", "readme_sha256": "0069379ff6cf8b04dc6453a3f3a6b3c26d11a7063ef3b58cc6833e6c57ba2c42", "readme_url": "https://github.com/bl4ckr0ss3/knife/blob/main/README.md", "stars": 380, "targets": [ "binary" ], "topics": [ "binary-analysis", "cli", "disassembler", "elf", "macho", "malware-analysis", "pe", "reverse-engineering", "rust", "security-tools" ], "url": "https://github.com/bl4ckr0ss3/knife", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "LLVM based static binary analysis framework ", "description_language": "bilingual", "description_zh": "基于 LLVM 的静态二进制分析框架。", "full_name": "Colton1skees/Dna", "id": "scan-469186914", "license": null, "observed_at": "2026-10-16T01:36:47.974459Z", "pushed_at": "2026-08-15T21:18:16Z", "readme_sha256": "334b8d851b3757f9d2bff3f75fda8a8ef56a763f0dae62e445eded736c6ffa9b", "readme_url": "https://github.com/Colton1skees/Dna/blob/master/README.md", "stars": 380, "targets": [ "binary" ], "topics": [ "analysis", "binary", "deobfuscation", "instruction-semantics", "lifter", "llvm", "llvm-ir", "program-analysis", "static-analysis", "triton", "x86", "x86-64" ], "url": "https://github.com/Colton1skees/Dna", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Companion source code for the book macOS Software Security and Reverse Engineering.", "description_language": "bilingual", "description_zh": "《macOS 软件安全与逆向分析》随书源码。", "full_name": "feicong/macbook", "id": "scan-97814429", "license": "AGPL-3.0", "observed_at": "2026-10-16T01:35:42.807613Z", "pushed_at": "2017-08-09T03:31:04Z", "readme_sha256": "9dbdc19b1dc6497c8b357fccd435a3a76c6eb6c0fbb2815f01f1b9c44c7acdc2", "readme_url": "https://github.com/feicong/macbook/blob/master/README.md", "stars": 377, "targets": [ "app", "binary" ], "topics": [ "binary-analysis", "ios-security", "macho", "macos-security", "malware-analysis", "reverse-engineering", "software-security" ], "url": "https://github.com/feicong/macbook", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Nintendo Switch loader for Ghidra", "description_language": "bilingual", "description_zh": "Ghidra 的 Nintendo Switch 加载器。", "full_name": "Adubbz/Ghidra-Switch-Loader", "id": "scan-174542445", "license": "ISC", "observed_at": "2026-10-16T01:35:47.389454Z", "pushed_at": "2026-09-21T23:53:47Z", "readme_sha256": "889acfacb76e2a912d40d2747c4ba8fae1b061ed797228c91a4d8d0568225dab", "readme_url": "https://github.com/Adubbz/Ghidra-Switch-Loader/blob/master/README.md", "stars": 374, "targets": [ "binary" ], "topics": [ "aarch64", "arm64", "ghidra", "java", "nintendo", "nintendo-switch", "nx", "reverse-engineering", "switch" ], "url": "https://github.com/Adubbz/Ghidra-Switch-Loader", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A guide that explains how programs transform from source code to executables. Deep dive into ELF format, linking processes, and binary optimization techniques. Perfect for systems programmers, C developers, and anyone interested in low-level programming concepts.", "description_language": "bilingual", "description_zh": "解释程序如何从源代码转变为可执行文件的指南，深入介绍 ELF 格式、链接过程与二进制优化技术，适合系统程序员、C 开发者以及对底层编程概念感兴趣的人。", "full_name": "mohitmishra786/underTheHoodOfExecutables", "id": "scan-877280651", "license": "MIT", "observed_at": "2026-10-16T01:35:42.807942Z", "pushed_at": "2025-07-20T17:17:37Z", "readme_sha256": "143a0b94eaf7edd01b96d7698657f22b75301f18ccbd271de4f0e4be7ddf3357", "readme_url": "https://github.com/mohitmishra786/underTheHoodOfExecutables/blob/main/README.md", "stars": 374, "targets": [ "binary" ], "topics": [ "binary-analysis", "binary-format", "c-programming", "compilation", "computer-science", "dynamic-linking", "educational", "elf", "executable", "linker", "loader", "low-level-programming", "operating-systems", "optimization", "performance-optimization", "programming-guide", "reverse-engineering", "static-linking", "system-programming", "tutorial" ], "url": "https://github.com/mohitmishra786/underTheHoodOfExecutables", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Python cross-version bytecode library and disassembler", "description_language": "bilingual", "description_zh": "跨版本 Python 字节码库与反汇编器。", "full_name": "rocky/python-xdis", "id": "scan-59214586", "license": "GPL-2.0", "observed_at": "2026-10-16T01:36:15.129867Z", "pushed_at": "2026-09-05T18:42:38Z", "readme_sha256": "cf80f3d4edfa0df2c2e54e52d6532fb849cd347982548b97611ccd597af9227a", "readme_url": "https://github.com/rocky/python-xdis/blob/master/README.rst", "stars": 372, "targets": [ "binary" ], "topics": [ "bytecode", "cross-platform", "disassembler", "python-library" ], "url": "https://github.com/rocky/python-xdis", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Python 3 bridge to Ghidra's Python scripting", "description_language": "bilingual", "description_zh": "连接 Python 3 与 Ghidra Python 脚本环境的桥接工具。", "full_name": "justfoxing/ghidra_bridge", "id": "scan-179169971", "license": "MIT", "observed_at": "2026-10-16T01:35:47.598129Z", "pushed_at": "2023-01-30T03:49:10Z", "readme_sha256": "45fc275b38170f2c8729d4d5f1788763682af758307220da2715970a0a5be95e", "readme_url": "https://github.com/justfoxing/ghidra_bridge/blob/master/README.md", "stars": 364, "targets": [ "binary" ], "topics": [ "ghidra", "python3", "reverse-engineering" ], "url": "https://github.com/justfoxing/ghidra_bridge", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Unity IL2CPP Disassembler (for apk)", "description_language": "bilingual", "description_zh": "Unity IL2CPP 反汇编器，适用于 APK。", "full_name": "yukiarrr/Il2cppSpy", "id": "scan-209308349", "license": "MIT", "observed_at": "2026-10-16T01:36:10.542429Z", "pushed_at": "2020-08-07T18:03:55Z", "readme_sha256": "3438975fd2abbaeb227a9291ad7c3999804593146665a35bd8c37ca960e439fd", "readme_url": "https://github.com/yukiarrr/Il2cppSpy/blob/master/README.md", "stars": 360, "targets": [ "app", "binary", "game" ], "topics": [ "apks", "decompiler", "disassembler", "il2cpp", "qt", "unity" ], "url": "https://github.com/yukiarrr/Il2cppSpy", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Coefficient-Based Reconstruction of Arithmetic — a Mixed Boolean-Arithmetic (MBA) expression simplifier for deobfuscation", "description_language": "bilingual", "description_zh": "基于系数的算术重建：用于去混淆的混合布尔算术（MBA）表达式化简工具。", "full_name": "trailofbits/CoBRA", "id": "scan-1186460661", "license": "Apache-2.0", "observed_at": "2026-10-16T01:35:42.913386Z", "pushed_at": "2026-08-13T11:53:31Z", "readme_sha256": "d56fb87bb3e8f4c1b37720afb376d4878c200d391adce7c5c18c99d29107cf0f", "readme_url": "https://github.com/trailofbits/CoBRA/blob/master/README.md", "stars": 355, "targets": [ "binary" ], "topics": [ "algebraic-simplification", "binary-analysis", "boolean-algebra", "compiler", "cpp", "deobfuscation", "llvm", "mba", "obfuscation", "reverse-engineering", "static-analysis", "z3" ], "url": "https://github.com/trailofbits/CoBRA", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "ClassInformer backported for IDA Pro 7.0", "description_language": "bilingual", "description_zh": "为 IDA Pro 7.0 向后移植的 ClassInformer。", "full_name": "rcx/classinformer-ida7", "id": "scan-116113400", "license": null, "observed_at": "2026-10-16T01:35:54.111700Z", "pushed_at": "2020-03-20T20:50:57Z", "readme_sha256": "18131021fab8cc911f3baf95913789909e639f74cb80c83c284c2f976cc01dc3", "readme_url": "https://github.com/rcx/classinformer-ida7/blob/master/README.md", "stars": 354, "targets": [ "binary" ], "topics": [ "ida-plugin", "ida-pro", "reverse-engineering" ], "url": "https://github.com/rcx/classinformer-ida7", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "IDA ClassInformer PlugIn", "description_language": "bilingual", "description_zh": "IDA ClassInformer 插件。", "full_name": "kweatherman/IDA_ClassInformer_PlugIn", "id": "scan-923955699", "license": null, "observed_at": "2026-10-16T01:35:54.130792Z", "pushed_at": "2026-08-04T01:42:05Z", "readme_sha256": "13f41e6e564e081fac80ac63b5451a756dece92b21f204d7bcb379fc4ef54b22", "readme_url": "https://github.com/kweatherman/IDA_ClassInformer_PlugIn/blob/master/README.md", "stars": 350, "targets": [ "binary" ], "topics": [ "ida-plugin", "reverse-engineering" ], "url": "https://github.com/kweatherman/IDA_ClassInformer_PlugIn", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "abyss - augmentation of Hexrays decompiler output", "description_language": "bilingual", "description_zh": "abyss：增强 Hex-Rays 反编译器输出。", "full_name": "patois/abyss", "id": "scan-267121256", "license": "MIT", "observed_at": "2026-10-16T01:36:10.713227Z", "pushed_at": "2022-10-26T20:03:35Z", "readme_sha256": "1181e734dba471c8211e3ce20e3346d7891279789b55a06cfb864d7d15aee24a", "readme_url": "https://github.com/patois/abyss/blob/master/README.md", "stars": 349, "targets": [ "binary" ], "topics": [ "augmentation", "bug-hunting", "code-auditing", "decompilation", "decompiler", "hexrays", "idapro", "idapython", "idapython-plugin", "plugin" ], "url": "https://github.com/patois/abyss", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Reverse Engineering Tools (deobf, decompiler etc..)", "description_language": "bilingual", "description_zh": "逆向工程工具，包括去混淆、反编译等。", "full_name": "ret42/RE-Thing", "id": "scan-375457086", "license": null, "observed_at": "2026-10-16T01:36:15.152050Z", "pushed_at": "2025-04-06T20:10:29Z", "readme_sha256": "6143d3305a9055528cbfc8194d272038d17ed76b9e681c6429b7d010e2858fe2", "readme_url": "https://github.com/ret42/RE-Thing/blob/main/README.md", "stars": 348, "targets": [ "binary" ], "topics": [ "assembly", "deobfuscator", "disassembler", "malware-analysis", "re", "re-tools", "reverse-engineering", "static-analysis", "tools" ], "url": "https://github.com/ret42/RE-Thing", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Plugin for Ghidra to assist reversing Golang binaries", "description_language": "bilingual", "description_zh": "辅助逆向分析 Go 二进制文件的 Ghidra 插件。", "full_name": "felberj/gotools", "id": "scan-179881272", "license": "MIT", "observed_at": "2026-10-16T01:35:47.611568Z", "pushed_at": "2021-04-12T08:42:52Z", "readme_sha256": "07faf63bfc88f577892b5ef80e66d18b6e04ab8ea25ee895c6890d70d207c560", "readme_url": "https://github.com/felberj/gotools/blob/master/README.md", "stars": 343, "targets": [ "binary" ], "topics": [ "ghidra", "golang", "reverse" ], "url": "https://github.com/felberj/gotools", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A plugin based on IDAPython for a functional DWIM interface. Current development against most recent IDA is in the \"persistence-refactor\" branch, ancient (but stable) work is in \"master\", so... create an issue if you want/need something backported. Use \"Wiki\" or \"Discussions\" for examples, and smash that \"Star\" button if you like this.", "description_language": "bilingual", "description_zh": "基于 IDAPython 的插件，提供实用的 DWIM（按意图执行）接口。适配最新 IDA 的开发工作位于“persistence-refactor”分支，较旧但稳定的版本位于“master”分支。如需向后移植某项功能，请提交 issue；示例请查看“Wiki”或“Discussions”，喜欢的话请点击“Star”。", "full_name": "arizvisa/ida-minsc", "id": "scan-23570846", "license": "BSD-3-Clause", "observed_at": "2026-10-16T01:35:54.217697Z", "pushed_at": "2026-09-09T00:34:45Z", "readme_sha256": "f558526cb19671fc0aa8dcfb78e4dca261397713f2a5c1f1870ad59a6b9bac3a", "readme_url": "https://github.com/arizvisa/ida-minsc/blob/master/README.md", "stars": 336, "targets": [ "binary" ], "topics": [ "arm", "arm64", "hamsters", "ida-plugin", "ida-pro", "idapro", "idapython", "mips", "notanothercollaborationpllugin", "python", "reverse-engineering", "static-analysis", "x86", "x86-64" ], "url": "https://github.com/arizvisa/ida-minsc", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "r0crawl_skills is a massive reverse-engineering skill arsenal for web, Android, iOS, Frida, native binaries, protocols, malware, firmware, and anti-analysis—built for beginners, tuned for pros, and engineered for reproducible results.", "description_language": "bilingual", "description_zh": "r0crawl_skills 是一个大型逆向工程技能库，覆盖 Web、Android、iOS、Frida、原生二进制文件、协议、恶意软件、固件和反分析；为初学者构建，为专业人士调优，并注重结果的可复现性。", "full_name": "manyuegong33/r0crawl_skills", "id": "scan-1324636939", "license": null, "observed_at": "2026-10-16T10:47:49.446281Z", "pushed_at": "2026-09-20T09:29:42Z", "readme_sha256": "c8463da9b091dc68c872722ebe2b059700b2fefada35eddf8b8b73e1935da771", "readme_url": "https://github.com/manyuegong33/r0crawl_skills/blob/main/README.md", "stars": 332, "targets": [ "app", "binary", "firmware", "website" ], "topics": [], "url": "https://github.com/manyuegong33/r0crawl_skills", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "An AVX Lifter for the Hex-Rays Decompiler", "description_language": "bilingual", "description_zh": "Hex-Rays 反编译器的 AVX 指令提升工具。", "full_name": "gaasedelen/microavx", "id": "scan-281710086", "license": "MIT", "observed_at": "2026-10-16T01:36:10.764534Z", "pushed_at": "2023-04-28T11:47:33Z", "readme_sha256": "faedba43b8802eecb283dd69c212c90b973d63a7886dd43e46ea0d1568b83af6", "readme_url": "https://github.com/gaasedelen/microavx/blob/master/README.md", "stars": 331, "targets": [ "binary" ], "topics": [ "avx", "decompiler", "hexrays", "ida", "ida-pro", "idapython", "reverse-engineering" ], "url": "https://github.com/gaasedelen/microavx", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Debug Child Process Tool (auto attach)", "description_language": "bilingual", "description_zh": "子进程调试工具，支持自动附加。", "full_name": "therealdreg/DbgChild", "id": "scan-86256872", "license": "NOASSERTION", "observed_at": "2026-10-16T01:37:12.398518Z", "pushed_at": "2023-08-11T06:24:54Z", "readme_sha256": "0fe5dc192279e81d684146cb756bc2b7762f46eec0dcc03913b59f38758ac3d6", "readme_url": "https://github.com/therealdreg/DbgChild/blob/master/README.md", "stars": 328, "targets": [ "binary" ], "topics": [ "automation", "child-process", "debugging-tool", "hooking", "ntdll", "ollydbg", "reversing", "standalone", "windows", "x64", "x64dbg-plugin", "x86" ], "url": "https://github.com/therealdreg/DbgChild", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Security analysis of the hypervisor drm method used to bypass denuvo. Reverse engineering of the driver loaders and boot components using Ghidra", "description_language": "bilingual", "description_zh": "对用于绕过 Denuvo 的 hypervisor DRM 方法进行安全分析，使用 Ghidra 逆向分析驱动加载器与启动组件。", "full_name": "reetamdan/hypervisor-crack-audit", "id": "scan-1172479514", "license": null, "observed_at": "2026-10-16T01:35:47.838985Z", "pushed_at": "2026-03-05T11:11:58Z", "readme_sha256": "bbabe1c777323bf3cb8fb2bb49d9ed0300badf897c440b0db0c2fb866a24f841", "readme_url": "https://github.com/reetamdan/hypervisor-crack-audit/blob/main/README.md", "stars": 327, "targets": [ "binary" ], "topics": [ "denuvo", "drm", "drm-bypass", "ghidra", "hypervisor", "reverse-engineering" ], "url": "https://github.com/reetamdan/hypervisor-crack-audit", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "MCP stdio server for radare2", "description_language": "bilingual", "description_zh": "适用于 radare2 的 MCP 标准输入输出服务器。", "full_name": "radareorg/radare2-mcp", "id": "scan-953244333", "license": "MIT", "observed_at": "2026-10-16T07:14:45.369313Z", "pushed_at": "2026-10-15T23:34:08Z", "readme_sha256": "410401c2b805279cbf41bf497e69f103c0efcb9e5363d5d49faa16580e6c4b11", "readme_url": "https://github.com/radareorg/radare2-mcp/blob/main/README.md", "stars": 325, "targets": [ "binary" ], "topics": [], "url": "https://github.com/radareorg/radare2-mcp", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "D810-ng (Next Generation) is an updated, tested, refactored, and optimized IDA Pro plugin used to deobfuscate code at decompilation time by modifying IDA Pro microcode.", "description_language": "bilingual", "description_zh": "D810-ng（Next Generation）是经过更新、测试、重构和优化的 IDA Pro 插件，通过修改 IDA Pro 微代码，在反编译时对代码去混淆。", "full_name": "w00tzenheimer/d810-ng", "id": "scan-1005894238", "license": "AGPL-3.0", "observed_at": "2026-10-16T01:35:54.433700Z", "pushed_at": "2026-09-29T11:48:30Z", "readme_sha256": "cba19c60077359c90d651cb367e6669d6fe27e7a61cc4e2f3ac822259c6f5f6c", "readme_url": "https://github.com/w00tzenheimer/d810-ng/blob/main/README.md", "stars": 325, "targets": [ "binary" ], "topics": [ "deobfuscation", "deobfuscator", "ida", "ida-plugin", "idapro", "idapython", "mixed-boolean-arithmetic", "ollvm", "ollvm-deobfuscation", "ollvm-unflattener", "reverse-engineering", "tigress", "tigress-protections" ], "url": "https://github.com/w00tzenheimer/d810-ng", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "FLARE Team's Binary Navigator", "description_language": "bilingual", "description_zh": "FLARE 团队的二进制导航工具。", "full_name": "mandiant/xrefer", "id": "scan-876609702", "license": "Apache-2.0", "observed_at": "2026-10-16T01:35:42.959904Z", "pushed_at": "2026-08-06T05:34:45Z", "readme_sha256": "2ca23012afdf19a56e15abef3d039acc4861e67c1d3dc1be396f140fad0ebe3d", "readme_url": "https://github.com/mandiant/xrefer/blob/main/README.md", "stars": 323, "targets": [ "binary" ], "topics": [ "binary-analysis", "gsoc-2026", "ida-pro", "idaplugin", "idapython", "malware-analysis", "reverse-engineering", "threat-intelligence" ], "url": "https://github.com/mandiant/xrefer", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A Nintendo GameCube binary loader for Ghidra", "description_language": "bilingual", "description_zh": "Ghidra 的 Nintendo GameCube 二进制加载器。", "full_name": "Cuyler36/Ghidra-GameCube-Loader", "id": "scan-175574951", "license": "Apache-2.0", "observed_at": "2026-10-16T01:35:47.878836Z", "pushed_at": "2026-05-24T22:13:19Z", "readme_sha256": "474eabb127c532c60adf87cf6bbc5e6ef378de92f6b234833b872a555e849fdc", "readme_url": "https://github.com/Cuyler36/Ghidra-GameCube-Loader/blob/master/README.md", "stars": 322, "targets": [ "binary", "game" ], "topics": [ "gamecube", "ghidra", "loader" ], "url": "https://github.com/Cuyler36/Ghidra-GameCube-Loader", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "x86 malware emulator", "description_language": "bilingual", "description_zh": "x86 恶意软件模拟器", "full_name": "mwemuorg/mwemu", "id": "scan-417803918", "license": "Apache-2.0", "observed_at": "2026-10-16T01:37:12.728870Z", "pushed_at": "2026-10-12T16:50:05Z", "readme_sha256": "7641a6849f6121a2dadbe4125b6da74fa8eb3a3fbae4c40fcf93611497a9fd48", "readme_url": "https://github.com/mwemuorg/mwemu/blob/main/README.md", "stars": 316, "targets": [ "binary" ], "topics": [ "cobaltstrike", "emulation", "emulator", "ioc", "lowlevel", "malware-analysis", "metasploit", "reverse-engineering", "reversing", "rust", "shellcode", "shellcodes", "x86" ], "url": "https://github.com/mwemuorg/mwemu", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Ghidra Analysis Enhancer 🐉", "description_language": "bilingual", "description_zh": "Ghidra 分析增强工具 🐉", "full_name": "reb311ion/replica", "id": "scan-235905641", "license": "GPL-3.0", "observed_at": "2026-10-16T01:35:43.126461Z", "pushed_at": "2020-05-30T06:34:42Z", "readme_sha256": "97568bb7c798a129adee2591d67b679f1891efe097a570c4a8f823100fe8f848", "readme_url": "https://github.com/reb311ion/replica/blob/master/README.md", "stars": 315, "targets": [ "binary" ], "topics": [ "analysis", "automation", "binary", "binary-analysis", "decompilation", "decompiler", "disassembler", "disassembly", "enhancment", "ghidra", "ghidra-auto-analysis", "label-references", "malware-analysis", "rename-functions", "replica", "reverse-engineering", "security-audit", "security-tools" ], "url": "https://github.com/reb311ion/replica", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Scripts for the Ghidra.", "description_language": "bilingual", "description_zh": "Ghidra 脚本。", "full_name": "PAGalaxyLab/ghidra_scripts", "id": "scan-206725181", "license": "MIT", "observed_at": "2026-10-16T01:35:48.041773Z", "pushed_at": "2021-11-01T08:48:59Z", "readme_sha256": "2ab53563aaec5f4902f48cdbff75e7d8a5c57f414509e6ee21ff67a7d77c05d9", "readme_url": "https://github.com/PAGalaxyLab/ghidra_scripts/blob/master/README.md", "stars": 312, "targets": [ "binary" ], "topics": [ "ghidra", "ghidra-pcode", "ghidra-scripts" ], "url": "https://github.com/PAGalaxyLab/ghidra_scripts", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Medigate plugin for c++ reverse engineering and other utils", "description_language": "bilingual", "description_zh": "用于 C++ 逆向工程的 Medigate 插件及其他实用工具", "full_name": "medigateio/ida_medigate", "id": "scan-299847327", "license": null, "observed_at": "2026-10-16T01:35:54.543538Z", "pushed_at": "2023-05-25T11:52:11Z", "readme_sha256": "153bd7ba81a65c93f762a587a2467deed45b9d3f14e765b1c3f56557bab1b8cf", "readme_url": "https://github.com/medigateio/ida_medigate/blob/master/README.md", "stars": 311, "targets": [ "binary" ], "topics": [ "ida-plugin", "ida-pro", "reverse-engineering" ], "url": "https://github.com/medigateio/ida_medigate", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Native Pcode emulator", "description_language": "bilingual", "description_zh": "原生 Pcode 模拟器", "full_name": "Nalen98/GhidraEmu", "id": "scan-390681544", "license": "MIT", "observed_at": "2026-10-16T01:35:48.025885Z", "pushed_at": "2024-07-29T16:12:20Z", "readme_sha256": "f3a83cb0d6e51dc116418ac5e12421fb5c2b59761f025128e7775939a2f96b64", "readme_url": "https://github.com/Nalen98/GhidraEmu/blob/main/README.md", "stars": 308, "targets": [ "binary" ], "topics": [ "emulate", "emulation", "emulator", "ghidra", "ghidra-extension", "ghidra-plugin", "pcode", "reverse-engineering" ], "url": "https://github.com/Nalen98/GhidraEmu", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A collection of my Ghidra scripts to facilitate reverse engineering and vulnerability research.", "description_language": "bilingual", "description_zh": "我编写的 Ghidra 脚本合集，用于辅助逆向工程与漏洞研究。", "full_name": "0xdea/ghidra-scripts", "id": "scan-327846631", "license": "MIT", "observed_at": "2026-10-16T01:35:48.195462Z", "pushed_at": "2026-08-02T21:43:15Z", "readme_sha256": "eb74b4b88a6e7cf1096291897b03d065747867a42c676cf3725971e98d2b5bf7", "readme_url": "https://github.com/0xdea/ghidra-scripts/blob/main/README.md", "stars": 303, "targets": [ "binary" ], "topics": [ "ghidra", "ghidra-scripts", "reverse-engineering", "vulnerability-research" ], "url": "https://github.com/0xdea/ghidra-scripts", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Ghidra analysis plugin to locate cryptographic constants", "description_language": "bilingual", "description_zh": "用于定位密码学常量的 Ghidra 分析插件", "full_name": "TorgoTorgo/ghidra-findcrypt", "id": "scan-286090244", "license": "GPL-3.0", "observed_at": "2026-10-16T01:35:48.219880Z", "pushed_at": "2023-06-13T14:34:07Z", "readme_sha256": "407d1985e867b4a6dd4cc9c889415a2bf65172beea09487cb0b4936f05a756d7", "readme_url": "https://github.com/TorgoTorgo/ghidra-findcrypt/blob/main/README.md", "stars": 302, "targets": [ "binary" ], "topics": [ "analysis", "crypt", "cryptography", "findcrypt", "ghidra", "ghidra-extension", "ghidra-findcrypt", "ghidra-plugin" ], "url": "https://github.com/TorgoTorgo/ghidra-findcrypt", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Articles and tools related to research in the Apple environment (mainly macOS).", "description_language": "bilingual", "description_zh": "与 Apple 环境（主要为 macOS）研究相关的文章和工具。", "full_name": "Karmaz95/Snake_Apple", "id": "scan-727830934", "license": "GPL-3.0", "observed_at": "2026-10-16T01:35:43.106478Z", "pushed_at": "2026-10-04T11:13:42Z", "readme_sha256": "0ca77f911e050472a8c461f8c2dbf73adad2730121a5078e870d87692e1e089d", "readme_url": "https://github.com/Karmaz95/Snake_Apple/blob/main/README.md", "stars": 300, "targets": [ "app", "binary" ], "topics": [ "apple", "apple-silicon", "applescript", "binary-analysis", "binary-exploitation", "exploitation", "ios", "macho", "macho-parser", "macos", "parser", "programming", "python", "reverse-engineering", "sandbox", "vulnerability-detection", "vulnerability-research" ], "url": "https://github.com/Karmaz95/Snake_Apple", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "*Decompile All the Things* - IDA Batch Decompile plugin and script for Hex-Ray's IDA Pro that adds the ability to batch decompile multiple files and their imports with additional annotations (xref, stack var size) to the pseudocode .c file", "description_language": "bilingual", "description_zh": "“反编译一切”：适用于 Hex-Rays IDA Pro 的 IDA 批量反编译插件及脚本，可批量反编译多个文件及其导入项，并在伪代码 .c 文件中添加交叉引用、栈变量大小等注释。", "full_name": "tintinweb/ida-batch_decompile", "id": "scan-69614438", "license": "GPL-3.0", "observed_at": "2026-10-16T01:35:54.504237Z", "pushed_at": "2020-05-14T12:36:23Z", "readme_sha256": "b29a6b2aba79887545b5cf4f9e561d0df9d016acdcce26a271942650d6dc56c1", "readme_url": "https://github.com/tintinweb/ida-batch_decompile/blob/master/README.md", "stars": 300, "targets": [ "binary" ], "topics": [ "batch-processing", "decompile", "ida", "ida-batch-decompile", "ida-plugin", "reverse-engineering" ], "url": "https://github.com/tintinweb/ida-batch_decompile", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Ghidra Extension to integrate BinDiff for function matching", "description_language": "bilingual", "description_zh": "集成 BinDiff 以进行函数匹配的 Ghidra 扩展", "full_name": "ubfx/BinDiffHelper", "id": "scan-245641328", "license": null, "observed_at": "2026-10-16T01:35:48.390079Z", "pushed_at": "2026-09-13T18:06:05Z", "readme_sha256": "9c41e43e38f32df8db29819828c48c6b03578dfa106b8b55d7eb2d55bd405067", "readme_url": "https://github.com/ubfx/BinDiffHelper/blob/master/Readme.md", "stars": 297, "targets": [ "binary" ], "topics": [ "bindiff", "ghidra", "ghidra-extension", "reverse-engineering" ], "url": "https://github.com/ubfx/BinDiffHelper", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A modern, modular, and robust TUI hex editor.", "description_language": "bilingual", "description_zh": "现代、模块化且稳健的终端界面十六进制编辑器。", "full_name": "thetacom/hexabyte", "id": "scan-612743598", "license": "GPL-3.0", "observed_at": "2026-10-16T01:35:43.211687Z", "pushed_at": "2026-08-01T02:10:24Z", "readme_sha256": "eb2aff060d0295919010db33ee41b08533ddafe303075f4ad70c38a2b4c1d8b4", "readme_url": "https://github.com/thetacom/hexabyte/blob/main/README.md", "stars": 294, "targets": [ "binary" ], "topics": [ "binary-analysis", "binary-diffing", "hexeditor", "modular", "plugins", "python", "python3", "python310", "reverse-engineering", "terminal", "terminal-based", "tui" ], "url": "https://github.com/thetacom/hexabyte", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Silent Hill: Downpour — native Windows PC port via static recompilation of the Xbox 360 binary. v1.0 stable: 60 FPS unlocked, ROV warm-cache, standalone launcher, DualSense adaptive triggers, portable saves. Tested on USA + Europe X360 dumps.", "description_language": "bilingual", "description_zh": "Silent Hill: Downpour 的原生 Windows PC 移植版，通过静态重编译 Xbox 360 二进制实现。v1.0 稳定版：解锁 60 FPS、ROV 预热缓存、独立启动器、DualSense 自适应扳机及可迁移存档。已在美版与欧版 X360 转储上测试。", "full_name": "LittleBitUA/DownpourRecomp", "id": "scan-1274423441", "license": "BSD-3-Clause", "observed_at": "2026-10-16T11:55:08.116110Z", "pushed_at": "2026-09-02T22:18:50Z", "readme_sha256": "cf6b17e7c83cb2712524471f1503760bfc8c474b95584de8a1ebc235ee9e3a11", "readme_url": "https://github.com/LittleBitUA/DownpourRecomp/blob/main/README.md", "stars": 293, "targets": [ "binary", "game" ], "topics": [ "d3d12", "downpour", "konami", "native-port", "pc-port", "recompilation", "rexglue", "silent-hill", "silent-hill-downpour", "static-recompilation", "vatra-games", "windows", "xbox-360" ], "url": "https://github.com/LittleBitUA/DownpourRecomp", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "REPL-integrated Clojure-to-Java decompiler", "description_language": "bilingual", "description_zh": "与 REPL 集成的 Clojure 到 Java 反编译器", "full_name": "clojure-goes-fast/clj-java-decompiler", "id": "scan-119350071", "license": "EPL-1.0", "observed_at": "2026-10-16T01:36:11.205314Z", "pushed_at": "2025-09-29T07:13:38Z", "readme_sha256": "5fd199bd286f3cdd525287166f07a7bbf7ba40369baa3fe23fde98f5efd56b24", "readme_url": "https://github.com/clojure-goes-fast/clj-java-decompiler/blob/master/README.md", "stars": 285, "targets": [ "app", "binary" ], "topics": [ "bytecode", "clojure", "decompiler", "disassembly", "java" ], "url": "https://github.com/clojure-goes-fast/clj-java-decompiler", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Obfuscator-llvm Control Flow Flattening Deobfuscator", "description_language": "bilingual", "description_zh": "Obfuscator-LLVM 控制流平坦化去混淆工具", "full_name": "cdong1012/ollvm-unflattener", "id": "scan-957647193", "license": "Apache-2.0", "observed_at": "2026-10-16T01:35:43.205127Z", "pushed_at": "2025-04-16T22:55:05Z", "readme_sha256": "0e84015e24069078a8572d4138309647ad22416921d4517f7e2147f1acebdb0c", "readme_url": "https://github.com/cdong1012/ollvm-unflattener/blob/master/README.md", "stars": 284, "targets": [ "binary" ], "topics": [ "binary-analysis", "deobfuscation", "miasm", "obfuscation" ], "url": "https://github.com/cdong1012/ollvm-unflattener", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "DrSemu - Sandboxed Malware Detection and Classification Tool Based on Dynamic Behavior", "description_language": "bilingual", "description_zh": "DrSemu：基于动态行为的沙箱恶意软件检测与分类工具", "full_name": "secrary/DrSemu", "id": "scan-202432901", "license": "GPL-3.0", "observed_at": "2026-10-16T01:35:43.325002Z", "pushed_at": "2019-11-03T13:47:31Z", "readme_sha256": "876d9499ce9d4548bc2c878fb40ad8f277e70e4f4a01caa67c388d7d2d59963e", "readme_url": "https://github.com/secrary/DrSemu/blob/master/README.md", "stars": 280, "targets": [ "binary" ], "topics": [ "binary-analysis", "malware-analysis", "malware-detection", "malware-research", "reverse-engineering", "software-analysis", "windows" ], "url": "https://github.com/secrary/DrSemu", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "📡🐧 Linux kernel syscall implementation tracker", "description_language": "bilingual", "description_zh": "📡🐧 Linux 内核系统调用实现追踪工具", "full_name": "mebeim/systrack", "id": "scan-603910916", "license": "GPL-3.0", "observed_at": "2026-10-16T01:35:43.465739Z", "pushed_at": "2025-10-02T22:26:31Z", "readme_sha256": "271deeef5fcf3a3f56c13a95e8d00eb0a4da39fb8b5dab16470d9001a7e06528", "readme_url": "https://github.com/mebeim/systrack/blob/master/README.md", "stars": 275, "targets": [ "binary" ], "topics": [ "abi", "automation", "binary-analysis", "elf", "kconfig", "linux", "linux-kernel", "security-research", "syscall", "syscall-table", "syscalls" ], "url": "https://github.com/mebeim/systrack", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "IDAPython loader to help with AArch64 iBoot, iBEC, and SecureROM reverse engineering", "description_language": "bilingual", "description_zh": "辅助 AArch64 iBoot、iBEC 和 SecureROM 逆向工程的 IDAPython 加载器", "full_name": "argp/iBoot64helper", "id": "scan-69659744", "license": null, "observed_at": "2026-10-16T01:35:48.506449Z", "pushed_at": "2022-02-21T14:24:53Z", "readme_sha256": "5a1c4183ff36a35c54cd8995b2135246f9d6f9e4830cc82ffd28537bb4114d09", "readme_url": "https://github.com/argp/iBoot64helper/blob/master/README.md", "stars": 266, "targets": [ "app", "binary" ], "topics": [ "aarch64", "apple", "arm64", "bootrom", "ghidra", "ibec", "iboot", "ida", "idapython", "ios", "iphone", "securerom" ], "url": "https://github.com/argp/iBoot64helper", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "SMDA is a minimalist recursive disassembler library that is optimized for accurate Control Flow Graph (CFG) recovery from memory dumps.", "description_language": "bilingual", "description_zh": "SMDA 是精简的递归反汇编库，专门优化了从内存转储中准确恢复控制流图（CFG）的能力。", "full_name": "danielplohmann/smda", "id": "scan-139321423", "license": "BSD-2-Clause", "observed_at": "2026-10-16T01:36:15.742587Z", "pushed_at": "2026-10-15T20:44:00Z", "readme_sha256": "dd9981a08926f5be0a3bd0b85c01fb820d41f947c4b7fe9999d08bacd3496004", "readme_url": "https://github.com/danielplohmann/smda/blob/master/README.md", "stars": 264, "targets": [ "binary" ], "topics": [ "code-analysis", "control-flow-analysis", "control-flow-graph", "disassembler", "memory-dump", "x64", "x86" ], "url": "https://github.com/danielplohmann/smda", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Ghidra Client/Server Docker Image", "description_language": "bilingual", "description_zh": "Ghidra 客户端/服务器 Docker 镜像", "full_name": "blacktop/docker-ghidra", "id": "scan-174040708", "license": "Apache-2.0", "observed_at": "2026-10-16T01:35:48.570336Z", "pushed_at": "2026-09-22T08:03:52Z", "readme_sha256": "04c5b8113133bdae182d1e4756bc1beee2befc524536d7af210937f35b50385f", "readme_url": "https://github.com/blacktop/docker-ghidra/blob/master/README.md", "stars": 263, "targets": [ "binary" ], "topics": [ "disassembler", "docker", "docker-image", "ghidra", "java", "nsa" ], "url": "https://github.com/blacktop/docker-ghidra", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "IDA Pro plugin to make bitfield accesses easier to grep", "description_language": "bilingual", "description_zh": "让位域访问更易于使用 grep 搜索的 IDA Pro 插件", "full_name": "JustasMasiulis/ida_bitfields", "id": "scan-475006086", "license": "MPL-2.0", "observed_at": "2026-10-16T01:35:54.668459Z", "pushed_at": "2025-08-03T03:55:31Z", "readme_sha256": "aa1d378da59a950f680defabfac1b02571100213d1036e6296fbcae86ee8da85", "readme_url": "https://github.com/JustasMasiulis/ida_bitfields/blob/master/readme.md", "stars": 262, "targets": [ "binary" ], "topics": [ "bitfield", "bitflags", "ida", "ida-plugin", "ida-pro", "idapro", "plugin" ], "url": "https://github.com/JustasMasiulis/ida_bitfields", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Analyze Golang with Ghidra", "description_language": "bilingual", "description_zh": "使用 Ghidra 分析 Golang", "full_name": "mooncat-greenpy/Ghidra_GolangAnalyzerExtension", "id": "scan-320989735", "license": null, "observed_at": "2026-10-16T01:35:48.604920Z", "pushed_at": "2026-07-21T17:51:51Z", "readme_sha256": "77d327e9ac1af330daeb9963fd778851713081c1bd802ce3fa3cf9385843aaff", "readme_url": "https://github.com/mooncat-greenpy/Ghidra_GolangAnalyzerExtension/blob/master/README.md", "stars": 262, "targets": [ "binary" ], "topics": [ "ghidra", "ghidra-extension", "ghidra-plugin", "golang", "reverse-engineering" ], "url": "https://github.com/mooncat-greenpy/Ghidra_GolangAnalyzerExtension", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Source graveyard and random candy for radare2", "description_language": "bilingual", "description_zh": "radare2 的废弃源码存档与各类小工具", "full_name": "radareorg/radare2-extras", "id": "scan-5411297", "license": "LGPL-3.0", "observed_at": "2026-10-16T01:37:04.865747Z", "pushed_at": "2026-10-13T06:46:23Z", "readme_sha256": "5fb5cf02582ed6c1acbc705076cef3c5032ea0529ba2e69c3028bfe2ec893c9b", "readme_url": "https://github.com/radareorg/radare2-extras/blob/master/README.md", "stars": 262, "targets": [ "binary" ], "topics": [ "r2pm", "radare2" ], "url": "https://github.com/radareorg/radare2-extras", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "sleigh craft!", "description_language": "bilingual", "description_zh": "打造 sleigh！", "full_name": "StarCrossPortal/sleighcraft", "id": "scan-355462609", "license": "Apache-2.0", "observed_at": "2026-10-16T01:35:43.530238Z", "pushed_at": "2021-10-18T11:07:57Z", "readme_sha256": "dfdfa58f7bb41b7d6b620305fcbecb0b3fb440f8ef586b29585629559e2dc19a", "readme_url": "https://github.com/StarCrossPortal/sleighcraft/blob/master/README.md", "stars": 261, "targets": [ "binary" ], "topics": [ "binary-analysis", "ghidra", "python-api", "rust", "sleigh", "static-analysis" ], "url": "https://github.com/StarCrossPortal/sleighcraft", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Open source binary analysis tools.", "description_language": "bilingual", "description_zh": "开源二进制分析工具。", "full_name": "GaloisInc/macaw", "id": "scan-105173883", "license": "BSD-3-Clause", "observed_at": "2026-10-16T01:35:43.624872Z", "pushed_at": "2026-10-15T19:21:14Z", "readme_sha256": "6aeb443a6a4c395f5bb6d67782b928d61a35fee6ea3781f56efff297b3511da0", "readme_url": "https://github.com/GaloisInc/macaw/blob/master/README.md", "stars": 258, "targets": [ "binary" ], "topics": [ "arm", "binary-analysis", "haskell-library", "ppc", "reverse-engineering", "riscv", "symbolic-execution", "x86-64" ], "url": "https://github.com/GaloisInc/macaw", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": " An extension for Ghidra that adds support for the PlayStation 2. ", "description_language": "bilingual", "description_zh": "为 Ghidra 添加 PlayStation 2 支持的扩展。", "full_name": "chaoticgd/ghidra-emotionengine-reloaded", "id": "scan-589041981", "license": "Apache-2.0", "observed_at": "2026-10-16T01:35:48.781323Z", "pushed_at": "2026-10-04T23:45:34Z", "readme_sha256": "4911064f4206517daf19bd696d12fe9193d06cb6e3854c4d077e5700a2c1a08a", "readme_url": "https://github.com/chaoticgd/ghidra-emotionengine-reloaded/blob/main/README.md", "stars": 252, "targets": [ "binary", "game" ], "topics": [ "ghidra", "ps2", "reverse-engineering" ], "url": "https://github.com/chaoticgd/ghidra-emotionengine-reloaded", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "IDA Pro plugin that speeds up the initial binary auto analysis through a caching technique", "description_language": "bilingual", "description_zh": "通过缓存技术加速二进制文件初始自动分析的 IDA Pro 插件", "full_name": "Imrglop/IDA-FastAnalysis", "id": "scan-1117234189", "license": "MIT", "observed_at": "2026-10-16T01:35:54.724837Z", "pushed_at": "2026-09-02T23:03:33Z", "readme_sha256": "1122cdd00fd9de3d18c0dc938a986c50938cee9eb3fa45ca02f7f18bd3a51f7a", "readme_url": "https://github.com/Imrglop/IDA-FastAnalysis/blob/master/README.md", "stars": 252, "targets": [ "binary" ], "topics": [ "ida", "ida-plugin", "idapro" ], "url": "https://github.com/Imrglop/IDA-FastAnalysis", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Yara rule making tool (IDA Pro & Binary Ninja & Cutter & Ghidra Plugin)", "description_language": "bilingual", "description_zh": "Yara 规则制作工具，提供 IDA Pro、Binary Ninja、Cutter 和 Ghidra 插件", "full_name": "hyuunnn/Hyara", "id": "scan-138730348", "license": "MIT", "observed_at": "2026-10-16T01:35:48.794196Z", "pushed_at": "2026-10-05T20:15:29Z", "readme_sha256": "0c1ebd9a67ed985a1c3af41752798229b8ace003208d2c9bdd36643cfd31f6b8", "readme_url": "https://github.com/hyuunnn/Hyara/blob/master/README.md", "stars": 250, "targets": [ "binary" ], "topics": [ "binaryninja", "binaryninja-plugin", "cutter", "cutter-plugin", "ghidra", "ghidra-extension", "ghidra-plugin", "ida", "ida-plugin", "idapro", "idapython", "idapython-plugin", "yara", "yara-rules" ], "url": "https://github.com/hyuunnn/Hyara", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Quarkslab Bindiffer but not only !", "description_language": "bilingual", "description_zh": "Quarkslab 二进制差异比对工具，功能还不止于此！", "full_name": "quarkslab/qbindiff", "id": "scan-611360123", "license": "Apache-2.0", "observed_at": "2026-10-16T01:37:01.836115Z", "pushed_at": "2025-05-05T13:48:10Z", "readme_sha256": "37ce9e4a6586db092f8675c3cf8e8675b991b10cd7ae47599919117fd277db66", "readme_url": "https://github.com/quarkslab/qbindiff/blob/main/README.md", "stars": 247, "targets": [ "binary" ], "topics": [ "binary-diffing", "network-alignment", "program-analysis", "reverse-engineering", "vulnerability-research" ], "url": "https://github.com/quarkslab/qbindiff", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Automate Ghidra reverse engineering from the command line — headless analysis, decompilation, and structured JSON output for AI agents like Claude Code", "description_language": "bilingual", "description_zh": "通过命令行自动执行 Ghidra 逆向工程，为 Claude Code 等 AI 智能体提供无界面分析、反编译和结构化 JSON 输出", "full_name": "akiselev/ghidra-cli", "id": "scan-1133066547", "license": "GPL-3.0", "observed_at": "2026-10-16T01:35:43.745052Z", "pushed_at": "2026-10-15T23:18:51Z", "readme_sha256": "d00d5593fa7921b220534e52e823e028f3806af897d81312089044f169143aac", "readme_url": "https://github.com/akiselev/ghidra-cli/blob/master/README.md", "stars": 245, "targets": [ "binary" ], "topics": [ "ai-agents", "automation", "binary-analysis", "claude-code", "cli", "decompiler", "ghidra", "headless", "llm", "malware-analysis", "reverse-engineering", "rust" ], "url": "https://github.com/akiselev/ghidra-cli", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Book: Reverse Engineering — Fundamentals and Practice", "description_language": "bilingual", "description_zh": "书籍：《逆向工程：基础与实践》", "full_name": "mentebinaria/fundamentos-engenharia-reversa", "id": "scan-134601071", "license": null, "observed_at": "2026-10-16T01:37:13.153740Z", "pushed_at": "2026-05-27T13:56:15Z", "readme_sha256": "84a76a564227fdcc12fb0447620403a219c9319fca2f374fcefd5af78408d56a", "readme_url": "https://github.com/mentebinaria/fundamentos-engenharia-reversa/blob/main/README.md", "stars": 238, "targets": [ "binary" ], "topics": [ "assembly", "c", "livro", "malware-analysis", "reverse-engineering", "reversing", "win32", "windows", "windows-api", "windows-internals" ], "url": "https://github.com/mentebinaria/fundamentos-engenharia-reversa", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "An AI agent skill for automated malware analysis with IDA Pro, enabling agents to analyze malicious samples like a security analyst.", "description_language": "bilingual", "description_zh": "让 AI 智能体像安全分析师一样使用 IDA Pro 自动分析恶意样本的技能。", "full_name": "miunasu/IDA-Skill", "id": "scan-1138902797", "license": "AGPL-3.0", "observed_at": "2026-10-16T01:35:43.857798Z", "pushed_at": "2026-08-21T03:31:59Z", "readme_sha256": "44f1802af6016b8d337ae3261ff188c6f3c7f90e4249359afe05fc6dec1d9551", "readme_url": "https://github.com/miunasu/IDA-Skill/blob/main/README.md", "stars": 237, "targets": [ "binary" ], "topics": [ "ai-agent", "binary-analysis", "cybersecurity", "ida-pro", "idapython", "malware-analysis", "security-research", "threat-intelligence" ], "url": "https://github.com/miunasu/IDA-Skill", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "eBPF Processor for Ghidra", "description_language": "bilingual", "description_zh": "Ghidra 的 eBPF 处理器模块", "full_name": "Nalen98/eBPF-for-Ghidra", "id": "scan-202372626", "license": "MIT", "observed_at": "2026-10-16T01:35:48.970667Z", "pushed_at": "2024-06-26T16:01:03Z", "readme_sha256": "0d54c6dd6bf9965851a82d90c9f397bfafead9f8c7bb63723c0659c0a613fbfe", "readme_url": "https://github.com/Nalen98/eBPF-for-Ghidra/blob/master/README.md", "stars": 237, "targets": [ "binary" ], "topics": [ "decompile", "dissassembly", "ebpf", "ebpf-opcode", "extension", "ghidra", "reverse-engineering" ], "url": "https://github.com/Nalen98/eBPF-for-Ghidra", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Code and exercises for a workshop on z3 and angr", "description_language": "bilingual", "description_zh": "z3 与 angr 工作坊的代码及练习", "full_name": "ReversecLabs/z3_and_angr_binary_analysis_workshop", "id": "scan-154396726", "license": null, "observed_at": "2026-10-16T01:35:43.849540Z", "pushed_at": "2020-12-29T18:43:42Z", "readme_sha256": "16d98b814a83a62b7cb116b81739aa00ee491fa660e26ca33c47e3e002315d85", "readme_url": "https://github.com/ReversecLabs/z3_and_angr_binary_analysis_workshop/blob/master/README.md", "stars": 237, "targets": [ "binary" ], "topics": [ "angr", "binary-analysis", "reverse-engineering", "smt-solver", "workshop", "z3" ], "url": "https://github.com/ReversecLabs/z3_and_angr_binary_analysis_workshop", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A research decompiler implemented as a Binary Ninja plugin.", "description_language": "bilingual", "description_zh": "以 Binary Ninja 插件形式实现的研究型反编译器。", "full_name": "fkie-cad/dewolf", "id": "scan-433743529", "license": "LGPL-2.1", "observed_at": "2026-10-16T01:35:44.205861Z", "pushed_at": "2026-10-12T21:39:41Z", "readme_sha256": "7ad53dc8912770c35cb72fad60e8a42bce83f7095a25475dd7fa190017642c46", "readme_url": "https://github.com/fkie-cad/dewolf/blob/main/README.md", "stars": 236, "targets": [ "binary" ], "topics": [ "binary-analysis", "binaryninja", "binaryninja-plugin", "decompilation", "dewolf", "reverse-engineering", "software-analysis" ], "url": "https://github.com/fkie-cad/dewolf", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A fast and lightweight decoder for x86 and x86-64 and encoder for x86-64.", "description_language": "bilingual", "description_zh": "快速轻量的 x86 与 x86-64 解码器，以及 x86-64 编码器。", "full_name": "aengelke/fadec", "id": "scan-128645645", "license": "BSD-3-Clause", "observed_at": "2026-10-16T01:36:15.882588Z", "pushed_at": "2026-10-13T15:03:20Z", "readme_sha256": "dd683dcd0132f089e0ab850732ae82a0a2865841ef19b2e972fcf202fe18bc5a", "readme_url": "https://github.com/aengelke/fadec/blob/master/README.md", "stars": 235, "targets": [ "binary" ], "topics": [ "decoder", "disassembler", "encoder", "x86", "x86-32", "x86-64" ], "url": "https://github.com/aengelke/fadec", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "ChatGPT Agent analyses your IDA pseudocode", "description_language": "bilingual", "description_zh": "使用 ChatGPT 智能体分析 IDA 伪代码", "full_name": "DearVa/ida_copilot", "id": "scan-713439924", "license": "MIT", "observed_at": "2026-10-16T01:35:54.776447Z", "pushed_at": "2023-11-02T17:14:04Z", "readme_sha256": "afc614069286c40729e7a9eed1bac8494cdadc8993e96de5d85f3c7f85f3c42f", "readme_url": "https://github.com/DearVa/ida_copilot/blob/main/readme.md", "stars": 234, "targets": [ "binary" ], "topics": [ "agent", "assistant", "autogpt", "chatgpt", "gpt", "ida", "ida-plugin", "ida-pro", "idapython", "large-language-models", "llm", "openai", "reverse-engineering" ], "url": "https://github.com/DearVa/ida_copilot", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A Ghidra script to save small patches back to the executable file", "description_language": "bilingual", "description_zh": "将小型补丁保存回可执行文件的 Ghidra 脚本", "full_name": "schlafwandler/ghidra_SavePatch", "id": "scan-222536453", "license": null, "observed_at": "2026-10-16T01:35:48.998453Z", "pushed_at": "2020-12-21T12:33:18Z", "readme_sha256": "b47aa8c0a2a35859b5df5ac1b7ed5872f098d8d75f2385c5341c4793d4c26987", "readme_url": "https://github.com/schlafwandler/ghidra_SavePatch/blob/master/readme.md", "stars": 233, "targets": [ "binary" ], "topics": [ "binary", "ghidra", "ghidra-plugin", "patching" ], "url": "https://github.com/schlafwandler/ghidra_SavePatch", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "", "description_language": "bilingual", "description_zh": "", "full_name": "Cisco-Talos/Ghidraaas", "id": "scan-206115839", "license": "Apache-2.0", "observed_at": "2026-10-16T01:35:49.288016Z", "pushed_at": "2023-05-01T20:38:05Z", "readme_sha256": "f2a7d29143228712cce3c8c48e6c10976318b3e434db09e8f52ab7d3e86e49b4", "readme_url": "https://github.com/Cisco-Talos/Ghidraaas/blob/master/README.md", "stars": 229, "targets": [ "binary" ], "topics": [ "ghidra", "ghidra-plugins", "ida" ], "url": "https://github.com/Cisco-Talos/Ghidraaas", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Binary & scripts associated with \"The Poor Man's Obfuscator\" presentation ", "description_language": "bilingual", "description_zh": "“The Poor Man's Obfuscator”演讲相关的二进制文件与脚本", "full_name": "romainthomas/the-poor-mans-obfuscator", "id": "scan-509909384", "license": null, "observed_at": "2026-10-16T01:35:49.142449Z", "pushed_at": "2022-07-06T08:31:11Z", "readme_sha256": "0d27ea08615b61df1d57dcde02ae05032d2df6783b4f9db8486a93d27a1f7c6c", "readme_url": "https://github.com/romainthomas/the-poor-mans-obfuscator/blob/main/README.md", "stars": 229, "targets": [ "app", "binary" ], "topics": [ "android", "binaryninja", "ghidra", "ida", "ios", "obfuscation", "radare2" ], "url": "https://github.com/romainthomas/the-poor-mans-obfuscator", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Native multi-arch disassembler & decompiler - PE/ELF/Mach-O, x86/x64/ARM64, Lua scripting, RTTI recovery", "description_language": "bilingual", "description_zh": "原生多架构反汇编器与反编译器，支持 PE/ELF/Mach-O、x86/x64/ARM64、Lua 脚本及 RTTI 恢复", "full_name": "Sidenai/hyperion-disassembler", "id": "scan-1234816868", "license": null, "observed_at": "2026-10-16T01:36:15.837135Z", "pushed_at": "2026-06-23T07:57:17Z", "readme_sha256": "ec07e74492a705ff53b72dfe1a7a59994c58ef5456673e48110c23ae8dc92d11", "readme_url": "https://github.com/Sidenai/hyperion-disassembler/blob/main/README.md", "stars": 228, "targets": [ "binary" ], "topics": [ "disassembler", "gamehackingtools", "re", "reverseengineering", "windows" ], "url": "https://github.com/Sidenai/hyperion-disassembler", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Play Skate 3 natively on Android. Download one APK, select your own ISO, and skate. ARM64 recompilation with Vulkan rendering.", "description_language": "bilingual", "description_zh": "在 Android 上原生游玩 Skate 3。下载一个 APK，选择自有 ISO 即可开始滑板运动。采用 ARM64 重编译和 Vulkan 渲染。", "full_name": "Buku313/Skate3-Mobile", "id": "scan-1272534715", "license": null, "observed_at": "2026-10-16T11:55:08.239416Z", "pushed_at": "2026-09-16T00:08:01Z", "readme_sha256": "4b340fe9e28038101d443cc4bae4758768fa2682060eb81d4f4b5a7568a93b6d", "readme_url": "https://github.com/Buku313/Skate3-Mobile/blob/main/README.md", "stars": 227, "targets": [ "app", "binary" ], "topics": [ "android", "arm64", "gaming-handheld", "rg406v", "skate3", "static-recompilation", "vulkan" ], "url": "https://github.com/Buku313/Skate3-Mobile", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Quokka: A Fast and Accurate Binary Exporter", "description_language": "bilingual", "description_zh": "Quokka：快速准确的二进制导出工具", "full_name": "quarkslab/quokka", "id": "scan-534255683", "license": "Apache-2.0", "observed_at": "2026-10-16T01:35:55.026199Z", "pushed_at": "2026-10-14T08:35:56Z", "readme_sha256": "d616c6c2f9ae33c3a6426ca791a2b4e07c032676736c97a9ef6c387382f7d64c", "readme_url": "https://github.com/quarkslab/quokka/blob/main/README.md", "stars": 227, "targets": [ "binary" ], "topics": [ "binary-exporter", "binexport", "ida-plugin", "reverse-engineering" ], "url": "https://github.com/quarkslab/quokka", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "🐉 Export ghidra decompiled code to dwarf sections inside ELF binary", "description_language": "bilingual", "description_zh": "🐉 将 Ghidra 反编译代码导出至 ELF 二进制文件中的 DWARF 节", "full_name": "cesena/ghidra2dwarf", "id": "scan-285345538", "license": "MIT", "observed_at": "2026-10-16T01:35:49.320718Z", "pushed_at": "2023-11-03T17:27:03Z", "readme_sha256": "32294c6d37f18b91bf6ade8bac65cb6d54864a8d8fb2e3953d817bf85d7ad7d5", "readme_url": "https://github.com/cesena/ghidra2dwarf/blob/master/README.md", "stars": 226, "targets": [ "binary" ], "topics": [ "ctf", "decompiler", "dwarf", "elf", "ghidra", "ghidra-plugin", "ghidra-scripts", "pwn", "reverse-engineering" ], "url": "https://github.com/cesena/ghidra2dwarf", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "sigmaker is a zero-dependency IDA Pro 9.0+ cross-platform signature maker plugin with optional SIMD (e.g. AVX2/NEON/SSE2) speedups that works on MacOS/Linux/Windows. It allows configurable wildcard operand patterns, nibbles, and signature generation just by right clicking.", "description_language": "bilingual", "description_zh": "sigmaker 是零依赖、跨平台的 IDA Pro 9.0+ 特征码生成插件，支持可选的 SIMD（如 AVX2、NEON、SSE2）加速，可在 macOS、Linux 和 Windows 上运行。可配置操作数通配模式与半字节，只需右键点击即可生成特征码。", "full_name": "mahmoudimus/ida-sigmaker", "id": "scan-837435879", "license": "MIT", "observed_at": "2026-10-16T01:35:44.149169Z", "pushed_at": "2026-09-19T19:43:55Z", "readme_sha256": "2c996c5104891bcd6b09b20f043df6627e0d6ee1b146193212f2224a7318688e", "readme_url": "https://github.com/mahmoudimus/ida-sigmaker/blob/main/README.md", "stars": 226, "targets": [ "binary" ], "topics": [ "binary-analysis", "cython", "ida", "ida-plugin", "ida-pro", "idapro", "idapython", "idapython-plugin", "idapython-script", "linux", "macos", "pattern", "pattern-matching", "reverse-engineering", "sigmaker", "sigmaker64", "signature", "signature-maker", "simd", "simd-intrinsics" ], "url": "https://github.com/mahmoudimus/ida-sigmaker", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A macOS utility to extract dynamic libraries from the dyld_shared_cache of macOS and iOS.", "description_language": "bilingual", "description_zh": "macOS 工具，用于从 macOS 和 iOS 的 dyld_shared_cache 中提取动态库。", "full_name": "macmade/dyld_cache_extract", "id": "scan-72776966", "license": "MIT", "observed_at": "2026-10-16T10:47:33.870971Z", "pushed_at": "2023-06-12T18:49:36Z", "readme_sha256": "b32f5626d3cf9835fa39f367b4723069596c9885907c47fad99e00eea62386ab", "readme_url": "https://github.com/macmade/dyld_cache_extract/blob/main/README.md", "stars": 225, "targets": [ "app", "binary" ], "topics": [ "cache", "dyld", "dylib", "extract", "extract-dynamic-libraries", "ios", "macho", "macos", "macos-utility", "reverse-engineering" ], "url": "https://github.com/macmade/dyld_cache_extract", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "An ethereum evm bytecode disassembler and static/dynamic analysis tool", "description_language": "bilingual", "description_zh": "以太坊 EVM 字节码反汇编器及静态/动态分析工具", "full_name": "tintinweb/ethereum-dasm", "id": "scan-63283304", "license": "GPL-2.0", "observed_at": "2026-10-16T01:36:15.978172Z", "pushed_at": "2019-07-07T00:24:53Z", "readme_sha256": "af0ef9f42f6408e0f82ba2c2a29cc70064d67bdc49312b7dbfb674d980523cc6", "readme_url": "https://github.com/tintinweb/ethereum-dasm/blob/master/README.md", "stars": 223, "targets": [ "binary" ], "topics": [ "blockchain", "disassembler", "dynamic-analysis", "ethereum", "evm", "static-analysis" ], "url": "https://github.com/tintinweb/ethereum-dasm", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Python bindings to Ghidra's SLEIGH library for disassembly and lifting to P-Code IR", "description_language": "bilingual", "description_zh": "Ghidra SLEIGH 库的 Python 绑定，用于反汇编及提升至 P-Code 中间表示", "full_name": "angr/pypcode", "id": "scan-243120944", "license": "NOASSERTION", "observed_at": "2026-10-16T01:35:49.458317Z", "pushed_at": "2026-10-12T19:35:30Z", "readme_sha256": "ce1305410c13d0a883118b7dfbedfc4f93a86651fbe5df402662944713654af5", "readme_url": "https://github.com/angr/pypcode/blob/master/README.md", "stars": 222, "targets": [ "binary" ], "topics": [ "ghidra", "ir", "pcode", "python", "sleigh" ], "url": "https://github.com/angr/pypcode", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "ScanCode.io is a server to script and automate software composition analysis with pipelines. This project is sponsored by the European Commission, NLnet NGI0, the Google Summer of Code, nexB and others generous sponsors!", "description_language": "bilingual", "description_zh": "ScanCode.io 是一个服务器，可通过流水线编写脚本并自动执行软件成分分析。项目获欧盟委员会、NLnet NGI0、Google Summer of Code、nexB 及其他慷慨赞助者支持！", "full_name": "aboutcode-org/scancode.io", "id": "scan-294443538", "license": "Apache-2.0", "observed_at": "2026-10-16T01:35:44.126200Z", "pushed_at": "2026-10-15T19:16:20Z", "readme_sha256": "e95a1569417019ad41b35b2dd8093de13a5ee8a1ef2c133d0beeb0337ccfd671", "readme_url": "https://github.com/aboutcode-org/scancode.io/blob/main/README.rst", "stars": 220, "targets": [ "binary" ], "topics": [ "binary-analysis", "code-analysis", "cyclonedx", "docker", "foss-compliance", "license", "license-compliance", "open-source", "package-url", "purl", "sca", "scancode", "software-composition-analysis", "spdx", "virtual-machine", "vulnerabilities" ], "url": "https://github.com/aboutcode-org/scancode.io", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Decompiler for x86 and x86-64 ELF binaries", "description_language": "bilingual", "description_zh": "x86 和 x86-64 ELF 二进制文件反编译器", "full_name": "Cararasu/holodec", "id": "scan-95128932", "license": "MIT", "observed_at": "2026-10-16T01:36:15.967577Z", "pushed_at": "2019-04-16T15:52:28Z", "readme_sha256": "3576b7bb609613fc0364bf5555fe210aa5dfa1bb603102b87c3404ff9fa4a496", "readme_url": "https://github.com/Cararasu/holodec/blob/master/README.md", "stars": 220, "targets": [ "binary" ], "topics": [ "cpp", "decompile", "disassembler", "elf", "x86", "x86-64" ], "url": "https://github.com/Cararasu/holodec", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Apply IDA FLIRT signatures for Ghidra", "description_language": "bilingual", "description_zh": "在 Ghidra 中应用 IDA FLIRT 签名", "full_name": "NWMonster/ApplySig", "id": "scan-181861102", "license": "LGPL-3.0", "observed_at": "2026-10-16T01:35:49.456273Z", "pushed_at": "2020-05-15T07:25:11Z", "readme_sha256": "c2128800a2ffdd86af68ee2f85cab50088907044936ee369eb62afb1fdae67c4", "readme_url": "https://github.com/NWMonster/ApplySig/blob/master/README.md", "stars": 214, "targets": [ "binary" ], "topics": [ "flirt", "ghidra", "ida" ], "url": "https://github.com/NWMonster/ApplySig", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Pyhidra is a Python library that provides direct access to the Ghidra API within a native CPython interpreter using jpype.", "description_language": "bilingual", "description_zh": "Pyhidra 是 Python 库，通过 jpype 在原生 CPython 解释器中直接访问 Ghidra API。", "full_name": "dod-cyber-crime-center/pyhidra", "id": "scan-463307050", "license": "NOASSERTION", "observed_at": "2026-10-16T01:35:49.653115Z", "pushed_at": "2024-10-29T16:11:53Z", "readme_sha256": "b28e5c2d227fd1a046b7ef56572350fe6a6a6b91fb207058ca84c09506c838ab", "readme_url": "https://github.com/dod-cyber-crime-center/pyhidra/blob/main/README.md", "stars": 212, "targets": [ "binary" ], "topics": [ "automation", "ghidra", "malware-analysis", "malware-research", "python" ], "url": "https://github.com/dod-cyber-crime-center/pyhidra", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A workbench for developing 6502 code.", "description_language": "bilingual", "description_zh": "用于开发 6502 代码的工作台。", "full_name": "fadden/6502bench", "id": "scan-150502688", "license": "Apache-2.0", "observed_at": "2026-10-16T01:36:16.112797Z", "pushed_at": "2026-08-16T15:47:22Z", "readme_sha256": "8088e5dc4c243ddbf22274f67d4ba84df7eaf8aecca41caf18a8bb0c100c9e81", "readme_url": "https://github.com/fadden/6502bench/blob/master/README.md", "stars": 212, "targets": [ "binary" ], "topics": [ "6502", "6502-disassembly", "65816", "disassembler" ], "url": "https://github.com/fadden/6502bench", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A security-first MCP server that empowers AI agents to perform automated reverse engineering, malware analysis, forensics, vulnerability research, and SAST — powered by Radare2, YARA, LIEF, Capstone, and more.", "description_language": "bilingual", "description_zh": "以安全为先的 MCP 服务器，让 AI 智能体自动执行逆向工程、恶意软件分析、取证、漏洞研究及 SAST，基于 Radare2、YARA、LIEF、Capstone 等工具。", "full_name": "sjkim1127/Reversecore_MCP", "id": "scan-1093613264", "license": "MIT", "observed_at": "2026-10-16T01:37:05.119114Z", "pushed_at": "2026-10-15T11:49:56Z", "readme_sha256": "0eb3aef676313b6984943a3152b36ffc8c04eacab7751323a2eaddc23718f5fb", "readme_url": "https://github.com/sjkim1127/Reversecore_MCP/blob/main/README.md", "stars": 211, "targets": [ "binary" ], "topics": [ "mcp", "mcp-security", "mcp-server", "radare2", "reverse-engineering", "sast", "security" ], "url": "https://github.com/sjkim1127/Reversecore_MCP", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Native 100% ARM64 Android port of the 2007 cosmic gravity platformer with OpenGL ES 3.2, AAudio, Hor+ ultrawide, and touch controls.", "description_language": "bilingual", "description_zh": "将 2007 年的宇宙重力平台游戏原生移植到 Android，采用 100% ARM64，支持 OpenGL ES 3.2、AAudio、Hor+ 超宽屏和触控。", "full_name": "OpenPort-Labs/Galaxy-Android", "id": "scan-1417574266", "license": "GPL-3.0", "observed_at": "2026-10-18T13:14:32.067495Z", "pushed_at": "2026-10-18T12:49:47Z", "readme_sha256": "6f626af2d28979a2d846d2b761d16bdfcd88e24808969c6ca60cd8762c3d3cf7", "readme_url": "https://github.com/OpenPort-Labs/Galaxy-Android/blob/main/README.md", "stars": 210, "targets": [ "app", "binary", "game" ], "topics": [ "aaudio", "android", "arm64", "galaxy-quest", "game-preservation", "gpl-3", "native-port", "opengl-es", "petari", "reverse-engineering", "wii-decompilation" ], "url": "https://github.com/OpenPort-Labs/Galaxy-Android", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A lightweight ARM64 dynamic tracing and emulation tool based on Unicorn, supporting IDA Pro, Tenet log generation, native code emulation, memory dumps, register-state tracking, and instruction-level logging.", "description_language": "bilingual", "description_zh": "基于 Unicorn 引擎的轻量级 ARM64 动态追踪模拟工具，支持 IDA Pro、Tenet 日志生成、本地代码模拟、内存转储、寄存器状态追踪和指令级日志记录。", "full_name": "chenxvb/Unicorn-Trace", "id": "scan-1098964713", "license": "MIT", "observed_at": "2026-10-16T01:35:54.950424Z", "pushed_at": "2026-05-11T07:07:51Z", "readme_sha256": "c5881fd18b18bd0b4689cb0fdcc2e768d6ca2bbe1c98dd96abc2432de56a2458", "readme_url": "https://github.com/chenxvb/Unicorn-Trace/blob/main/README.md", "stars": 209, "targets": [ "app", "binary" ], "topics": [ "android", "ida-plugin", "idapro", "idapython", "reverse-engineering", "tenet", "trace", "unicorn" ], "url": "https://github.com/chenxvb/Unicorn-Trace", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A plugin for IDA that renames functions by system call numbers.", "description_language": "bilingual", "description_zh": "根据系统调用号重命名函数的 IDA 插件。", "full_name": "WPeace-HcH/SysNR-FuncFinder", "id": "scan-572388459", "license": null, "observed_at": "2026-10-16T01:35:44.353773Z", "pushed_at": "2023-09-20T08:33:36Z", "readme_sha256": "df89c3fde1d6c3a8f0e4639146301d0aeaae786c18526f8a9dc201c8c6ea1b1a", "readme_url": "https://github.com/WPeace-HcH/SysNR-FuncFinder/blob/main/README.md", "stars": 208, "targets": [ "binary" ], "topics": [ "binary-analysis", "elf", "ida", "ida-plugin", "malware-analysis" ], "url": "https://github.com/WPeace-HcH/SysNR-FuncFinder", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "AI-Assisted Reverse Engineering with Ghidra", "description_language": "bilingual", "description_zh": "使用 AI 辅助 Ghidra 逆向工程", "full_name": "biniamf/ai-reverse-engineering", "id": "scan-1069863699", "license": null, "observed_at": "2026-10-16T01:35:49.659350Z", "pushed_at": "2026-07-31T08:06:20Z", "readme_sha256": "adf0510fd82013e7bd9ebce325bc12d4cb26b44db364dc63466da0720c84480b", "readme_url": "https://github.com/biniamf/ai-reverse-engineering/blob/main/readme.md", "stars": 206, "targets": [ "binary" ], "topics": [ "ai-agents", "ghidra", "reverse-engineering", "vulnerability-research" ], "url": "https://github.com/biniamf/ai-reverse-engineering", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Arkose Labs / FunCaptcha solver for Go, Python and Node — produces sup=1 suppressed tokens. The site RSA key is derived from api.js on every solve: no capture, no replay, no headless browser. Includes a full VM disassembly.", "description_language": "bilingual", "description_zh": "面向 Go、Python 和 Node 的 Arkose Labs / FunCaptcha 解题工具，生成 sup=1 免挑战令牌。每次解题均从 api.js 推导站点 RSA 密钥，无需抓取、重放或无头浏览器，并附完整虚拟机反汇编。", "full_name": "buggerlogger/arkose-solver", "id": "scan-1315925469", "license": "MIT", "observed_at": "2026-10-16T01:36:48.669595Z", "pushed_at": "2026-09-14T13:00:34Z", "readme_sha256": "cf700fc7a1991c7fa97946068d48ed6d2e9b5598ba91db8a5ab733c27b2e9305", "readme_url": "https://github.com/buggerlogger/arkose-solver/blob/master/README.md", "stars": 202, "targets": [ "binary", "website" ], "topics": [ "anti-bot", "arkose", "arkoselabs", "bda", "bypass", "captcha-solver", "deobfuscation", "fingerprinting", "funcaptcha", "golang", "javascript-vm", "nodejs", "npm-package", "pypi", "python", "reverse-engineering", "tls-fingerprint", "token" ], "url": "https://github.com/buggerlogger/arkose-solver", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "BTD - Bin To DNN: A DNN Executables Decompiler", "description_language": "bilingual", "description_zh": "BTD（Bin To DNN）：DNN 可执行文件反编译器", "full_name": "monkbai/DNN-decompiler", "id": "scan-337273010", "license": "NOASSERTION", "observed_at": "2026-10-16T01:36:11.823086Z", "pushed_at": "2026-03-13T04:16:36Z", "readme_sha256": "ee2e22b782cf6d7c7559e8e002017b24c92529d694c15194ec154c65ac7d0816", "readme_url": "https://github.com/monkbai/DNN-decompiler/blob/master/README.md", "stars": 199, "targets": [ "binary" ], "topics": [ "decompiler", "deep-learning", "neural-network", "reverse-engineering" ], "url": "https://github.com/monkbai/DNN-decompiler", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Efficient Deobfuscation of Linear Mixed Boolean-Arithmetic Expressions", "description_language": "bilingual", "description_zh": "高效去混淆线性布尔算术混合表达式", "full_name": "DenuvoSoftwareSolutions/SiMBA", "id": "scan-530968895", "license": "GPL-3.0", "observed_at": "2026-10-16T01:36:48.948068Z", "pushed_at": "2023-10-12T13:28:10Z", "readme_sha256": "1496e504b8beb09531d100799a5c31c5e3045014c944781df33e4006aff4224c", "readme_url": "https://github.com/DenuvoSoftwareSolutions/SiMBA/blob/main/README.md", "stars": 197, "targets": [ "binary" ], "topics": [ "deobfuscation", "mba", "python3", "simplification", "term-rewriting" ], "url": "https://github.com/DenuvoSoftwareSolutions/SiMBA", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "RevEng.AI Ghidra Plugin", "description_language": "bilingual", "description_zh": "RevEng.AI 的 Ghidra 插件", "full_name": "RevEngAI/plugin-ghidra", "id": "scan-676157443", "license": "GPL-3.0", "observed_at": "2026-10-16T01:35:49.796246Z", "pushed_at": "2026-08-25T12:05:49Z", "readme_sha256": "fa8083c837e38962f6849c1ed0ad6f770f9f57a98e534f2ae3712c1ba52a01f4", "readme_url": "https://github.com/RevEngAI/plugin-ghidra/blob/main/README.md", "stars": 195, "targets": [ "binary" ], "topics": [ "artificial-intelligence", "exploit-development", "ghidra", "ghidra-plugin", "ghidra-scripts", "reverse-engineering", "vulnerability-research" ], "url": "https://github.com/RevEngAI/plugin-ghidra", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Decompilation of snowboard kids 2 (N64)", "description_language": "bilingual", "description_zh": "Snowboard Kids 2（N64）反编译项目", "full_name": "cdlewis/snowboardkids2-decomp", "id": "scan-864682338", "license": null, "observed_at": "2026-10-16T01:36:42.870394Z", "pushed_at": "2026-10-15T03:04:01Z", "readme_sha256": "51be9599c799d87235212dc518df08ba8968febf904c053ce60f569932922f31", "readme_url": "https://github.com/cdlewis/snowboardkids2-decomp/blob/main/README.md", "stars": 193, "targets": [ "binary", "game" ], "topics": [ "c", "decomp", "decompilation", "mips-assembly", "n64", "n64-dev", "reverse-engineering" ], "url": "https://github.com/cdlewis/snowboardkids2-decomp", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Unofficial CMake build for Ghidra's C++ SLEIGH code", "description_language": "bilingual", "description_zh": "Ghidra C++ SLEIGH 代码的非官方 CMake 构建", "full_name": "lifting-bits/sleigh", "id": "scan-415934955", "license": "Apache-2.0", "observed_at": "2026-10-16T01:35:44.426626Z", "pushed_at": "2026-10-13T18:43:10Z", "readme_sha256": "ac175b44f4178e079737fe02c4a297340e50793eecdcc8b6b2502bc0c7212490", "readme_url": "https://github.com/lifting-bits/sleigh/blob/master/README.md", "stars": 193, "targets": [ "binary" ], "topics": [ "binary-analysis", "cmake", "cplusplus", "cpp", "decompiler", "disassembler", "ghidra", "reverse-engineering", "sleigh" ], "url": "https://github.com/lifting-bits/sleigh", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Delphi debug framework", "description_language": "bilingual", "description_zh": "Delphi 调试框架", "full_name": "MahdiSafsafi/DebugEngine", "id": "scan-67597575", "license": "MPL-2.0", "observed_at": "2026-10-16T01:36:16.382644Z", "pushed_at": "2021-06-18T03:37:05Z", "readme_sha256": "26ffed6f30feb9cc9e0a2e2dfaa7368a6018b976cfaac4ec6628f49f50b596a0", "readme_url": "https://github.com/MahdiSafsafi/DebugEngine/blob/master/README.md", "stars": 193, "targets": [ "binary" ], "topics": [ "debug", "delphi", "disassembler", "exception", "portable-executable", "runtime", "stacktrace", "x86-64" ], "url": "https://github.com/MahdiSafsafi/DebugEngine", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Plugin to ease reversing iOS projects", "description_language": "bilingual", "description_zh": "简化 iOS 项目逆向分析的插件", "full_name": "yoavst/ida-ios-helper", "id": "scan-964696239", "license": "GPL-3.0", "observed_at": "2026-10-16T01:35:55.134167Z", "pushed_at": "2026-08-15T17:55:26Z", "readme_sha256": "b3fcf14b720bee2f82f050c33b43ed4d4392148cb7a3322ba27c150748270e53", "readme_url": "https://github.com/yoavst/ida-ios-helper/blob/master/README.md", "stars": 193, "targets": [ "app", "binary" ], "topics": [ "ida-plugin", "idapython", "ios", "kernelcache", "objective-c" ], "url": "https://github.com/yoavst/ida-ios-helper", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "The Java Disassembler", "description_language": "bilingual", "description_zh": "Java 反汇编器。", "full_name": "LLVM-but-worse/java-disassembler", "id": "scan-59169742", "license": "GPL-3.0", "observed_at": "2026-10-18T14:38:57.579546Z", "pushed_at": "2025-07-12T01:40:56Z", "readme_sha256": "d24e8d1185d5f5e4954a5887a2b88835dd2cb59180c54637fba8c8281d132719", "readme_url": "https://github.com/LLVM-but-worse/java-disassembler/blob/775a14c08b5fb0ec57055f993530f5b9182877af/README.md", "stars": 192, "targets": [ "binary" ], "topics": [ "bytecode", "bytecode-viewer", "java", "reverse-engineering", "static-analysis" ], "url": "https://github.com/LLVM-but-worse/java-disassembler", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A Pythonic Ghidra standard library", "description_language": "bilingual", "description_zh": "符合 Python 风格的 Ghidra 标准库", "full_name": "msm-code/ghidralib", "id": "scan-906015833", "license": "Apache-2.0", "observed_at": "2026-10-16T01:35:49.844349Z", "pushed_at": "2026-02-06T18:17:10Z", "readme_sha256": "a4345acf6916554ab47ff4ecfd5136fdaf05d1faafab1464ddf179efb8387f51", "readme_url": "https://github.com/msm-code/ghidralib/blob/master/README.md", "stars": 191, "targets": [ "binary" ], "topics": [ "ghidra", "ghidra-scripts", "ghidra-snippets", "library", "reverse-engineering" ], "url": "https://github.com/msm-code/ghidralib", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Hex-Rays Decompiler Enhanced View", "description_language": "bilingual", "description_zh": "Hex-Rays 反编译器增强视图", "full_name": "ax330d/hrdev", "id": "scan-31177634", "license": "MIT", "observed_at": "2026-10-16T01:35:55.078328Z", "pushed_at": "2018-09-21T14:53:08Z", "readme_sha256": "6ec4669c07b31bf2130d5a38944f15b5e9f97eee8a02d0d242c588c1d884af0d", "readme_url": "https://github.com/ax330d/hrdev/blob/master/README.md", "stars": 186, "targets": [ "binary" ], "topics": [ "clang-python-binding", "hex-rays-decompiler", "ida-plugin", "ida-pro", "python" ], "url": "https://github.com/ax330d/hrdev", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A binary analysis framework written in Rust.", "description_language": "bilingual", "description_zh": "使用 Rust 编写的二进制分析框架。", "full_name": "fugue-re/fugue-core", "id": "scan-386728913", "license": "MIT", "observed_at": "2026-10-16T01:35:44.595503Z", "pushed_at": "2026-08-15T00:10:30Z", "readme_sha256": "1c214e54ca190beef8beb579a2b6207972f7a01ccd940585dfd1ffc4f831c2d0", "readme_url": "https://github.com/fugue-re/fugue-core/blob/crates-io/README.md", "stars": 186, "targets": [ "binary" ], "topics": [ "binary-analysis", "disassembly", "lifting", "program-analysis", "reverse-engineering" ], "url": "https://github.com/fugue-re/fugue-core", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "IdaClu is a version agnostic IDA Pro plugin for grouping similar functions. Pick an existing grouping algorithm or create your own.", "description_language": "bilingual", "description_zh": "IdaClu 是不依赖特定 IDA Pro 版本的插件，用于对相似函数分组，可选择已有分组算法，也可自建算法。", "full_name": "harlamism/IdaClu", "id": "scan-696153048", "license": "MIT", "observed_at": "2026-10-16T01:35:44.661517Z", "pushed_at": "2026-02-10T20:31:03Z", "readme_sha256": "4a6bd6d791b127b0d3c18ed9f1f049ab3adf625df4fa012c3fb9376208758d47", "readme_url": "https://github.com/harlamism/IdaClu/blob/master/README.md", "stars": 186, "targets": [ "binary" ], "topics": [ "binary-analysis", "ctf", "deobfuscation", "hexrays", "ida", "ida-pro", "idapython", "reverse-engineering" ], "url": "https://github.com/harlamism/IdaClu", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Complete static recompilation of Virtua Racing for the Sega 32X (optimization in progress)", "description_language": "bilingual", "description_zh": "Sega 32X 版《Virtua Racing》的完整静态重编译，优化仍在进行中。", "full_name": "matiaszanolli/sega-vr-disasm", "id": "scan-1128711422", "license": "NOASSERTION", "observed_at": "2026-10-16T11:55:08.449719Z", "pushed_at": "2026-09-05T14:42:01Z", "readme_sha256": "8ef83e44f16aad4ea8b8a393568766c727778d4b424e1e150a17838a1dcbe8e1", "readme_url": "https://github.com/matiaszanolli/sega-vr-disasm/blob/master/README.md", "stars": 183, "targets": [ "binary" ], "topics": [ "disassembly", "optimization", "reverse-engineering", "sega", "sega-32x", "sega-mega-drive", "static-recompilation", "virtua-racing" ], "url": "https://github.com/matiaszanolli/sega-vr-disasm", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Binary Code Similarity Analysis (BCSA) Benchmark", "description_language": "bilingual", "description_zh": "二进制代码相似性分析（BCSA）基准", "full_name": "SoftSec-KAIST/BinKit", "id": "scan-314792627", "license": "MIT", "observed_at": "2026-10-16T01:35:44.683493Z", "pushed_at": "2023-12-15T02:24:01Z", "readme_sha256": "586957cccfcca5e2d51a00d09d66d567c6f40ee00e01af2538a255ccfbc979fb", "readme_url": "https://github.com/SoftSec-KAIST/BinKit/blob/master/README.md", "stars": 183, "targets": [ "binary" ], "topics": [ "benchmark", "binary-analysis" ], "url": "https://github.com/SoftSec-KAIST/BinKit", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Useful Scripts for helping in reverse engeenering", "description_language": "bilingual", "description_zh": "辅助逆向工程的实用脚本", "full_name": "vallejocc/Reverse-Engineering-Arsenal", "id": "scan-95212334", "license": null, "observed_at": "2026-10-16T01:35:55.227406Z", "pushed_at": "2020-09-25T11:40:35Z", "readme_sha256": "fea2fcfad5a7be1b10daea26fcedf69ef9307d56101163b0329c98de92e5967e", "readme_url": "https://github.com/vallejocc/Reverse-Engineering-Arsenal/blob/master/README.md", "stars": 183, "targets": [ "binary" ], "topics": [ "ida-plugin", "scripts", "windbg" ], "url": "https://github.com/vallejocc/Reverse-Engineering-Arsenal", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "MIPS instruction decoder", "description_language": "bilingual", "description_zh": "MIPS 指令解码器", "full_name": "Decompollaborate/rabbitizer", "id": "scan-499600845", "license": "MIT", "observed_at": "2026-10-16T01:36:16.336523Z", "pushed_at": "2026-05-29T11:53:14Z", "readme_sha256": "db51ce881cdc77101f350d7ba588717b6e0ee993960186753c3c6faf76d21d91", "readme_url": "https://github.com/Decompollaborate/rabbitizer/blob/1.x/README.md", "stars": 182, "targets": [ "binary", "game" ], "topics": [ "disassembler", "mips-assembly", "python" ], "url": "https://github.com/Decompollaborate/rabbitizer", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Slides & Hands-on for the reverse engineering workshop", "description_language": "bilingual", "description_zh": "逆向工程工作坊的幻灯片及实践材料", "full_name": "romainthomas/reverse-engineering-workshop", "id": "scan-574360946", "license": null, "observed_at": "2026-10-16T01:35:50.039239Z", "pushed_at": "2022-12-05T06:30:53Z", "readme_sha256": "b2e3b7980a7295cbb8c66cfd1a57faf237f61fc31977b81d825cfd34254852e2", "readme_url": "https://github.com/romainthomas/reverse-engineering-workshop/blob/main/README.md", "stars": 182, "targets": [ "binary" ], "topics": [ "ghidra", "linux", "reverse-engineering", "workshop-materials", "x86-64" ], "url": "https://github.com/romainthomas/reverse-engineering-workshop", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Automatically identify and extract potential anti-debugging techniques used by malware.", "description_language": "bilingual", "description_zh": "自动识别并提取恶意软件可能使用的反调试技术。", "full_name": "LAC-Japan/IDA_Plugin_AntiDebugSeeker", "id": "scan-689837979", "license": "BSD-3-Clause", "observed_at": "2026-10-16T01:35:55.278983Z", "pushed_at": "2024-11-22T03:45:20Z", "readme_sha256": "3b6292418680cb66efc85ac03cfb5c020336a51ec8a60b2a33f515fb0ac7f24e", "readme_url": "https://github.com/LAC-Japan/IDA_Plugin_AntiDebugSeeker/blob/main/README.md", "stars": 181, "targets": [ "binary" ], "topics": [ "anti-debugging", "ida", "ida-plugin", "idapython-plugin", "malware-analysis", "reverse-engineering" ], "url": "https://github.com/LAC-Japan/IDA_Plugin_AntiDebugSeeker", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Let's document Emacs Lisp Bytecode (Lisp Assembly Program) instructions", "description_language": "bilingual", "description_zh": "一起记录 Emacs Lisp 字节码（Lisp 汇编程序）指令", "full_name": "rocky/elisp-bytecode", "id": "scan-114708437", "license": null, "observed_at": "2026-10-16T01:36:11.938270Z", "pushed_at": "2025-04-27T10:18:03Z", "readme_sha256": "13b5949a9249c0b9af5ec55d117c1c8149100fa5fcd543a832789a21b20b3de5", "readme_url": "https://github.com/rocky/elisp-bytecode/blob/master/README.md", "stars": 181, "targets": [ "binary" ], "topics": [ "bytecode", "decompiler", "elisp", "gnu-emacs" ], "url": "https://github.com/rocky/elisp-bytecode", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "PE32 (x86) and PE32+ (x64) binaries analysis tool, resources viewer/extractor.", "description_language": "bilingual", "description_zh": "PE32（x86）和 PE32+（x64）二进制分析工具及资源查看/提取器。", "full_name": "jovibor/Pepper", "id": "scan-128361757", "license": "Apache-2.0", "observed_at": "2026-10-16T01:35:44.734658Z", "pushed_at": "2026-08-04T06:01:43Z", "readme_sha256": "c2ea7a56692ce297ebb958564dd8ada50c699a2471d28aa66c18d6b073a02b06", "readme_url": "https://github.com/jovibor/Pepper/blob/master/README.md", "stars": 179, "targets": [ "binary" ], "topics": [ "binary-analysis", "files-viewer", "pe", "pe-analyzer", "pe-file", "pe-format", "pe-viewer", "pepper", "portable-executable", "viewer" ], "url": "https://github.com/jovibor/Pepper", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A multiline (and ultimate) assembler (and disassembler) plugin for x64dbg and OllyDbg. A perfect tool for modifying and extending a compiled executable functionality.", "description_language": "bilingual", "description_zh": "供 x64dbg 和 OllyDbg 使用的多行（终极）汇编器（及反汇编器）插件。用于修改和扩展已编译可执行文件功能的理想工具。", "full_name": "m417z/Multiline-Ultimate-Assembler", "id": "scan-491969147", "license": "GPL-3.0", "observed_at": "2026-10-18T14:38:57.582003Z", "pushed_at": "2026-08-29T16:56:27Z", "readme_sha256": "74876198b0b2e4b7fe5028c42470e5b363459e04c25028826f62fe16291f267b", "readme_url": "https://github.com/m417z/Multiline-Ultimate-Assembler/blob/e4ba2d74d2766fb45690a08fb3fb0be1c44072ec/README.md", "stars": 179, "targets": [ "binary" ], "topics": [ "assembler", "ollydbg", "ollydbg-plugin", "reverse-engineering", "x64dbg", "x64dbg-plugin" ], "url": "https://github.com/m417z/Multiline-Ultimate-Assembler", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "An IDA MIPS static scanning script to assist assembly-code auditing.", "description_language": "bilingual", "description_zh": "IDA MIPS 静态扫描脚本，辅助汇编代码审计。", "full_name": "giantbranch/mipsAudit", "id": "scan-190311004", "license": null, "observed_at": "2026-10-16T01:35:55.393802Z", "pushed_at": "2026-07-06T01:15:12Z", "readme_sha256": "f30133a165ec41eb7f7491086c0bf85959fca0247bdc8039714b86347eaa5898", "readme_url": "https://github.com/giantbranch/mipsAudit/blob/master/README.md", "stars": 175, "targets": [ "binary" ], "topics": [ "ida-mips", "ida-plugin", "idapython", "mipsaudit" ], "url": "https://github.com/giantbranch/mipsAudit", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "DelphiHelper is a python IDA Pro plugin aiming to help the analysis of x86/x86_64 binaries written in Delphi programming language.", "description_language": "bilingual", "description_zh": "DelphiHelper 是 Python 编写的 IDA Pro 插件，用于辅助分析 Delphi 编写的 x86/x86_64 二进制文件。", "full_name": "eset/DelphiHelper", "id": "scan-905920450", "license": "NOASSERTION", "observed_at": "2026-10-16T01:35:55.590789Z", "pushed_at": "2026-08-26T18:59:02Z", "readme_sha256": "29719f8d75b7ef3624e17d8b072e02e2140256d36cdfbf4fe8cd1a1962afecae", "readme_url": "https://github.com/eset/DelphiHelper/blob/github/README.md", "stars": 174, "targets": [ "binary" ], "topics": [ "delphi", "ida", "ida-plugin", "ida-pro", "idapro", "idapython", "python" ], "url": "https://github.com/eset/DelphiHelper", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Library for parsing internal structures of PE32/PE32+ binary files.", "description_language": "bilingual", "description_zh": "用于解析 PE32/PE32+ 二进制文件内部结构的库。", "full_name": "jovibor/libpe", "id": "scan-125597762", "license": "MIT", "observed_at": "2026-10-16T01:35:44.802759Z", "pushed_at": "2026-02-08T04:58:14Z", "readme_sha256": "c62c5a14e5167aeacef9ce3a971f9118449da264fc7114f66e29016258ed8234", "readme_url": "https://github.com/jovibor/libpe/blob/master/README.md", "stars": 174, "targets": [ "binary" ], "topics": [ "binary-analysis", "pe-analyzer", "pe-file", "pe-format", "portable-executable" ], "url": "https://github.com/jovibor/libpe", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Modern dark theme based on the original ghidra-dark", "description_language": "bilingual", "description_zh": "基于原版 ghidra-dark 的现代深色主题", "full_name": "zackelia/ghidra-dark-theme", "id": "scan-634072214", "license": "MIT", "observed_at": "2026-10-16T01:35:50.084716Z", "pushed_at": "2023-04-29T02:19:43Z", "readme_sha256": "d9183e09c7fc6dd0a1fa77603af6d37d8f1969d1f59a5659c14c44c4aad4a578", "readme_url": "https://github.com/zackelia/ghidra-dark-theme/blob/main/README.md", "stars": 174, "targets": [ "binary" ], "topics": [ "dark-theme", "ghidra", "ghidra-dark", "reverse-engineering" ], "url": "https://github.com/zackelia/ghidra-dark-theme", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Reverse engineering of Panzer Dragoon Saga", "description_language": "bilingual", "description_zh": "Panzer Dragoon Saga 逆向工程项目", "full_name": "yaz0r/Azel", "id": "scan-882546688", "license": "MIT", "observed_at": "2026-10-16T01:35:50.123037Z", "pushed_at": "2026-09-07T06:59:36Z", "readme_sha256": "04a09ca2c50df5127c65f2071978272c9fe4632fb741a55a492a315c94c9f095", "readme_url": "https://github.com/yaz0r/Azel/blob/master/README.md", "stars": 173, "targets": [ "binary" ], "topics": [ "decompilation", "ghidra", "sega-saturn" ], "url": "https://github.com/yaz0r/Azel", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Deep memory analysis for Windows processes — the tool that saves you hours of debugging", "description_language": "bilingual", "description_zh": "深入分析 Windows 进程内存，帮助节省数小时调试时间的工具", "full_name": "AlexanderBagel/ProcessMemoryMap", "id": "scan-12871885", "license": "MPL-2.0", "observed_at": "2026-10-16T01:35:44.887843Z", "pushed_at": "2026-09-10T03:01:15Z", "readme_sha256": "b96d367503ef8625fe9f38a8ad3df4017077fd1e295b3cacb46b972e5a55990e", "readme_url": "https://github.com/AlexanderBagel/ProcessMemoryMap/blob/master/README.md", "stars": 172, "targets": [ "binary" ], "topics": [ "analyzer", "binary-analysis", "delphi", "dissassembler", "memory-analysis", "pe-format", "reverse-engineering", "windows-internals" ], "url": "https://github.com/AlexanderBagel/ProcessMemoryMap", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "An unofficial implementation of asm2vec as a standalone python package", "description_language": "bilingual", "description_zh": "以独立 Python 包提供的非官方 asm2vec 实现", "full_name": "Lancern/asm2vec", "id": "scan-205378674", "license": null, "observed_at": "2026-10-16T01:35:45.064831Z", "pushed_at": "2021-01-29T21:55:59Z", "readme_sha256": "a334a1f3faed0ebfddc6d32f54f0e37a9536a9411599fe478aa2da76d3583f8d", "readme_url": "https://github.com/Lancern/asm2vec/blob/master/README.md", "stars": 172, "targets": [ "binary" ], "topics": [ "asm2vec", "binary-analysis", "machine-learning", "nlp", "numpy", "python", "python3", "unofficial", "word2vec" ], "url": "https://github.com/Lancern/asm2vec", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A six-stage orchestration skill for mobile security analysis, coordinating APK static reconnaissance, traffic-to-code alignment, in-depth SO/JNI analysis, combined cryptography and vulnerability analysis, validation design, and report delivery. Supports JADX MCP, Burp/Yakit MCP, and IDA/Ghidra MCP.", "description_language": "bilingual", "description_zh": "面向移动安全分析的六阶段总控技能，统一调度 APK 静态侦察、流量与代码对齐、SO/JNI 深度分析、加密与漏洞综合分析、验证设计及报告交付，支持 JADX MCP、Burp/Yakit MCP、IDA/Ghidra MCP。", "full_name": "Fausto-404/ai-mobile-reverse-skills", "id": "scan-1215983140", "license": "MIT", "observed_at": "2026-10-16T01:36:26.569597Z", "pushed_at": "2026-08-14T15:43:12Z", "readme_sha256": "91f1c3b0b846290026d12b49186a5d895ca0c4ae86b39ddea2fd00b5d27bfc46", "readme_url": "https://github.com/Fausto-404/ai-mobile-reverse-skills/blob/main/README.md", "stars": 171, "targets": [ "app", "binary" ], "topics": [ "android-reverse-engineering", "burp", "ghhidra", "ida", "jadx", "mobile-security", "skills", "vulnerability-analysis" ], "url": "https://github.com/Fausto-404/ai-mobile-reverse-skills", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Reverse engineering TikTok's JavaScript VM - 77 opcodes mapped, string deobfuscation, bytecode disassembly, and crypto function identification. Educational VM analysis toolkit.", "description_language": "bilingual", "description_zh": "逆向分析 TikTok 的 JavaScript 虚拟机，已映射 77 个操作码，支持字符串去混淆、字节码反汇编及密码函数识别。面向教学的虚拟机分析工具包。", "full_name": "notemrovsky/tiktok-reverse-engineering", "id": "scan-1000781665", "license": null, "observed_at": "2026-10-16T01:36:49.308343Z", "pushed_at": "2026-07-13T14:11:10Z", "readme_sha256": "c238efc4d66cc45b801bff12f3cc6474f23f5b1ff805c907f0ef636774895c89", "readme_url": "https://github.com/notemrovsky/tiktok-reverse-engineering/blob/main/README.md", "stars": 167, "targets": [ "binary" ], "topics": [ "anti-bot", "bytecode", "deobfuscation", "devirtualization", "disassembly", "educational", "javascript", "opcodes", "protection-bypass", "research-tool", "reverse-engineering", "reverse-engineering-tools", "security-research", "stack-machine", "static-analysis", "tiktok", "virtual-machine", "vm-analysis", "x-bogus" ], "url": "https://github.com/notemrovsky/tiktok-reverse-engineering", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Library and tool for reading IDApro databases.", "description_language": "bilingual", "description_zh": "用于读取 IDApro 数据库的库和工具。", "full_name": "nlitsme/idbutil", "id": "scan-93574736", "license": "MIT", "observed_at": "2026-10-18T14:37:54.632571Z", "pushed_at": "2023-11-08T14:03:56Z", "readme_sha256": "b68def8aa20bb98835acb94b2897b04e32c1472d21cd8ea253b018449d480a5a", "readme_url": "https://github.com/nlitsme/idbutil/blob/52603ccb954e0e658a933c2d212659c64a8c06d5/README.md", "stars": 165, "targets": [ "binary" ], "topics": [ "ida-databases", "idapro", "reverse-engineering" ], "url": "https://github.com/nlitsme/idbutil", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A suite of tools for creating disassemblies of ZX Spectrum games.", "description_language": "bilingual", "description_zh": "用于创建 ZX Spectrum 游戏反汇编的工具套件。", "full_name": "skoolkid/skoolkit", "id": "scan-8686958", "license": "GPL-3.0", "observed_at": "2026-10-16T01:36:16.448264Z", "pushed_at": "2026-10-09T20:34:02Z", "readme_sha256": "dbf80fdc220ca971e8a40a5ee6726eb5a6dce2b7d9fe9a82c84714e3f0f816a1", "readme_url": "https://github.com/skoolkid/skoolkit/blob/master/README.md", "stars": 165, "targets": [ "binary", "game" ], "topics": [ "disassembler", "zx-spectrum" ], "url": "https://github.com/skoolkid/skoolkit", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Control-flow-flattening and string deobfuscator", "description_language": "bilingual", "description_zh": "控制流平坦化与字符串去混淆工具", "full_name": "eset/stadeo", "id": "scan-279655130", "license": "NOASSERTION", "observed_at": "2026-10-16T01:36:49.457238Z", "pushed_at": "2021-11-08T11:33:30Z", "readme_sha256": "e010f88016286fa9b8f29f5a85729cfba06d9bdf9f73069986a72727e4dbd748", "readme_url": "https://github.com/eset/stadeo/blob/master/README.md", "stars": 164, "targets": [ "binary" ], "topics": [ "control-flow", "deobfuscation", "deobfuscator", "emotet", "ida", "ida-pro", "idapython", "malware", "miasm", "python", "reverse-engineering", "stantinko", "strings" ], "url": "https://github.com/eset/stadeo", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "AI-Powered Malware Analysis & Threat Intelligence for Ghidra Transform your static analysis workflow with cutting-edge AI capabilities, comprehensive malware detection, and advanced threat intelligence.", "description_language": "bilingual", "description_zh": "面向 Ghidra 的 AI 恶意软件分析与威胁情报工具，以前沿 AI 能力、全面的恶意软件检测和高级威胁情报改进静态分析工作流。", "full_name": "securityjoes/AskJOE", "id": "scan-627619840", "license": "GPL-2.0", "observed_at": "2026-10-16T01:35:50.317396Z", "pushed_at": "2026-03-10T15:17:37Z", "readme_sha256": "a308348ea631affe2ab0199e03a5feb44b761b87e2e60307f0c91938613e0e53", "readme_url": "https://github.com/securityjoes/AskJOE/blob/main/README.md", "stars": 164, "targets": [ "binary" ], "topics": [ "automation", "claude-ai", "ghidra", "malware-analysis", "openai", "plugin", "reversing" ], "url": "https://github.com/securityjoes/AskJOE", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "RevEng.AI IDA Pro Plugin", "description_language": "bilingual", "description_zh": "RevEng.AI 的 IDA Pro 插件", "full_name": "RevEngAI/plugin-ida", "id": "scan-676591523", "license": "GPL-3.0", "observed_at": "2026-10-16T01:35:55.637536Z", "pushed_at": "2026-09-19T09:02:51Z", "readme_sha256": "b6b12d43efdfb5e8a4fdfbe6a8138fe43d3006b97fda02509ccdd72b04a2f308", "readme_url": "https://github.com/RevEngAI/plugin-ida/blob/main/README.md", "stars": 163, "targets": [ "binary" ], "topics": [ "artificial-intelligence", "exploit-development", "ida-plugin", "reverse-engineering", "vulnerability-research" ], "url": "https://github.com/RevEngAI/plugin-ida", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Disassembler for Windows executables. Supports 16-bit NE (New Executable), MZ (DOS), and PE (Portable Executable, i.e. Win32) files.", "description_language": "bilingual", "description_zh": "Windows 可执行文件反汇编器，支持 16 位 NE（New Executable）、MZ（DOS）和 PE（Portable Executable，即 Win32）文件。", "full_name": "zfigura/semblance", "id": "scan-100331799", "license": "GPL-3.0", "observed_at": "2026-10-16T01:36:16.579948Z", "pushed_at": "2024-02-10T11:34:39Z", "readme_sha256": "bb65b27a81d49bf5360ce28b5f8cd310efe9ece89a7d9b153fd2afb727054e7b", "readme_url": "https://github.com/zfigura/semblance/blob/master/README", "stars": 163, "targets": [ "binary" ], "topics": [ "16-bit", "disassembler", "msdos", "new-executable", "portable-executable", "windows" ], "url": "https://github.com/zfigura/semblance", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Yet another IDA Pro/Home plugin for deobfuscating stack strings", "description_language": "bilingual", "description_zh": "又一个用于对栈字符串去混淆的 IDA Pro/Home 插件", "full_name": "SamuelTulach/unxorer", "id": "scan-1025151712", "license": "NOASSERTION", "observed_at": "2026-10-16T01:35:55.738148Z", "pushed_at": "2026-03-06T22:26:58Z", "readme_sha256": "f3d934c6187f30257a837a3bd340147b3fb79fbb291c99152f9eaaf37ff16197", "readme_url": "https://github.com/SamuelTulach/unxorer/blob/main/README.md", "stars": 162, "targets": [ "binary" ], "topics": [ "ida", "ida-plugin", "ida-pro", "idalib" ], "url": "https://github.com/SamuelTulach/unxorer", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A python library for reading IDA pro databases.", "description_language": "bilingual", "description_zh": "用于读取 IDA pro 数据库的 Python 库。", "full_name": "nlitsme/pyidbutil", "id": "scan-80163829", "license": "MIT", "observed_at": "2026-10-18T14:37:54.632930Z", "pushed_at": "2025-03-07T09:18:05Z", "readme_sha256": "80be82cda7363dd19420aa8b83ce97566bbc8ecadaf9cdf29105e133490fa46d", "readme_url": "https://github.com/nlitsme/pyidbutil/blob/e77d0e79e5c11507a207d503883dcccd15f9c696/README.md", "stars": 161, "targets": [ "binary" ], "topics": [ "ida-databases", "idapro", "reverse-engineering" ], "url": "https://github.com/nlitsme/pyidbutil", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Make your Ghidra Lazy!", "description_language": "bilingual", "description_zh": "让你的 Ghidra 也能“偷懒”！", "full_name": "AllsafeCyberSecurity/LazyGhidra", "id": "scan-205628404", "license": "MIT", "observed_at": "2026-10-16T01:35:50.345278Z", "pushed_at": "2020-08-27T04:50:17Z", "readme_sha256": "0e23abe055f030ab0db78572324818be89ae73a5db386c9d3407f1a01d003261", "readme_url": "https://github.com/AllsafeCyberSecurity/LazyGhidra/blob/master/README.md", "stars": 159, "targets": [ "binary" ], "topics": [ "ghidra", "python", "reverse-engineering" ], "url": "https://github.com/AllsafeCyberSecurity/LazyGhidra", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A binary to LLVM translator", "description_language": "bilingual", "description_zh": "将二进制代码转换为 LLVM 的工具", "full_name": "cojocar/bin2llvm", "id": "scan-91162880", "license": "Apache-2.0", "observed_at": "2026-10-16T01:36:16.623182Z", "pushed_at": "2018-06-05T12:46:08Z", "readme_sha256": "97e5a1c171e20f6ab0cfc4c267da4c837cec82fe00208e3f13f4e7019b54b37e", "readme_url": "https://github.com/cojocar/bin2llvm/blob/master/README.md", "stars": 159, "targets": [ "binary" ], "topics": [ "arm", "binary-translation", "disassembler", "llvm", "reverse-engineering" ], "url": "https://github.com/cojocar/bin2llvm", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Python Command-Line Ghidra Decompiler", "description_language": "bilingual", "description_zh": "基于 Python 命令行的 Ghidra 反编译器", "full_name": "clearbluejar/ghidrecomp", "id": "scan-601290837", "license": "GPL-3.0", "observed_at": "2026-10-16T01:35:50.408933Z", "pushed_at": "2026-01-06T16:56:55Z", "readme_sha256": "a16362575c94c80f3ddcfc4111f6e9578ef153630342d8f951a9271d5309f80d", "readme_url": "https://github.com/clearbluejar/ghidrecomp/blob/main/README.md", "stars": 158, "targets": [ "binary" ], "topics": [ "decompiler", "disassembler", "ghidra", "python" ], "url": "https://github.com/clearbluejar/ghidrecomp", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Classic Mac OS resource fork and application disassembler, with reverse-engineering tools for specific applications", "description_language": "bilingual", "description_zh": "经典 Mac OS 资源分支与应用程序反汇编器，附面向特定应用的逆向工程工具", "full_name": "fuzziqersoftware/resource_dasm", "id": "scan-103856399", "license": "MIT", "observed_at": "2026-10-16T01:36:16.880485Z", "pushed_at": "2026-10-15T04:25:58Z", "readme_sha256": "39bdba71949fc635a7db7d5b7980848268c9d149d69673e508c411ac772cc506", "readme_url": "https://github.com/fuzziqersoftware/resource_dasm/blob/master/README.md", "stars": 158, "targets": [ "app", "binary" ], "topics": [ "classic-mac-os", "disassembler", "hypercard", "resource-fork", "reverse-engineering", "soundmusicsys", "sprites" ], "url": "https://github.com/fuzziqersoftware/resource_dasm", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "WIP Decompilation of Kirby & The Amazing Mirror (USA)", "description_language": "bilingual", "description_zh": "《星之卡比：镜之大迷宫》美版反编译项目，仍在开发中", "full_name": "jiangzhengwenjz/katam", "id": "scan-233182819", "license": null, "observed_at": "2026-10-16T01:36:43.535563Z", "pushed_at": "2026-09-17T15:40:10Z", "readme_sha256": "aabddc65f8b876b8cd833c51e153b5f3f394e178b6ca0e6dfa2b2b162d593bcc", "readme_url": "https://github.com/jiangzhengwenjz/katam/blob/master/README.md", "stars": 158, "targets": [ "binary" ], "topics": [ "assembly", "c", "decompilation", "gameboy-advance", "kirby", "reverse-engineering" ], "url": "https://github.com/jiangzhengwenjz/katam", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "This repository contains writeups for various CTFs I've participated in (Including Hack The Box).", "description_language": "bilingual", "description_zh": "本仓库收录我参加的各种 CTF 的解题报告，包括 Hack The Box。", "full_name": "evyatar9/Writeups", "id": "scan-352782827", "license": null, "observed_at": "2026-10-16T01:35:50.511403Z", "pushed_at": "2025-11-22T00:08:15Z", "readme_sha256": "00cacc0ce1237bfcc214f390593cb9209c936d56e9c5b8e938b6a1937152b8a7", "readme_url": "https://github.com/evyatar9/Writeups/blob/master/README.md", "stars": 157, "targets": [ "binary" ], "topics": [ "ctfs", "cve", "cyber", "cyberattack", "cybersecurity", "enumeration", "exploitation", "ghidra", "hacking", "hackthebox", "linux", "payload", "penetration-testing", "pentest", "privilege-escalation", "pwn", "reverse-engineering", "security", "vulnerabilities", "windows" ], "url": "https://github.com/evyatar9/Writeups", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Graphical disassembler for multiple architectures for easy navigation", "description_language": "bilingual", "description_zh": "支持多种架构、便于浏览的图形化反汇编器", "full_name": "SimonKagstrom/emilpro", "id": "scan-7177473", "license": "MIT", "observed_at": "2026-10-16T01:36:16.878761Z", "pushed_at": "2025-04-25T14:18:21Z", "readme_sha256": "40e7dd855333e7dfb975cbd57f6dff78fe9b7468e322a5a0dcf584fb2f7f3d12", "readme_url": "https://github.com/SimonKagstrom/emilpro/blob/master/README.md", "stars": 157, "targets": [ "binary" ], "topics": [ "disassembler", "disassembly", "reverse-engineering" ], "url": "https://github.com/SimonKagstrom/emilpro", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "REmatch, a complete binary diffing framework that is free and strives to be open source and community driven.", "description_language": "bilingual", "description_zh": "REmatch 是完整、免费的二进制差异比对框架，致力于开源和社区驱动。", "full_name": "nirizr/rematch", "id": "scan-65547773", "license": "GPL-3.0", "observed_at": "2026-10-16T01:35:55.698391Z", "pushed_at": "2018-11-29T01:05:16Z", "readme_sha256": "bd7d2eea8b380d14b260cb8f75c523ddbda0195a807e1c2bd91134484912be8b", "readme_url": "https://github.com/nirizr/rematch/blob/master/README.rst", "stars": 156, "targets": [ "binary" ], "topics": [ "binary-analysis", "binary-diffing", "function-level-diffing", "ida", "ida-plugin", "ida-pro", "idb", "python", "reverse-engineering", "reverse-engineers" ], "url": "https://github.com/nirizr/rematch", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A Ghidra script that enables the analysis of selected functions and instructions using Large Language Models (LLMs). It aims to make reverse-engineering more efficient by using Ollama's API directly within Ghidra.", "description_language": "bilingual", "description_zh": "通过大型语言模型（LLM）分析所选函数和指令的 Ghidra 脚本，直接在 Ghidra 中调用 Ollama API，以提高逆向工程效率。", "full_name": "lr-m/GhidrOllama", "id": "scan-707888949", "license": null, "observed_at": "2026-10-16T01:35:50.551748Z", "pushed_at": "2024-11-29T19:53:35Z", "readme_sha256": "39bf7d6284c5d1638869e3443182b2404d34a5d7ccb8c7e37e26db2a8cd5c714", "readme_url": "https://github.com/lr-m/GhidrOllama/blob/main/README.md", "stars": 155, "targets": [ "binary" ], "topics": [ "ghidra", "ghidra-scripts", "llm", "ollama", "plugin", "reverse-engineering" ], "url": "https://github.com/lr-m/GhidrOllama", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A Java Class File Disassembler", "description_language": "bilingual", "description_zh": "Java Class 文件反汇编器", "full_name": "tinylcy/ClassAnalyzer", "id": "scan-81219015", "license": "MIT", "observed_at": "2026-10-16T01:36:16.952688Z", "pushed_at": "2023-07-23T08:20:50Z", "readme_sha256": "052bd37fd5b2917ba924298dfdb1a57573baf95e795c1af1f931f672eeac86a4", "readme_url": "https://github.com/tinylcy/ClassAnalyzer/blob/master/README.md", "stars": 155, "targets": [ "binary" ], "topics": [ "class", "disassembler", "java" ], "url": "https://github.com/tinylcy/ClassAnalyzer", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "IDA Plugin that fills in missing indirect CALL & JMP target information", "description_language": "bilingual", "description_zh": "补全间接 CALL 和 JMP 目标信息的 IDA 插件", "full_name": "kweatherman/ida_missinglink", "id": "scan-571036623", "license": "MIT", "observed_at": "2026-10-16T01:35:55.897933Z", "pushed_at": "2026-02-15T13:22:33Z", "readme_sha256": "3e930db6b3b268fd989b06447315859c249dfc8d52e3043cb4a26d2ed024f503", "readme_url": "https://github.com/kweatherman/ida_missinglink/blob/master/README.md", "stars": 153, "targets": [ "binary" ], "topics": [ "ida-plugin", "reverse-engineering" ], "url": "https://github.com/kweatherman/ida_missinglink", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "\"Just Another ReVersIng Suite\" or whatever other bullshit you can think of ", "description_language": "bilingual", "description_zh": "“又一个逆向工程套件”，或者随便你想到的其他扯淡说法", "full_name": "carlosgprado/JARVIS", "id": "scan-35937777", "license": null, "observed_at": "2026-10-16T01:35:55.963219Z", "pushed_at": "2023-04-28T06:02:25Z", "readme_sha256": "f691ba97d627650f5294dab5e6ed773d4e269e9d5356a8d81fe26f4149e63978", "readme_url": "https://github.com/carlosgprado/JARVIS/blob/master/README.md", "stars": 151, "targets": [ "binary" ], "topics": [ "ida", "ida-plugin", "idapython-plugin", "pintool", "pyside", "reverse-engineering" ], "url": "https://github.com/carlosgprado/JARVIS", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Automatic vtable detection, inheritance analysis, and function override tracking for reverse engineering compiled C++ binaries. Supports IDA Pro 9+ on any OS", "description_language": "bilingual", "description_zh": "面向已编译 C++ 二进制文件逆向工程的自动虚表检测、继承分析和函数重写追踪工具，支持任意操作系统上的 IDA Pro 9+", "full_name": "K4ryuu/IDA-VTableExplorer", "id": "scan-1097540286", "license": "MIT", "observed_at": "2026-10-16T01:35:55.971277Z", "pushed_at": "2026-03-13T12:27:52Z", "readme_sha256": "563b27a2cb58c8f26fb20c7fe82e4dd4ed188a3e4533dc2868adcd1b4b3e8d0d", "readme_url": "https://github.com/K4ryuu/IDA-VTableExplorer/blob/main/README.md", "stars": 149, "targets": [ "binary" ], "topics": [ "ida", "ida-plugin", "reverse-engineering", "vtable" ], "url": "https://github.com/K4ryuu/IDA-VTableExplorer", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Portable modification of IDA Pro for macOS.", "description_language": "bilingual", "description_zh": "IDA Pro for macOS 绿化。", "full_name": "feicong/ida_for_mac_green", "id": "scan-100366042", "license": "AGPL-3.0", "observed_at": "2026-10-18T14:37:54.633112Z", "pushed_at": "2017-10-09T08:37:02Z", "readme_sha256": "5ccb354fb2a6ed34e1de56951bf58bd69c70c9e603fa17aa2008812224755691", "readme_url": "https://github.com/feicong/ida_for_mac_green/blob/5c256398100688125e957fac45630da0802ee1f7/README.md", "stars": 148, "targets": [ "binary" ], "topics": [ "idapro", "reverse-engineering", "software-engineering" ], "url": "https://github.com/feicong/ida_for_mac_green", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "BINNY: an open source agent harness for reverse engineering. Plug in any model, or a local one.", "description_language": "bilingual", "description_zh": "BINNY：用于逆向工程的开源智能体运行框架。可接入任意模型，也可使用本地模型。", "full_name": "openbin-ai/binny", "id": "scan-1412775677", "license": "AGPL-3.0", "observed_at": "2026-10-18T14:35:50.489728Z", "pushed_at": "2026-10-17T16:28:23Z", "readme_sha256": "45aa8ae8439ffb462e7b5f4252f09444b31c26314ded527be7e307159937c47d", "readme_url": "https://github.com/openbin-ai/binny/blob/000b6aca8c9d266b38252470102ac16c98575cd8/README.md", "stars": 148, "targets": [ "app", "binary", "firmware" ], "topics": [ "ghidra", "llm-agent", "malware-analysis", "ollama", "reverse-engineering", "security-research" ], "url": "https://github.com/openbin-ai/binny", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "CERT Kaiju is a binary analysis framework extension for the Ghidra software reverse engineering suite. This repository is a \"mirror\" -- please file tickets, bug reports, or pull requests at the upstream home in @CERTCC: https://github.com/certcc/kaiju", "description_language": "bilingual", "description_zh": "CERT Kaiju 是 Ghidra 软件逆向工程套件的二进制分析框架扩展。本仓库为镜像，请到 @CERTCC 的上游仓库提交工单、错误报告或拉取请求：https://github.com/certcc/kaiju", "full_name": "cmu-sei/kaiju", "id": "scan-336323310", "license": "NOASSERTION", "observed_at": "2026-10-16T01:35:50.725313Z", "pushed_at": "2026-03-09T16:00:03Z", "readme_sha256": "9a6c68252aad019ffc7cd4e6ed0a1009c4d03fe76c40a779ac433937f17b2024", "readme_url": "https://github.com/cmu-sei/kaiju/blob/main/README.md", "stars": 147, "targets": [ "binary" ], "topics": [ "binary-analysis", "ghidra", "reverse-engineering" ], "url": "https://github.com/cmu-sei/kaiju", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "hotspot disassembler hsdis", "description_language": "bilingual", "description_zh": "HotSpot 反汇编器 hsdis", "full_name": "liuzhengyang/hsdis", "id": "scan-92258627", "license": null, "observed_at": "2026-10-16T01:36:17.147521Z", "pushed_at": "2023-02-13T11:33:16Z", "readme_sha256": "ffc85e6ec66183ce1cfa118dea95ff7888b451c41ebea1cab4613208cff3bd93", "readme_url": "https://github.com/liuzhengyang/hsdis/blob/master/README.md", "stars": 147, "targets": [ "binary" ], "topics": [ "disassembler", "hotspot", "hsdis", "java", "openjdk" ], "url": "https://github.com/liuzhengyang/hsdis", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "An improved nm + Objective-C & Swift class-dump", "description_language": "bilingual", "description_zh": "增强版 nm 与 Objective-C、Swift 类转储工具", "full_name": "paradiseduo/dsdump", "id": "scan-321914368", "license": null, "observed_at": "2026-10-16T01:35:56.122430Z", "pushed_at": "2023-11-20T12:52:32Z", "readme_sha256": "70f63ed33fdd5e26a94ee4aa0fd6a49d2df353496de36c04b95d373495e2333f", "readme_url": "https://github.com/paradiseduo/dsdump/blob/main/README.md", "stars": 146, "targets": [ "binary" ], "topics": [ "class", "class-dump", "class-dump-swift", "dnsdumpster", "dump", "ida-plugin", "objective-c", "swift" ], "url": "https://github.com/paradiseduo/dsdump", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Package Manager for Radare2", "description_language": "bilingual", "description_zh": "Radare2 包管理器", "full_name": "radareorg/radare2-pm", "id": "scan-60208982", "license": null, "observed_at": "2026-10-16T01:37:05.119459Z", "pushed_at": "2026-10-12T20:27:01Z", "readme_sha256": "0d02e4b31ed9156cd52b863b6c8ef1e0ba9cb243cbe9d65251d12de2f0398af3", "readme_url": "https://github.com/radareorg/radare2-pm/blob/master/README.md", "stars": 146, "targets": [ "binary" ], "topics": [ "r2pm", "radare2" ], "url": "https://github.com/radareorg/radare2-pm", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Some useful books related to Cybersecurity, Linux and more.", "description_language": "bilingual", "description_zh": "网络安全、Linux 等领域的一些实用书籍。", "full_name": "0x00ctrl/CyberSec-Books", "id": "scan-832587199", "license": null, "observed_at": "2026-10-16T01:35:50.760253Z", "pushed_at": "2026-10-05T10:44:01Z", "readme_sha256": "b80df96bd168ad5db0c522c7799470fa6ac4d85332155405f58fe36243352875", "readme_url": "https://github.com/0x00ctrl/CyberSec-Books/blob/main/README.md", "stars": 145, "targets": [ "binary" ], "topics": [ "bash-scripting", "car-hacking", "computer-organisation-architechure", "cryptography", "cybercrime", "cybersecurity", "ddos", "digital-forensics", "digital-privacy", "ethereum", "evasion-techniques", "ghidra", "linux", "malware-development", "network-programming", "penetration-testing", "satellite-operations", "shell-scripting", "space-cybersecurity", "x86-assembly" ], "url": "https://github.com/0x00ctrl/CyberSec-Books", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "IDA plugin to pinpoint obfuscated code", "description_language": "bilingual", "description_zh": "精确定位混淆代码的 IDA 插件", "full_name": "mcdulltii/obfDetect", "id": "scan-397230271", "license": "GPL-3.0", "observed_at": "2026-10-16T01:35:56.237609Z", "pushed_at": "2022-04-29T15:57:07Z", "readme_sha256": "f22b871afc0a8e008fb723cace98c2eebaf9805f71d8d318ed5158085abdce44", "readme_url": "https://github.com/mcdulltii/obfDetect/blob/master/README.md", "stars": 145, "targets": [ "binary" ], "topics": [ "ida", "ida-plugin", "ida-pro", "idapython", "idapython-plugin", "obfuscation-detection" ], "url": "https://github.com/mcdulltii/obfDetect", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A Python Bytecode Disassembler helping reverse engineers in dissecting Python binaries by disassembling and analyzing the compiled python byte-code(.pyc) files across all python versions (including Python 3.10.*) ", "description_language": "bilingual", "description_zh": "Python 字节码反汇编器，通过反汇编和分析各个 Python 版本（包括 Python 3.10.*）的已编译字节码（.pyc）文件，帮助逆向工程师剖析 Python 二进制文件。", "full_name": "knight0x07/pyc2bytecode", "id": "scan-447273766", "license": null, "observed_at": "2026-10-16T01:36:17.316012Z", "pushed_at": "2023-05-28T21:24:57Z", "readme_sha256": "e83fb07998c06b2890889b09cabc35145a0ba5491af95fb10c707fea5e5caab1", "readme_url": "https://github.com/knight0x07/pyc2bytecode/blob/main/README.md", "stars": 143, "targets": [ "binary" ], "topics": [ "blueteam", "cybersecurity", "disassembler", "infosec", "infosectools", "malware-analysis", "malware-research", "python", "reverse-engineering", "security-tools", "static-analysis", "threat-intelligence" ], "url": "https://github.com/knight0x07/pyc2bytecode", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Hexrays decompiler plugin that colorizes and filters the decompiler's output based on regular expressions", "description_language": "bilingual", "description_zh": "根据正则表达式为反编译输出着色并进行过滤的 Hex-Rays 插件", "full_name": "patois/xray", "id": "scan-193128220", "license": "NOASSERTION", "observed_at": "2026-10-16T01:36:12.884434Z", "pushed_at": "2023-12-08T16:20:53Z", "readme_sha256": "e712775706d25130aa2ea39f3abb8d95a95defb768c958bae2f478a99a505715", "readme_url": "https://github.com/patois/xray/blob/master/README.md", "stars": 142, "targets": [ "binary" ], "topics": [ "bug-hunting", "decompiler", "filter", "hexrays", "highlight", "ida", "ida-pro", "idapython", "malware-analysis", "plugin", "regular-expression" ], "url": "https://github.com/patois/xray", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Ghidra scripts for recovering string definitions in Go binaries", "description_language": "bilingual", "description_zh": "用于恢复 Go 二进制文件中字符串定义的 Ghidra 脚本", "full_name": "nccgroup/ghostrings", "id": "scan-491991930", "license": "GPL-3.0", "observed_at": "2026-10-16T01:35:50.878075Z", "pushed_at": "2026-05-27T20:15:31Z", "readme_sha256": "d80f9babecca3cd89b1758bae1eee6908903eede54605cf03b9e911fe514692e", "readme_url": "https://github.com/nccgroup/ghostrings/blob/main/README.md", "stars": 141, "targets": [ "binary" ], "topics": [ "ghidra", "ghidra-extension", "ghidra-scripts", "go", "golang", "reverse-engineering" ], "url": "https://github.com/nccgroup/ghostrings", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A collection of over 200 Ghidra themes to make long hours of reverse-engineering even more enjoyable!", "description_language": "bilingual", "description_zh": "超过 200 款 Ghidra 主题合集，让长时间的逆向工程工作更加愉快！", "full_name": "lr-m/Ghidra-Themes", "id": "scan-639957768", "license": null, "observed_at": "2026-10-16T01:35:50.902253Z", "pushed_at": "2024-12-12T21:19:19Z", "readme_sha256": "8e5aeb87d0a6fbfeed503ee930bab4ccac61a47da37bfd4e3e05b4b67898d992", "readme_url": "https://github.com/lr-m/Ghidra-Themes/blob/main/README.md", "stars": 140, "targets": [ "binary" ], "topics": [ "ghidra", "ghidra-theme", "reverse-engineering", "themes" ], "url": "https://github.com/lr-m/Ghidra-Themes", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "For our CCS24 paper 🏆 \"ReSym: Harnessing LLMs to Recover Variable and Data Structure Symbols from Stripped Binaries\" by Danning Xie, Zhuo Zhang, Nan Jiang, Xiangzhe Xu, Lin Tan, and Xiangyu Zhang. 🏆 ACM SIGSAC Distinguished Paper Award Winner", "description_language": "bilingual", "description_zh": "对应我们的 CCS 2024 论文 🏆《ReSym：利用 LLM 从去符号二进制文件中恢复变量与数据结构符号》，作者为 Danning Xie、Zhuo Zhang、Nan Jiang、Xiangzhe Xu、Lin Tan 和 Xiangyu Zhang。🏆 获 ACM SIGSAC 杰出论文奖。", "full_name": "lt-asset/resym", "id": "scan-820114900", "license": "BSD-3-Clause", "observed_at": "2026-10-16T10:47:47.658927Z", "pushed_at": "2025-04-10T01:10:11Z", "readme_sha256": "9ad5bf43b340fe81aaebbcc87eacd6853093c7b3575eeed196afb1c67b5ece8e", "readme_url": "https://github.com/lt-asset/resym/blob/main/README.md", "stars": 139, "targets": [ "binary" ], "topics": [ "binaryanalysis", "llm", "llm4code", "reverseengineering" ], "url": "https://github.com/lt-asset/resym", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Decyx: AI-powered Ghidra extension for enhanced reverse engineering and binary analysis.", "description_language": "bilingual", "description_zh": "Decyx：由 AI 驱动的 Ghidra 扩展，增强逆向工程和二进制分析能力。", "full_name": "philsajdak/decyx", "id": "scan-865724519", "license": "MIT", "observed_at": "2026-10-16T01:35:50.962186Z", "pushed_at": "2026-03-06T20:11:22Z", "readme_sha256": "6aefa57da0bc0df7b84bdec84ae313e3d45da46afff66055940669c8800e510b", "readme_url": "https://github.com/philsajdak/decyx/blob/main/README.md", "stars": 139, "targets": [ "binary" ], "topics": [ "ai", "analysis", "binary", "claude", "ghidra", "ghidra-extension", "ghidra-plugin", "llm", "reverse-engineering" ], "url": "https://github.com/philsajdak/decyx", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "r2con2019 - slides and materials", "description_language": "bilingual", "description_zh": "r2con2019 幻灯片与资料", "full_name": "radareorg/r2con2019", "id": "scan-206813202", "license": null, "observed_at": "2026-10-16T01:37:05.348384Z", "pushed_at": "2020-02-19T23:34:26Z", "readme_sha256": "249c059dda92bbd7a81d9d260ec116ae05d0ffdf005421bf7c3e191e5c14fcb9", "readme_url": "https://github.com/radareorg/r2con2019/blob/master/README.md", "stars": 137, "targets": [ "binary" ], "topics": [ "cutter", "radare2" ], "url": "https://github.com/radareorg/r2con2019", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Vulnerability research assistant that locates calls to potentially insecure API functions in a binary file.", "description_language": "bilingual", "description_zh": "漏洞研究助手，定位二进制文件中对潜在不安全 API 函数的调用。", "full_name": "0xdea/rhabdomancer", "id": "scan-875775721", "license": "MIT", "observed_at": "2026-10-16T01:35:56.211179Z", "pushed_at": "2026-10-09T07:32:25Z", "readme_sha256": "68ca918a3bd02108ccf69f79c4e5bb9cb198fd0c2a93733f92dbd8a6561446e9", "readme_url": "https://github.com/0xdea/rhabdomancer/blob/master/README.md", "stars": 136, "targets": [ "binary" ], "topics": [ "ida-plugin", "ida-pro", "idalib", "reverse-engineering", "rust", "vulnerability-research" ], "url": "https://github.com/0xdea/rhabdomancer", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Bindings of the r2 api for Valabind and friends", "description_language": "bilingual", "description_zh": "面向 Valabind 及相关工具的 r2 API 绑定", "full_name": "radareorg/radare2-bindings", "id": "scan-15324802", "license": "LGPL-3.0", "observed_at": "2026-10-16T01:37:05.368144Z", "pushed_at": "2026-04-22T15:35:53Z", "readme_sha256": "23d74a2ad45359cea5696a3c305fb5929367b1c4ac980e24f3aa96fe5e4915f3", "readme_url": "https://github.com/radareorg/radare2-bindings/blob/master/README.md", "stars": 136, "targets": [ "binary" ], "topics": [ "c", "java", "lua", "perl", "python", "radare2", "swig", "vala" ], "url": "https://github.com/radareorg/radare2-bindings", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Ghidra language definition for the Gekko and Broadway CPU variant used in the Nintendo GameCube and Nintendo Wii respectively", "description_language": "bilingual", "description_zh": "Ghidra 语言定义，支持 Nintendo GameCube 和 Nintendo Wii 分别使用的 Gekko 与 Broadway CPU 变体", "full_name": "aldelaro5/ghidra-gekko-broadway-lang", "id": "scan-175307618", "license": "NOASSERTION", "observed_at": "2026-10-16T01:35:51.094549Z", "pushed_at": "2022-02-09T14:57:36Z", "readme_sha256": "82fe6bf10d1d3acb76745e864d74b2e9a15a5c84ea9070970459a1ce5a3b8f0d", "readme_url": "https://github.com/aldelaro5/ghidra-gekko-broadway-lang/blob/master/README.md", "stars": 135, "targets": [ "binary", "game" ], "topics": [ "gamecube", "ghidra", "reverse-engineering", "wii" ], "url": "https://github.com/aldelaro5/ghidra-gekko-broadway-lang", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Unpack pkg, nexe, caxa, Node.js SEA and Bun single-file binaries.", "description_language": "bilingual", "description_zh": "解包 pkg、nexe、caxa、Node.js SEA 及 Bun 单文件二进制。", "full_name": "LockBlock-dev/pkg-unpacker", "id": "scan-521312070", "license": "MIT", "observed_at": "2026-10-18T18:09:14.686088Z", "pushed_at": "2026-10-14T15:04:28Z", "readme_sha256": "aaffe8b203c1757f40b7374fd3acb34fc4e4619bd1175ddc94f66412ac3378a6", "readme_url": "https://github.com/LockBlock-dev/pkg-unpacker/blob/f1db108bc6285a854680e7f24bb1ce77f7c3b747/README.md", "stars": 135, "targets": [ "app", "binary" ], "topics": [ "bun-compile", "bytecode", "caxa", "decompiler", "javascript-app", "nexe", "node-sea", "pkg", "reverse-engineering", "sea", "unpacker" ], "url": "https://github.com/LockBlock-dev/pkg-unpacker", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "QtREAnalyzer, a Ghidra extension to reverse-engineer Qt binaries.", "description_language": "bilingual", "description_zh": "QtREAnalyzer：用于逆向分析 Qt 二进制文件的 Ghidra 扩展。", "full_name": "diommsantos/QtREAnalyzer", "id": "scan-859572302", "license": null, "observed_at": "2026-10-16T01:35:51.136011Z", "pushed_at": "2025-04-27T10:27:03Z", "readme_sha256": "fbc9dccab5fd99037fa2b54a40aa8f1acab56ef57650346c51cc45ce1d1eca16", "readme_url": "https://github.com/diommsantos/QtREAnalyzer/blob/master/README.md", "stars": 134, "targets": [ "binary" ], "topics": [ "ghidra", "ghidra-analyzer", "ghidra-plugin", "qt", "qt5", "reverse-engineering", "static-analysis" ], "url": "https://github.com/diommsantos/QtREAnalyzer", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "CLI tool, Ghidra plug-in, and Haskell library for analyzing binaries using under-constrained symbolic execution", "description_language": "bilingual", "description_zh": "用于通过欠约束符号执行分析二进制文件的 CLI 工具、Ghidra 插件和 Haskell 库。", "full_name": "GaloisInc/grease", "id": "scan-944720164", "license": "BSD-3-Clause", "observed_at": "2026-10-18T14:37:28.408143Z", "pushed_at": "2026-10-05T11:29:28Z", "readme_sha256": "1e73d781acaa78d364e66acad08ba37f0e08365730a95368c3aa54b1fc28eb0e", "readme_url": "https://github.com/GaloisInc/grease/blob/b94e1e010c289cf579fe868307857a417d6e3a2c/README.md", "stars": 134, "targets": [ "binary" ], "topics": [ "binary-analysis", "ghidra-plugin", "haskell", "haskell-library", "program-analysis", "symbolic-execution", "under-constrained-symbolic-execution" ], "url": "https://github.com/GaloisInc/grease", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Vulnerability research assistant that extracts pseudocode from the IDA Hex-Rays decompiler.", "description_language": "bilingual", "description_zh": "从 IDA Hex-Rays 反编译器提取伪代码的漏洞研究助手。", "full_name": "0xdea/haruspex", "id": "scan-890405371", "license": "MIT", "observed_at": "2026-10-16T01:35:56.385893Z", "pushed_at": "2026-10-09T19:16:36Z", "readme_sha256": "33ea300fb2b681aa88bd625a5e482816d314df3e0b5a4d69667dd8dd40d6b69d", "readme_url": "https://github.com/0xdea/haruspex/blob/master/README.md", "stars": 133, "targets": [ "binary" ], "topics": [ "ida-plugin", "ida-pro", "idalib", "reverse-engineering", "rust", "vulnerability-research" ], "url": "https://github.com/0xdea/haruspex", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "IDAPython plugin for finding function strings recursively", "description_language": "bilingual", "description_zh": "递归查找函数字符串的 IDAPython 插件", "full_name": "darx0r/Stingray", "id": "scan-43689676", "license": "GPL-3.0", "observed_at": "2026-10-16T01:35:56.301362Z", "pushed_at": "2022-05-17T12:55:59Z", "readme_sha256": "d95b6a35e08d1c27e504f63b47eb9f0d350013c126dc893ed65462c9c6676aa7", "readme_url": "https://github.com/darx0r/Stingray/blob/master/README.md", "stars": 133, "targets": [ "binary" ], "topics": [ "ida-plugin", "ida-pro", "idapython", "idapython-plugin", "reverse-engineering", "static-analysis", "string-search" ], "url": "https://github.com/darx0r/Stingray", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "LummaC2 extracted binaries by reversing & LummaC2 Stealer Analysis", "description_language": "bilingual", "description_zh": "通过逆向提取的 LummaC2 二进制文件及 LummaC2 窃密软件分析", "full_name": "x86byte/LummaC2-Stealer", "id": "scan-933211684", "license": null, "observed_at": "2026-10-16T01:37:14.400400Z", "pushed_at": "2025-02-18T00:38:59Z", "readme_sha256": "51cd51ca4e939e1153a1963bdf0db8543f07a1b3d0810a92c8d4fc5e88558de6", "readme_url": "https://github.com/x86byte/LummaC2-Stealer/blob/main/README.md", "stars": 130, "targets": [ "binary" ], "topics": [ "c2", "command-and-control", "lummac2", "malware", "malware-analysis", "malware-development", "malware-research", "reverse-engineering", "reversing", "stealer" ], "url": "https://github.com/x86byte/LummaC2-Stealer", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Run real Windows 98 apps and games in your browser. An x86 emulator and Win32 layer written directly in WebAssembly Text, no OS image, no source ports.", "description_language": "bilingual", "description_zh": "在浏览器中运行真正的 Windows 98 应用和游戏。以 WebAssembly Text 直接编写的 x86 模拟器与 Win32 层，无需操作系统镜像，也不是源码移植。", "full_name": "vgrichina/berrry-wine", "id": "scan-1200317361", "license": "MIT", "observed_at": "2026-10-16T07:15:03.657884Z", "pushed_at": "2026-10-16T02:28:25Z", "readme_sha256": "1be812eb60fa5e4e3e1708fe1c0c45dedfca93ebb93be5f865a702996085bb6a", "readme_url": "https://github.com/vgrichina/berrry-wine/blob/main/README.md", "stars": 129, "targets": [ "app", "binary", "game", "website" ], "topics": [ "browser-games", "directx", "emulator", "emulators", "retro-gaming", "retrocomputing", "reverse-engineering", "wasm", "wat", "webassembly", "win32", "windows-98", "windows98", "wine", "x86", "x86-emulator" ], "url": "https://github.com/vgrichina/berrry-wine", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "DarkNight theme for Ghidra", "description_language": "bilingual", "description_zh": "Ghidra 的 DarkNight 主题", "full_name": "elliiot/ghidra_darknight", "id": "scan-174737118", "license": null, "observed_at": "2026-10-16T01:35:51.379616Z", "pushed_at": "2020-09-26T17:33:21Z", "readme_sha256": "3d5d7873fa6cf5e99f4c45b151f7ff342498d726871a12a422072d90676fbc7d", "readme_url": "https://github.com/elliiot/ghidra_darknight/blob/master/README.md", "stars": 128, "targets": [ "binary" ], "topics": [ "dark", "ghidra", "theme" ], "url": "https://github.com/elliiot/ghidra_darknight", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "An IDA Pro plugin that display cross-references to functions or variables across the entire binary in Hex-Rays pseudocode", "description_language": "bilingual", "description_zh": "在 Hex-Rays 伪代码中展示整个二进制文件对函数或变量交叉引用的 IDA Pro 插件", "full_name": "L4ys/LazyCross", "id": "scan-1000147981", "license": "GPL-3.0", "observed_at": "2026-10-16T01:35:56.550636Z", "pushed_at": "2026-01-31T11:29:00Z", "readme_sha256": "2e2cd8da503cc7467aef084fadfb9cc0eb24da887c9a7660d62d7e20ee405d67", "readme_url": "https://github.com/L4ys/LazyCross/blob/main/README.md", "stars": 128, "targets": [ "binary" ], "topics": [ "hexrays", "ida", "ida-plugin", "idapro", "idapython" ], "url": "https://github.com/L4ys/LazyCross", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "MrsPicky - An IDAPython decompiler script that helps auditing memcpy() and memmove() calls", "description_language": "bilingual", "description_zh": "MrsPicky：辅助审计 memcpy() 和 memmove() 调用的 IDAPython 反编译器脚本。", "full_name": "patois/mrspicky", "id": "scan-186706683", "license": "NOASSERTION", "observed_at": "2026-10-18T18:09:14.686440Z", "pushed_at": "2024-03-14T07:21:37Z", "readme_sha256": "60a0864e36d889e06802eeb0117889073b7027ab276f45767fac68d8936dd752", "readme_url": "https://github.com/patois/mrspicky/blob/817a4dd3711197bcb851259cd12ce134542e2a0f/README.md", "stars": 128, "targets": [ "binary" ], "topics": [ "automated", "binary-auditing", "decompiler", "hex-rays", "hexrays", "ida-pro", "idapython", "memcpy", "vulnerability" ], "url": "https://github.com/patois/mrspicky", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A CHIP-8 interpreter, assembler and disassembler in C", "description_language": "bilingual", "description_zh": "使用 C 编写的 CHIP-8 解释器、汇编器和反汇编器", "full_name": "wernsey/chip8", "id": "scan-48369292", "license": "Apache-2.0", "observed_at": "2026-10-16T01:36:17.491871Z", "pushed_at": "2025-02-25T18:26:49Z", "readme_sha256": "02bd4e9a42bcf34cc43c6d4582907ef457bed3ab5c4fb2605fa9933e5ac91e23", "readme_url": "https://github.com/wernsey/chip8/blob/master/README.md", "stars": 127, "targets": [ "binary" ], "topics": [ "chip-8", "chip8", "chip8-emulator", "disassembler", "emulator", "sdl" ], "url": "https://github.com/wernsey/chip8", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Hextor - Hexadecimal editor and binary data analyzing toolkit", "description_language": "bilingual", "description_zh": "Hextor：十六进制编辑器与二进制数据分析工具包", "full_name": "digitalw0lf/hextor", "id": "scan-255663351", "license": "NOASSERTION", "observed_at": "2026-10-16T01:36:17.583138Z", "pushed_at": "2026-04-05T18:04:24Z", "readme_sha256": "539ecd63b150ff011fa564f2575f96887868922cb23a9f3b27cbc5c0c4c111d4", "readme_url": "https://github.com/digitalw0lf/hextor/blob/master/README.md", "stars": 125, "targets": [ "binary" ], "topics": [ "disassembler", "hex-editor", "hexadecimal-editor", "hexeditor", "hextor", "reverse-engineering", "text-editor", "windows" ], "url": "https://github.com/digitalw0lf/hextor", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Xbox Executable Format (XBE) Loader Extension for Ghidra SRE framework", "description_language": "bilingual", "description_zh": "面向 Ghidra 软件逆向工程框架的 Xbox 可执行格式（XBE）加载器扩展", "full_name": "XboxDev/ghidra-xbe", "id": "scan-233189762", "license": null, "observed_at": "2026-10-16T01:35:51.547394Z", "pushed_at": "2026-10-10T00:02:59Z", "readme_sha256": "6d77c17652934eb07f89e7e3d8c430e0bcc08c3f9d96d38e0a1e60f3abd40ed6", "readme_url": "https://github.com/XboxDev/ghidra-xbe/blob/master/README.md", "stars": 125, "targets": [ "binary" ], "topics": [ "ghidra", "ghidra-extension", "hacktoberfest", "reverse-engineering", "xbox" ], "url": "https://github.com/XboxDev/ghidra-xbe", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Reverse engineering assistant that extracts strings and related pseudocode from a binary file.", "description_language": "bilingual", "description_zh": "从二进制文件提取字符串和相关伪代码的逆向工程助手。", "full_name": "0xdea/augur", "id": "scan-902747185", "license": "MIT", "observed_at": "2026-10-16T01:35:56.711905Z", "pushed_at": "2026-10-10T06:21:35Z", "readme_sha256": "778f2f60f04aef0565c9ef8cc08d7bc93980134613fad04b91928729b7cf5913", "readme_url": "https://github.com/0xdea/augur/blob/master/README.md", "stars": 121, "targets": [ "binary" ], "topics": [ "ida-plugin", "ida-pro", "idalib", "reverse-engineering", "rust", "vulnerability-research" ], "url": "https://github.com/0xdea/augur", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "ASM2HEX is a powerful tool for bidirectional conversion between assembly language and hexadecimal machine code. Its intuitive graphical interface makes conversion easy and provides accurate, reliable results for ARM64, ARM, and Thumb instruction sets.", "description_language": "bilingual", "description_zh": "ASM2HEX 是功能强大的汇编语言与十六进制机器码双向转换工具，提供直观的图形界面，可轻松转换汇编指令与机器码，对 ARM64、ARM 和 Thumb 指令集均提供准确可靠的转换结果。", "full_name": "suifei/asm2hex", "id": "scan-803258145", "license": "MIT", "observed_at": "2026-10-16T01:36:17.720503Z", "pushed_at": "2026-07-29T12:03:41Z", "readme_sha256": "022e090865b9061f48198e1f81dcf5ae4abc568b1db4d1726cccc5525582ba75", "readme_url": "https://github.com/suifei/asm2hex/blob/main/README.md", "stars": 120, "targets": [ "binary" ], "topics": [ "arm32", "arm64", "assembly", "capstone", "conversion-tool", "cross-platform", "decompiler", "disassembler", "fyne", "golang", "hexadecimal-converter", "ida", "idapro", "keystone", "machine-code", "macos", "reverse-engineering", "security", "thumb", "windows" ], "url": "https://github.com/suifei/asm2hex", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "An installer and compiler for Ghidra for MacOS ARM64 or \"Apple Silicon\"", "description_language": "bilingual", "description_zh": "面向 macOS ARM64（Apple Silicon）的 Ghidra 安装与编译工具", "full_name": "ytisf/GhidraMacOS", "id": "scan-806980059", "license": "MIT", "observed_at": "2026-10-16T01:35:51.649138Z", "pushed_at": "2026-07-24T05:06:08Z", "readme_sha256": "b3eabb1ef03b8d5d5ef1cc676c44f2a9a9ef1c27b55913c4d2d7c08ee80c487c", "readme_url": "https://github.com/ytisf/GhidraMacOS/blob/main/README.md", "stars": 118, "targets": [ "app", "binary" ], "topics": [ "ghidra", "macos-app", "malware-research", "reverse-engineering" ], "url": "https://github.com/ytisf/GhidraMacOS", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Ghidra decompiler plugin for LLDB", "description_language": "bilingual", "description_zh": "LLDB 的 Ghidra 反编译插件", "full_name": "ant4g0nist/decompiler", "id": "scan-652879832", "license": "MIT", "observed_at": "2026-10-16T01:35:51.857572Z", "pushed_at": "2026-02-15T16:54:18Z", "readme_sha256": "788b30e9533cb583f9aa20b541fb994b6326068ec7b74db5c1db34629ee0e737", "readme_url": "https://github.com/ant4g0nist/decompiler/blob/main/README.md", "stars": 116, "targets": [ "binary" ], "topics": [ "decompiler", "ghidra", "lldb" ], "url": "https://github.com/ant4g0nist/decompiler", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Extract labels from IDA, Ghidra, Binary Ninja, and Relyze files and export x64dbg database. Including radare2 main address.", "description_language": "bilingual", "description_zh": "从 IDA、Ghidra、Binary Ninja 和 Relyze 文件中提取标签，并导出 x64dbg 数据库，同时包含 radare2 主地址。", "full_name": "utkonos/lst2x64dbg", "id": "scan-192132238", "license": "GPL-3.0", "observed_at": "2026-10-16T01:35:51.706763Z", "pushed_at": "2023-11-14T01:18:19Z", "readme_sha256": "39fe19f58b489a7d89ccf5fc7d2fd5288921a498538b7fdb240da3171483a6c3", "readme_url": "https://github.com/utkonos/lst2x64dbg/blob/master/README.md", "stars": 116, "targets": [ "binary" ], "topics": [ "binary-ninja", "extract-labels", "ghidra", "ida", "labels", "radare2", "relyze", "symbol-table" ], "url": "https://github.com/utkonos/lst2x64dbg", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "IDA Pro plugin to show functions in a tree view", "description_language": "bilingual", "description_zh": "以树形视图显示函数的 IDA Pro 插件", "full_name": "ax330d/functions-plus", "id": "scan-97748596", "license": "MIT", "observed_at": "2026-10-16T01:35:56.724803Z", "pushed_at": "2021-04-17T20:03:10Z", "readme_sha256": "2b3c656e56fb168334c5620a3c12d0dfb2520621d0e65bcdc328e27deae44834", "readme_url": "https://github.com/ax330d/functions-plus/blob/master/README.md", "stars": 115, "targets": [ "binary" ], "topics": [ "ida-plugin", "ida-pro", "python" ], "url": "https://github.com/ax330d/functions-plus", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A Symbolic Ethereum Virtual Machine (EVM) bytecode interpreter, parser and decompiler, along with several other utils for programmatically extracting information from EVM bytecode.", "description_language": "bilingual", "description_zh": "符号化以太坊虚拟机（EVM）字节码解释器、解析器和反编译器，以及多种以编程方式提取 EVM 字节码信息的实用工具。", "full_name": "acuarica/evm", "id": "scan-524235578", "license": "MIT", "observed_at": "2026-10-16T01:36:17.892094Z", "pushed_at": "2026-05-19T17:59:34Z", "readme_sha256": "98d1b3bd8f608987870745a19f73fe4248029600f5c47e44aa08a3904235e40e", "readme_url": "https://github.com/acuarica/evm/blob/main/README.md", "stars": 114, "targets": [ "binary" ], "topics": [ "4byte", "blockchain", "bytecode", "cli", "control-flow-graph", "decoder", "decompiler", "disassembler", "ethereum", "evm", "parser", "signatures", "solidity", "typescript", "web3", "yul" ], "url": "https://github.com/acuarica/evm", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Radare2 cheat-sheet", "description_language": "bilingual", "description_zh": "Radare2 速查表", "full_name": "zxgio/r2-cheatsheet", "id": "scan-85183821", "license": "GPL-3.0", "observed_at": "2026-10-16T01:37:05.638852Z", "pushed_at": "2018-11-15T17:14:19Z", "readme_sha256": "6a3b6a0a7c1ab8e3cf6aaf57d8994224e04f49de3504e64cfa70862c38674b9f", "readme_url": "https://github.com/zxgio/r2-cheatsheet/blob/master/README.md", "stars": 114, "targets": [ "binary" ], "topics": [ "cheatsheet", "radare2" ], "url": "https://github.com/zxgio/r2-cheatsheet", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "IDA Migrator is an IDA Pro plugin which helps migrate existing work from one database instance to another. It Conveniently migrates function names, structures and enums.", "description_language": "bilingual", "description_zh": "IDA Migrator 是 IDA Pro 插件，可将现有工作从一个数据库实例迁移至另一个，方便地迁移函数名、结构体和枚举。", "full_name": "giladreich/ida_migrator", "id": "scan-236395325", "license": "MIT", "observed_at": "2026-10-16T01:35:56.820850Z", "pushed_at": "2021-05-28T17:06:44Z", "readme_sha256": "a58679f1f5fc38398669d5a05cf6771138623a4712cbdcc599b898225562ec80", "readme_url": "https://github.com/giladreich/ida_migrator/blob/master/docs/README.md", "stars": 113, "targets": [ "binary" ], "topics": [ "hex-rays", "ida", "ida-plugin", "ida-pro", "idapython", "pyqt", "qt" ], "url": "https://github.com/giladreich/ida_migrator", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Automation tool for locating symbols & structs in binary (primary IDA focused)", "description_language": "bilingual", "description_zh": "自动定位二进制文件中符号与结构体的工具，主要面向 IDA", "full_name": "doronz88/fa", "id": "scan-256209924", "license": "GPL-3.0", "observed_at": "2026-10-16T01:35:56.827882Z", "pushed_at": "2026-03-25T18:51:15Z", "readme_sha256": "c9e035fb804671f00ec25d16876e575fef5fe1fdd279e972d8dd5df524759a35", "readme_url": "https://github.com/doronz88/fa/blob/master/README.md", "stars": 112, "targets": [ "binary", "firmware" ], "topics": [ "firmware", "hjson", "ida", "ida-plugin", "ida-python", "python", "python-script", "research-tool", "reverse-engineering", "sig", "sig-files", "sig-format", "signatures", "symbols" ], "url": "https://github.com/doronz88/fa", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Just a simple radare2 Jupyter kernel", "description_language": "bilingual", "description_zh": "一个简单的 radare2 Jupyter 内核", "full_name": "guedou/jupyter-radare2", "id": "scan-115037542", "license": "LGPL-3.0", "observed_at": "2026-10-16T01:37:05.653510Z", "pushed_at": "2017-12-22T15:17:18Z", "readme_sha256": "58f73531cfe0448681ad3733f44be1bd6a451b61eaf24d03bf524d9789a14f9c", "readme_url": "https://github.com/guedou/jupyter-radare2/blob/master/README.md", "stars": 110, "targets": [ "binary" ], "topics": [ "jupyter", "notebook", "radare2" ], "url": "https://github.com/guedou/jupyter-radare2", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Speculative disassembly, CFG recovery, and call-graph recovery from stripped binaries.", "description_language": "bilingual", "description_zh": "对已剥离符号的二进制文件进行推测式反汇编、控制流图恢复和调用图恢复。", "full_name": "abenkhadra/spedi", "id": "scan-45848956", "license": "BSD-3-Clause", "observed_at": "2026-10-16T01:36:17.913373Z", "pushed_at": "2018-07-08T15:48:42Z", "readme_sha256": "5fd4c5f358c4ec91009e67df6966fcc8c3d62be58fc8c7d69421ad5a717761f4", "readme_url": "https://github.com/abenkhadra/spedi/blob/master/README.md", "stars": 109, "targets": [ "binary" ], "topics": [ "disassembler", "elf", "reverse-engineering" ], "url": "https://github.com/abenkhadra/spedi", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Stash for Binary Exploitation and Reverse Engineering Resources", "description_language": "bilingual", "description_zh": "二进制利用与逆向工程资源库", "full_name": "0xroman1/Scuffed_Low_Level_Stash", "id": "scan-293482927", "license": null, "observed_at": "2026-10-16T01:37:05.860732Z", "pushed_at": "2020-09-22T02:40:32Z", "readme_sha256": "8aad15503c539a5f9f760ca44638c9f0baae3d21e0ef864b6d6e6fedbe36f3aa", "readme_url": "https://github.com/0xroman1/Scuffed_Low_Level_Stash/blob/master/README.md", "stars": 108, "targets": [ "binary" ], "topics": [ "assembly", "binary-exploitation", "ctf", "ctf-tools", "gdb", "linux", "radare2", "reverse-engineers" ], "url": "https://github.com/0xroman1/Scuffed_Low_Level_Stash", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "An IntelliJ IDEA plugin for working on Ghidra Extensions.", "description_language": "bilingual", "description_zh": "用于开发 Ghidra 扩展的 IntelliJ IDEA 插件。", "full_name": "garyttierney/intellij-ghidra", "id": "scan-309389111", "license": null, "observed_at": "2026-10-16T01:35:51.953193Z", "pushed_at": "2026-07-08T14:35:14Z", "readme_sha256": "acaa84ba87ea6326e356503f64d8cb78cf5f2b606466593426928c3e1d1de98d", "readme_url": "https://github.com/garyttierney/intellij-ghidra/blob/main/README.md", "stars": 107, "targets": [ "binary" ], "topics": [ "ghidra", "ghidra-extension", "intellij" ], "url": "https://github.com/garyttierney/intellij-ghidra", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A collection of IDA loaders for various game console ELF's. (PS3, PSVita, WiiU)", "description_language": "bilingual", "description_zh": "面向多种游戏主机 ELF 文件的 IDA 加载器合集，支持 PS3、PS Vita 和 Wii U", "full_name": "aerosoul94/ida_gel", "id": "scan-87337577", "license": null, "observed_at": "2026-10-16T01:35:56.972674Z", "pushed_at": "2019-10-03T18:08:05Z", "readme_sha256": "5090aaace9ff258b6c9facb95bc473742976bef72e76e843ca5900f2f112c3a3", "readme_url": "https://github.com/aerosoul94/ida_gel/blob/master/ReadMe.md", "stars": 106, "targets": [ "binary", "game" ], "topics": [ "elf-loader", "ida-loaders", "ida-plugin", "ida-pro", "ps3", "psvita", "reverse-engineering", "wiiu" ], "url": "https://github.com/aerosoul94/ida_gel", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Binary rewriter for 64-bit PE files.", "description_language": "bilingual", "description_zh": "64 位 PE 文件二进制重写工具。", "full_name": "jonomango/chum", "id": "scan-493460405", "license": "MIT", "observed_at": "2026-10-16T01:36:18.172622Z", "pushed_at": "2024-02-05T09:41:20Z", "readme_sha256": "e453c2689adb51dd220d131c692f816afbd1fe5845eab1b8b6ccab52663163c7", "readme_url": "https://github.com/jonomango/chum/blob/main/README.md", "stars": 106, "targets": [ "binary" ], "topics": [ "bin2bin", "binary-rewriting", "disassembler", "windows" ], "url": "https://github.com/jonomango/chum", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Ghidra scripts for malware analysis", "description_language": "bilingual", "description_zh": "用于恶意软件分析的 Ghidra 脚本", "full_name": "AllsafeCyberSecurity/ghidra_scripts", "id": "scan-207281625", "license": null, "observed_at": "2026-10-16T01:35:52.077177Z", "pushed_at": "2024-01-11T06:31:39Z", "readme_sha256": "23de13fb4718bf8709c16f078914f161fbfd5f2e0f7bce3a13cd5e3603ebbfef", "readme_url": "https://github.com/AllsafeCyberSecurity/ghidra_scripts/blob/master/README.md", "stars": 105, "targets": [ "binary" ], "topics": [ "ghidra", "python", "reverse-engineering" ], "url": "https://github.com/AllsafeCyberSecurity/ghidra_scripts", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Dive into Python code", "description_language": "bilingual", "description_zh": "深入探索 Python 代码", "full_name": "davep/dhv", "id": "scan-1011852289", "license": "GPL-3.0", "observed_at": "2026-10-16T01:36:18.229912Z", "pushed_at": "2026-02-03T11:58:07Z", "readme_sha256": "aef7d67dba81a21fbf2c8aee2f68375b4ed363f2a9ecd9957c4a6d7e48f245c9", "readme_url": "https://github.com/davep/dhv/blob/main/README.md", "stars": 103, "targets": [ "binary" ], "topics": [ "bytecode", "chui", "disassembler", "disassembly", "documentation", "education", "educational", "python", "python3", "terminal", "terminal-based", "tui" ], "url": "https://github.com/davep/dhv", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "radare2 + miasm2 = ♥", "description_language": "bilingual", "description_zh": "radare2 与 miasm2 的组合 = ♥", "full_name": "guedou/r2m2", "id": "scan-67708831", "license": "LGPL-3.0", "observed_at": "2026-10-16T01:37:05.802145Z", "pushed_at": "2020-01-22T16:39:13Z", "readme_sha256": "9b4e55fde4422b2128e23059c7cc4030fc65a2747ecb4bb597ff404a774b4ba3", "readme_url": "https://github.com/guedou/r2m2/blob/master/README.md", "stars": 103, "targets": [ "binary" ], "topics": [ "miasm2", "radare2", "radare2-plugin", "reverse-engineering" ], "url": "https://github.com/guedou/r2m2", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Headless AI agent for deterministic reverse engineering.", "description_language": "bilingual", "description_zh": "用于确定性逆向工程的无界面 AI 智能体。", "full_name": "Karib0u/kernagent", "id": "scan-1092865304", "license": "Apache-2.0", "observed_at": "2026-10-16T01:35:52.182491Z", "pushed_at": "2025-12-09T22:07:23Z", "readme_sha256": "d726f3ebf33f02793f2ac40ba9e98c4286a0960841145beed8bd714e1e62945b", "readme_url": "https://github.com/Karib0u/kernagent/blob/main/README.md", "stars": 103, "targets": [ "binary" ], "topics": [ "ai", "binary-analysis", "cli", "cybersecurity", "docker", "ghidra", "infosec", "llm", "malware", "malware-analysis", "malware-triage", "reverse-engineering", "security-tools", "static-analysis", "threat-research" ], "url": "https://github.com/Karib0u/kernagent", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A Model Context Protocol (MCP) server that enables AI assistants to interact with IDA Pro for reverse engineering and binary analysis tasks.", "description_language": "bilingual", "description_zh": "模型上下文协议（MCP）服务器，让 AI 助手与 IDA Pro 交互，执行逆向工程和二进制分析任务。", "full_name": "fdrechsler/mcp-server-idapro", "id": "scan-954076311", "license": "MIT", "observed_at": "2026-10-16T01:35:57.060338Z", "pushed_at": "2025-03-26T19:57:30Z", "readme_sha256": "03306fab09b3e21c9a075339b092360e684a7e1af313475731c8f32a2dbd0e57", "readme_url": "https://github.com/fdrechsler/mcp-server-idapro/blob/main/README.md", "stars": 101, "targets": [ "binary" ], "topics": [ "ai", "aiagent", "binary-analysis", "dissaseembly", "ida-plugin", "idapython", "mcp-server", "reverse-engineering" ], "url": "https://github.com/fdrechsler/mcp-server-idapro", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Zydis Rust Bindings", "description_language": "bilingual", "description_zh": "Zydis 的 Rust 绑定。", "full_name": "zyantific/zydis-rs", "id": "scan-101184401", "license": "MIT", "observed_at": "2026-10-18T18:09:31.781341Z", "pushed_at": "2025-11-28T12:57:35Z", "readme_sha256": "48d7e6fcf4244624c591e825b00b697733a416c96c8ba62904efc8ff45b86a3c", "readme_url": "https://github.com/zyantific/zydis-rs/blob/38c1e98a72496619f62da9501fc20f9436973405/README.md", "stars": 101, "targets": [ "binary" ], "topics": [ "bindings", "disassembler", "ffi", "rust", "zydis" ], "url": "https://github.com/zyantific/zydis-rs", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "jni.h compiled for Ghidra", "description_language": "bilingual", "description_zh": "为 Ghidra 编译的 jni.h。", "full_name": "extremecoders-re/ghidra-jni", "id": "scan-193283931", "license": null, "observed_at": "2026-10-18T18:08:03.730963Z", "pushed_at": "2020-03-02T09:53:08Z", "readme_sha256": "33efce9cb8feb9fea62b1529d755042c7a33a7a4418681e031775ced114feb8f", "readme_url": "https://github.com/extremecoders-re/ghidra-jni/blob/ed832b2898abc3a0b7473abc7d4b36b29a37372c/README.md", "stars": 100, "targets": [ "binary" ], "topics": [ "ghidra", "jni", "reverse-engineering" ], "url": "https://github.com/extremecoders-re/ghidra-jni", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Lua Encode/Decoder/Disassembler/Decompiler in C#", "description_language": "bilingual", "description_zh": "用 C# 编写的 Lua 编码器、解码器、反汇编器和反编译器。", "full_name": "ferib/LuaToolkit", "id": "scan-336862428", "license": "MIT", "observed_at": "2026-10-18T14:39:02.505945Z", "pushed_at": "2023-07-02T15:49:25Z", "readme_sha256": "426566f1ac9f9c4ab0d685d63d8873162e212b58e3baf71510f013781a30a3c3", "readme_url": "https://github.com/ferib/LuaToolkit/blob/eb8591f708a980606881bcecf9d863c0b552edd5/readme.md", "stars": 100, "targets": [ "binary" ], "topics": [ "decompiler", "lua", "vm" ], "url": "https://github.com/ferib/LuaToolkit", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "x86 Disassembler and Analyzer", "description_language": "bilingual", "description_zh": "x86 反汇编器和分析器。", "full_name": "MahdiSafsafi/UnivDisasm", "id": "scan-41105891", "license": "MPL-2.0", "observed_at": "2026-10-18T14:39:02.505716Z", "pushed_at": "2019-01-20T21:27:22Z", "readme_sha256": "8a614ace3945ca133da9eddfca9fc3be74936fd5e19f5c8f6e204c3bec9ffae4", "readme_url": "https://github.com/MahdiSafsafi/UnivDisasm/blob/48a1c7a7c15b8dd4ce46dcff4b3bf00c7fed3465/README.md", "stars": 100, "targets": [ "binary" ], "topics": [ "avx512", "delphi", "disassembler", "x86-64" ], "url": "https://github.com/MahdiSafsafi/UnivDisasm", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "webui repository for radare2", "description_language": "bilingual", "description_zh": "radare2 网页界面仓库", "full_name": "radareorg/radare2-webui", "id": "scan-52599538", "license": null, "observed_at": "2026-10-16T01:37:05.993591Z", "pushed_at": "2026-08-23T11:55:07Z", "readme_sha256": "229d394081b9f81652ec1e7277f72bf4db114ae96da07ea9b21bc06ca9f12e57", "readme_url": "https://github.com/radareorg/radare2-webui/blob/master/README.md", "stars": 100, "targets": [ "binary" ], "topics": [ "javascript", "radare2", "webui" ], "url": "https://github.com/radareorg/radare2-webui", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A plugin for IDA that can dump the ELF file easily.", "description_language": "bilingual", "description_zh": "可轻松转储 ELF 文件的 IDA 插件。", "full_name": "WPeace-HcH/ElfDumper", "id": "scan-585060815", "license": null, "observed_at": "2026-10-16T01:35:57.218918Z", "pushed_at": "2023-04-03T10:10:42Z", "readme_sha256": "584bf58974e75ebfa9746a03b351efa47ebb3b31d215c4c0ea845372b0d79312", "readme_url": "https://github.com/WPeace-HcH/ElfDumper/blob/main/README.md", "stars": 100, "targets": [ "binary" ], "topics": [ "binary-analysis", "elf", "ida", "ida-plugin" ], "url": "https://github.com/WPeace-HcH/ElfDumper", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Ghidra analysis plugin to locate cryptographic constants", "description_language": "bilingual", "description_zh": "定位密码学常量的 Ghidra 分析插件", "full_name": "antoniovazquezblanco/GhidraFindcrypt", "id": "scan-623999209", "license": "GPL-3.0", "observed_at": "2026-10-16T01:35:52.197394Z", "pushed_at": "2026-10-12T10:22:54Z", "readme_sha256": "c38aa4287fa33d836ec6fe139c6eda788bb918cb4255cca879c8550ed8c3dd91", "readme_url": "https://github.com/antoniovazquezblanco/GhidraFindcrypt/blob/main/README.md", "stars": 99, "targets": [ "binary" ], "topics": [ "criptography", "ghidra", "ghidra-analyzer", "ghidra-extension", "reverse-engineering" ], "url": "https://github.com/antoniovazquezblanco/GhidraFindcrypt", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Collaborative reverse engineering plugin for IDA Pro. Latest version, including IDA 7.0 support, is not back ward compatible with earlier versions. Substantial changes have been made to the protocol and database.", "description_language": "bilingual", "description_zh": "面向 IDA Pro 的协作式逆向工程插件。包含 IDA 7.0 支持的最新版本不向后兼容早期版本，协议和数据库均有重大变更。", "full_name": "cseagle/collabREate", "id": "scan-20230724", "license": "GPL-2.0", "observed_at": "2026-10-16T10:47:56.909592Z", "pushed_at": "2021-09-01T23:03:38Z", "readme_sha256": "968da0cf45639f8c37ae0d85c6689841a3358ab778c2b0b21b05cddacce97f5c", "readme_url": "https://github.com/cseagle/collabREate/blob/master/README", "stars": 98, "targets": [ "binary" ], "topics": [], "url": "https://github.com/cseagle/collabREate", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A (SLEIGH) disassembler that supports multiple architectures", "description_language": "bilingual", "description_zh": "支持多种架构的 SLEIGH 反汇编器。", "full_name": "black-binary/sleigh", "id": "scan-451312869", "license": "Apache-2.0", "observed_at": "2026-10-18T14:39:02.506759Z", "pushed_at": "2022-04-30T08:51:59Z", "readme_sha256": "6d6899c63cfb619b9d88ab8d43b5a0bcb65348cf5d0612fefaccc9b161a8aef5", "readme_url": "https://github.com/black-binary/sleigh/blob/9495bba30ffa48e810f438cd10b6b56861c8fcb4/README.md", "stars": 96, "targets": [ "binary" ], "topics": [ "binary-analysis", "decompiler", "disassembler", "ghidra", "intermediate-representation", "reverse-engineering", "sleigh", "sleigh-specification" ], "url": "https://github.com/black-binary/sleigh", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Offline reverse-engineering toolchain for Bitwig Studio's Nitro DSP format — decrypt, decompile, and read the DSP behind every native device and Grid module. Tools + format specs only; no Bitwig source or keys.", "description_language": "bilingual", "description_zh": "面向 Bitwig Studio Nitro DSP 格式的离线逆向工程工具链，解密、反编译并读取每个原生设备及 Grid 模块背后的 DSP。仅包含工具和格式规范，不含 Bitwig 源码或密钥。", "full_name": "blakebratcher/bitwig-nitro-tools", "id": "scan-1332385696", "license": "MIT", "observed_at": "2026-10-18T18:09:14.690288Z", "pushed_at": "2026-08-13T03:58:58Z", "readme_sha256": "c3f3bd8de6130ebaaf618314af246b9c93ce8d96cb1deacd9c360e9d185f9c71", "readme_url": "https://github.com/blakebratcher/bitwig-nitro-tools/blob/a34c1d61c7e48b1531fb3fba5e4c06d9e1e0cf16/README.md", "stars": 95, "targets": [ "binary" ], "topics": [ "audio", "bitwig", "decompiler", "dsp", "nitro", "reverse-engineering" ], "url": "https://github.com/blakebratcher/bitwig-nitro-tools", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Assembler/disassembler of Windows keyboard layouts in flat assembler", "description_language": "bilingual", "description_zh": "用 flat assembler 编写的 Windows 键盘布局汇编器／反汇编器。", "full_name": "grompe/kbdasm", "id": "scan-59681758", "license": null, "observed_at": "2026-10-18T14:39:02.506997Z", "pushed_at": "2017-03-15T10:12:03Z", "readme_sha256": "f9e99d8389488a5431db91c084ac20b7b5479dbb4420a542fc607632d8cadd8d", "readme_url": "https://github.com/grompe/kbdasm/blob/fd871430da4f441c912ca8ca5751974730561398/readme.txt", "stars": 95, "targets": [ "binary" ], "topics": [ "caps-lock", "capslock", "fasm", "keyboard-layout", "reverse-engineering", "windows", "windows-hacking" ], "url": "https://github.com/grompe/kbdasm", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Various scripts for the Hexrays decompiler", "description_language": "bilingual", "description_zh": "用于 Hex-Rays 反编译器的各种脚本。", "full_name": "patois/hexrays_scripts", "id": "scan-270353111", "license": "CC0-1.0", "observed_at": "2026-10-18T18:09:14.689115Z", "pushed_at": "2023-07-22T20:13:17Z", "readme_sha256": "a4b1886155bdd0718c0c12791867e59b15d8b7123c183a926614245d727c6390", "readme_url": "https://github.com/patois/hexrays_scripts/blob/7dbecbe2a255ff3310048b0aca672da21a5704e8/README.md", "stars": 95, "targets": [ "binary" ], "topics": [ "decompiler", "hexrays", "hexrays-decompiler", "ida-pro", "idapython" ], "url": "https://github.com/patois/hexrays_scripts", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "", "description_language": "bilingual", "description_zh": "", "full_name": "SourceDiver42/Ghidra-ChatGPT", "id": "scan-576080606", "license": "GPL-3.0", "observed_at": "2026-10-18T18:08:03.731182Z", "pushed_at": "2022-12-09T13:27:04Z", "readme_sha256": "b3454e5f7fa659647e14f578cb67a63d5c88fc11563c78048a50aeb5868e872e", "readme_url": "https://github.com/SourceDiver42/Ghidra-ChatGPT/blob/76034b9f5a393c387166cfd88e332a9ff62698b5/README.md", "stars": 95, "targets": [ "binary" ], "topics": [ "chatgpt", "ghidra", "ghidra-scripts" ], "url": "https://github.com/SourceDiver42/Ghidra-ChatGPT", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A general purpose machine code manipulation library for x86-32 (IA-32) and x86-64 (AMD64) architectures (Assembler, Disassembler, Library).", "description_language": "bilingual", "description_zh": "适用于 x86-32（IA-32）和 x86-64（AMD64）架构的通用机器码操作库（汇编器、反汇编器、库）。", "full_name": "swojtasiak/fcml-lib", "id": "scan-30181412", "license": "LGPL-2.1", "observed_at": "2026-10-18T14:39:03.064567Z", "pushed_at": "2026-05-03T15:13:50Z", "readme_sha256": "ab81842161e62b28d9bf602c297fc9093c2bd8c7860cb8e5a9938882aae6cf18", "readme_url": "https://github.com/swojtasiak/fcml-lib/blob/master/README.md", "stars": 95, "targets": [ "binary" ], "topics": [ "amd64", "assembler", "avx", "avx-512", "avx2", "code-generator", "disassembler", "intel", "shared-library", "sse", "sse2", "sse3", "sse41", "sse42", "ssse3", "x86", "x86-32", "x86-64", "xop" ], "url": "https://github.com/swojtasiak/fcml-lib", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Binary Ninja plugin for loading VTIL routines and lifting VTIL instructions to LLIL for analysis.", "description_language": "bilingual", "description_zh": "用于加载 VTIL 例程并将 VTIL 指令提升为 LLIL 以供分析的 Binary Ninja 插件。", "full_name": "vtil-project/VTIL-BinaryNinja", "id": "scan-276687869", "license": null, "observed_at": "2026-10-16T01:36:50.468492Z", "pushed_at": "2026-04-02T18:55:01Z", "readme_sha256": "8d2f34005c010ac55c41788ee69e9f574ea4f61553acaa691929f8f283e648c4", "readme_url": "https://github.com/vtil-project/VTIL-BinaryNinja/blob/master/README.md", "stars": 95, "targets": [ "binary" ], "topics": [ "architecture", "binary-analysis", "binary-ninja", "binaryninja-plugin", "binaryview", "binaryview-plugin", "deobfuscation", "devirtualization", "program-analysis", "python", "reverse-engineering", "vtil" ], "url": "https://github.com/vtil-project/VTIL-BinaryNinja", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Symbol Recovery Tool for Nuitka Binaries", "description_language": "bilingual", "description_zh": "Nuitka 二进制文件符号恢复工具", "full_name": "goatmilkkk/nuitka-helper", "id": "scan-823561949", "license": "GPL-3.0", "observed_at": "2026-10-16T01:35:57.329324Z", "pushed_at": "2024-12-25T04:22:02Z", "readme_sha256": "5f2dab74c93f74a71e2fffbde7420acbc9248f9ae7f232f9b3e6b7d86ffec840", "readme_url": "https://github.com/goatmilkkk/nuitka-helper/blob/main/README.md", "stars": 94, "targets": [ "binary" ], "topics": [ "ida", "ida-plugin", "ida-pro", "idapython", "malware-analysis", "nuitka", "python", "reverse-engineering" ], "url": "https://github.com/goatmilkkk/nuitka-helper", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Discord rich presence plugin for IDA Pro 7.0", "description_language": "bilingual", "description_zh": "IDA Pro 7.0 的 Discord 丰富状态插件", "full_name": "ntpopgetdope/ida-rpc", "id": "scan-121172133", "license": "MIT", "observed_at": "2026-10-16T01:35:57.362546Z", "pushed_at": "2019-04-26T12:44:17Z", "readme_sha256": "b80588431d240f4f423b41d407a7ad93f15922451da8049de1278e701f48b2dd", "readme_url": "https://github.com/ntpopgetdope/ida-rpc/blob/master/README.md", "stars": 94, "targets": [ "binary" ], "topics": [ "discord", "ida-plugin", "ida-pro", "rich-presence" ], "url": "https://github.com/ntpopgetdope/ida-rpc", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "An ad-free Douban client implemented through iOS reverse engineering. Thanks for using it; stars are welcome.", "description_language": "bilingual", "description_zh": "一个通过 iOS 逆向分析实现的无广告版豆瓣客户端，感谢使用，欢迎 Star。", "full_name": "TouchFriend/DoubanMApp", "id": "scan-1021158878", "license": "MIT", "observed_at": "2026-10-16T10:47:39.398051Z", "pushed_at": "2026-09-19T07:37:30Z", "readme_sha256": "9f13ab9e400a0af2e988c4efd81f7ca02eb0c6bbdf3f7fbec14e5127dc326bf2", "readme_url": "https://github.com/TouchFriend/DoubanMApp/blob/main/README.md", "stars": 94, "targets": [ "app", "binary" ], "topics": [ "arm64", "douban", "hook", "ios", "ios-reverse", "ios-tweak", "mach-o", "objective-c", "reverse-engineering" ], "url": "https://github.com/TouchFriend/DoubanMApp", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "The AI-friendly binary analysis & decompilation engine — 1:1 lift, built on LLVM [WIP]", "description_language": "bilingual", "description_zh": "对 AI 友好的二进制分析与反编译引擎，基于 LLVM，进行 1:1 提升转换［开发中］。", "full_name": "NeverSight/NeverD", "id": "scan-1244963310", "license": "NOASSERTION", "observed_at": "2026-10-18T18:09:14.691883Z", "pushed_at": "2026-10-18T18:08:25Z", "readme_sha256": "063226dd86688a1fb9f6d9741898c67d850f4398e9c652507a75f3b01d47ab90", "readme_url": "https://github.com/NeverSight/NeverD/blob/62f94e2ef00e116ceb3aaf6e502073e8284e320f/README.md", "stars": 93, "targets": [ "binary" ], "topics": [ "ai", "binary-analysis", "bpf", "coff", "compiler", "decompiler", "disassembler", "elf", "evm", "lift", "linux", "llm", "llvm", "mach-o", "macos", "reverse-engineering", "security", "solana", "static-analysis", "windows" ], "url": "https://github.com/NeverSight/NeverD", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Usermode NT Explorer - Query kernel addresses, translate virtual to physical addresses, inspect the PFN database, and more.", "description_language": "bilingual", "description_zh": "用户态 NT 探索工具：查询内核地址、将虚拟地址转换为物理地址、检查 PFN 数据库等。", "full_name": "zer0condition/NTMemory", "id": "scan-1133751827", "license": "MIT", "observed_at": "2026-10-16T01:37:15.147876Z", "pushed_at": "2026-03-16T09:50:50Z", "readme_sha256": "7236d900d090ac719dc570c55d52e3b2761c6f4997cdc42857504519f22dd53f", "readme_url": "https://github.com/zer0condition/NTMemory/blob/master/README.md", "stars": 93, "targets": [ "binary" ], "topics": [ "explorer", "kernel", "kernelexplorer", "memory-management-paging", "memory-viewer", "mmu", "nt", "ntoskrnl", "offsets", "physical-memory", "research", "reversing", "x64" ], "url": "https://github.com/zer0condition/NTMemory", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A verified map of reverse engineering and malware analysis. Disassemblers, unpacking, exploit dev, fuzzing, DFIR, and the deep-cut writeups other lists miss.", "description_language": "bilingual", "description_zh": "经过核实的逆向工程与恶意软件分析资源图谱，涵盖反汇编器、脱壳、漏洞利用开发、模糊测试、数字取证与事件响应，以及其他列表遗漏的深入文章。", "full_name": "ZX41R/awesome-reverse-engineering-and-malware-analysis", "id": "scan-1291001309", "license": "CC0-1.0", "observed_at": "2026-10-16T01:37:06.337835Z", "pushed_at": "2026-10-02T12:08:45Z", "readme_sha256": "a485d4c54b4105c91386339dae474513c7c16c6ddf6ab83564e743714d0f30a3", "readme_url": "https://github.com/ZX41R/awesome-reverse-engineering-and-malware-analysis/blob/main/README.md", "stars": 92, "targets": [ "binary", "firmware" ], "topics": [ "awesome-list", "binary-analysis", "binary-exploitation", "ctf", "cybersecurity", "dfir", "exploit-development", "firmware", "fuzzing", "ghidra", "ida-pro", "malware", "malware-analysis", "malware-development", "radare2", "reverse-engineering", "threat-intelligence", "vulnerability-research", "x64dbg", "yara" ], "url": "https://github.com/ZX41R/awesome-reverse-engineering-and-malware-analysis", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "IDA Pro to Ghidra Key Bindings to feel like if you were in IDA Pro when navigating", "description_language": "bilingual", "description_zh": "将 IDA Pro 键位绑定带到 Ghidra，让导航操作感觉如同在 IDA Pro 中。", "full_name": "enovella/ida2ghidra-kb", "id": "scan-180158760", "license": null, "observed_at": "2026-10-18T14:37:54.633390Z", "pushed_at": "2019-04-08T14:19:03Z", "readme_sha256": "dce9798245ca409320900b02d1f734191b09edc473dfa3f9932edae66abae988", "readme_url": "https://github.com/enovella/ida2ghidra-kb/blob/6d2912de0f8caeef0010d45c544b0aad33cf9942/README.md", "stars": 91, "targets": [ "binary" ], "topics": [ "ghidra", "idapro", "keybindings", "reverse-engineering" ], "url": "https://github.com/enovella/ida2ghidra-kb", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Watcom Disassembly Tool (wcdatool) - Tool to aid disassembling DOS applications created with the Watcom Toolchain", "description_language": "bilingual", "description_zh": "Watcom 反汇编工具（wcdatool），用于辅助反汇编由 Watcom 工具链创建的 DOS 应用", "full_name": "fonic/wcdatool", "id": "scan-226581428", "license": null, "observed_at": "2026-10-16T01:36:45.717064Z", "pushed_at": "2026-02-18T11:58:33Z", "readme_sha256": "2733642023e269232f7c859c5dc1088bb4445937c8c2ec67ab4e8a4a52cd19e8", "readme_url": "https://github.com/fonic/wcdatool/blob/master/README.md", "stars": 91, "targets": [ "app", "binary", "game" ], "topics": [ "decompilation", "disassembler", "disassembling", "disassembly", "dos", "games", "gaming", "mortal-kombat", "openwatcom", "retrogaming", "watcom" ], "url": "https://github.com/fonic/wcdatool", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "An IDA pro plugin to display user-added comments in disassembly and pseudocode views.", "description_language": "bilingual", "description_zh": "在反汇编和伪代码视图中展示用户添加注释的 IDA Pro 插件。", "full_name": "JayRE114514/UserComment", "id": "scan-654479165", "license": "MIT", "observed_at": "2026-10-16T01:35:57.608965Z", "pushed_at": "2023-06-30T07:36:05Z", "readme_sha256": "bfaeb8637626474b88af8d5c30155dee012111f3e0481cbbaef7539b5e6a2622", "readme_url": "https://github.com/JayRE114514/UserComment/blob/main/README.md", "stars": 91, "targets": [ "binary" ], "topics": [ "comments", "ida", "ida-plugin", "ida-pro", "user-comments" ], "url": "https://github.com/JayRE114514/UserComment", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Control Flow Flattening Deobfuscator for Obfuscator-LLVM as a plugin for IDA Pro.", "description_language": "bilingual", "description_zh": "以 IDA Pro 插件形式提供的 Obfuscator-LLVM 控制流平坦化去混淆工具。", "full_name": "maskelihileci/IDA_Ollvm-unflattener", "id": "scan-966104416", "license": "Apache-2.0", "observed_at": "2026-10-16T01:35:57.468670Z", "pushed_at": "2025-04-14T12:41:54Z", "readme_sha256": "84b2cf6304585f56e178b880e8e561461f5133d08b5311bb7a736c7c7fd4e7b0", "readme_url": "https://github.com/maskelihileci/IDA_Ollvm-unflattener/blob/main/README.md", "stars": 91, "targets": [ "binary" ], "topics": [ "binary-analysis", "deobfuscation", "ida-plugin", "ida-pro", "miasm", "obfuscation", "python" ], "url": "https://github.com/maskelihileci/IDA_Ollvm-unflattener", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "School 42 project // Implementation of programming game “Core War” [Champions + Assembler + Disassembler + Virtual Machine + Visualizer]", "description_language": "bilingual", "description_zh": "School 42 项目：编程游戏“Core War”的实现［战士程序 + 汇编器 + 反汇编器 + 虚拟机 + 可视化器］。", "full_name": "VBrazhnik/Corewar", "id": "scan-154313401", "license": null, "observed_at": "2026-10-18T14:39:07.988176Z", "pushed_at": "2019-01-03T06:47:30Z", "readme_sha256": "2c3bb7ec419f280a94a33033a99f671918a67a54133e71769f282d091550dd3a", "readme_url": "https://github.com/VBrazhnik/Corewar/blob/f46b8ae9bb6a00739dd92adcac3c15a331558284/README.md", "stars": 91, "targets": [ "binary", "game" ], "topics": [ "42", "42projects", "42school", "assembler", "born2code", "c", "corewar", "corewars", "disassembler", "gui", "ncurses", "unitfactory", "virtual-machine", "visualization", "visualizer" ], "url": "https://github.com/VBrazhnik/Corewar", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Ghidra scripts for SNES ROM reverse engineering", "description_language": "bilingual", "description_zh": "用于 SNES ROM 逆向工程的 Ghidra 脚本。", "full_name": "joshleaves/ghidra-snes", "id": "scan-1226077142", "license": "MIT", "observed_at": "2026-10-18T18:08:03.731598Z", "pushed_at": "2026-05-28T08:19:09Z", "readme_sha256": "79a87164d4884806fea771c0458a47b0fcb71f6d76a65b9f79f4e79e036ff8eb", "readme_url": "https://github.com/joshleaves/ghidra-snes/blob/d33ce5dbfbc3645f00449be1c7ca1c1c65e81756/README.md", "stars": 90, "targets": [ "binary" ], "topics": [ "65816", "ghidra", "reverse-engineering", "romhacking", "snes" ], "url": "https://github.com/joshleaves/ghidra-snes", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "An IDA Pro plugin to export data better", "description_language": "bilingual", "description_zh": "改进数据导出的 IDA Pro 插件", "full_name": "Krietz7/IDA-DataExportPlus", "id": "scan-871266944", "license": "MIT", "observed_at": "2026-10-16T01:35:57.686246Z", "pushed_at": "2026-01-21T03:35:04Z", "readme_sha256": "0e178b9a0fab22f57b57700a5d9dd80416c05b9ec212473075f7a6f0d394509b", "readme_url": "https://github.com/Krietz7/IDA-DataExportPlus/blob/main/README.md", "stars": 90, "targets": [ "binary" ], "topics": [ "ida-plugin", "python" ], "url": "https://github.com/Krietz7/IDA-DataExportPlus", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Python command-line tool and GDB extension to view and save x86, ARM and objdump assembly files as control-flow graph (CFG) pdf files", "description_language": "bilingual", "description_zh": "Python 命令行工具与 GDB 扩展，将 x86、ARM 和 objdump 汇编文件查看、保存为控制流图（CFG）PDF。", "full_name": "Kazhuu/asm2cfg", "id": "scan-336778956", "license": "MIT", "observed_at": "2026-10-18T18:09:31.782040Z", "pushed_at": "2024-04-01T13:23:47Z", "readme_sha256": "c3e675503813fa57ce62cd387bde91fa1e96e5edde56be448a8785bc7a80a9e3", "readme_url": "https://github.com/Kazhuu/asm2cfg/blob/711ac68348977252a610a0a8acf4c16664baf468/README.md", "stars": 89, "targets": [ "binary" ], "topics": [ "arm", "assembly", "breakpoint", "cfg", "control-flow-graphs", "disassembler", "disassembly", "gdb", "objdump", "x86", "x86-64", "x86-assembly" ], "url": "https://github.com/Kazhuu/asm2cfg", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "retools: a reverse engineering toolkit for normies", "description_language": "bilingual", "description_zh": "retools：面向普通人的逆向工程工具包。", "full_name": "agustingianni/retools", "id": "scan-99044630", "license": "MIT", "observed_at": "2026-10-18T18:09:31.782605Z", "pushed_at": "2017-12-28T14:48:57Z", "readme_sha256": "d83364026cc173e25d5f23b195328d52b7c22add8f93c6e9d7c7015b7cbae48c", "readme_url": "https://github.com/agustingianni/retools/blob/0df67fe6f21895644936c5896a33770431d86a1d/README.md", "stars": 88, "targets": [ "binary" ], "topics": [ "arm", "armv7", "armv8", "binary", "disassembler", "disassembly", "emulator", "engineering", "framework", "macho", "re", "research", "reverse", "vulndev", "vulnerability" ], "url": "https://github.com/agustingianni/retools", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Unofficial YARA IDA Pro plugin, along with an unparalleled crypto/hash/compression rule set based on Luigi Auriemma's signsrch signatures.", "description_language": "bilingual", "description_zh": "非官方 YARA IDA Pro 插件，附基于 Luigi Auriemma 的 signsrch 特征签名构建、无与伦比的密码学、哈希和压缩规则集。", "full_name": "kweatherman/yara4ida", "id": "scan-457144792", "license": "NOASSERTION", "observed_at": "2026-10-16T01:35:57.712340Z", "pushed_at": "2025-10-01T20:54:59Z", "readme_sha256": "905b6165284a73a8a4f8de8b0d676b4f9d05da2e3f7c79f8f087ab5f5d96be76", "readme_url": "https://github.com/kweatherman/yara4ida/blob/master/README.md", "stars": 88, "targets": [ "binary" ], "topics": [ "cryptography", "ida-plugin", "reverse-engineering", "yara-rules", "yara-scanner" ], "url": "https://github.com/kweatherman/yara4ida", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Patchestry is a binary patching framework built with MLIR and Ghidra.", "description_language": "bilingual", "description_zh": "Patchestry 是基于 MLIR 和 Ghidra 构建的二进制补丁框架。", "full_name": "lifting-bits/patchestry", "id": "scan-772138893", "license": "Apache-2.0", "observed_at": "2026-10-18T18:10:01.301137Z", "pushed_at": "2026-09-18T23:01:14Z", "readme_sha256": "c1dde2535bea7730b51c2c8303ad2bcdc5aae1e8a0dcba454a81d3337edb58a7", "readme_url": "https://github.com/lifting-bits/patchestry/blob/4acddb43de5662de00ba2e239f279159c2dbd609/README.md", "stars": 88, "targets": [ "binary" ], "topics": [ "c", "cpp", "decompilation", "ghidra-scripts", "mlir", "program-analysis" ], "url": "https://github.com/lifting-bits/patchestry", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "sigmaker for Ghidra", "description_language": "bilingual", "description_zh": "Ghidra 特征码生成器。", "full_name": "vega-979/Sigga", "id": "scan-522941396", "license": "GPL-3.0", "observed_at": "2026-10-18T14:37:54.633777Z", "pushed_at": "2026-10-12T22:21:52Z", "readme_sha256": "5170d25079e8bce2376b7be1b7fa20e1e6581b4af9c4fb75a48662555618916a", "readme_url": "https://github.com/vega-979/Sigga/blob/f907450c8e52a12a8b396ad9bee3f89970676cbd/README.md", "stars": 88, "targets": [ "binary" ], "topics": [ "ghidra", "ida", "idapro", "sigga", "sigmaker", "signature" ], "url": "https://github.com/vega-979/Sigga", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "ida plugin to parse qt meta data", "description_language": "bilingual", "description_zh": "解析 Qt 元数据的 IDA 插件", "full_name": "fjqisba/QtMetaParser", "id": "scan-604122338", "license": "MIT", "observed_at": "2026-10-16T01:35:57.865510Z", "pushed_at": "2025-01-15T09:10:40Z", "readme_sha256": "7ed2c3127bfd29dd3496a1fcaaad220279b33fe16f11150084a6a2d0fe15ef3d", "readme_url": "https://github.com/fjqisba/QtMetaParser/blob/main/README.md", "stars": 87, "targets": [ "binary" ], "topics": [ "ida-plugin", "qt" ], "url": "https://github.com/fjqisba/QtMetaParser", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Software reverse engineering tool for Java", "description_language": "bilingual", "description_zh": "Java 软件逆向工程工具", "full_name": "firstfault/Trinity", "id": "scan-783061010", "license": "Apache-2.0", "observed_at": "2026-10-16T01:36:50.844363Z", "pushed_at": "2026-08-19T11:23:03Z", "readme_sha256": "4d503bec1045a7dfc2caaf03c59b7906bc64ed47103cd29e8a1f4151f40366a4", "readme_url": "https://github.com/firstfault/Trinity/blob/master/README.md", "stars": 86, "targets": [ "binary" ], "topics": [ "bytecode", "decompiler", "deobfuscation", "disassembler", "java", "jvm", "obfuscation", "reverse-engineering", "software-analysis" ], "url": "https://github.com/firstfault/Trinity", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Pbd is a Python module to disassemble serialized protocol buffers descriptors (https://developers.google.com/protocol-buffers/).", "description_language": "bilingual", "description_zh": "Pbd 是用于反汇编序列化 Protocol Buffers 描述符的 Python 模块（https://developers.google.com/protocol-buffers/）。", "full_name": "rsc-dev/pbd", "id": "scan-50019267", "license": "MIT", "observed_at": "2026-10-18T18:09:31.783156Z", "pushed_at": "2021-01-12T17:32:38Z", "readme_sha256": "f9d91f5bea7010d5b130e0bbdc6f6dd909d0dbb94aaa62758930165ebf6ae4ea", "readme_url": "https://github.com/rsc-dev/pbd/blob/c2bbbac78d1d737dee6f735b05a19397140bab13/README.md", "stars": 86, "targets": [ "binary" ], "topics": [ "disassembler", "protocol-buffers", "protocol-buffers-disassembler", "python", "reverse-engineering", "security" ], "url": "https://github.com/rsc-dev/pbd", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A tracing disassembler & UI for Gameboy ROMs — integrated with Sameboy for emulation & debugging.", "description_language": "bilingual", "description_zh": "用于 Gameboy ROM 的跟踪式反汇编器和 UI，集成 Sameboy 以进行模拟和调试。", "full_name": "jverkoey/windfish", "id": "scan-321876841", "license": "Apache-2.0", "observed_at": "2026-10-18T14:39:07.991256Z", "pushed_at": "2021-02-14T04:32:19Z", "readme_sha256": "3bad49eed4993bae6c709a2de715075d9a0a7ea7cb573b7a4ece40fe5c4ba52b", "readme_url": "https://github.com/jverkoey/windfish/blob/743755248996deb7181ae92f6e60be5656439c44/README.md", "stars": 85, "targets": [ "binary", "game" ], "topics": [ "disassembler", "game-boy", "gameboy-roms" ], "url": "https://github.com/jverkoey/windfish", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Ultimate Ghidra loader for the LX/LE executable file format (OS/2, DOS4GW, VxD)", "description_language": "bilingual", "description_zh": "面向 LX／LE 可执行文件格式（OS/2、DOS4GW、VxD）的终极 Ghidra 加载器。", "full_name": "yetmorecode/ghidra-lx-loader", "id": "scan-304362976", "license": "Apache-2.0", "observed_at": "2026-10-18T18:08:03.732039Z", "pushed_at": "2026-08-29T00:43:01Z", "readme_sha256": "7dccd29553c3638b0ffc842974554b09c28ffff73da0d913440d0359d4380cbf", "readme_url": "https://github.com/yetmorecode/ghidra-lx-loader/blob/60bae5199fdada5b3b825741a94bfbbe04cb7a5f/README.md", "stars": 85, "targets": [ "binary" ], "topics": [ "dos", "dos4gw", "dpmi", "ghidra", "ghidra-loader", "linear-executable", "reverse-engineering", "vxd" ], "url": "https://github.com/yetmorecode/ghidra-lx-loader", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A collection of modules and scripts to help with analyzing Nim binaries", "description_language": "bilingual", "description_zh": "辅助分析 Nim 二进制文件的模块与脚本合集", "full_name": "eset/nimfilt", "id": "scan-781467224", "license": "BSD-2-Clause", "observed_at": "2026-10-16T01:35:58.012597Z", "pushed_at": "2024-10-07T18:26:02Z", "readme_sha256": "4a8b1f393bf4ca47f89eebd44bcb2c404cc9fb9e86050c0a541c207fdf2d2ad2", "readme_url": "https://github.com/eset/nimfilt/blob/main/README.md", "stars": 84, "targets": [ "binary" ], "topics": [ "demangling", "ida", "ida-plugin", "ida-pro", "idapython", "malware-analysis", "nim", "nim-lang", "nim-language", "reverse-engineering" ], "url": "https://github.com/eset/nimfilt", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "IDA Pro plugin to display and search comments in the database", "description_language": "bilingual", "description_zh": "显示和搜索数据库注释的 IDA Pro 插件", "full_name": "merces/showcomments", "id": "scan-392867046", "license": "GPL-3.0", "observed_at": "2026-10-16T01:35:58.109865Z", "pushed_at": "2026-06-18T21:59:22Z", "readme_sha256": "cb60612f8cb7d2ed39eb0747c75805cb2e1b269841da29349792fb7ee564aeaa", "readme_url": "https://github.com/merces/showcomments/blob/main/README.md", "stars": 84, "targets": [ "binary" ], "topics": [ "ida-plugin", "idapro", "idapython", "reverse-engineering" ], "url": "https://github.com/merces/showcomments", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Disassembler for Racket", "description_language": "bilingual", "description_zh": "Racket 的反汇编器。", "full_name": "samth/disassemble", "id": "scan-1224531", "license": "MIT", "observed_at": "2026-10-18T14:39:07.991479Z", "pushed_at": "2026-09-29T13:20:17Z", "readme_sha256": "27e786bcf68eacf087a9d620c1cb0549dadea151de2044010c6eb4d8dac5c056", "readme_url": "https://github.com/samth/disassemble/blob/b69e5af6e9b70e910eeba85deb9f4d5ddf77a3c5/README.md", "stars": 84, "targets": [ "binary" ], "topics": [ "disassembler", "racket" ], "url": "https://github.com/samth/disassemble", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "AI-Powered Autonomous Binary Reverse Engineering CLI — the native reverse engine from Innora-Sentinel. Local LLM inference (MLX), MPS GPU acceleration, multi-round iterative analysis, zero API cost.", "description_language": "bilingual", "description_zh": "AI 驱动的自主二进制逆向工程命令行工具，是 Innora-Sentinel 的原生逆向引擎。提供本地 LLM 推理（MLX）、MPS GPU 加速、多轮迭代分析，API 成本为零。", "full_name": "sgInnora/sentinel-reverse", "id": "scan-1150454528", "license": "MIT", "observed_at": "2026-10-16T01:37:06.527340Z", "pushed_at": "2026-02-05T09:49:56Z", "readme_sha256": "eccab12d388fc40d71f04d75999c597409c053cee1756f84df671945b058c43a", "readme_url": "https://github.com/sgInnora/sentinel-reverse/blob/main/README.md", "stars": 84, "targets": [ "binary" ], "topics": [ "ai", "apple-silicon", "binary-analysis", "binary-reverse-engineering", "ctf-tools", "cybersecurity", "decompiler", "disassembly", "innora-sentinel", "llm", "malware-analysis", "metal", "mlx", "mps-gpu", "python", "pytorch", "radare2", "reverse-engineering", "security-tools", "vulnerability-detection" ], "url": "https://github.com/sgInnora/sentinel-reverse", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A fully playable, work-in-progress native Sonic Adventure port for Windows, Linux and Steam Deck. Powered by KatanaRecomp.", "description_language": "bilingual", "description_zh": "可完整游玩、仍在开发中的 Sonic Adventure 原生移植版，支持 Windows、Linux 与 Steam Deck。由 KatanaRecomp 驱动。", "full_name": "sonicfreak1337/SARecomp", "id": "scan-1366231431", "license": null, "observed_at": "2026-10-16T11:55:09.463470Z", "pushed_at": "2026-10-14T19:22:23Z", "readme_sha256": "0cdf9f4b5f0eef6aaef3b5fd194dd164e1561230f3bdd1d13179f260fdbf16c7", "readme_url": "https://github.com/sonicfreak1337/SARecomp/blob/main/README.md", "stars": 84, "targets": [ "binary" ], "topics": [ "linux", "sonic-adventure", "static-recompilation", "steam-deck", "vulkan", "windows" ], "url": "https://github.com/sonicfreak1337/SARecomp", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Inlay hints for hex-rays", "description_language": "bilingual", "description_zh": "Hex-Rays 内嵌提示", "full_name": "milankovo/hexinlay", "id": "scan-848000358", "license": "MIT", "observed_at": "2026-10-16T01:35:58.137355Z", "pushed_at": "2026-04-03T09:36:53Z", "readme_sha256": "92d3e25f4a1af20c20c4d3f0a967fd714879a54219a299e494e3c7cdd14e2f99", "readme_url": "https://github.com/milankovo/hexinlay/blob/main/README.md", "stars": 83, "targets": [ "binary" ], "topics": [ "hex-rays", "ida", "ida-plugin", "ida-pro" ], "url": "https://github.com/milankovo/hexinlay", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Tool that automates some useful structure routines in IDA PRO", "description_language": "bilingual", "description_zh": "自动执行 IDA PRO 中一些实用结构体操作的工具。", "full_name": "Mizari/phrank", "id": "scan-367302231", "license": "MIT", "observed_at": "2026-10-18T14:37:54.634040Z", "pushed_at": "2024-03-20T01:26:50Z", "readme_sha256": "b35981d1cad7ca603ecf62797f66d7ecff747bbacd07e199a1f440b447e95a64", "readme_url": "https://github.com/Mizari/phrank/blob/a60ba0caf338bdfbd884b003c20064b98eb2709c/README.md", "stars": 83, "targets": [ "binary" ], "topics": [ "hacking", "hacking-tool", "hexrays", "hexrays-decompiler", "idapro", "idapython", "reverse-engineering" ], "url": "https://github.com/Mizari/phrank", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A decompiler to automatically reverse-engineer the DNN semantics from its compiled binary using program analysis", "description_language": "bilingual", "description_zh": "使用程序分析，从编译后二进制中自动逆向恢复 DNN 语义的反编译器。", "full_name": "purseclab/DnD", "id": "scan-490379021", "license": "Apache-2.0", "observed_at": "2026-10-18T18:09:14.692817Z", "pushed_at": "2024-12-17T18:52:01Z", "readme_sha256": "e8fcb4d67ff10e4fe737ab8468e2e621a40da12acf412c454c5e5ec1ecb20c10", "readme_url": "https://github.com/purseclab/DnD/blob/a5a54d36b9e1f490ff9a7ff4d56c371df8ddbc25/README.md", "stars": 83, "targets": [ "binary" ], "topics": [ "angr", "decompiler", "deep-learning", "neural-network", "program-analysis", "reverse-engineering", "symbolic-execution" ], "url": "https://github.com/purseclab/DnD", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "ESP8266 and EPS32 firmware binaries analysis toolkit", "description_language": "bilingual", "description_zh": "ESP8266 和 EPS32 固件二进制分析工具集", "full_name": "serene-brew/ESPionage", "id": "scan-999553171", "license": "BSD-3-Clause", "observed_at": "2026-10-16T10:47:50.086052Z", "pushed_at": "2025-10-30T00:44:03Z", "readme_sha256": "17567a7c1ba6ce5f37078551be71c0d077882b427b0f2d34aed36dd428c59a15", "readme_url": "https://github.com/serene-brew/ESPionage/blob/main/README.md", "stars": 83, "targets": [ "binary", "firmware" ], "topics": [], "url": "https://github.com/serene-brew/ESPionage", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Browser Assembler/Disassembler/Emulator Tool", "description_language": "bilingual", "description_zh": "浏览器汇编器／反汇编器／模拟器工具。", "full_name": "futo-org/ret", "id": "scan-807834585", "license": "GPL-2.0", "observed_at": "2026-10-18T14:38:20.306567Z", "pushed_at": "2026-10-16T23:39:33Z", "readme_sha256": "3b99b270163320519367bf6f71a66360859b9ac68055a2d42550d6c123786cf7", "readme_url": "https://github.com/futo-org/ret/blob/89389a8dbbd6c6e7e260118972e5f7e3d21452e4/README.md", "stars": 82, "targets": [ "binary", "website" ], "topics": [ "assembly", "disassembler", "reverse-engineering", "wasm" ], "url": "https://github.com/futo-org/ret", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "IDA plugin to support automatic reverse engineering", "description_language": "bilingual", "description_zh": "支持自动化逆向工程的 IDA 插件", "full_name": "stuxnet147/IDA-Assistant", "id": "scan-771440212", "license": "MIT", "observed_at": "2026-10-16T01:35:58.163802Z", "pushed_at": "2025-02-28T11:50:55Z", "readme_sha256": "cfae9cf4e433bbf334da39be66c20592131ffd90cf0c9908e57837ba828af497", "readme_url": "https://github.com/stuxnet147/IDA-Assistant/blob/main/README.md", "stars": 82, "targets": [ "binary" ], "topics": [ "claude", "claude-3", "claude-api", "ida", "ida-plugin", "reverse-engineering" ], "url": "https://github.com/stuxnet147/IDA-Assistant", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Have you ever wondered: what if IDA had great Ctrl+F search support for Pseudocode windows? No longer!", "description_language": "bilingual", "description_zh": "曾希望 IDA 的伪代码窗口拥有出色的 Ctrl+F 搜索支持？现在就有了！", "full_name": "cristeigabriela/IDAFind", "id": "scan-1130900197", "license": "Unlicense", "observed_at": "2026-10-16T01:35:58.297994Z", "pushed_at": "2026-03-07T15:19:21Z", "readme_sha256": "8d378a12f3fdabed94eac0c25f150d944b31da287c95a5bf813b6aaafc2162f3", "readme_url": "https://github.com/cristeigabriela/IDAFind/blob/main/README.md", "stars": 81, "targets": [ "binary" ], "topics": [ "ida", "ida-plugin", "idapro", "idapython", "search" ], "url": "https://github.com/cristeigabriela/IDAFind", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Unofficial native PC port of WWE SmackDown vs. Raw 2011 (Xbox 360). Bring your own disc.", "description_language": "bilingual", "description_zh": "WWE SmackDown vs. Raw 2011（Xbox 360）的非官方原生 PC 移植。需自备光盘。", "full_name": "KaikoClanworth1/wwe-svr2011-pc", "id": "scan-1393058439", "license": null, "observed_at": "2026-10-16T11:55:09.686496Z", "pushed_at": "2026-10-15T21:02:01Z", "readme_sha256": "e4932783e5c62caef7bd1e813a836fb68c9eeceacdd9915134e1b91c156d5e91", "readme_url": "https://github.com/KaikoClanworth1/wwe-svr2011-pc/blob/main/README.md", "stars": 81, "targets": [ "binary" ], "topics": [ "pc-port", "rexglue", "static-recompilation", "wwe", "xbox360" ], "url": "https://github.com/KaikoClanworth1/wwe-svr2011-pc", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Learn the fundamentals of Binary Auditing. Know how HLL mapping works, get more inner file understanding than ever.", "description_language": "bilingual", "description_zh": "学习二进制审查的基础知识。了解高层语言（HLL）映射的工作方式，更深入地理解文件内部结构。", "full_name": "ayoubfaouzi/binary-auditing-solutions", "id": "scan-60259987", "license": null, "observed_at": "2026-10-18T14:36:09.930156Z", "pushed_at": "2020-12-21T03:21:48Z", "readme_sha256": "bf136832ee7cd5ef376987111f4685f078f34978edf5d214a5d2da6ec8137447", "readme_url": "https://github.com/ayoubfaouzi/binary-auditing-solutions/blob/6e7ab0b3d08549abbde917604a1b4622308bb99b/README.md", "stars": 80, "targets": [ "binary" ], "topics": [ "binary-analysis", "decompilation", "disassembly", "ida-pro", "malware", "reverse-engineering", "static-analysis", "unpacking" ], "url": "https://github.com/ayoubfaouzi/binary-auditing-solutions", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "ViDi Visual Disassembler (experimental)", "description_language": "bilingual", "description_zh": "ViDi 可视化反汇编器（实验性）。", "full_name": "hasherezade/ViDi", "id": "scan-72311064", "license": "BSD-2-Clause", "observed_at": "2026-10-18T14:39:07.992383Z", "pushed_at": "2025-10-08T04:51:43Z", "readme_sha256": "fc0ed2e9e00ca4d8555051248fd44190fd3c4bf2e9170dd08c4553a0bb9d2e96", "readme_url": "https://github.com/hasherezade/ViDi/blob/d61980a6c20b977178304a921dd872fcc356ddc5/README.md", "stars": 80, "targets": [ "binary" ], "topics": [ "bearparser", "disassembler", "multiplatform", "pe-file" ], "url": "https://github.com/hasherezade/ViDi", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Executables created while writing \"Introduction to Manual Backdooring\".", "description_language": "bilingual", "description_zh": "编写《手动植入后门入门》时创建的可执行文件。", "full_name": "abatchy17/Introduction-To-Manual-Backdooring", "id": "scan-91916954", "license": null, "observed_at": "2026-10-16T01:37:15.916870Z", "pushed_at": "2017-05-30T23:24:01Z", "readme_sha256": "5e7593a2a5d54489b9036407926ad414aa0fd10f3a27be65a4c5327ea03d802a", "readme_url": "https://github.com/abatchy17/Introduction-To-Manual-Backdooring/blob/master/README.md", "stars": 79, "targets": [ "binary" ], "topics": [ "assembly", "backdooring", "exe", "malware", "reversing" ], "url": "https://github.com/abatchy17/Introduction-To-Manual-Backdooring", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Ubuntu on QNAP TS-453Be", "description_language": "bilingual", "description_zh": "在 QNAP TS-453Be 上运行 Ubuntu", "full_name": "guedou/TS-453Be", "id": "scan-164476051", "license": null, "observed_at": "2026-10-16T01:37:06.544320Z", "pushed_at": "2020-09-27T08:41:27Z", "readme_sha256": "839a9bcab3863d347d3b6c41d9e5f906e4dcdaaceee005ed77a72cc2dc725b56", "readme_url": "https://github.com/guedou/TS-453Be/blob/master/README.md", "stars": 79, "targets": [ "binary" ], "topics": [ "ghidra", "it8528", "qbdi", "qnap", "radare2", "reverse-engineering", "ts-453be" ], "url": "https://github.com/guedou/TS-453Be", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Maybe the headless Ghidra MCP you are looking for.", "description_language": "bilingual", "description_zh": "也许就是你在找的无界面 Ghidra MCP。", "full_name": "elliottophellia/Ryuumonbuchi", "id": "scan-1343854589", "license": "GPL-2.0", "observed_at": "2026-10-18T18:08:03.736118Z", "pushed_at": "2026-08-28T09:13:13Z", "readme_sha256": "af987211d3b47ccad391e11e4aaa1b8de90f4c8e38499f7a0f29c6a514c0d0bf", "readme_url": "https://github.com/elliottophellia/Ryuumonbuchi/blob/a6d76db0430e328e213d7ed3062c2f49a1821b43/README.md", "stars": 78, "targets": [ "binary" ], "topics": [ "binary-analysis", "decompiler", "ghidra", "ghidra-mcp", "mcp", "model-context-protocol", "reverse-engineering" ], "url": "https://github.com/elliottophellia/Ryuumonbuchi", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Decompilation of Xenogears.", "description_language": "bilingual", "description_zh": "Xenogears 反编译项目。", "full_name": "yaz0r/Noah", "id": "scan-881697317", "license": "MIT", "observed_at": "2026-10-18T18:08:03.736467Z", "pushed_at": "2026-04-22T18:36:33Z", "readme_sha256": "c343ad03ad8f5a485042efde697ced40f238a1e1f16d809cbd1a385ad2c23fcf", "readme_url": "https://github.com/yaz0r/Noah/blob/d725fe231e56a895c17df0554042b9e2bd1acb78/README.md", "stars": 78, "targets": [ "binary" ], "topics": [ "decompilation", "ghidra", "xenogears" ], "url": "https://github.com/yaz0r/Noah", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Leveraging CVEs as North Stars in vulnerability discovery and comprehension.", "description_language": "bilingual", "description_zh": "以 CVE 为指引，开展漏洞发现与理解。", "full_name": "cve-north-stars/cve-north-stars.github.io", "id": "scan-519606340", "license": "CC-BY-4.0", "observed_at": "2026-10-18T18:08:03.736883Z", "pushed_at": "2024-04-02T04:29:19Z", "readme_sha256": "1b966fcc4a5c0003a8dbfeb6275988a04338e25a05c7eb77ce34bc2fe76eac67", "readme_url": "https://github.com/cve-north-stars/cve-north-stars.github.io/blob/031fb7280b6c2cc683b38f492b4100266ecb45f5/README.md", "stars": 77, "targets": [ "binary" ], "topics": [ "cve", "cve-north-stars", "ghidra", "patchdiff", "rootcauseanalysis", "vulnerability-research", "windows" ], "url": "https://github.com/cve-north-stars/cve-north-stars.github.io", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Docker image for building ghidra RE framework from source", "description_language": "bilingual", "description_zh": "用于从源码构建 Ghidra 逆向工程框架的 Docker 镜像。", "full_name": "dukebarman/ghidra-builder", "id": "scan-185422938", "license": "Apache-2.0", "observed_at": "2026-10-18T18:08:03.737209Z", "pushed_at": "2022-11-23T13:31:57Z", "readme_sha256": "fd4f0a30d7adbabefd846f9bbbe2eb0a8162d7aa254b11e2d27875af0c332b1b", "readme_url": "https://github.com/dukebarman/ghidra-builder/blob/ccfdd487c8c344cc72f27f3c562ceef5629917b9/README.md", "stars": 77, "targets": [ "binary" ], "topics": [ "docker", "docker-image", "ghidra", "reverse-engineering" ], "url": "https://github.com/dukebarman/ghidra-builder", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Hide function calls to prevent reverse-engineering", "description_language": "bilingual", "description_zh": "隐藏函数调用以防止逆向工程", "full_name": "TomashuTTTT7/Hidecall", "id": "scan-345405631", "license": "MIT", "observed_at": "2026-10-16T01:37:15.998997Z", "pushed_at": "2021-04-29T20:56:34Z", "readme_sha256": "668fb47e048a9087fc9cda8259ff1411c0e50aef5e1899211090f423fdc87281", "readme_url": "https://github.com/TomashuTTTT7/Hidecall/blob/main/README.md", "stars": 77, "targets": [ "binary" ], "topics": [ "anti-reversing", "compile-time", "hide", "msvc", "obfuscate", "obfuscate-code", "obfuscated-code", "obfuscation", "reverse-engineering", "reversing", "single-header", "small", "x86" ], "url": "https://github.com/TomashuTTTT7/Hidecall", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A command line tool for extracting machine learning ready data from software binaries powered by Radare2", "description_language": "bilingual", "description_zh": "基于 Radare2 的命令行工具，从软件二进制文件提取可直接用于机器学习的数据", "full_name": "br0kej/bin2ml", "id": "scan-642800749", "license": "MIT", "observed_at": "2026-10-16T01:37:06.751369Z", "pushed_at": "2025-05-03T08:18:35Z", "readme_sha256": "278bef4084a979d1171367738c25bc9a4c9e694285a1a41ff6223775677284ef", "readme_url": "https://github.com/br0kej/bin2ml/blob/main/README.md", "stars": 76, "targets": [ "binary" ], "topics": [ "binary-analysis", "data-generation", "graph-neural-networks", "machine-learning", "ml4sec", "nlp", "radare2", "reverse-engineering" ], "url": "https://github.com/br0kej/bin2ml", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "An AI-powered reverse-engineering copilot for assisting tedious malware analysis in IDA Pro.", "description_language": "bilingual", "description_zh": "AI 驱动的逆向工程助手，协助在 IDA Pro 中完成繁琐的恶意软件分析。", "full_name": "CSIT-SG/AETHER", "id": "scan-1170290018", "license": "GPL-3.0", "observed_at": "2026-10-16T01:35:58.503854Z", "pushed_at": "2026-09-18T05:32:00Z", "readme_sha256": "ef4129fb857e6d97c2ea98abbeaba8be62e80aefcdf6ead3fd3729efb08ba3be", "readme_url": "https://github.com/CSIT-SG/AETHER/blob/main/README.md", "stars": 76, "targets": [ "binary" ], "topics": [ "ida-plugin", "idapro", "python", "reverse-engineering" ], "url": "https://github.com/CSIT-SG/AETHER", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Hashlink bytecode disassembler, analyzer, decompiler and assembler.", "description_language": "bilingual", "description_zh": "HashLink 字节码反汇编器、分析器、反编译器及汇编器。", "full_name": "Gui-Yom/hlbc", "id": "scan-490077961", "license": "MIT", "observed_at": "2026-10-18T18:09:19.484040Z", "pushed_at": "2024-08-14T18:56:52Z", "readme_sha256": "cab322a63338fe4375ab7c4aed87ef83ab5f14a8c6c02121ab66ab176bd71af8", "readme_url": "https://github.com/Gui-Yom/hlbc/blob/41b4c10eb91a2b2a6c9f9f9118252d5b691fcaf6/README.md", "stars": 76, "targets": [ "binary" ], "topics": [ "analysis", "bytecode", "cli", "decompiler", "disassembler", "gui", "hashlink", "haxe" ], "url": "https://github.com/Gui-Yom/hlbc", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Framework to automate working with AST in IDA Pro", "description_language": "bilingual", "description_zh": "在 IDA Pro 中自动处理 AST 的框架。", "full_name": "Mizari/herast", "id": "scan-360527757", "license": null, "observed_at": "2026-10-18T14:37:54.634380Z", "pushed_at": "2024-04-03T17:04:11Z", "readme_sha256": "ed4526aa54f3dfbfc9a4bdf46bfb23626da8c169d9fc82f5bca1fa330ad1a381", "readme_url": "https://github.com/Mizari/herast/blob/02df00ea11c384377172a4cd3ebc6606e5371e52/README.md", "stars": 76, "targets": [ "binary" ], "topics": [ "hacking", "hacking-tool", "hexrays", "idapro", "idapython", "idapython-plugin", "reverse-engineering" ], "url": "https://github.com/Mizari/herast", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Tools for creating, modifying, assembling and disassembling RemObjects PascalScript files.", "description_language": "bilingual", "description_zh": "用于创建、修改、汇编和反汇编 RemObjects PascalScript 文件的工具。", "full_name": "Wack0/IFPSTools.NET", "id": "scan-522238983", "license": "NOASSERTION", "observed_at": "2026-10-16T01:37:16.059785Z", "pushed_at": "2026-08-12T15:57:42Z", "readme_sha256": "1f2fd0c62f23b75df2dc9cb9ea76e668078eb370f4ca19828df91674c20b3720", "readme_url": "https://github.com/Wack0/IFPSTools.NET/blob/master/readme.md", "stars": 76, "targets": [ "binary" ], "topics": [ "assembler", "disassembler", "inno-setup", "innosetup", "pascalscript", "reversing" ], "url": "https://github.com/Wack0/IFPSTools.NET", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Easy-to-use IDA plugin for code emulation", "description_language": "bilingual", "description_zh": "易于使用的 IDA 代码模拟插件", "full_name": "AzzOnFire/emuit", "id": "scan-583117120", "license": "GPL-3.0", "observed_at": "2026-10-16T01:35:58.531796Z", "pushed_at": "2025-11-29T21:36:24Z", "readme_sha256": "bec8bd21f040fee2fab00c62982e009e9a6978ece22d45770ef86803d6dc4eb6", "readme_url": "https://github.com/AzzOnFire/emuit/blob/master/README.md", "stars": 75, "targets": [ "binary" ], "topics": [ "ida-plugin", "ida-pro", "idapython", "malware-analysis", "reverse-engineering" ], "url": "https://github.com/AzzOnFire/emuit", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Binja (sort of) headless", "description_language": "bilingual", "description_zh": "让 Binja（某种程度上）以无界面模式运行。", "full_name": "hugsy/binja-headless", "id": "scan-382195048", "license": "MIT", "observed_at": "2026-10-18T18:09:37.113377Z", "pushed_at": "2025-02-13T20:55:25Z", "readme_sha256": "3f0bce21073e5e22cf2fd0b596dda94d5541db6d3baf5095d2631d39be5d9daa", "readme_url": "https://github.com/hugsy/binja-headless/blob/e6ab5adb2188efd27c3485fd014125c8b9a2648b/README.md", "stars": 75, "targets": [ "binary" ], "topics": [ "binary-ninja", "binary-ninja-plugin", "disassembler", "python3", "reverse-engineering" ], "url": "https://github.com/hugsy/binja-headless", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A Ghidra headless analyzer tailored for Qt binary analysis", "description_language": "bilingual", "description_zh": "专为 Qt 二进制分析设计的 Ghidra 无界面分析器。", "full_name": "OSUSecLab/QtRE", "id": "scan-637871139", "license": "Apache-2.0", "observed_at": "2026-10-18T18:08:03.737667Z", "pushed_at": "2024-10-07T22:19:21Z", "readme_sha256": "37394d0bff42886a21defe8b127111e3235e4c4af9d9202e28f316ac7089a296", "readme_url": "https://github.com/OSUSecLab/QtRE/blob/4715ebeb3be7fd09419447d494c317a4075d1a11/README.md", "stars": 75, "targets": [ "binary" ], "topics": [ "binary-analysis", "ghidra", "qt", "reverse-engineering" ], "url": "https://github.com/OSUSecLab/QtRE", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Ghidra plugin to communicate with radare2", "description_language": "bilingual", "description_zh": "与 radare2 通信的 Ghidra 插件", "full_name": "radareorg/r4ghidra", "id": "scan-174108824", "license": null, "observed_at": "2026-10-16T01:37:06.793873Z", "pushed_at": "2026-10-15T23:36:18Z", "readme_sha256": "efc1fa0d950e0c6e06a8ff4bb5f04636908fd3a883b324853f0d6fb8304be988", "readme_url": "https://github.com/radareorg/r4ghidra/blob/master/README.md", "stars": 75, "targets": [ "binary" ], "topics": [ "decompiler", "ghidra", "integration", "plugin", "radare2" ], "url": "https://github.com/radareorg/r4ghidra", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Alternative API for IDA / Hex-Rays", "description_language": "bilingual", "description_zh": "IDA / Hex-Rays 的替代 API。", "full_name": "zerotypic/wilhelm", "id": "scan-327790369", "license": "GPL-3.0", "observed_at": "2026-10-18T14:37:54.634748Z", "pushed_at": "2023-09-18T14:56:00Z", "readme_sha256": "801cb46d9cfcf4a43c9aebb048347cc168162618ed7d2eabb9c7f6117e07730d", "readme_url": "https://github.com/zerotypic/wilhelm/blob/471be18cce9d197dfe1eca235b8640ee112b2bb0/README.md", "stars": 75, "targets": [ "binary" ], "topics": [ "hexrays", "idapro", "python", "reverse-engineering" ], "url": "https://github.com/zerotypic/wilhelm", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Matching decompilation of Brave Fencer Musashi (PS1, SLUS-00726): 218 binaries rebuild byte-identical from C", "description_language": "bilingual", "description_zh": "Brave Fencer Musashi（PS1，SLUS-00726）的匹配反编译：从 C 代码重建 218 个二进制文件，逐字节一致。", "full_name": "Druthulu/BFM-decomp", "id": "scan-1265763041", "license": "AGPL-3.0", "observed_at": "2026-10-18T13:13:27.632469Z", "pushed_at": "2026-10-17T16:03:50Z", "readme_sha256": "4ab38e96d72a559d585afd1c716267ec1efa6c5e14131c1ada856958abadacc6", "readme_url": "https://github.com/Druthulu/BFM-decomp/blob/main/README.md", "stars": 74, "targets": [ "binary", "game" ], "topics": [ "brave-fencer-musashi", "decompilation", "mips", "playstation", "psx", "psyq", "reverse-engineering" ], "url": "https://github.com/Druthulu/BFM-decomp", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "ElectroPaint Automatic No-source Object reaSsembler (a MIPS to C decompiler)", "description_language": "bilingual", "description_zh": "ElectroPaint 自动无源码目标文件重新汇编器（MIPS 到 C 的反编译器）。", "full_name": "drvink/epanos", "id": "scan-19454620", "license": "NOASSERTION", "observed_at": "2026-10-18T18:09:19.484548Z", "pushed_at": "2014-05-05T12:16:00Z", "readme_sha256": "3221e3d5584852fec86f014bda459ba76bdbbcbb1cc29d914bfa422499549e39", "readme_url": "https://github.com/drvink/epanos/blob/826beaba42e6304368f5cc926e49d794b8a6a311/README.md", "stars": 74, "targets": [ "binary" ], "topics": [ "binary-analysis", "decompiler", "electropaint", "ida", "ida-pro", "idapython", "irix", "mips", "reverse-engineering", "sgi" ], "url": "https://github.com/drvink/epanos", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Solutions to some crackmes that I have done.", "description_language": "bilingual", "description_zh": "我完成的一些 crackme 练习程序的解题方案。", "full_name": "gabimarti/crackmes-solutions", "id": "scan-210189238", "license": null, "observed_at": "2026-10-16T01:37:06.854897Z", "pushed_at": "2022-11-02T07:48:01Z", "readme_sha256": "41d363375ba8367e40df83ab5fb4f1b52e21cbc0cb9d12636d215ddca5effe30", "readme_url": "https://github.com/gabimarti/crackmes-solutions/blob/master/README.md", "stars": 73, "targets": [ "binary" ], "topics": [ "assembly", "c", "crackme", "crackmes", "cutter", "edb", "ghidra", "ioli", "password", "radare2", "reverse-engineering", "reversing", "writeup", "x64dbg" ], "url": "https://github.com/gabimarti/crackmes-solutions", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Ghidra plugin for https://analyze.intezer.com", "description_language": "bilingual", "description_zh": "用于 https://analyze.intezer.com 的 Ghidra 插件。", "full_name": "intezer/analyze-community-ghidra-plugin", "id": "scan-274694914", "license": "BSD-3-Clause", "observed_at": "2026-10-18T14:37:28.408405Z", "pushed_at": "2022-10-23T13:02:18Z", "readme_sha256": "a0f1c0b5f180cecd5c19f26cda1f9b6c175665884fd6df3ea647488ec9bb4369", "readme_url": "https://github.com/intezer/analyze-community-ghidra-plugin/blob/b6468600836e199211cd9c25433be553e38ecca0/README.md", "stars": 73, "targets": [ "binary" ], "topics": [ "ghidra", "ghidra-plugin" ], "url": "https://github.com/intezer/analyze-community-ghidra-plugin", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "An end-to-end pipeline for firmware analysis and cryptographic function detection. Static analysis (Ghidra), dynamic tracing (Qiling), and feature extraction to produce datasets for binary analysis.", "description_language": "bilingual", "description_zh": "用于固件分析和加密函数检测的端到端流程，结合静态分析（Ghidra）、动态跟踪（Qiling）和特征提取，生成二进制分析数据集。", "full_name": "pointblank-club/vestigo", "id": "scan-1101742287", "license": "Apache-2.0", "observed_at": "2026-10-16T10:47:51.449656Z", "pushed_at": "2026-04-20T10:28:01Z", "readme_sha256": "c478ec804d41cfe56d1ba8e8f1f11324aacc4f07dcd3138a76139b1c9e12deb1", "readme_url": "https://github.com/pointblank-club/vestigo/blob/main/README.md", "stars": 73, "targets": [ "binary", "firmware" ], "topics": [], "url": "https://github.com/pointblank-club/vestigo", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "IDA plugin that displays the P-code for the current function", "description_language": "bilingual", "description_zh": "显示当前函数 P-code 的 IDA 插件", "full_name": "binarly-io/idapcode", "id": "scan-387282253", "license": null, "observed_at": "2026-10-16T01:35:58.646988Z", "pushed_at": "2025-11-18T08:28:36Z", "readme_sha256": "06fd024c6ac72827af12e3b6c38753562d3794efdf5725f00805d45914dc6e5f", "readme_url": "https://github.com/binarly-io/idapcode/blob/main/README.md", "stars": 72, "targets": [ "binary" ], "topics": [ "ghidra", "ida-plugin", "idapython", "p-code", "reverse-engineering" ], "url": "https://github.com/binarly-io/idapcode", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "RAIR: RAdare In Rust", "description_language": "bilingual", "description_zh": "RAIR：用 Rust 实现的 Radare", "full_name": "rair-project/rair", "id": "scan-89097749", "license": "LGPL-3.0", "observed_at": "2026-10-16T01:37:06.970602Z", "pushed_at": "2026-07-26T22:45:48Z", "readme_sha256": "b3aeed69180e332079bff7993a409dcd34a94d3359c69f6ecac60d6796fb1448", "readme_url": "https://github.com/rair-project/rair/blob/main/readme.md", "stars": 72, "targets": [ "binary" ], "topics": [ "disassembler", "exploitation", "forensics", "framework", "malware-analysis", "radare", "radare2", "reverse-engineering", "rust", "static-analysis" ], "url": "https://github.com/rair-project/rair", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "IDA Pro plugin to aid PS4 user mode ELF reverse engineering.", "description_language": "bilingual", "description_zh": "辅助 PS4 用户态 ELF 逆向工程的 IDA Pro 插件。", "full_name": "aerosoul94/dynlib", "id": "scan-114493783", "license": null, "observed_at": "2026-10-16T01:35:58.692488Z", "pushed_at": "2018-03-01T23:17:09Z", "readme_sha256": "c7544665a19947c564e759819eaf575296e883cff8c8d089b691f43cea0033e7", "readme_url": "https://github.com/aerosoul94/dynlib/blob/master/README.md", "stars": 71, "targets": [ "binary" ], "topics": [ "elf", "ida", "ida-plugin", "ida-pro", "idapro", "ps4", "reverse-engineering" ], "url": "https://github.com/aerosoul94/dynlib", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "a IDA 7.0 plugins that helps to attach process created by pwntools and debug pwn", "description_language": "bilingual", "description_zh": "IDA 7.0 插件，辅助附加到 pwntools 创建的进程并调试 pwn", "full_name": "anic/ida2pwntools", "id": "scan-161734245", "license": "Apache-2.0", "observed_at": "2026-10-16T01:35:58.704486Z", "pushed_at": "2023-03-29T14:16:37Z", "readme_sha256": "b043ca1d38fac8dea116b502ac963fe9279324a29e2f1cc3023b24ed113bb8e5", "readme_url": "https://github.com/anic/ida2pwntools/blob/master/README.md", "stars": 71, "targets": [ "binary" ], "topics": [ "ctf", "ida", "ida-plugin", "idapro", "pwntools" ], "url": "https://github.com/anic/ida2pwntools", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Simple emulator of the Intel 4004 chip. Mirror from https://gitlab.com/lpg2709/emulator-Intel-4004", "description_language": "bilingual", "description_zh": "简单的 Intel 4004 芯片模拟器，镜像自 https://gitlab.com/lpg2709/emulator-Intel-4004", "full_name": "lpg2709/emulator-Intel-4004", "id": "scan-305542097", "license": "MIT", "observed_at": "2026-10-18T18:09:37.115555Z", "pushed_at": "2025-04-08T13:26:22Z", "readme_sha256": "fa0334d7d62b95427500fb9d99133285ca79eb59c4c3a3155091cb292c189a1f", "readme_url": "https://github.com/lpg2709/emulator-Intel-4004/blob/fa819ef49f97eeca10669d9413593561216074cf/README.md", "stars": 71, "targets": [ "binary" ], "topics": [ "4004", "assambler", "c", "compiler", "disassembler", "emulator", "intel" ], "url": "https://github.com/lpg2709/emulator-Intel-4004", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A deobfuscation plugin for IDA", "description_language": "bilingual", "description_zh": "IDA 去混淆插件", "full_name": "teapotd/xdeobf", "id": "scan-220532765", "license": null, "observed_at": "2026-10-16T01:35:58.878832Z", "pushed_at": "2022-07-09T06:39:43Z", "readme_sha256": "a938923b3c21a7c76e1e9ef3156082c7f89835c9edbcf117749a35befbe46ff6", "readme_url": "https://github.com/teapotd/xdeobf/blob/master/README.md", "stars": 70, "targets": [ "binary" ], "topics": [ "deobfuscation", "deobfuscator", "hexrays", "ida", "ida-plugin", "ida-pro" ], "url": "https://github.com/teapotd/xdeobf", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Practical P-Code examples", "description_language": "bilingual", "description_zh": "实用 P-Code 示例。", "full_name": "kohnakagawa/PracticalPCode", "id": "scan-337468555", "license": "MIT", "observed_at": "2026-10-18T18:08:08.644477Z", "pushed_at": "2021-02-12T14:52:42Z", "readme_sha256": "308c27d7271991a8d1fdb7e87ffe92403c9eed2b6cbb791625f2e0af814093a9", "readme_url": "https://github.com/kohnakagawa/PracticalPCode/blob/a7d0f8e88dd0cfd7b80ad0e3d3714e5eceafdd30/README.md", "stars": 69, "targets": [ "binary" ], "topics": [ "disassembler", "ghidra", "ghidra-pcode", "ghidra-scripts", "reverse-engineering" ], "url": "https://github.com/kohnakagawa/PracticalPCode", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "libil2cpp symbol parser for ida", "description_language": "bilingual", "description_zh": "IDA 的 libil2cpp 符号解析器", "full_name": "tacesrever/Il2CppParser", "id": "scan-229328223", "license": "MIT", "observed_at": "2026-10-16T01:37:26.711803Z", "pushed_at": "2020-01-11T01:20:37Z", "readme_sha256": "5412a73e19ce9040d421cd337ee46b2a40a8c509222489d025bb2e4ede6b425c", "readme_url": "https://github.com/tacesrever/Il2CppParser/blob/master/README.md", "stars": 69, "targets": [ "binary", "game" ], "topics": [ "ida", "il2cpp", "reverse-engineering" ], "url": "https://github.com/tacesrever/Il2CppParser", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Builds of Ghidra 10.1 with additional components included.", "description_language": "bilingual", "description_zh": "包含附加组件的 Ghidra 10.1 构建版本。", "full_name": "garyttierney/ghidra-batteries-included", "id": "scan-287604879", "license": null, "observed_at": "2026-10-18T18:08:08.645212Z", "pushed_at": "2023-03-06T14:58:21Z", "readme_sha256": "68e02d0cac2cb7f637ecf250e84b138ebbcfad09351336948afe34314f824081", "readme_url": "https://github.com/garyttierney/ghidra-batteries-included/blob/fcf6e9fb0a4767065fa6f2a51c26ba379df37509/README.md", "stars": 68, "targets": [ "binary" ], "topics": [ "ghidra" ], "url": "https://github.com/garyttierney/ghidra-batteries-included", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Android Dex disassembler and Binary Ninja plugin", "description_language": "bilingual", "description_zh": "Android DEX 反汇编器及 Binary Ninja 插件。", "full_name": "ivision-research/banjo", "id": "scan-237092130", "license": "MIT", "observed_at": "2026-10-18T18:09:37.115790Z", "pushed_at": "2025-07-07T20:08:25Z", "readme_sha256": "a456b1b476624598c7aa5de788fc380615fd0dac15a04da878ea2028f49a5061", "readme_url": "https://github.com/ivision-research/banjo/blob/5065477afea5daf1b5d0944012d3264a09e457e2/README.md", "stars": 68, "targets": [ "app", "binary" ], "topics": [ "android", "binaryninja-plugin", "disassembler", "reverse-engineering" ], "url": "https://github.com/ivision-research/banjo", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "The reverse-engineering framework you can run anywhere, with nothing installed, and actually trust.", "description_language": "bilingual", "description_zh": "无需安装、随处可运行且值得信赖的逆向工程框架。", "full_name": "mytechnotalent/rea", "id": "scan-837214775", "license": "MIT", "observed_at": "2026-10-16T01:37:19.239223Z", "pushed_at": "2026-10-15T10:59:40Z", "readme_sha256": "c0aa44ff0ef46704563f90d92c73d6a421b02a95ada348947bbb64b5c37c92bd", "readme_url": "https://github.com/mytechnotalent/rea/blob/main/README.md", "stars": 68, "targets": [ "binary" ], "topics": [ "agent-skills", "ai", "ai-agents", "autonomous-agent", "autonomous-agents", "autonomous-systems", "binary-analysis", "binary-analysis-and-reverse-engineering-framework", "cli", "ctf", "decompiler", "developer-tools", "disassembler", "open-router", "rea", "reverse-engineering", "reverse-engineering-assistant", "reverse-engineering-tool", "reverse-engineering-tools", "static-analysis" ], "url": "https://github.com/mytechnotalent/rea", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Best Open-Source Luau Obfuscator and Decompiler Suite 2026", "description_language": "bilingual", "description_zh": "2026 年最佳开源 Luau 混淆器与反编译器套件。", "full_name": "sarb2u/luau-bytecode-lens", "id": "scan-1382297537", "license": null, "observed_at": "2026-10-18T18:09:19.486324Z", "pushed_at": "2026-10-18T17:57:47Z", "readme_sha256": "32a5444f97f66a7a8b44a5f308da2854ed8148af70645ae74ee1ea592477b8d1", "readme_url": "https://github.com/sarb2u/luau-bytecode-lens/blob/4be9e9304034b35e6ad4fe1eb46b2374ca9360ed/README.md", "stars": 68, "targets": [ "binary" ], "topics": [ "bytecode", "decompiler", "disassembler", "luau", "obfuscator", "reverse-engineering", "roblox", "rust" ], "url": "https://github.com/sarb2u/luau-bytecode-lens", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Tiny RISC-V machine code monitor written in RISC-V assembly.", "description_language": "bilingual", "description_zh": "用 RISC-V 汇编编写的小型 RISC-V 机器码监控程序。", "full_name": "krakenlake/vmon", "id": "scan-731675705", "license": "MIT", "observed_at": "2026-10-18T18:09:37.117031Z", "pushed_at": "2026-05-16T09:46:23Z", "readme_sha256": "b9427c9c38184cc4c7e58332266f38c86739a0ecd4b8657856ab6a5c7df82a3a", "readme_url": "https://github.com/krakenlake/vmon/blob/f25389fcd83dcb74c9ef40ac04b070405d0e4ebd/README.md", "stars": 67, "targets": [ "binary" ], "topics": [ "assembler", "bare-metal", "ch32", "debugging", "disassembler", "esp32", "hacking", "monitor", "reverse-engineering", "risc-v", "visionfive" ], "url": "https://github.com/krakenlake/vmon", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Resolve and invoke native APIs from Swift, Objective-C++, and C++ without writing mangled names or manual ABI casts.", "description_language": "bilingual", "description_zh": "从 Swift、Objective-C++ 和 C++ 中解析并调用原生 API，无需编写名称修饰后的符号或手动进行 ABI 类型转换。", "full_name": "lynnswap/ABIBridge", "id": "scan-1381272969", "license": "MIT", "observed_at": "2026-10-16T10:47:43.350705Z", "pushed_at": "2026-10-16T10:42:03Z", "readme_sha256": "24df09ee1c94761312f9a807aa9af05731a006459f2e4069f2b02790644bf6c2", "readme_url": "https://github.com/lynnswap/ABIBridge/blob/main/README.md", "stars": 67, "targets": [ "app", "binary" ], "topics": [ "ios", "macos", "reverse-engineering", "swift", "swift-package-manager", "tvos", "visionos", "watchos" ], "url": "https://github.com/lynnswap/ABIBridge", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Simple decompiler for Rizin. It's capable of generating readable pseudo code even on handmade assembly.", "description_language": "bilingual", "description_zh": "适用于 Rizin 的简单反编译器，即使对手写汇编也能生成可读伪代码。", "full_name": "rizinorg/jsdec", "id": "scan-309098078", "license": null, "observed_at": "2026-10-18T18:09:19.500517Z", "pushed_at": "2026-07-27T14:08:42Z", "readme_sha256": "83384a28005661df7e1e88e2b95509481d07fe8935d7cf20fbfba68ccc1d16f0", "readme_url": "https://github.com/rizinorg/jsdec/blob/9fc60988ddfe4231971f2cbf5f1064460072c2b3/README.md", "stars": 67, "targets": [ "binary" ], "topics": [ "decompiler", "disassembler", "hacktoberfest", "reverse-engineering", "rizin" ], "url": "https://github.com/rizinorg/jsdec", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Semantic analysis engine for detecting vulnerability fixes in Windows kernel driver patches — 58 YAML rules, Ghidra decompilation, reachability tracing, and scoring", "description_language": "bilingual", "description_zh": "检测 Windows 内核驱动补丁中漏洞修复的语义分析引擎，包含 58 条 YAML 规则、Ghidra 反编译、可达性跟踪及评分。", "full_name": "splintersfury/AutoPiff", "id": "scan-1150138101", "license": "MIT", "observed_at": "2026-10-18T18:08:08.646371Z", "pushed_at": "2026-02-26T07:27:41Z", "readme_sha256": "67e756b375770a51900a3966bec2a006f87148db1d3a535c34cc9135b0471840", "readme_url": "https://github.com/splintersfury/AutoPiff/blob/45f38f03d11ed69c9261cf7ea1964730051e20a4/README.md", "stars": 67, "targets": [ "binary" ], "topics": [ "driver-analysis", "ghidra", "karton", "malware-analysis", "patch-diffing", "security-research", "vulnerability-research", "windows-kernel" ], "url": "https://github.com/splintersfury/AutoPiff", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Binary Ninja plugin that can be used to apply Triton's dead store eliminitation pass on basic blocks or functions.", "description_language": "bilingual", "description_zh": "Binary Ninja 插件，可将 Triton 的无效存储消除优化应用于基本块或函数。", "full_name": "ergrelet/triton-bn", "id": "scan-500453037", "license": "Apache-2.0", "observed_at": "2026-10-16T01:36:51.447569Z", "pushed_at": "2024-07-17T01:21:49Z", "readme_sha256": "d161afad7b7cef43129f34c34a341e5192002f4c02f7d22d01e9a3ebb3fe3ff3", "readme_url": "https://github.com/ergrelet/triton-bn/blob/main/README.md", "stars": 66, "targets": [ "binary" ], "topics": [ "binary-ninja", "binary-ninja-plugin", "cpp", "deobfuscation", "reverse-engineering", "triton" ], "url": "https://github.com/ergrelet/triton-bn", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "⚙️ Simple Step to Step Tutorials for Disassembling / Code Injection & getting Pointer Addresses 🔧", "description_language": "bilingual", "description_zh": "⚙️ 反汇编、代码注入及获取指针地址的简单分步教程 🔧", "full_name": "IDouble/Simple-Disassembly-Notes", "id": "scan-201409724", "license": "MIT", "observed_at": "2026-10-18T18:09:37.118121Z", "pushed_at": "2024-02-29T16:55:09Z", "readme_sha256": "5e9c099933c65fa1f12f6ea09c004b1dbddffdd329af84c47dfd0862f314c93a", "readme_url": "https://github.com/IDouble/Simple-Disassembly-Notes/blob/5346543a8e968eb705832b1566b3bb607def77c2/README.md", "stars": 66, "targets": [ "binary" ], "topics": [ "assembly", "code", "code-injection", "codeinjection", "collection", "disassembler", "disassembly", "disassembly-notes", "memory", "offsets", "pointer", "pointer-address", "process", "read", "reverse-engineering", "simple", "step-tutorials", "tutorial", "tutorials", "write" ], "url": "https://github.com/IDouble/Simple-Disassembly-Notes", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Reconstructing DX-Ball 1.07 with REA, backed by original-x86 differential tests and pinned MSVC byte-exact oracles.", "description_language": "bilingual", "description_zh": "使用 REA 重建 DX-Ball 1.07，以原始 x86 差分测试和固定版本的 MSVC 逐字节精确基准作为依据。", "full_name": "N0zoM1z0/dx-ball", "id": "scan-1408263128", "license": "MIT", "observed_at": "2026-10-18T13:14:24.609631Z", "pushed_at": "2026-10-18T12:51:46Z", "readme_sha256": "69def68124a055f5478d0b1f5c358cb17a7d195cfa4e20e421e8825102cde2d1", "readme_url": "https://github.com/N0zoM1z0/dx-ball/blob/main/README.md", "stars": 66, "targets": [ "binary", "game" ], "topics": [ "agentic-workflow", "ai-agent-tools", "binary-analysis", "breakout", "c", "decompilation", "directdraw", "directsound", "directx", "dx-ball", "game-preservation", "ghidra", "mcp", "msvc", "rea", "rea-showcase", "reconstruction", "reverse-engineering", "windows95" ], "url": "https://github.com/N0zoM1z0/dx-ball", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Advanced reverse engineering platform combining traditional static analysis with AI-powered insights. Supports multiple decompilers (Ghidra, IDA Pro, Binary Ninja), automated function analysis, and interactive web visualization for comprehensive binary analysis workflows.", "description_language": "bilingual", "description_zh": "将传统静态分析与 AI 洞察相结合的高级逆向工程平台。支持多种反编译器（Ghidra、IDA Pro、Binary Ninja）、自动化函数分析及交互式网页可视化，构建全面的二进制分析工作流。", "full_name": "pandaadir05/re-architect", "id": "scan-1060627089", "license": "MIT", "observed_at": "2026-10-18T18:08:08.646972Z", "pushed_at": "2025-09-27T09:48:49Z", "readme_sha256": "7f436cc40b3be06bf3ab311c90f0d3c0661af40f50ba9c42741419bb4b26678a", "readme_url": "https://github.com/pandaadir05/re-architect/blob/9fa2be7b3fe638c87a4f7686996a211c8e7b4aa3/README.md", "stars": 66, "targets": [ "binary", "website" ], "topics": [ "ai-analysis", "binary-analysis", "binary-ninja", "decompiler", "ghidra", "ida-pro", "llm-integration", "malware-analysis", "reverse-engineering", "security-research", "static-analysis", "web-interface" ], "url": "https://github.com/pandaadir05/re-architect", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Binary Ninja plugin for reverse engineering PTX -- the virtual instruction set architecture of CUDA-based GPUs.", "description_language": "bilingual", "description_zh": "用于逆向 PTX（CUDA GPU 的虚拟指令集架构）的 Binary Ninja 插件。", "full_name": "seekbytes/ptxNinja", "id": "scan-1170264090", "license": "GPL-3.0", "observed_at": "2026-10-18T18:10:01.304938Z", "pushed_at": "2026-03-06T18:01:04Z", "readme_sha256": "0e395af4d4fff56ec4b148553e84c8478122c87e30b4d60af7dc1d07f635ac79", "readme_url": "https://github.com/seekbytes/ptxNinja/blob/2c05f3df2c04d052614f29caac9a80cddf86a06e/README.md", "stars": 66, "targets": [ "binary" ], "topics": [ "binaryninja", "cuda", "decompilation", "ptx", "seekbytes-ptxninja-41d6b9de" ], "url": "https://github.com/seekbytes/ptxNinja", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Block Redo & Undo To Achieve Legacy IDA", "description_language": "bilingual", "description_zh": "禁用重做与撤销，恢复旧版 IDA 体验", "full_name": "tmr232/BRUTAL-IDA", "id": "scan-199909870", "license": "MIT", "observed_at": "2026-10-16T01:35:58.960221Z", "pushed_at": "2019-08-01T08:35:59Z", "readme_sha256": "4a4beeb0344560c74054b5e95718bc9cf33310f30c90f688f1d151f2ed13b818", "readme_url": "https://github.com/tmr232/BRUTAL-IDA/blob/master/README.md", "stars": 65, "targets": [ "binary" ], "topics": [ "ida", "ida-plugin", "idapython", "idapython-plugin", "reverse-engineering" ], "url": "https://github.com/tmr232/BRUTAL-IDA", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A Ghidra extension for scripting with GraalVM languages, including Javascript, Python3, R, and Ruby.", "description_language": "bilingual", "description_zh": "使用 GraalVM 语言（包括 JavaScript、Python 3、R 和 Ruby）编写脚本的 Ghidra 扩展。", "full_name": "jpleasu/ghidraal", "id": "scan-272445402", "license": "NOASSERTION", "observed_at": "2026-10-18T18:08:08.647321Z", "pushed_at": "2021-04-27T20:35:14Z", "readme_sha256": "2e6560823dc191cb2a1520f4a25efa046bc04749b35f6943e4aae8aa64d831e4", "readme_url": "https://github.com/jpleasu/ghidraal/blob/6e9a206f4018a8134ba45ba686b37c4f7f7d72b7/README.md", "stars": 64, "targets": [ "binary" ], "topics": [ "ghidra", "graalvm" ], "url": "https://github.com/jpleasu/ghidraal", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Corewars but within r2", "description_language": "bilingual", "description_zh": "在 r2 内运行 Core War", "full_name": "radareorg/r2wars", "id": "scan-140844585", "license": null, "observed_at": "2026-10-16T01:37:06.938540Z", "pushed_at": "2026-09-05T08:46:05Z", "readme_sha256": "64e886cf6a1c0d412141859b0bba33a4ffbcecac37f7177fc80c5ec2f4d7fbcc", "readme_url": "https://github.com/radareorg/r2wars/blob/master/README.md", "stars": 64, "targets": [ "binary" ], "topics": [ "competition", "corewars", "r2con", "radare2" ], "url": "https://github.com/radareorg/r2wars", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "IDA-names automatically renames pseudocode windows with the current function name.", "description_language": "bilingual", "description_zh": "IDA-names 自动用当前函数名重命名伪代码窗口。", "full_name": "archercreat/ida_names", "id": "scan-536321340", "license": null, "observed_at": "2026-10-16T01:35:59.316711Z", "pushed_at": "2022-12-24T16:06:23Z", "readme_sha256": "ba527b5dcd617fb405a115c5e555b2df8a08ba05374e71b29f644cfeb8dbe3fc", "readme_url": "https://github.com/archercreat/ida_names/blob/master/README.md", "stars": 63, "targets": [ "binary" ], "topics": [ "ida-plugin", "ida-pro" ], "url": "https://github.com/archercreat/ida_names", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Image preview plugin for IDA disassembler.", "description_language": "bilingual", "description_zh": "IDA 反汇编器的图像预览插件。", "full_name": "rr-/ida-images", "id": "scan-32352528", "license": "MIT", "observed_at": "2026-10-16T01:35:59.170579Z", "pushed_at": "2022-09-17T18:24:56Z", "readme_sha256": "f1011888c7249e857baaad02a6ad3969f64de3cb34d38271e96c2bfcbb31fc84", "readme_url": "https://github.com/rr-/ida-images/blob/master/README.md", "stars": 63, "targets": [ "binary" ], "topics": [ "data-visualization", "forensics", "ida-disassembler", "ida-plugin", "ida-pro", "image-analysis", "image-viewer", "python" ], "url": "https://github.com/rr-/ida-images", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Hex-Rays Block Highlighter plugin for IDA to highlight if/for/do/switch/while blocks", "description_language": "bilingual", "description_zh": "IDA 的 Hex-Rays 代码块高亮插件，可高亮 if、for、do、switch 和 while 代码块", "full_name": "vmallet/ida-hex-highlighter", "id": "scan-478743202", "license": "MIT", "observed_at": "2026-10-16T01:35:59.017223Z", "pushed_at": "2022-04-17T05:38:04Z", "readme_sha256": "2fcaa921b92d1cea81d749d78e906246377654c652bdf50b08ed8adcc7197b35", "readme_url": "https://github.com/vmallet/ida-hex-highlighter/blob/main/README.md", "stars": 63, "targets": [ "binary" ], "topics": [ "hex-rays", "ida", "ida-plugin", "ida-pro", "idapython-plugin" ], "url": "https://github.com/vmallet/ida-hex-highlighter", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "", "description_language": "bilingual", "description_zh": "", "full_name": "Accenture/Condstanta", "id": "scan-475306190", "license": "Apache-2.0", "observed_at": "2026-10-16T01:35:59.254311Z", "pushed_at": "2022-03-29T07:11:30Z", "readme_sha256": "b422e31984b7bf20fcb41b3232e57aa7a717e6d982a0e9c3756f26eade6c5cb3", "readme_url": "https://github.com/Accenture/Condstanta/blob/main/README.md", "stars": 62, "targets": [ "binary" ], "topics": [ "ida-plugin" ], "url": "https://github.com/Accenture/Condstanta", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Install and browse 100+ community themes for IDA Pro (Dracula, Monokai, Solarized and more)", "description_language": "bilingual", "description_zh": "浏览并安装 100 多款 IDA Pro 社区主题，包括 Dracula、Monokai、Solarized 等", "full_name": "kevinmuoz/ida-theme-explorer", "id": "scan-1174789500", "license": "MIT", "observed_at": "2026-10-16T01:35:59.352442Z", "pushed_at": "2026-03-14T22:10:47Z", "readme_sha256": "c9250ebfac592f223cc45b34dc2d904fa16639db67038cc9779e1d4d050e6ce0", "readme_url": "https://github.com/kevinmuoz/ida-theme-explorer/blob/main/README.md", "stars": 62, "targets": [ "binary" ], "topics": [ "binary-analysis", "ida", "ida-plugin", "ida-pro", "idapython", "malware-analysis", "reverse-engineering", "themes" ], "url": "https://github.com/kevinmuoz/ida-theme-explorer", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "bsdiff is a library for building and applying patches to binary files.", "description_language": "bilingual", "description_zh": "bsdiff 是用于创建和应用二进制文件补丁的库。", "full_name": "zhuyie/bsdiff", "id": "scan-29007050", "license": "NOASSERTION", "observed_at": "2026-10-16T01:37:01.866891Z", "pushed_at": "2026-03-06T10:29:29Z", "readme_sha256": "dcf0f0ed21ec5ddd1ab04f1fe20e96d9919b67ebaaab858ed4ed4f14d2e5cd10", "readme_url": "https://github.com/zhuyie/bsdiff/blob/master/README.md", "stars": 61, "targets": [ "binary" ], "topics": [ "binary-diffing", "bsdiff", "delta-encoding", "software-update", "suffix-array" ], "url": "https://github.com/zhuyie/bsdiff", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Hands-on challenges for learning how to reverse engineer Flutter applications.", "description_language": "bilingual", "description_zh": "用于学习 Flutter 应用逆向工程的动手实践挑战。", "full_name": "brnpl/Flutter-Reverse-Engineering-Labs", "id": "scan-1141735175", "license": "MIT", "observed_at": "2026-10-16T10:48:04.242078Z", "pushed_at": "2026-09-14T06:59:02Z", "readme_sha256": "977a7cc09dd44306e3c86e2cdbe812d35cd338e057f2c288c8297bd73d50fda4", "readme_url": "https://github.com/brnpl/Flutter-Reverse-Engineering-Labs/blob/master/readme.md", "stars": 59, "targets": [ "app", "binary" ], "topics": [ "blutter", "flutter", "flutter-app", "ghidra", "mobile-security", "pentesting", "reflutter", "reverse-engineering", "security", "ssl-pinning" ], "url": "https://github.com/brnpl/Flutter-Reverse-Engineering-Labs", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Dragon Ball Z: Burst Limit Recompiled - native PC port via ReXGlue static recompilation", "description_language": "bilingual", "description_zh": "Dragon Ball Z: Burst Limit Recompiled：通过 ReXGlue 静态重编译实现的原生 PC 移植。", "full_name": "iExplosiveRage/DBZ-Burst-Limit-Recompiled", "id": "scan-1391559411", "license": null, "observed_at": "2026-10-16T11:55:10.818875Z", "pushed_at": "2026-10-15T16:27:55Z", "readme_sha256": "ac3ce384d01570aef7c029e3623ad4e7cf9521397576309e830bddd61efc9e81", "readme_url": "https://github.com/iExplosiveRage/DBZ-Burst-Limit-Recompiled/blob/main/README.md", "stars": 59, "targets": [ "binary" ], "topics": [ "dragon-ball-z", "recompilation", "rexglue", "static-recompilation", "xbox-360" ], "url": "https://github.com/iExplosiveRage/DBZ-Burst-Limit-Recompiled", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Ghidra Emulates Functions", "description_language": "bilingual", "description_zh": "使用 Ghidra 模拟函数。", "full_name": "TheRomanXpl0it/ghidra-emu-fun", "id": "scan-224829811", "license": "Apache-2.0", "observed_at": "2026-10-18T14:37:28.408726Z", "pushed_at": "2020-10-13T15:03:07Z", "readme_sha256": "1d2e3115f8897272289501eba5624deb8902be9a04998407543ab8a102bf371f", "readme_url": "https://github.com/TheRomanXpl0it/ghidra-emu-fun/blob/21e85a5d378013fc1db941c00ed4062ae867a459/README.md", "stars": 59, "targets": [ "binary" ], "topics": [ "emulation", "ghidra", "ghidra-plugin", "reverse-engineering" ], "url": "https://github.com/TheRomanXpl0it/ghidra-emu-fun", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "It does the same thing as plugin FunctionStringAssociate for IDA, Now the script just works, in the future it is planned to increase the speed of work and bring it closer to the speed of the plugin.", "description_language": "bilingual", "description_zh": "实现与 IDA 的 FunctionStringAssociate 插件相同的功能。目前脚本刚达到可用状态，未来计划提升运行速度，使其接近该插件。", "full_name": "partoftheworlD/GHIDRApy_FunctionStringAssociate", "id": "scan-175961098", "license": "MIT", "observed_at": "2026-10-18T14:37:28.409000Z", "pushed_at": "2026-09-21T10:08:34Z", "readme_sha256": "0d70e20b0b20cccac627351c15d997ebca0d66f64118150eb55f56a1f343e08d", "readme_url": "https://github.com/partoftheworlD/GHIDRApy_FunctionStringAssociate/blob/6abed122eb1bc7b2992ea2e8884540e23e2e922b/README.md", "stars": 57, "targets": [ "binary" ], "topics": [ "ghidra-plugin", "python", "reverse-engineering" ], "url": "https://github.com/partoftheworlD/GHIDRApy_FunctionStringAssociate", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Binary View plugin for reverse engineering iBoot like binaries with Binary Ninja", "description_language": "bilingual", "description_zh": "Binary Ninja 的 Binary View 插件，用于对 iBoot 一类的二进制文件进行逆向工程", "full_name": "BlackwingHQ/iBoot64Binja", "id": "scan-298375796", "license": "MIT", "observed_at": "2026-10-16T10:47:36.015854Z", "pushed_at": "2024-01-25T04:24:20Z", "readme_sha256": "ceeed0b249f932441229d270cc7936c1785dcba8cf32218055697513f418f51d", "readme_url": "https://github.com/BlackwingHQ/iBoot64Binja/blob/master/README.md", "stars": 56, "targets": [ "app", "binary" ], "topics": [ "binary-ninja-plugin", "ios", "reverse-engineering" ], "url": "https://github.com/BlackwingHQ/iBoot64Binja", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "nanoMIPS module for Ghidra", "description_language": "bilingual", "description_zh": "Ghidra 的 nanoMIPS 模块。", "full_name": "nccgroup/ghidra-nanomips", "id": "scan-795213608", "license": "GPL-3.0", "observed_at": "2026-10-18T14:37:28.409215Z", "pushed_at": "2025-11-06T15:44:59Z", "readme_sha256": "f1845e758748223874be2ebac6a0f4c092641f1fea59304e546828ee97607456", "readme_url": "https://github.com/nccgroup/ghidra-nanomips/blob/62ebe71bb858dd193bef9bb421e7b9888e140882/README.md", "stars": 56, "targets": [ "binary", "firmware" ], "topics": [ "ghidra", "ghidra-extension", "ghidra-plugin", "nanomips", "reverse-engineering" ], "url": "https://github.com/nccgroup/ghidra-nanomips", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Parse and disassemble .metallib files in browser", "description_language": "bilingual", "description_zh": "在浏览器中解析和反汇编 .metallib 文件。", "full_name": "YuAo/MetalLibraryExplorer", "id": "scan-482579442", "license": "MIT", "observed_at": "2026-10-16T07:15:03.968779Z", "pushed_at": "2023-07-24T11:04:57Z", "readme_sha256": "739b6b87639dc9e8a2a851e0f69309b291107f5a0f122fbdd340c085b67f4e7e", "readme_url": "https://github.com/YuAo/MetalLibraryExplorer/blob/master/README.md", "stars": 56, "targets": [ "binary", "website" ], "topics": [ "disassembler", "llvm", "metal", "metallib", "reverse-engineering", "swift", "wasm", "webassembly" ], "url": "https://github.com/YuAo/MetalLibraryExplorer", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "match functions in binaries by what they do, not what their bytes look like. behavioral function fingerprinting via microexecution.", "description_language": "bilingual", "description_zh": "根据函数行为匹配二进制文件中的函数，而非比较字节形式；通过微执行生成函数行为指纹。", "full_name": "1rhino2/fnprint", "id": "scan-1339177086", "license": "MIT", "observed_at": "2026-10-16T01:37:02.393319Z", "pushed_at": "2026-10-08T19:28:09Z", "readme_sha256": "d4fe0c146c4b5bb43f809c64df071bfc6aad183a428efd01b6f16c1b1c475cd0", "readme_url": "https://github.com/1rhino2/fnprint/blob/main/README.md", "stars": 55, "targets": [ "binary", "firmware" ], "topics": [ "binary-analysis", "binary-diffing", "binary-similarity", "capstone", "ctf-tools", "dynamic-analysis", "elf", "emulation", "firmware", "function-fingerprinting", "function-matching", "malware-analysis", "microexecution", "patch-diffing", "reverse-engineering", "reverse-engineering-tool", "rust", "security-tools", "unicorn-engine", "vulnerability-research" ], "url": "https://github.com/1rhino2/fnprint", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "r2inspect is a professional malware analysis framework that automates deep static inspection for PE, ELF, and Mach-O binaries using the radare2 ecosystem. It combines format parsing, detection heuristics, and rich reporting to support reverse engineers, incident responders, and threat analysts.", "description_language": "bilingual", "description_zh": "r2inspect 是专业恶意软件分析框架，利用 radare2 生态系统自动深入静态检查 PE、ELF 和 Mach-O 二进制文件。结合格式解析、启发式检测与丰富报告，为逆向工程师、事件响应人员和威胁分析师提供支持。", "full_name": "seifreed/r2inspect", "id": "scan-1007727627", "license": "GPL-3.0", "observed_at": "2026-10-16T01:37:07.172119Z", "pushed_at": "2026-09-06T08:23:46Z", "readme_sha256": "90817ee2c58102f45a6af931a677475cd1e62f6201cf47d4fde551b66655aaf4", "readme_url": "https://github.com/seifreed/r2inspect/blob/main/README.md", "stars": 55, "targets": [ "binary" ], "topics": [ "malware", "radare2", "reversing" ], "url": "https://github.com/seifreed/r2inspect", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Access radare2 from anywhere, anytime.", "description_language": "bilingual", "description_zh": "随时随地访问 radare2。", "full_name": "radareorg/r2web", "id": "scan-1040439356", "license": "MIT", "observed_at": "2026-10-16T01:37:07.235535Z", "pushed_at": "2026-10-06T11:07:19Z", "readme_sha256": "965f0e6b908013bb188b3aa17224860f827561f713f235902bac1d0a8e3711a8", "readme_url": "https://github.com/radareorg/r2web/blob/main/README.md", "stars": 53, "targets": [ "binary" ], "topics": [ "binary-analysis", "disassembler", "r2web", "radare2", "reverse-engineering", "wasi", "wasm", "wasmer" ], "url": "https://github.com/radareorg/r2web", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A metamorphic binary transformation engine based on r2pipe and radare2.", "description_language": "bilingual", "description_zh": "基于 r2pipe 和 radare2 的变形二进制转换引擎。", "full_name": "seifreed/r2morph", "id": "scan-1070590042", "license": "MIT", "observed_at": "2026-10-16T01:37:07.164438Z", "pushed_at": "2026-09-28T09:41:30Z", "readme_sha256": "eab730606445f0bdd9ec7e7cb12e79f5212a955327e2c5622e848274d38f9431", "readme_url": "https://github.com/seifreed/r2morph/blob/main/README.md", "stars": 53, "targets": [ "binary" ], "topics": [ "binary", "malware", "metamorphic", "obfuscation", "r2pipe", "radare2", "reverse-engineering" ], "url": "https://github.com/seifreed/r2morph", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "The reverse-engineering expert agent: plans its own analysis path, derives every fact from raw evidence, and converges under mechanical verification gates — firmware, protocols, web/JS, risk-control, binaries.", "description_language": "bilingual", "description_zh": "逆向工程专家智能体：自行规划分析路径，从原始证据推导每项事实，并在机械化验证关卡下逐步收敛；覆盖固件、协议、Web/JS、风控和二进制文件。", "full_name": "amd2g2zz/kunglao-agent", "id": "scan-1356218279", "license": "AGPL-3.0", "observed_at": "2026-10-16T10:47:50.650966Z", "pushed_at": "2026-10-16T10:33:30Z", "readme_sha256": "311a1bfdf63ae21682332d22ccd614521b3733121f601a02c04ac0b43e03e18d", "readme_url": "https://github.com/amd2g2zz/kunglao-agent/blob/master/README.md", "stars": 52, "targets": [ "binary", "firmware", "website" ], "topics": [], "url": "https://github.com/amd2g2zz/kunglao-agent", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Ruby, Kotlin, Groovy, Clojure, and JShell support for Ghidra scripting and interactive sessions.", "description_language": "bilingual", "description_zh": "为 Ghidra 脚本和交互会话提供 Ruby、Kotlin、Groovy、Clojure 和 JShell 支持。", "full_name": "goatshriek/ruby-dragon", "id": "scan-345720837", "license": "Apache-2.0", "observed_at": "2026-10-18T14:37:28.409750Z", "pushed_at": "2025-12-20T12:15:30Z", "readme_sha256": "7660ce671ac7470bf11f809a631eecfab984ee5ddfee88dcfa1a7d59232ce6e5", "readme_url": "https://github.com/goatshriek/ruby-dragon/blob/618dc54f417ed718a897b5aa61ecad1a5d8f258e/README.md", "stars": 51, "targets": [ "binary" ], "topics": [ "clojure", "contributions-welcome", "ghidra", "ghidra-plugin", "ghidra-plugins", "good-first-issue", "groovy", "jruby", "jshell", "kotlin", "plugin", "reverse-engineering", "ruby" ], "url": "https://github.com/goatshriek/ruby-dragon", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "High Level API on top of the R2Pipe interface", "description_language": "bilingual", "description_zh": "基于 R2Pipe 接口的高级 API", "full_name": "radareorg/radare2-r2papi", "id": "scan-96860446", "license": null, "observed_at": "2026-10-16T01:37:07.163262Z", "pushed_at": "2026-10-01T06:20:30Z", "readme_sha256": "9d639b9323da69f87f571d0963ead35fba74dc5edf8c7c29012e556df3792ecc", "readme_url": "https://github.com/radareorg/radare2-r2papi/blob/master/README.md", "stars": 51, "targets": [ "binary" ], "topics": [ "python", "r2pipe", "radare2", "rust", "typescript" ], "url": "https://github.com/radareorg/radare2-r2papi", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Proof of concept for reverse engineering and exploiting Android Unity IL2CPP games by patching assembly at runtime.", "description_language": "bilingual", "description_zh": "通过运行时修补汇编代码，对 Android Unity IL2CPP 游戏进行逆向分析与漏洞利用的概念验证。", "full_name": "ac3ss0r/Il2Cpp-Reversal-POC", "id": "scan-597956052", "license": "Apache-2.0", "observed_at": "2026-10-16T07:15:10.195948Z", "pushed_at": "2026-10-11T23:58:43Z", "readme_sha256": "621321ac342c0a5522a1804443c5a89cb2c4284b3837ab581ccb73effe20f12d", "readme_url": "https://github.com/ac3ss0r/Il2Cpp-Reversal-POC/blob/main/README.md", "stars": 50, "targets": [ "app", "binary", "game" ], "topics": [ "asm-patching", "game-modding", "reverse-engineering", "unity" ], "url": "https://github.com/ac3ss0r/Il2Cpp-Reversal-POC", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "IDA, Ghidra and Radare2 scripts. Also Android scripts to make your life easier.", "description_language": "bilingual", "description_zh": "IDA、Ghidra 和 Radare2 脚本，以及让工作更轻松的 Android 脚本。", "full_name": "enovella/re-scripts", "id": "scan-148394183", "license": null, "observed_at": "2026-10-16T01:37:07.355770Z", "pushed_at": "2019-07-05T07:13:58Z", "readme_sha256": "63e8d4a1f429b265d932d81ecf8ba39bab9751b53269c91b5f4b5df48c285411", "readme_url": "https://github.com/enovella/re-scripts/blob/master/README.md", "stars": 50, "targets": [ "app", "binary" ], "topics": [ "android", "binaryninja", "bninja", "idapro", "idapro7", "idapython", "python3", "r2pipe", "radare2", "reverse-engineering" ], "url": "https://github.com/enovella/re-scripts", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Chameleon is a polymorphic engine for x86_64 position independent shellcode that has been created out of the need to evade signature-based detections in red team environments.", "description_language": "bilingual", "description_zh": "Chameleon 是面向 x86_64 位置无关 Shellcode 的多态引擎，为满足红队环境中规避特征签名检测的需求而创建。", "full_name": "gum3t/chameleon", "id": "scan-1067900593", "license": "MIT", "observed_at": "2026-10-16T01:37:07.504735Z", "pushed_at": "2025-10-03T09:09:27Z", "readme_sha256": "47cf8925b0581f30aced72c4d31d25e09efdcc220db824e15fe50ec4387d9f2f", "readme_url": "https://github.com/gum3t/chameleon/blob/main/README.md", "stars": 50, "targets": [ "binary" ], "topics": [ "malware", "metamorphic", "obfuscation", "polymorphic", "position-independent-code", "r2pipe", "radare2", "shellcode", "ufo", "x86-64" ], "url": "https://github.com/gum3t/chameleon", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Docker configuration (and only docker configuration) files for hosting self-hosted Hexvault, Lumina and Hexlicsrv.", "description_language": "bilingual", "description_zh": "用于自托管 Hexvault、Lumina 和 Hexlicsrv 的 Docker 配置文件（仅含 Docker 配置）。", "full_name": "RenardDev/IDATeamsDocker", "id": "scan-842050530", "license": "MIT", "observed_at": "2026-10-18T14:37:54.635521Z", "pushed_at": "2026-07-22T04:27:16Z", "readme_sha256": "e40c59884bf57f2e7aab1609553ef0cc1c44f5637d78146f199fd1622a866abd", "readme_url": "https://github.com/RenardDev/IDATeamsDocker/blob/97aa26345353f5b64da3d8e4783f7f91418c66cf/README.md", "stars": 50, "targets": [ "binary" ], "topics": [ "docker", "docker-compose", "hexlicsrv", "hexrays", "hexvault", "ida", "ida-pro", "idapro", "lumina", "reverse-engineering" ], "url": "https://github.com/RenardDev/IDATeamsDocker", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A book on learning radare2.", "description_language": "bilingual", "description_zh": "一本学习 radare2 的书。", "full_name": "monosource/radare2-explorations", "id": "scan-50656749", "license": null, "observed_at": "2026-10-16T01:37:07.407969Z", "pushed_at": "2020-09-15T19:10:31Z", "readme_sha256": "7e35c02d0981da6db888e2273d6cc4c063e0f9b2dab4dadafbdbdef5285659c1", "readme_url": "https://github.com/monosource/radare2-explorations/blob/master/README.md", "stars": 49, "targets": [ "binary" ], "topics": [ "radare2" ], "url": "https://github.com/monosource/radare2-explorations", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Decompiler and reverse engineering tool for wasm binaries", "description_language": "bilingual", "description_zh": "用于 wasm 二进制文件的反编译器和逆向工程工具。", "full_name": "wasmkit/diswasm", "id": "scan-501793713", "license": "MIT", "observed_at": "2026-10-18T14:38:20.307254Z", "pushed_at": "2024-12-30T18:18:31Z", "readme_sha256": "1fd7c10b16e03e3440a816c16ec752d9cc1bc2d28f17da54fdbb078c9c9bab58", "readme_url": "https://github.com/wasmkit/diswasm/blob/83572a921960704458fa5ae33a8a8f3c59ce7451/README.md", "stars": 49, "targets": [ "binary" ], "topics": [ "decompile", "disassemble", "disassembler", "reverse-engineering", "wasm" ], "url": "https://github.com/wasmkit/diswasm", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A simple library focusing on demangling symbols for different programing languages", "description_language": "bilingual", "description_zh": "专注于还原各种编程语言符号修饰的简单库", "full_name": "radareorg/libdemangle", "id": "scan-158456447", "license": null, "observed_at": "2026-10-16T01:37:07.494726Z", "pushed_at": "2020-12-09T02:20:30Z", "readme_sha256": "5f0e2d2f32f19168c1437aed0e12127a4998ad3cb68da375d28a5f448f0fb72e", "readme_url": "https://github.com/radareorg/libdemangle/blob/master/README.md", "stars": 48, "targets": [ "binary" ], "topics": [ "binary", "demangle-symbols", "radare2", "symbols" ], "url": "https://github.com/radareorg/libdemangle", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Track and analyze binary size and memory footprint in embedded firmware", "description_language": "bilingual", "description_zh": "跟踪并分析嵌入式固件的二进制大小与内存占用", "full_name": "membrowse/membrowse-action", "id": "scan-1007143904", "license": "GPL-3.0", "observed_at": "2026-10-16T01:36:19.706252Z", "pushed_at": "2026-10-13T15:59:05Z", "readme_sha256": "e88d97c0578e85b00202de9f1f0850eff08ffae0f048f574a1bb7a54b4f27dc2", "readme_url": "https://github.com/membrowse/membrowse-action/blob/main/README.md", "stars": 47, "targets": [ "binary", "firmware" ], "topics": [ "benchmark", "binary-size", "bloaty", "ci", "code-quality", "code-size", "developer-tools", "embedded", "firmware-analysis", "firmware-ci", "firmware-tools", "github-actions", "memory", "microcontroller", "tiny" ], "url": "https://github.com/membrowse/membrowse-action", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Disassembly/Decompilation of Harvest Moon: Friends of Mineral Town", "description_language": "bilingual", "description_zh": "《Harvest Moon: Friends of Mineral Town》的反汇编／反编译项目", "full_name": "not-alons/hmfomt", "id": "scan-332554231", "license": null, "observed_at": "2026-10-16T10:47:36.390747Z", "pushed_at": "2021-05-27T18:03:25Z", "readme_sha256": "e9532008a359fa553f8b6760969f1498779b500474000ef9aa4ce89dea4edf80", "readme_url": "https://github.com/not-alons/hmfomt/blob/master/README.md", "stars": 47, "targets": [ "binary" ], "topics": [ "decompilation", "disassembly", "gameboy-advance", "harvest-moon", "reverse-engineering" ], "url": "https://github.com/not-alons/hmfomt", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Example code for the online course Introduction to x86/x64 Software Reverse Engineering.", "description_language": "bilingual", "description_zh": "云课堂《X86/X64 软件逆向分析入门》示例代码", "full_name": "zmrbak/ReverseAnalysis", "id": "scan-200378913", "license": "MIT", "observed_at": "2026-10-16T01:37:16.290748Z", "pushed_at": "2021-05-16T01:08:24Z", "readme_sha256": "db30373d7afa2861f5d6b238aa6319780b7d856a3a3b20c3bcde5c4afc4abd9a", "readme_url": "https://github.com/zmrbak/ReverseAnalysis/blob/master/README.md", "stars": 47, "targets": [ "binary" ], "topics": [ "assembly", "c", "hacking", "reverse-engineering", "reversing" ], "url": "https://github.com/zmrbak/ReverseAnalysis", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Neural Variable Renaming for Decompiled Binaries", "description_language": "bilingual", "description_zh": "使用神经网络为反编译二进制文件中的变量重命名", "full_name": "pcyin/dire", "id": "scan-211559889", "license": null, "observed_at": "2026-10-16T10:47:48.086516Z", "pushed_at": "2020-05-04T20:06:00Z", "readme_sha256": "9650c77f676b1967d145a6b7cbca114d659595e3442d906f5a760ccb73f9c351", "readme_url": "https://github.com/pcyin/dire/blob/master/README.md", "stars": 45, "targets": [ "binary" ], "topics": [], "url": "https://github.com/pcyin/dire", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Rust crate for r2pipe", "description_language": "bilingual", "description_zh": "r2pipe 的 Rust 包", "full_name": "radareorg/r2pipe.rs", "id": "scan-37282046", "license": "NOASSERTION", "observed_at": "2026-10-16T01:37:07.484064Z", "pushed_at": "2026-03-09T22:46:37Z", "readme_sha256": "4b2dec06dbd4015905a463a78514c523f6d609d7876f2cc9525abdac5aa33112", "readme_url": "https://github.com/radareorg/r2pipe.rs/blob/master/README.md", "stars": 45, "targets": [ "binary" ], "topics": [ "r2pipe", "radare2", "rust-crate" ], "url": "https://github.com/radareorg/r2pipe.rs", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "An ad-free BiliBili jailbreak tweak. Thanks for using it; stars are welcome.", "description_language": "bilingual", "description_zh": "哔哩哔哩无广告越狱插件，感谢使用，欢迎 Star。", "full_name": "TouchFriend/BiliBiliTweak", "id": "scan-996771172", "license": "MIT", "observed_at": "2026-10-16T10:47:39.041301Z", "pushed_at": "2026-04-19T02:22:36Z", "readme_sha256": "474a1685ed8cfbdc7909e22d7d75fe76cb1db104e58d00dd1a3fc2e0a513e76d", "readme_url": "https://github.com/TouchFriend/BiliBiliTweak/blob/main/README.md", "stars": 45, "targets": [ "app", "binary" ], "topics": [ "arm64", "bilibili", "bilibili-danmaku", "hook", "ios", "ios-reverse", "ios-tweak", "objective-c", "reverse-engineering" ], "url": "https://github.com/TouchFriend/BiliBiliTweak", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Transform binaries into source-code-like projects that coding agents can traverse, analyze, and use as an oracle for large binaries. Supports IDA Pro, radare2, angr and Binary Ninja.", "description_language": "bilingual", "description_zh": "将二进制文件转换为类似源码的项目，让编程智能体能够遍历、分析，并将其作为大型二进制文件的参考依据。支持 IDA Pro、radare2、angr 和 Binary Ninja。", "full_name": "buzzer-re/ToCode", "id": "scan-1244155308", "license": "MIT", "observed_at": "2026-10-16T01:37:07.432704Z", "pushed_at": "2026-10-14T15:06:36Z", "readme_sha256": "79d4eb8d59796dbf97a46cd22272b994de15684fa15894e3d4826049a35312da", "readme_url": "https://github.com/buzzer-re/ToCode/blob/main/README.md", "stars": 43, "targets": [ "app", "binary" ], "topics": [ "agentic-workflow", "binary-ninja", "ida", "radare2", "reverse-engineering" ], "url": "https://github.com/buzzer-re/ToCode", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Use binaryninja workflow to deflat ollvm cff", "description_language": "bilingual", "description_zh": "使用 Binary Ninja 工作流还原 OLLVM 控制流平坦化", "full_name": "ltlly/MikuCffHelper", "id": "scan-889777699", "license": null, "observed_at": "2026-10-16T01:36:52.446359Z", "pushed_at": "2026-09-06T07:36:47Z", "readme_sha256": "b72af2f31a23db5cc4b9a43b39b2d8d7edaf47c776f305b96b50a68fad940fbc", "readme_url": "https://github.com/ltlly/MikuCffHelper/blob/master/readme.md", "stars": 42, "targets": [ "binary" ], "topics": [ "binary-ninja", "control-flow-flattening", "deobfuscation", "ollvm", "python", "reverse-engineering" ], "url": "https://github.com/ltlly/MikuCffHelper", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A simple but useful project maybe help you reverse Windows. ", "description_language": "bilingual", "description_zh": "一个简单但实用的项目，或许能帮助你逆向分析 Windows。", "full_name": "tinysec/rtypes", "id": "scan-771342924", "license": "GPL-3.0", "observed_at": "2026-10-18T14:37:59.719735Z", "pushed_at": "2024-04-02T03:21:34Z", "readme_sha256": "fff9c80cb7181bb6085ac8a27d8287ae628013a031135cef1e02b5fada9d2a62", "readme_url": "https://github.com/tinysec/rtypes/blob/a6251d8cf19565aa8aa153e5db9e6db58db28279/README.md", "stars": 41, "targets": [ "binary" ], "topics": [ "binaryninja", "idapro", "reverse-engineering", "windbg", "windows" ], "url": "https://github.com/tinysec/rtypes", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A Python 3.10+ library to pack and unpack structured binary data.", "description_language": "bilingual", "description_zh": "用于打包和解包结构化二进制数据的 Python 3.10+ 库。", "full_name": "MatrixEditor/caterpillar", "id": "scan-733602499", "license": "GPL-3.0", "observed_at": "2026-10-18T14:36:15.092125Z", "pushed_at": "2026-08-30T16:48:55Z", "readme_sha256": "97421f4f4d275dfa864bc9b5d8d48debcee110ceb7b6683d851c1b67fa8ac398", "readme_url": "https://github.com/MatrixEditor/caterpillar/blob/b3279d2641d24efc34e55a8cd90d9527522780f8/README.md", "stars": 40, "targets": [ "binary" ], "topics": [ "binary-format", "binary-parsing", "file-parsing", "pystruct", "python", "python-struct", "reverse-engineering", "struct", "unpacking" ], "url": "https://github.com/MatrixEditor/caterpillar", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Import Device Tree Information onto your Ghidra memory map", "description_language": "bilingual", "description_zh": "将设备树信息导入 Ghidra 内存映射。", "full_name": "antoniovazquezblanco/GhidraDeviceTreeBlob", "id": "scan-725948011", "license": null, "observed_at": "2026-10-18T14:37:28.410076Z", "pushed_at": "2026-10-14T06:45:03Z", "readme_sha256": "53d2ab1df0532a0f34cd07043b174104d39eeef508791adc7b8e363b195b2e0c", "readme_url": "https://github.com/antoniovazquezblanco/GhidraDeviceTreeBlob/blob/fd075fd89ff26c0042c5ce6a2b03a2df2f79f961/README.md", "stars": 38, "targets": [ "binary" ], "topics": [ "bootloaders", "device-tree", "devicetree", "driver", "dtb", "ghidra", "ghidra-extension", "ghidra-loader", "ghidra-plugin", "kernel", "reverse-engineering" ], "url": "https://github.com/antoniovazquezblanco/GhidraDeviceTreeBlob", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Rebuilding SA-MP 0.3.7 R5 from source, byte for byte. AI-assisted reverse engineering with verifiable binary matches.", "description_language": "bilingual", "description_zh": "从源代码逐字节重建 SA-MP 0.3.7 R5。借助 AI 进行逆向工程，并提供可验证的二进制匹配。", "full_name": "Dryxio/samp-source", "id": "scan-1357829995", "license": null, "observed_at": "2026-10-18T13:13:56.737868Z", "pushed_at": "2026-09-10T00:34:06Z", "readme_sha256": "2b8e8f2f1bd3b72f158a475c21a0af85cf4938c7f639c05de49923648dc5a87f", "readme_url": "https://github.com/Dryxio/samp-source/blob/main/README.md", "stars": 38, "targets": [ "binary", "game" ], "topics": [ "cpp", "decompilation", "game-preservation", "reverse-engineering", "samp" ], "url": "https://github.com/Dryxio/samp-source", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Boot real iPhone OS 3 — Apple's actual kernel, launchd & SpringBoard — inside an app on a modern iPhone. A from-scratch, full-system S5L8900/ARMv6 emulator in portable C.", "description_language": "bilingual", "description_zh": "在现代 iPhone 的应用中启动真正的 iPhone OS 3，包括 Apple 原版内核、launchd 和 SpringBoard。使用可移植 C 语言从零构建的全系统 S5L8900/ARMv6 仿真器。", "full_name": "j0shua-SYSON/S5LBox", "id": "scan-1305885927", "license": "MIT", "observed_at": "2026-10-16T10:47:40.783499Z", "pushed_at": "2026-10-15T17:13:16Z", "readme_sha256": "5e5fb5aa62f470af67ef8265ae615d57f6be46dd8d1e653c79d2f6ffe1ef5d9a", "readme_url": "https://github.com/j0shua-SYSON/S5LBox/blob/main/README.md", "stars": 38, "targets": [ "app", "binary" ], "topics": [ "arm", "armv6", "dynarec", "emulator", "full-system-emulation", "ios", "ios15", "ios3", "iphone-6s", "iphone-os", "jailbreak", "reverse-engineering", "s5l8900", "springboard", "xnu" ], "url": "https://github.com/j0shua-SYSON/S5LBox", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Ultimate Mortal Kombat 3 (iOS, EA Mobile 2011), fully decompiled: all 2,572 game functions are readable C, checked against a static ARM-to-C recompiler. Native port in progress: menus, sound and saves run; fight data tables extracted from your copy and verified; not playable yet. No game assets - bring your own copy.", "description_language": "bilingual", "description_zh": "《Ultimate Mortal Kombat 3》（iOS 版，EA Mobile，2011 年）已完全反编译：全部 2,572 个游戏函数均为可读的 C 代码，并与静态 ARM 到 C 重编译器进行核对。原生移植仍在进行中：菜单、声音和存档已可运行，战斗数据表从用户自有副本中提取并验证，但目前尚不可游玩。不含游戏素材，需自行提供游戏副本。", "full_name": "MaryNCRT/Ultimate-Mortal-Kombat-3-iOS-Recomp", "id": "scan-1333724367", "license": "NOASSERTION", "observed_at": "2026-10-16T10:47:41.859406Z", "pushed_at": "2026-10-16T04:27:57Z", "readme_sha256": "32d59c5f3fdf927e73b744214ab34d3bf11eee4eb89161789b0f3ceaa8ebcd4c", "readme_url": "https://github.com/MaryNCRT/Ultimate-Mortal-Kombat-3-iOS-Recomp/blob/main/README.md", "stars": 38, "targets": [ "app", "binary", "game" ], "topics": [ "arm", "decompilation", "game-preservation", "ghidra", "ios", "mach-o", "mortal-kombat", "pc-port", "reverse-engineering", "static-recompilation", "thumb2", "touchhle" ], "url": "https://github.com/MaryNCRT/Ultimate-Mortal-Kombat-3-iOS-Recomp", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Reverse engineer Unity games with radare2", "description_language": "bilingual", "description_zh": "使用 radare2 逆向分析 Unity 游戏。", "full_name": "radareorg/r2unity", "id": "scan-1232072526", "license": "MIT", "observed_at": "2026-10-16T01:37:29.707942Z", "pushed_at": "2026-10-08T15:59:51Z", "readme_sha256": "de5911b11da4240b1dc419e5f968ecc426c99fa9cc2636c9d9671634db81e2c9", "readme_url": "https://github.com/radareorg/r2unity/blob/main/README.md", "stars": 38, "targets": [ "binary", "game" ], "topics": [ "il2cpp", "reverse-engineering", "unity" ], "url": "https://github.com/radareorg/r2unity", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Static recompilation of Command & Conquer: Red Alert 2 / Yuri's Revenge (Westwood, 2000-01) to native C, with the remaster the engine never got: a D3D11 presenter, 720p to 4K, HD voxel units. Built on pcrecomp.", "description_language": "bilingual", "description_zh": "将《Command & Conquer: Red Alert 2／Yuri's Revenge》（Westwood，2000—2001 年）静态重编译为原生 C，并加入原引擎未曾获得的重制功能：D3D11 显示输出、720p 至 4K、高清体素单位。基于 pcrecomp 构建。", "full_name": "sp00nznet/redalert2-recomp", "id": "scan-1403833142", "license": "NOASSERTION", "observed_at": "2026-10-16T11:55:12.752386Z", "pushed_at": "2026-10-16T06:00:41Z", "readme_sha256": "bc8e86cf2c7ef8ba1013616289bb9630e71eb4db36dbcb25e46ffb050e80ba00", "readme_url": "https://github.com/sp00nznet/redalert2-recomp/blob/main/README.md", "stars": 38, "targets": [ "binary" ], "topics": [ "command-and-conquer", "directx11", "red-alert-2", "remaster", "reverse-engineering", "static-recompilation" ], "url": "https://github.com/sp00nznet/redalert2-recomp", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "genpatch is IDA plugin that generates a python script for patching binary", "description_language": "bilingual", "description_zh": "genpatch 是一款 IDA 插件，可生成用于修补二进制文件的 Python 脚本。", "full_name": "sterrasec/genpatch", "id": "scan-720090631", "license": "MIT", "observed_at": "2026-10-16T01:37:16.521136Z", "pushed_at": "2023-12-21T09:44:14Z", "readme_sha256": "1332be3c1e363b805adcf5adf6bff95beff02583b484c3b2249efb28b07142c4", "readme_url": "https://github.com/sterrasec/genpatch/blob/main/README.md", "stars": 38, "targets": [ "binary" ], "topics": [ "ida-plugin", "ida-pro", "idapython-plugin", "penetration-testing", "pentesting", "reverse-engineering", "reverse-enginnering", "reversing" ], "url": "https://github.com/sterrasec/genpatch", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Helper script for Linux kernel disassemble or debugging with IDA Pro on VMware + GDB stub (including some symbols helpers)", "description_language": "bilingual", "description_zh": "在 VMware + GDB stub 环境中使用 IDA Pro 反汇编或调试 Linux 内核的辅助脚本，包含一些符号辅助工具。", "full_name": "therealdreg/linux_kernel_debug_disassemble_ida_vmware", "id": "scan-297019985", "license": "MIT", "observed_at": "2026-10-16T01:37:16.534441Z", "pushed_at": "2023-08-11T06:26:55Z", "readme_sha256": "b0c6dd9e095abe8d7c994d191d6d3ccdefb6b72ff8b3206d406c8e8d304f1fbe", "readme_url": "https://github.com/therealdreg/linux_kernel_debug_disassemble_ida_vmware/blob/main/README.md", "stars": 38, "targets": [ "binary" ], "topics": [ "debugging", "disassembly", "ida-pro", "idapython-plugin", "linux-kernel", "reversing", "vmware", "x86", "x86-64" ], "url": "https://github.com/therealdreg/linux_kernel_debug_disassemble_ida_vmware", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "JavaScript bindings for Ghidra with AI agent support", "description_language": "bilingual", "description_zh": "支持 AI 智能体的 Ghidra JavaScript 绑定。", "full_name": "vaguue/Ghidra.js", "id": "scan-714841054", "license": "GPL-3.0", "observed_at": "2026-10-16T07:14:51.758666Z", "pushed_at": "2026-09-04T16:18:00Z", "readme_sha256": "c830d489a3fb865da6927e9c9da3b5935bca98ab2f5724ba367ca9b14b7c94b8", "readme_url": "https://github.com/vaguue/Ghidra.js/blob/main/README.md", "stars": 38, "targets": [ "binary" ], "topics": [ "ghidra", "ghidra-plugin", "javascript", "reverse-engineering" ], "url": "https://github.com/vaguue/Ghidra.js", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "User friendly ways to parse small code snippets into data types in Ghidra.", "description_language": "bilingual", "description_zh": "以易用的方式将小段代码解析为 Ghidra 中的数据类型。", "full_name": "antoniovazquezblanco/GhidraExtendedSourceParser", "id": "scan-878410780", "license": null, "observed_at": "2026-10-18T14:37:28.410725Z", "pushed_at": "2026-10-13T08:01:43Z", "readme_sha256": "8264162ecf10a36fc9c7932717cad63be32015c5025ec7e19b7c1846ab77e758", "readme_url": "https://github.com/antoniovazquezblanco/GhidraExtendedSourceParser/blob/491593a00a7150b99a77cda9be3868abd3ffcbf2/README.md", "stars": 37, "targets": [ "binary" ], "topics": [ "ghidra", "ghidra-extension", "ghidra-plugin" ], "url": "https://github.com/antoniovazquezblanco/GhidraExtendedSourceParser", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "An IDA plugin which demangles Rust function names", "description_language": "bilingual", "description_zh": "用于还原 Rust 函数名称的 IDA 插件。", "full_name": "cxiao/ida-rust-untangler", "id": "scan-647913626", "license": "MIT", "observed_at": "2026-10-16T01:37:16.879396Z", "pushed_at": "2023-12-11T21:21:17Z", "readme_sha256": "ba0695585de1a55e365c03eb2fa26fbb437de16696481b79f3e6fa0fd5ebadb2", "readme_url": "https://github.com/cxiao/ida-rust-untangler/blob/main/README.md", "stars": 37, "targets": [ "binary" ], "topics": [ "demangler", "demangling", "ida", "reverse-engineering", "reversing", "rust", "rustlang" ], "url": "https://github.com/cxiao/ida-rust-untangler", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Ctrl+P plugin for Ghidra: quick search and command palette.", "description_language": "bilingual", "description_zh": "Ghidra 的 Ctrl+P 插件：快速搜索和命令面板。", "full_name": "msm-code/GhidraCtrlP", "id": "scan-896663249", "license": null, "observed_at": "2026-10-18T14:37:28.410470Z", "pushed_at": "2024-12-29T23:03:53Z", "readme_sha256": "4b9184cc51cdb5787dcfe0a7ca539130850fb0146af4c62f23e53c4c436d89ae", "readme_url": "https://github.com/msm-code/GhidraCtrlP/blob/079b2ab66087bbf2265025322e754c2ddeddf767/README.md", "stars": 37, "targets": [ "binary" ], "topics": [ "ghidra", "ghidra-plugin", "ghidra-plugins", "ghidra-scripts", "productivity", "reverse-engineering" ], "url": "https://github.com/msm-code/GhidraCtrlP", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A Ghidra script to export data to a x64dbg database", "description_language": "bilingual", "description_zh": "将数据导出到 x64dbg 数据库的 Ghidra 脚本。", "full_name": "schlafwandler/ghidra_ExportToX64dbg", "id": "scan-224924861", "license": null, "observed_at": "2026-10-18T14:37:28.410947Z", "pushed_at": "2023-01-06T18:24:31Z", "readme_sha256": "66b5f7bdefe2c9908b14d7426fcac4112a9776f1ced9550ffc7f932a72bb3373", "readme_url": "https://github.com/schlafwandler/ghidra_ExportToX64dbg/blob/6a0af9b90550d6b2dd8a78d262c36f0b395da297/readme.md", "stars": 37, "targets": [ "binary" ], "topics": [ "ghidra", "ghidra-plugin", "x64dbg" ], "url": "https://github.com/schlafwandler/ghidra_ExportToX64dbg", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "An old CLI tool to parse Intel/Motorola formatted HEX ASCII firmware files into binary blobs", "description_language": "bilingual", "description_zh": "一款旧的命令行工具，可将 Intel/Motorola 格式的 HEX ASCII 固件文件解析为二进制数据。", "full_name": "E3V3A/hex2bin", "id": "scan-155512629", "license": null, "observed_at": "2026-10-16T01:36:19.970984Z", "pushed_at": "2018-11-01T11:23:40Z", "readme_sha256": "a851eac0a715cb0b445a41a95b8e0f527510439571bcb7d363f075080031ded8", "readme_url": "https://github.com/E3V3A/hex2bin/blob/master/README.md", "stars": 36, "targets": [ "binary", "firmware" ], "topics": [ "firmware-analysis", "firmware-tools", "intel-hex", "motorola", "reverse-engineering", "s-record", "srec" ], "url": "https://github.com/E3V3A/hex2bin", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Static recompiler for Nintendo 3DS games, from ARM to C", "description_language": "bilingual", "description_zh": "Nintendo 3DS 游戏的静态重编译器，将 ARM 转换为 C。", "full_name": "fearkov/3dsrecomp", "id": "scan-1387704818", "license": null, "observed_at": "2026-10-16T11:55:11.749515Z", "pushed_at": "2026-10-09T20:59:44Z", "readme_sha256": "4d49f9b36c54ac275a634e754ff99349722fc2ba3a2125b4444a17cc8b20196d", "readme_url": "https://github.com/fearkov/3dsrecomp/blob/main/README.md", "stars": 36, "targets": [ "binary", "game" ], "topics": [ "3ds", "arm", "nintendo-3ds", "recompiler", "reverse-engineering", "rust", "static-recompilation" ], "url": "https://github.com/fearkov/3dsrecomp", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Binary blob analyzer and extractor based on C++", "description_language": "bilingual", "description_zh": "基于 C++ 的二进制数据分析与提取工具。", "full_name": "gcarmix/hexdig", "id": "scan-1126795891", "license": "GPL-3.0", "observed_at": "2026-10-16T01:37:37.344984Z", "pushed_at": "2026-06-21T15:49:28Z", "readme_sha256": "ae16c4a16d97ba4b1825b07200baf383b2585cbf28ad8267133566d4787686c8", "readme_url": "https://github.com/gcarmix/hexdig/blob/master/README.md", "stars": 36, "targets": [ "binary", "firmware" ], "topics": [ "analyzer", "binary", "binwalk", "blob", "extraction", "firmware" ], "url": "https://github.com/gcarmix/hexdig", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A visual and colorized diff for binary files.", "description_language": "bilingual", "description_zh": "用于二进制文件的彩色可视化差异比较工具。", "full_name": "jjazzboss/colorbindiff", "id": "scan-252567321", "license": "LGPL-3.0", "observed_at": "2026-10-16T01:37:02.049430Z", "pushed_at": "2022-02-23T19:38:38Z", "readme_sha256": "62864003f43e91fb50b75104a14ede7fba936a619781a0c68f72b1a7e24f4c34", "readme_url": "https://github.com/jjazzboss/colorbindiff/blob/master/README.md", "stars": 36, "targets": [ "binary" ], "topics": [ "binary-diffing", "cygwin", "diff", "perl" ], "url": "https://github.com/jjazzboss/colorbindiff", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "deollvm arm64 based unicorn", "description_language": "bilingual", "description_zh": "基于 Unicorn 的 ARM64 OLLVM 去混淆工具。", "full_name": "GeT1t/deollvm", "id": "scan-195183951", "license": null, "observed_at": "2026-10-16T01:36:53.203582Z", "pushed_at": "2019-07-04T06:45:31Z", "readme_sha256": "59d6515773c5612523df8a9b840a780fb39a2d769fa03f7022e37ec92ab4274f", "readme_url": "https://github.com/GeT1t/deollvm/blob/master/README.md", "stars": 35, "targets": [ "binary" ], "topics": [ "deobfuscation", "ollvm" ], "url": "https://github.com/GeT1t/deollvm", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Ghidra NES / Famicom ROM Decompiler Plugin", "description_language": "bilingual", "description_zh": "Ghidra NES / Famicom ROM 反编译插件。", "full_name": "ilyakharlamov/Ghidra-Nes-Rom-Decompiler-Plugin", "id": "scan-409594423", "license": null, "observed_at": "2026-10-18T14:37:28.411259Z", "pushed_at": "2021-09-26T20:45:23Z", "readme_sha256": "466221c76d97a922de7ac0edf898672ce831bcba7fc2a51c8fe844ed6403c528", "readme_url": "https://github.com/ilyakharlamov/Ghidra-Nes-Rom-Decompiler-Plugin/blob/0bf2337ea6c8449932603e31b5fa92457add8741/README.md", "stars": 35, "targets": [ "binary" ], "topics": [ "ghidra", "ghidra-plugin", "nintendo-entertainment-system", "nintendo-hacking", "reverse-engineering" ], "url": "https://github.com/ilyakharlamov/Ghidra-Nes-Rom-Decompiler-Plugin", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Discord Rich Presence plugin for Ghidra", "description_language": "bilingual", "description_zh": "Ghidra 的 Discord Rich Presence 插件。", "full_name": "imxeno/ghidracord", "id": "scan-465499442", "license": "Apache-2.0", "observed_at": "2026-10-18T14:37:28.411493Z", "pushed_at": "2026-09-22T09:36:19Z", "readme_sha256": "b3a2eeed58bb7dd2c734cf37816fc20df26343b61b326d69412e8892d92e6a9a", "readme_url": "https://github.com/imxeno/ghidracord/blob/5425c54e4c04fe15c2c9e5bd106f69d620e6cebd/README.md", "stars": 35, "targets": [ "binary" ], "topics": [ "discord", "discord-rich-presence", "ghidra", "ghidra-plugin", "java", "java-17" ], "url": "https://github.com/imxeno/ghidracord", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "How Tencent ACE (anogs) anti-cheat is built on iOS, and why naive attacks fail. Analysis, not a bypass", "description_language": "bilingual", "description_zh": "分析腾讯 ACE（anogs）反作弊系统在 iOS 上的构建方式，以及简单攻击为何失败。提供分析，不提供绕过方案。", "full_name": "shiedless/tencent-ace-anogs-notes", "id": "scan-1380205662", "license": "MIT", "observed_at": "2026-10-16T10:47:43.237615Z", "pushed_at": "2026-09-30T16:54:15Z", "readme_sha256": "680769d89d94bdd6685eced81bffc498d60d8c01a7219e58ecf23114335cabcb", "readme_url": "https://github.com/shiedless/tencent-ace-anogs-notes/blob/main/README.md", "stars": 35, "targets": [ "app", "binary" ], "topics": [ "anti-cheat", "arm64", "ios", "reverse-engineering", "security-research", "tencent" ], "url": "https://github.com/shiedless/tencent-ace-anogs-notes", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Standalone static version of Triton's x86/x64 translator", "description_language": "bilingual", "description_zh": "Triton x86/x64 转换器的独立静态版本。", "full_name": "Colton1skees/TritonTranslator", "id": "scan-535475933", "license": null, "observed_at": "2026-10-16T01:36:53.207927Z", "pushed_at": "2026-05-02T22:49:11Z", "readme_sha256": "ee7429774346c38711260e92b126a603d569445382f90f0cc572fe4232709468", "readme_url": "https://github.com/Colton1skees/TritonTranslator/blob/master/README.md", "stars": 34, "targets": [ "binary" ], "topics": [ "binary-translation", "deobfuscation", "instruction-semantics", "lifter", "program-analysis", "static-analysis", "triton" ], "url": "https://github.com/Colton1skees/TritonTranslator", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "a radare2 plugin that decodes packets with Scapy", "description_language": "bilingual", "description_zh": "使用 Scapy 解码数据包的 radare2 插件。", "full_name": "guedou/r2scapy", "id": "scan-111823147", "license": null, "observed_at": "2026-10-16T01:37:07.694902Z", "pushed_at": "2017-11-24T08:40:10Z", "readme_sha256": "38b4a9cb29aaa0210e1645b136904baca908fdb2a38ddc7df17ca92df1765ce9", "readme_url": "https://github.com/guedou/r2scapy/blob/master/README.md", "stars": 34, "targets": [ "binary" ], "topics": [ "networking", "radare2", "radare2-plugin", "scapy" ], "url": "https://github.com/guedou/r2scapy", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Supplement to radare2-explorations.", "description_language": "bilingual", "description_zh": "radare2-explorations 的补充资料。", "full_name": "monosource/radare2-explorations-binaries", "id": "scan-52782407", "license": null, "observed_at": "2026-10-16T01:37:07.569483Z", "pushed_at": "2017-01-04T10:52:45Z", "readme_sha256": "18ed9b4283a59151a1d449c1658d4e441e5c3546a42325a671f30c482f4ed14e", "readme_url": "https://github.com/monosource/radare2-explorations-binaries/blob/master/README.md", "stars": 34, "targets": [ "binary" ], "topics": [ "radare2" ], "url": "https://github.com/monosource/radare2-explorations-binaries", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A repository of example plugins for Relyze Desktop.", "description_language": "bilingual", "description_zh": "Relyze Desktop 插件示例仓库。", "full_name": "relyze-ltd/plugins", "id": "scan-63231636", "license": "BSD-3-Clause", "observed_at": "2026-10-16T01:37:02.135552Z", "pushed_at": "2020-04-17T13:39:53Z", "readme_sha256": "65fd11270f7961f3a9887533cb0d665e8a9f994a13ed6cd54663fdd8ee840180", "readme_url": "https://github.com/relyze-ltd/plugins/blob/master/README.md", "stars": 34, "targets": [ "app", "binary" ], "topics": [ "arm", "arm64", "binary-analysis", "binary-diffing", "disassembler", "malware-analysis", "reverse-engineering", "ruby", "static-analysis", "x64", "x86" ], "url": "https://github.com/relyze-ltd/plugins", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "msp430 Architecture plugin for Binary Ninja", "description_language": "bilingual", "description_zh": "Binary Ninja 的 MSP430 架构插件。", "full_name": "joshwatson/binaryninja-msp430", "id": "scan-70267105", "license": "MIT", "observed_at": "2026-10-16T01:37:17.441954Z", "pushed_at": "2022-03-17T13:27:44Z", "readme_sha256": "d9018949b8e89b8d35198eca6cfff23ddcf0569ac991130f2e39f05a0f220d64", "readme_url": "https://github.com/joshwatson/binaryninja-msp430/blob/master/README.md", "stars": 33, "targets": [ "binary" ], "topics": [ "binary-ninja", "disassembler", "lifter", "microcorruption", "msp430", "reversing", "static-analysis" ], "url": "https://github.com/joshwatson/binaryninja-msp430", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Conversational black-box reverse-engineering agent on the pi coding agent — analyzes apk/.o/.hex/exe with a self-provisioning toolchain (radare2 · Ghidra · angr · jadx). Static analysis. Claude Code & Codex compatible.", "description_language": "bilingual", "description_zh": "基于 pi coding agent 的对话式黑盒逆向工程智能体，可借助自行配置的工具链（radare2、Ghidra、angr、jadx）分析 apk/.o/.hex/exe。采用静态分析，兼容 Claude Code 和 Codex。", "full_name": "maosasagawa/blackbox-re-agent", "id": "scan-1263530988", "license": "Apache-2.0", "observed_at": "2026-10-16T01:36:20.190595Z", "pushed_at": "2026-08-12T02:23:09Z", "readme_sha256": "c01b5d2c0fc00e659bdbd5af80074e0954cf5f696f078b4cc305a4ab1fcca54c", "readme_url": "https://github.com/maosasagawa/blackbox-re-agent/blob/main/README.md", "stars": 33, "targets": [ "app", "binary", "firmware" ], "topics": [ "ai-agent", "angr", "apk", "ctf", "decompiler", "firmware-analysis", "ghidra", "malware-analysis", "radare2", "reverse-engineering", "static-analysis" ], "url": "https://github.com/maosasagawa/blackbox-re-agent", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A radare2 Python script to dump a raw IA32 binary to an NASM source file", "description_language": "bilingual", "description_zh": "将原始 IA32 二进制文件转储为 NASM 源文件的 radare2 Python 脚本。", "full_name": "mytbk/r2dumpbin", "id": "scan-160385690", "license": "MIT", "observed_at": "2026-10-16T01:37:07.851906Z", "pushed_at": "2025-12-10T08:34:20Z", "readme_sha256": "30b9e76789114bb26de0fd8a5fef3c8757393ba76fbd3ffad4aead9e4b5206e4", "readme_url": "https://github.com/mytbk/r2dumpbin/blob/master/README.rst", "stars": 33, "targets": [ "binary" ], "topics": [ "radare2", "reverse-engineering" ], "url": "https://github.com/mytbk/r2dumpbin", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Collection of malware analysis, binary exploitation and reverse engineering related resources", "description_language": "bilingual", "description_zh": "恶意软件分析、二进制漏洞利用和逆向工程相关资源合集。", "full_name": "RazviOverflow/Malware_Resources", "id": "scan-648140725", "license": null, "observed_at": "2026-10-16T01:37:17.389038Z", "pushed_at": "2026-03-05T08:46:24Z", "readme_sha256": "de4c828f487bc8dcc9a8638c01341ee2e4e90eb1fe814046de7f518112cf0471", "readme_url": "https://github.com/RazviOverflow/Malware_Resources/blob/main/README.md", "stars": 33, "targets": [ "binary" ], "topics": [ "binary-exploitation", "malware", "malware-analysis", "malware-detection", "malware-development", "malware-research", "pwn", "reverse-engineering", "reversing" ], "url": "https://github.com/RazviOverflow/Malware_Resources", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "IDA Taskr is a pure Python library for IDA Pro related parallel computing. It lets you use the power of Qt (built-in to IDA!) and Python's powerful multiprocessing and asyncio systems to quickly process computationally intensive tasks without freezing IDA Pro. Oh, and it's super fast too.", "description_language": "bilingual", "description_zh": "IDA Taskr 是用于 IDA Pro 相关并行计算的纯 Python 库。它利用 Qt（内置于 IDA！）以及 Python 强大的 multiprocessing 和 asyncio 系统，快速处理计算密集型任务而不让 IDA Pro 卡死。而且速度非常快。", "full_name": "mahmoudimus/ida-taskr", "id": "scan-992327216", "license": "MIT", "observed_at": "2026-10-18T14:37:59.720873Z", "pushed_at": "2026-07-19T01:10:31Z", "readme_sha256": "40e6df42403947f14f28f3c96a4f9ff72b6ecf9a07fc0bb8cb498de3cb8bab28", "readme_url": "https://github.com/mahmoudimus/ida-taskr/blob/d399f4a24cb8dccf4edafb7ec3171b7aa96aeb52/README.md", "stars": 32, "targets": [ "binary" ], "topics": [ "ida", "ida-plugin", "ida-pro", "ida-python", "idapro", "idapython", "reverse-engineering" ], "url": "https://github.com/mahmoudimus/ida-taskr", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Bump your ida python script automatically!", "description_language": "bilingual", "description_zh": "自动升级你的 IDA Python 脚本！", "full_name": "rand-tech/ida9rewriter", "id": "scan-853960365", "license": "GPL-3.0", "observed_at": "2026-10-18T14:37:59.721101Z", "pushed_at": "2025-04-19T11:03:12Z", "readme_sha256": "c55a5980069c469c6f8261f547360ef8764f4a3c74601cc5cfa9cf3c93674365", "readme_url": "https://github.com/rand-tech/ida9rewriter/blob/350ce468e53bbcbeddd7c42a33189aebe241411a/README.md", "stars": 32, "targets": [ "binary" ], "topics": [ "ida", "ida-pro", "idapro", "libcst", "python", "reverse-engineering" ], "url": "https://github.com/rand-tech/ida9rewriter", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Open source release of the dirtyJOE - editor for the compiled java .class files.", "description_language": "bilingual", "description_zh": "dirtyJOE 的开源版本，用于编辑编译后的 Java .class 文件。", "full_name": "rwfpl/rewolf-dirtyjoe", "id": "scan-586355307", "license": "GPL-3.0", "observed_at": "2026-10-16T01:37:17.615698Z", "pushed_at": "2023-01-07T22:51:50Z", "readme_sha256": "a72c25cb57a4c3815c9a35ff6a4baf78d363491d161a8faa369ede2f9fafcea1", "readme_url": "https://github.com/rwfpl/rewolf-dirtyjoe/blob/main/README.md", "stars": 32, "targets": [ "binary" ], "topics": [ "cafebabe", "dirtyjoe", "disassembler", "file-editor", "reverse-engineering", "reversing" ], "url": "https://github.com/rwfpl/rewolf-dirtyjoe", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A collection of useful radare2 scripts!", "description_language": "bilingual", "description_zh": "实用 radare2 脚本合集！", "full_name": "WithSecureLabs/radare2-scripts", "id": "scan-89487596", "license": "BSD-3-Clause", "observed_at": "2026-10-16T01:37:07.905808Z", "pushed_at": "2018-02-02T12:28:37Z", "readme_sha256": "9573489ddc589d45347449a143e329df09efa0f41c268882b6449d4645f6fa26", "readme_url": "https://github.com/WithSecureLabs/radare2-scripts/blob/master/README.md", "stars": 32, "targets": [ "binary" ], "topics": [ "countercept", "malware-analysis", "python", "radare2", "reverse-engineering", "scripts" ], "url": "https://github.com/WithSecureLabs/radare2-scripts", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "self-contained il2cpp to windows pdb generator (rust, x64, metadata v39)", "description_language": "bilingual", "description_zh": "独立完整的 IL2CPP 到 Windows PDB 生成器，使用 Rust，支持 x64 和元数据 v39。", "full_name": "vmx7/rust_pdb", "id": "scan-1301808951", "license": "MIT", "observed_at": "2026-10-16T07:15:10.433949Z", "pushed_at": "2026-09-03T18:38:32Z", "readme_sha256": "36573fcaa4133bba7b29644df02e0373de80033b3c709bf8a3836b3103e9aff5", "readme_url": "https://github.com/vmx7/rust_pdb/blob/main/README.md", "stars": 31, "targets": [ "binary", "game" ], "topics": [ "cpp", "ida", "il2cpp", "il2cppdumper", "pdb", "pdb-generator", "reverse-engineering", "rust", "unity", "windows" ], "url": "https://github.com/vmx7/rust_pdb", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "BSimVis is a tool to analyze similarities across a collection of binaries, based on Ghidra analyzers and the BSim (Behavioral Similarity) plugin. It provides an API and Web interface to upload large quantities of decompiled binaries and BSim feature vectors to a Kvrocks database for similarity analysis, function diffing, and family clustering.", "description_language": "bilingual", "description_zh": "BSimVis 基于 Ghidra 分析器和 BSim（行为相似性）插件，分析一组二进制文件之间的相似性。它提供 API 和 Web 界面，可将大量反编译后的二进制文件及 BSim 特征向量上传到 Kvrocks 数据库，用于相似性分析、函数差异比较和家族聚类。", "full_name": "MISP/bsimvis", "id": "scan-1186438237", "license": "Apache-2.0", "observed_at": "2026-10-16T01:37:17.677328Z", "pushed_at": "2026-10-08T09:09:00Z", "readme_sha256": "de646954d9655561980346b74b6bebaabb5948014c0e3876aa68df87ec407d46", "readme_url": "https://github.com/MISP/bsimvis/blob/main/README.md", "stars": 30, "targets": [ "binary", "website" ], "topics": [ "binary-reverse-engineering", "binary-reversing", "decompilation", "ghidra", "malware-classification", "reversing" ], "url": "https://github.com/MISP/bsimvis", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "yara and radare2, better together", "description_language": "bilingual", "description_zh": "YARA 与 radare2，搭配使用更出色。", "full_name": "radareorg/r2yara", "id": "scan-699763702", "license": "LGPL-3.0", "observed_at": "2026-10-16T01:37:07.985283Z", "pushed_at": "2026-08-07T11:09:04Z", "readme_sha256": "ef4a85f0c9b0b07b5e7776e1b81bdfffb71d4dc39319d455a53bd8fbb2245811", "readme_url": "https://github.com/radareorg/r2yara/blob/main/README.md", "stars": 30, "targets": [ "binary" ], "topics": [ "malware", "radare2", "rules", "yara" ], "url": "https://github.com/radareorg/r2yara", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Tools to reverse the Toshiba FlashAir SD cards", "description_language": "bilingual", "description_zh": "用于逆向分析 Toshiba FlashAir SD 卡的工具。", "full_name": "guedou/flashre", "id": "scan-142181691", "license": "LGPL-3.0", "observed_at": "2026-10-16T01:37:08.062637Z", "pushed_at": "2019-07-23T08:47:37Z", "readme_sha256": "891da5a0c6317fed7c5f49380ea40c82c3b0c2941367261db9117db854c5d085", "readme_url": "https://github.com/guedou/flashre/blob/master/README.md", "stars": 29, "targets": [ "binary" ], "topics": [ "flashair", "miasm2", "radare2", "reverse-engineering" ], "url": "https://github.com/guedou/flashre", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Automatically identify and extract potential anti-debugging techniques used by malware. ", "description_language": "bilingual", "description_zh": "自动识别并提取恶意软件使用的潜在反调试技术。", "full_name": "LAC-Japan/Ghidra_AntiDebugSeeker", "id": "scan-817556069", "license": "BSD-3-Clause", "observed_at": "2026-10-18T14:37:28.411970Z", "pushed_at": "2024-11-20T01:47:18Z", "readme_sha256": "aef4fe369d3540eb508261845fc2a620d2bd9c08b0aa76cd4e753af4c8fbc0f0", "readme_url": "https://github.com/LAC-Japan/Ghidra_AntiDebugSeeker/blob/5d39dc134b187ce8e2b98dac702a9b9476e31d4d/README.md", "stars": 29, "targets": [ "binary" ], "topics": [ "anti-debugging", "ghidra", "ghidra-extension", "ghidra-plugin", "ghidra-scripts", "malware" ], "url": "https://github.com/LAC-Japan/Ghidra_AntiDebugSeeker", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Stack String Explorer is a ghidra plugin to find and report stack strings (and other constant strings). Identified strings are commented and placed in the defined strings window for easy analysis.", "description_language": "bilingual", "description_zh": "Stack String Explorer 是用于查找并报告栈字符串及其他常量字符串的 Ghidra 插件。识别到的字符串会被添加注释，并放入已定义字符串窗口，便于分析。", "full_name": "foundryzero/ghidra-stack-string-explorer", "id": "scan-837073478", "license": "MIT", "observed_at": "2026-10-18T14:37:33.006438Z", "pushed_at": "2024-08-20T08:56:33Z", "readme_sha256": "56d5a91d97627d62b964d99965673938421436e9bed53e99bdd0407e5d39e350", "readme_url": "https://github.com/foundryzero/ghidra-stack-string-explorer/blob/001227b836f6ae172925a82da3e43daf27ce57ab/README.md", "stars": 28, "targets": [ "binary" ], "topics": [ "ghidra", "ghidra-extension", "ghidra-plugin", "ghidra-scripts", "reverse-engineering", "stack-string", "vulnerability-research" ], "url": "https://github.com/foundryzero/ghidra-stack-string-explorer", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "PS Vita port of The Binding of Isaac: Repentance by static recompilation of the PC executable to ARM.", "description_language": "bilingual", "description_zh": "通过将 PC 可执行文件静态重编译为 ARM，将《The Binding of Isaac: Repentance》移植至 PS Vita。", "full_name": "0xl0cal/repentogxm", "id": "scan-1357127280", "license": "GPL-2.0", "observed_at": "2026-10-16T11:55:12.952104Z", "pushed_at": "2026-10-09T05:57:49Z", "readme_sha256": "7eac2bb7161a104a37f77d3725ba587e01730c900299769ce7384105daef9a91", "readme_url": "https://github.com/0xl0cal/repentogxm/blob/main/README.md", "stars": 27, "targets": [ "binary" ], "topics": [ "binding-of-isaac", "ps-vita", "psvita", "repentance", "static-recompilation", "vita", "vita-homebrew" ], "url": "https://github.com/0xl0cal/repentogxm", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "rune - radare2 based symbolic emulator", "description_language": "bilingual", "description_zh": "rune：基于 radare2 的符号仿真器。", "full_name": "sushant94/rune", "id": "scan-50408782", "license": "Apache-2.0", "observed_at": "2026-10-16T01:37:08.426319Z", "pushed_at": "2017-08-29T16:35:13Z", "readme_sha256": "93b5017a5d2d742bd981460dd5db10eee9353e251defce352a19d4cfb77a34a5", "readme_url": "https://github.com/sushant94/rune/blob/master/README.md", "stars": 27, "targets": [ "binary" ], "topics": [ "radare2", "symbolic-execution-engine" ], "url": "https://github.com/sushant94/rune", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Golang wrapper for @mendsley's bsdiff C library.", "description_language": "bilingual", "description_zh": "@mendsley 的 bsdiff C 库的 Go 封装。", "full_name": "icedream/go-bsdiff", "id": "scan-82210011", "license": "BSD-2-Clause", "observed_at": "2026-10-16T01:37:02.257026Z", "pushed_at": "2026-09-01T01:31:40Z", "readme_sha256": "9867a7be552a4d85920f3fce07071f006acd20f7865ec839b490a442585690ad", "readme_url": "https://github.com/icedream/go-bsdiff/blob/master/README.md", "stars": 26, "targets": [ "binary" ], "topics": [ "binary-diffing", "bsdiff", "go", "golang", "golang-library", "patch" ], "url": "https://github.com/icedream/go-bsdiff", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A very basic debundler for Javascript bundles compiled with React Native's bundler", "description_language": "bilingual", "description_zh": "用于拆解 React Native 打包器所生成 JavaScript 包的基础工具。", "full_name": "nickw444/rn-debundle", "id": "scan-219098823", "license": null, "observed_at": "2026-10-16T11:54:52.005778Z", "pushed_at": "2021-05-05T09:59:47Z", "readme_sha256": "1f6c10746b1f10bd9f05e091dab2113a34a19039abe3748606ce28357e468f23", "readme_url": "https://github.com/nickw444/rn-debundle/blob/master/README.md", "stars": 26, "targets": [ "binary" ], "topics": [ "debundle", "react", "react-native", "reverse-engineering" ], "url": "https://github.com/nickw444/rn-debundle", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Discover similar functions structures in binaries using graph theory.", "description_language": "bilingual", "description_zh": "运用图论发现二进制文件中结构相似的函数。", "full_name": "buzzer-re/eqfunc", "id": "scan-376363545", "license": null, "observed_at": "2026-10-16T01:37:08.550414Z", "pushed_at": "2021-10-14T17:33:02Z", "readme_sha256": "a76b8ca0b8b7458a353e06f19f88a54098063895dbc64e9e9b8ba5bdcaabc1b0", "readme_url": "https://github.com/buzzer-re/eqfunc/blob/master/README.md", "stars": 25, "targets": [ "binary" ], "topics": [ "binary-analysis", "graph-theory", "radare2", "reverse-engineering", "rizin" ], "url": "https://github.com/buzzer-re/eqfunc", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Ghidra loader for decrypted iBoot, LLB, iBEC, iBSS and SecureROM images", "description_language": "bilingual", "description_zh": "用于已解密 iBoot、LLB、iBEC、iBSS 和 SecureROM 镜像的 Ghidra 加载器。", "full_name": "ExhoAR22/ghidra-iboot", "id": "scan-422699116", "license": "MIT", "observed_at": "2026-10-18T14:37:33.006696Z", "pushed_at": "2022-03-25T07:40:30Z", "readme_sha256": "0cd3c5f083843285d4cb07621645f00bc9932be8f2de58bbeddcbfd356521598", "readme_url": "https://github.com/ExhoAR22/ghidra-iboot/blob/bd3910b78ea0d1af71c70a901fd76d9841cbc55a/README.md", "stars": 25, "targets": [ "binary" ], "topics": [ "ghidra", "ghidra-loader", "ghidra-plugin", "iboot" ], "url": "https://github.com/ExhoAR22/ghidra-iboot", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "IoT firmware vulnerability analysis tool based on binary code similarity analysis (BCSA)", "description_language": "bilingual", "description_zh": "基于二进制代码相似性分析（BCSA）的物联网固件漏洞分析工具", "full_name": "SysSec-KAIST/FirmKit", "id": "scan-441478881", "license": "MIT", "observed_at": "2026-10-16T10:47:51.404960Z", "pushed_at": "2022-07-06T02:27:09Z", "readme_sha256": "4db389bfdaddd1006fa110ad18acce7284e69605616fd5817163a7f12b2363c2", "readme_url": "https://github.com/SysSec-KAIST/FirmKit/blob/master/README.md", "stars": 25, "targets": [ "binary", "firmware" ], "topics": [], "url": "https://github.com/SysSec-KAIST/FirmKit", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "IDA's Lumina feature, reimplemented for Ghidra", "description_language": "bilingual", "description_zh": "为 Ghidra 重新实现 IDA 的 Lumina 功能。", "full_name": "ubcctf/lumina-ghidra", "id": "scan-576645845", "license": "MIT", "observed_at": "2026-10-18T14:37:33.007003Z", "pushed_at": "2023-05-24T02:30:03Z", "readme_sha256": "2c362ec8ae479fc1b3b53d7033c3d6d5c40cb7f8118a78206457edaab4e904c9", "readme_url": "https://github.com/ubcctf/lumina-ghidra/blob/6622840499b98eaddfb4d2089c7ec424827a994a/README.md", "stars": 25, "targets": [ "binary" ], "topics": [ "binary-analysis", "collaboration", "function-signature", "ghidra", "ghidra-plugin", "ida", "ida-pro", "lumina", "reverse-engineering" ], "url": "https://github.com/ubcctf/lumina-ghidra", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "An unofficial French-language educational guide to REA (Reverse Engineer Anything): analyze applications and binaries with a coding agent through MCP and CLI, Hopper or Ghidra, backed by evidence. Includes the legal framework for reverse engineering. Upstream project: morluto/rea.", "description_language": "bilingual", "description_zh": "关于 REA（Reverse Engineer Anything）的非官方法语教学指南，介绍通过 MCP、CLI、Hopper 或 Ghidra，使用编程智能体依据证据分析应用和二进制文件，并包含逆向工程的法律框架。上游项目：morluto/rea。", "full_name": "valorisa/Reverse-Engineer-Anything", "id": "scan-1412380298", "license": "MIT", "observed_at": "2026-10-16T07:14:56.727411Z", "pushed_at": "2026-10-09T19:49:26Z", "readme_sha256": "10e48eb687f77d7b93a03d12250c509d4231115c911195c4956e52327443d713", "readme_url": "https://github.com/valorisa/Reverse-Engineer-Anything/blob/main/README.md", "stars": 25, "targets": [ "app", "binary" ], "topics": [ "agent-skills", "ai-agent-tools", "ai-agents", "binary-analysis", "cli", "coding-agents", "decompiler", "disassembler", "documentation", "education", "electron", "french", "ghidra", "hopper-disassembler", "mcp", "model-context-protocol", "rea-agents", "reverse-engineering", "static-analysis", "tutorial" ], "url": "https://github.com/valorisa/Reverse-Engineer-Anything", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Import il2cppdumper data into a Binary Ninja plugin.", "description_language": "bilingual", "description_zh": "在 Binary Ninja 插件中导入 il2cppdumper 数据。", "full_name": "VNRev/il2cpp_bn", "id": "scan-677382020", "license": "MIT", "observed_at": "2026-10-16T07:15:10.607311Z", "pushed_at": "2024-04-10T06:43:45Z", "readme_sha256": "5ea98dadac8ea891556a0c446af008e3e2581193c9cca81c7b5eb635a6c2bc02", "readme_url": "https://github.com/VNRev/il2cpp_bn/blob/master/README.md", "stars": 25, "targets": [ "binary", "game" ], "topics": [ "binary-ninja", "il2cpp", "plugin", "python", "reverse-engineering", "unity" ], "url": "https://github.com/VNRev/il2cpp_bn", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "XrefsExt plugin for IDA Pro(idapython,ida plugin,ida plugins)", "description_language": "bilingual", "description_zh": "适用于 IDA Pro 的 XrefsExt 插件（idapython、IDA 插件）。", "full_name": "zengfr/XrefsExt", "id": "scan-655141160", "license": "Apache-2.0", "observed_at": "2026-10-18T14:37:59.722707Z", "pushed_at": "2024-11-13T10:19:09Z", "readme_sha256": "4cb77d05a683e5b6809fc5c69223e00e85b6696b9d712f8463fa0e09faa508c4", "readme_url": "https://github.com/zengfr/XrefsExt/blob/155b06785728c1c8f86575470ed808c1c4f3147d/README.md", "stars": 25, "targets": [ "binary" ], "topics": [ "hexrays", "ida", "ida-plugin", "ida-plugins", "ida-python", "idapro", "idapython", "idapython-plugin", "reverse-engineering", "xrefsext" ], "url": "https://github.com/zengfr/XrefsExt", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "WIP Decompilation of Tactics Ogre: The Knight of Lodis (USA)", "description_language": "bilingual", "description_zh": "开发中：《Tactics Ogre: The Knight of Lodis》美版反编译项目", "full_name": "jiangzhengwenjz/totkol", "id": "scan-469257034", "license": null, "observed_at": "2026-10-16T10:47:36.972123Z", "pushed_at": "2024-01-02T20:23:46Z", "readme_sha256": "ab76d645f9a5c4b3f5f59df6bba2b4bf2a85ec6c3608aca79410685562a866c6", "readme_url": "https://github.com/jiangzhengwenjz/totkol/blob/master/README.md", "stars": 24, "targets": [ "binary" ], "topics": [ "assembly", "c", "decompilation", "gameboy-advance", "reverse-engineering" ], "url": "https://github.com/jiangzhengwenjz/totkol", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Python Module for Parsing & Reverse Engineering Mach-O Executables.", "description_language": "bilingual", "description_zh": "用于解析与逆向分析 Mach-O 可执行文件的 Python 模块。", "full_name": "CYB3RMX/Wh1teM0cha", "id": "scan-755101307", "license": "GPL-3.0", "observed_at": "2026-10-16T10:47:38.524321Z", "pushed_at": "2024-03-01T11:41:30Z", "readme_sha256": "03de6d26d1e56fc7f389f5e7c86270f4d09ac0982a78c570d1a85b80bfb74074", "readme_url": "https://github.com/CYB3RMX/Wh1teM0cha/blob/main/README.md", "stars": 23, "targets": [ "app", "binary" ], "topics": [ "apple", "cybersecurity", "executable", "ios", "mach-o", "macho-parser", "macosx", "malware-analysis", "parser", "python3", "reverse-engineering" ], "url": "https://github.com/CYB3RMX/Wh1teM0cha", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Generate data-flow graph and def-use graph for a function based on miasm and IDA Pro.", "description_language": "bilingual", "description_zh": "基于 miasm 和 IDA Pro，为函数生成数据流图和定义—使用图。", "full_name": "Learner0x5a/DataFlowAnalysis-miasm", "id": "scan-493300140", "license": "GPL-2.0", "observed_at": "2026-10-18T14:37:59.723996Z", "pushed_at": "2022-05-17T15:15:42Z", "readme_sha256": "119de84777c188eed1a10e12224b56eb2bb14a934d1bb566c9d18dd24b603017", "readme_url": "https://github.com/Learner0x5a/DataFlowAnalysis-miasm/blob/c9461672af8eab4016eb407e12b9da3d16d377cc/README.md", "stars": 22, "targets": [ "binary" ], "topics": [ "binary-lifting", "data-flow-analysis", "data-flow-graph", "def-use-analysis", "ida-pro", "idapro", "idapython", "miasm", "reaching-definition-analysis", "reverse", "reverse-engineering" ], "url": "https://github.com/Learner0x5a/DataFlowAnalysis-miasm", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A Ghidra loader for 3DS files", "description_language": "bilingual", "description_zh": "用于 3DS 文件的 Ghidra 加载器。", "full_name": "Martmists-GH/ghidra-ctr-loader", "id": "scan-543293032", "license": "NOASSERTION", "observed_at": "2026-10-18T14:37:33.007180Z", "pushed_at": "2024-01-07T20:20:30Z", "readme_sha256": "4b028f3506091b2290bb6f55f18d2729d99aafed7483af993a760a45bb08c45a", "readme_url": "https://github.com/Martmists-GH/ghidra-ctr-loader/blob/72dc758138c395a821f06c996fc2e4af7cb0d640/README.md", "stars": 22, "targets": [ "binary" ], "topics": [ "3ds", "ghidra", "ghidra-loader", "ghidra-plugin" ], "url": "https://github.com/Martmists-GH/ghidra-ctr-loader", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Launch radare2 like a boss from pwntools in tmux", "description_language": "bilingual", "description_zh": "在 tmux 中通过 pwntools 轻松启动 radare2。", "full_name": "ps1337/pwntools-r2", "id": "scan-198845604", "license": null, "observed_at": "2026-10-16T01:37:08.708308Z", "pushed_at": "2019-08-27T14:54:30Z", "readme_sha256": "feb988aa9755a5e4ce5e73dd1fa4dbb9cff791453b028cdbddc9afed5504979a", "readme_url": "https://github.com/ps1337/pwntools-r2/blob/master/README.md", "stars": 22, "targets": [ "binary" ], "topics": [ "ctf", "ctf-tools", "pwntools", "python", "radare", "radare2" ], "url": "https://github.com/ps1337/pwntools-r2", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A IDA CLI tool built on Rust, idalib-rs, and idalib. Supports batch and concurrent IDA analysis processes, design for stateless, agent first, skill first, and automation first. Reduce AI understanding and friction costs, make agents to efficiently execute complex binary analysis tasks.", "description_language": "bilingual", "description_zh": "基于 Rust、idalib-rs 和 idalib 构建的 IDA CLI 工具。支持批量和并发 IDA 分析进程，面向无状态、智能体优先、技能优先和自动化优先的设计。降低 AI 理解与使用阻力的成本，让智能体高效执行复杂二进制分析任务。", "full_name": "ylca0/idalib-cli", "id": "scan-1367318093", "license": "Apache-2.0", "observed_at": "2026-10-18T14:37:59.724792Z", "pushed_at": "2026-09-15T06:54:53Z", "readme_sha256": "102044d75d8f38c9025d9f121b1863d42130fcf8390debff2a9eaa2f044a9001", "readme_url": "https://github.com/ylca0/idalib-cli/blob/c36316d74cbd7343fd54c45cbb8a73d4fb04e49e/README.md", "stars": 22, "targets": [ "binary" ], "topics": [ "agent-skills", "agentic-ai", "automation", "cli", "ida", "idalib", "idapro", "reverse-engineering" ], "url": "https://github.com/ylca0/idalib-cli", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "IDA Pro script to find interesting syscalls and patterns in binaries", "description_language": "bilingual", "description_zh": "在二进制文件中查找值得关注的系统调用和模式的 IDA Pro 脚本。", "full_name": "alexander-pick/ida-pro-function-hunter", "id": "scan-711170696", "license": "MIT", "observed_at": "2026-10-18T14:37:59.725129Z", "pushed_at": "2024-10-18T08:02:52Z", "readme_sha256": "da76757bc5db41a7b85f00109aa7da9fa76c54742dc9df01a48816a5da1eefc2", "readme_url": "https://github.com/alexander-pick/ida-pro-function-hunter/blob/9c8e012d8aed79197debf4d80458ac8f0ff769b4/Readme.md", "stars": 21, "targets": [ "binary" ], "topics": [ "idapro", "reverse-engineering", "vulnerability-assessment" ], "url": "https://github.com/alexander-pick/ida-pro-function-hunter", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Apple runtime introspection tools", "description_language": "bilingual", "description_zh": "Apple 平台运行时内省工具。", "full_name": "DerekSelander/homebrew-funpack", "id": "scan-619154757", "license": null, "observed_at": "2026-10-16T10:47:38.113668Z", "pushed_at": "2024-11-12T21:44:03Z", "readme_sha256": "bfde8ee3f0c33ed01d5927b6f614451111dbef846ecf0340c9c67a8aaeebadae", "readme_url": "https://github.com/DerekSelander/homebrew-funpack/blob/main/README.md", "stars": 21, "targets": [ "app", "binary" ], "topics": [ "apple", "arm64", "debugging", "ios", "macos", "reverse-engineering" ], "url": "https://github.com/DerekSelander/homebrew-funpack", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Vagrant setup for building a machine for CTF/exploit development", "description_language": "bilingual", "description_zh": "用于搭建 CTF 和漏洞利用开发环境的 Vagrant 配置。", "full_name": "kapaw/pwnmachine", "id": "scan-51641553", "license": null, "observed_at": "2026-10-16T01:37:08.621795Z", "pushed_at": "2019-04-21T12:06:28Z", "readme_sha256": "cc4713623b632b89fc179fdf98583af7d5ac0fcf12c2d358f89f2526a2b06173", "readme_url": "https://github.com/kapaw/pwnmachine/blob/master/README.md", "stars": 21, "targets": [ "binary" ], "topics": [ "afl-fuzz", "angr", "dynamorio", "gdb", "gef", "honggfuzz", "intel-pin", "libfuzzer", "peda", "pwndbg", "pwntools", "radamsa", "radare2", "ropgadget", "ropper", "unicorn-engine", "valgrind", "voltron", "z3", "zzuf" ], "url": "https://github.com/kapaw/pwnmachine", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "BomLens — a local-first SBOM generator & open-source risk assessor (CycloneDX). Produce an SBOM, an open-source notice, and a security/license risk report from source code, containers, binaries, firmware, or an SBOM you received. CLI or web UI, no SaaS.", "description_language": "bilingual", "description_zh": "BomLens：本地优先的 SBOM 生成器及开源风险评估工具（CycloneDX）。可从源代码、容器、二进制文件、固件或收到的 SBOM 生成 SBOM、开源声明及安全与许可证风险报告。提供命令行和 Web 界面，无需 SaaS。", "full_name": "sktelecom/bomlens", "id": "scan-1157720466", "license": "Apache-2.0", "observed_at": "2026-10-16T01:36:20.401175Z", "pushed_at": "2026-10-16T00:18:29Z", "readme_sha256": "d46f8c5f0e816a0bf0c3d80eb0718b8db1ae69dcdc21d1a229a95e232bf2df21", "readme_url": "https://github.com/sktelecom/bomlens/blob/main/README.md", "stars": 21, "targets": [ "binary", "firmware", "website" ], "topics": [ "cdxgen", "cyclonedx", "devsecops", "docker", "firmware-analysis", "license-compliance", "open-source-security", "sbom", "sbom-generator", "sca", "software-bill-of-materials", "supply-chain-security", "syft", "trivy", "vulnerability-scanning" ], "url": "https://github.com/sktelecom/bomlens", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Agentic binary reverse engineering for ELF binaries on ARM64, ARMv7, x86_64 - hypothesis-driven analysis with radare2, Ghidra, GDB, QEMU", "description_language": "bilingual", "description_zh": "面向 ARM64、ARMv7 和 x86_64 ELF 二进制文件的智能体逆向工程，使用 radare2、Ghidra、GDB 和 QEMU 开展假设驱动的分析。", "full_name": "2389-research/binary-re", "id": "scan-1199971217", "license": "MIT", "observed_at": "2026-10-16T01:37:08.673157Z", "pushed_at": "2026-09-25T20:29:52Z", "readme_sha256": "28c7bd3068ad65f0c2935786d6df93de6d7710fe39ae1a1287fe605ca2a4551a", "readme_url": "https://github.com/2389-research/binary-re/blob/main/README.md", "stars": 20, "targets": [ "binary", "firmware" ], "topics": [ "ai-agents", "anthropic", "arm", "automation", "binary", "claude", "claude-code", "claude-code-skills", "decompile", "disassembly", "elf", "embedded", "firmware", "gdb", "ghidra", "qemu", "r2", "radare2", "reverse-engineering" ], "url": "https://github.com/2389-research/binary-re", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "macOS port of opainject - ROP-based dylib injection to arm64(e) processes.", "description_language": "bilingual", "description_zh": "opainject 的 macOS 移植版：基于 ROP 向 arm64(e) 进程注入 dylib。", "full_name": "assemblew/opainject_macos", "id": "scan-1099197905", "license": "MIT", "observed_at": "2026-10-16T10:47:40.055666Z", "pushed_at": "2025-11-24T13:21:44Z", "readme_sha256": "803fee9e99f2bb4626013b7987f612700ca23a9b16967c6d6307eaefa0a50fcf", "readme_url": "https://github.com/assemblew/opainject_macos/blob/main/README.md", "stars": 20, "targets": [ "app", "binary" ], "topics": [ "arm64", "arm64e", "arm64v8", "code-injection", "dylib-injection", "hacking", "hijacking", "ios", "mach", "mach-o", "macos", "malware-development", "objective-c", "opainject", "process-hijacking", "reverse-engineering", "rop", "security-research", "spyware-project" ], "url": "https://github.com/assemblew/opainject_macos", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A practical handbook on reverse engineering. Covers embedded firmware (ARM Cortex-M, Xtensa/ESP32, RISC-V, 8051, MIPS), Linux userland, kernel modules and device trees, plus hardware attacks (fault injection, side-channel analysis). Uses radare2 as the primary tool example. PDF + web book.", "description_language": "bilingual", "description_zh": "逆向工程实用手册。涵盖嵌入式固件（ARM Cortex-M、Xtensa/ESP32、RISC-V、8051、MIPS）、Linux 用户空间、内核模块和设备树，以及硬件攻击（故障注入、侧信道分析）。主要以 radare2 为工具示例，提供 PDF 和网页版。", "full_name": "DatanoiseTV/practical-reverse-engineering", "id": "scan-1242042254", "license": "NOASSERTION", "observed_at": "2026-10-16T01:37:08.794664Z", "pushed_at": "2026-05-18T09:53:10Z", "readme_sha256": "945a9d7d55b76c0add38eb37a297423abebd71b1e621eb73d044469ca55f15bf", "readme_url": "https://github.com/DatanoiseTV/practical-reverse-engineering/blob/main/README.md", "stars": 20, "targets": [ "binary", "firmware", "website" ], "topics": [ "8051", "arm-cortex-m", "automotive-security", "binwalk", "bluetooth-low-energy", "can-bus", "chipwhisperer", "device-tree", "embedded-firmware", "esp32", "fault-injection", "fuzzing", "hardware-security", "linux-kernel", "mips", "radare2", "reverse-engineering", "risc-v", "security", "side-channel-analysis" ], "url": "https://github.com/DatanoiseTV/practical-reverse-engineering", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "MCP server for automated binary diffing.", "description_language": "bilingual", "description_zh": "用于自动比较二进制文件差异的 MCP 服务器。", "full_name": "xTeardx/diaphora-mcp", "id": "scan-1285240239", "license": "MIT", "observed_at": "2026-10-16T01:37:02.525271Z", "pushed_at": "2026-10-12T17:18:10Z", "readme_sha256": "160b2810eb91b0cabc37b5928d4eec2cc84f1985da66291fbfb3e3cf57f6fc5c", "readme_url": "https://github.com/xTeardx/diaphora-mcp/blob/master/README.md", "stars": 20, "targets": [ "binary" ], "topics": [ "ai-tools", "binary-diffing", "claude-plugin", "codex-plugin", "diaphora", "idapro", "mcp", "model-context-protocol", "reverse-engineering" ], "url": "https://github.com/xTeardx/diaphora-mcp", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "AArch64 FEAT_CSSC support for IDA Pro (disassembler/Hex-Rays) and Ghidra", "description_language": "bilingual", "description_zh": "为 IDA Pro（反汇编器／Hex-Rays）和 Ghidra 提供 AArch64 FEAT_CSSC 支持。", "full_name": "blacktop/aarch64-cssc", "id": "scan-1059776565", "license": "MIT", "observed_at": "2026-10-18T14:37:33.007689Z", "pushed_at": "2025-09-20T17:41:00Z", "readme_sha256": "768daa60c32dd4a883d62713d3df0b2d64edb5d96f758d625842bcb834ae8c0a", "readme_url": "https://github.com/blacktop/aarch64-cssc/blob/28a74bacf77d7f44cfb0ffd05593d3f695752d23/README.md", "stars": 19, "targets": [ "binary" ], "topics": [ "aarch64", "arm64", "cssc", "feat-cssc", "ghidra", "ghidra-plugin", "hex-rays", "hex-rays-decompiler", "ida-plugin", "idapython" ], "url": "https://github.com/blacktop/aarch64-cssc", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Scrape files for sensitive information, and generate an interactive HTML report. Based on Rabin2.", "description_language": "bilingual", "description_zh": "扫描文件中的敏感信息并生成交互式 HTML 报告，基于 Rabin2。", "full_name": "ivan-sincek/file-scraper", "id": "scan-622365300", "license": "MIT", "observed_at": "2026-10-16T01:37:08.795750Z", "pushed_at": "2026-02-25T23:13:10Z", "readme_sha256": "a35e0718f2eeefde73ea9113f8ba3c01df685010efe9124f5da041ac9b14ea0b", "readme_url": "https://github.com/ivan-sincek/file-scraper/blob/main/README.md", "stars": 19, "targets": [ "app", "binary" ], "topics": [ "bug-bounty", "desktop-penetration-testing", "ethical-hacking", "incident-response", "malware-analysis", "mobile-penetration-testing", "offensive-security", "penetration-testing", "python", "rabin2", "radare2", "red-team-engagement", "scraping", "secrets-finder", "secrets-management", "security", "sensitive-data", "sensitive-files", "strings", "web-penetration-testing" ], "url": "https://github.com/ivan-sincek/file-scraper", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A better ghidra mcp, without bridges or external dependecies, just install and run. It uses the natvie MCP protocol", "description_language": "bilingual", "description_zh": "更好的 Ghidra MCP，无需桥接或外部依赖，安装即可运行。使用原生 MCP 协议。", "full_name": "TheFlashBold/Better-Ghidra-MCP", "id": "scan-1175070606", "license": "MIT", "observed_at": "2026-10-18T14:37:33.008363Z", "pushed_at": "2026-09-15T11:53:18Z", "readme_sha256": "ec4313a31e7d31b9adc366b6849cf13e6bd700d0768a7e7b37634aaf6999dfb2", "readme_url": "https://github.com/TheFlashBold/Better-Ghidra-MCP/blob/0a71d19be59c21ee7ac3437acff7db5264c0759a/README.md", "stars": 19, "targets": [ "binary" ], "topics": [ "claude-code", "ghidra", "ghidra-plugin", "mcp" ], "url": "https://github.com/TheFlashBold/Better-Ghidra-MCP", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "The GhidraLookup plugin aims to help user lookup documentations of Win API functions.", "description_language": "bilingual", "description_zh": "GhidraLookup 插件旨在帮助用户查阅 Win API 函数文档。", "full_name": "XYFC128/GhidraLookup", "id": "scan-390364893", "license": "Apache-2.0", "observed_at": "2026-10-18T14:37:33.008010Z", "pushed_at": "2021-08-05T12:44:28Z", "readme_sha256": "05180ba9bed757fc03a5ef347a1c8efc6300518022667fb581dc2453238852df", "readme_url": "https://github.com/XYFC128/GhidraLookup/blob/47a513e9438c056f34f54c9013f0f81d43f6a10e/README.md", "stars": 19, "targets": [ "binary" ], "topics": [ "ghidra", "ghidra-extension", "ghidra-plugin", "ghidra-plugins" ], "url": "https://github.com/XYFC128/GhidraLookup", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Reverse-engineering & re-implementation of OpenAI Computer Use macOS plugin for DeepSeek Harness: 10 MCP tools, JSON-RPC wire protocol, native Swift AX/screenshot/input daemon.", "description_language": "bilingual", "description_zh": "为 DeepSeek Harness 逆向分析并重新实现 OpenAI Computer Use 的 macOS 插件：10 个 MCP 工具、JSON-RPC 通信协议，以及使用 Swift 原生实现的 AX／截图／输入守护进程。", "full_name": "AzaiSakura/dsh-computer-use", "id": "scan-1341703793", "license": "MIT", "observed_at": "2026-10-16T10:48:00.980065Z", "pushed_at": "2026-08-21T14:52:51Z", "readme_sha256": "024471ca658521c8316db4536ea3a597b9dccd23d66980d046fd183aed9f4b6b", "readme_url": "https://github.com/AzaiSakura/dsh-computer-use/blob/main/README.md", "stars": 18, "targets": [ "binary" ], "topics": [ "accessibility", "agentic", "computer-use", "deepseek", "macos", "mcp", "swift" ], "url": "https://github.com/AzaiSakura/dsh-computer-use", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "WIP Decompilation of Summon Night: Craft Sword Monogatari Hajimari no Ishi", "description_language": "bilingual", "description_zh": "Summon Night: Craft Sword Monogatari Hajimari no Ishi（サモンナイト クラフトソード物語 はじまりの石）的反编译项目，仍在进行中。", "full_name": "jiangzhengwenjz/csm3", "id": "scan-502192859", "license": null, "observed_at": "2026-10-16T10:47:37.390391Z", "pushed_at": "2024-06-02T02:15:27Z", "readme_sha256": "d549db618b040d272747e0a962f34ce960238fd90d96208351259a33af27a4ea", "readme_url": "https://github.com/jiangzhengwenjz/csm3/blob/main/README.md", "stars": 18, "targets": [ "binary" ], "topics": [ "assembly", "c", "decompilation", "gameboy-advance", "reverse-engineering" ], "url": "https://github.com/jiangzhengwenjz/csm3", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Work with spice86 data into Ghidra", "description_language": "bilingual", "description_zh": "在 Ghidra 中处理 spice86 数据。", "full_name": "OpenRakis/spice86-ghidra-plugin", "id": "scan-547623119", "license": "Apache-2.0", "observed_at": "2026-10-18T14:37:33.008784Z", "pushed_at": "2026-04-26T12:26:56Z", "readme_sha256": "ff70032e4b2f98ccf4295bdfc30dc5501dda0b1bc779527412e707f65a87f59f", "readme_url": "https://github.com/OpenRakis/spice86-ghidra-plugin/blob/c99fa1c23ceeed54d5fd3f79cfe5f80dad962829/README.md", "stars": 18, "targets": [ "binary" ], "topics": [ "assembly-x86", "ghidra", "ghidra-plugin", "java", "reverse-engineering", "spice86" ], "url": "https://github.com/OpenRakis/spice86-ghidra-plugin", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Binary, Analysis, and Disassembler Radare2 Plugins for Dan32 architechture binaries", "description_language": "bilingual", "description_zh": "面向 Dan32 架构二进制文件的 radare2 二进制格式、分析和反汇编插件。", "full_name": "safiire/radare2-dan32", "id": "scan-96155109", "license": null, "observed_at": "2026-10-16T01:37:08.948403Z", "pushed_at": "2017-08-21T18:57:56Z", "readme_sha256": "e900164a4faa871f246ba8ced2a0d408c50fef88329d425a842e5b523a5ac1ed", "readme_url": "https://github.com/safiire/radare2-dan32/blob/master/README.md", "stars": 18, "targets": [ "binary" ], "topics": [ "crackme", "ctf-solutions", "ctf-writeups", "radare2", "radare2-plugin", "rc4", "reverse-engineering", "virtual-machine" ], "url": "https://github.com/safiire/radare2-dan32", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A Python-based tool for analyzing IoT firmware, supporting both filesystem-based and RTOS-based (e.g. FreeRTOS, Zephyr) images. Features include binary header parsing, interrupt vector analysis, string extraction, entropy scanning, and more.", "description_language": "bilingual", "description_zh": "基于 Python 的物联网固件分析工具，支持基于文件系统和基于 RTOS（如 FreeRTOS、Zephyr）的镜像。功能包括二进制文件头解析、中断向量分析、字符串提取、熵扫描等。", "full_name": "sondt99/firmvisor", "id": "scan-970016978", "license": "MIT", "observed_at": "2026-10-16T10:47:51.771015Z", "pushed_at": "2025-04-25T08:56:23Z", "readme_sha256": "4db3a975c6a292eab98203fba1d2e1a0985d0b78cd8bdc485159c16f984947f7", "readme_url": "https://github.com/sondt99/firmvisor/blob/main/README.md", "stars": 18, "targets": [ "binary", "firmware" ], "topics": [], "url": "https://github.com/sondt99/firmvisor", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A Ghidra script to improve decompiled code readability by re-writing it (Using DeepSeek) in a better way, Along with renaming/assigning variables based on their usage.", "description_language": "bilingual", "description_zh": "通过 DeepSeek 改写反编译代码来提升可读性的 Ghidra 脚本，同时根据变量用途进行重命名／赋值。", "full_name": "Zeyad-Azima/GhidraDeepSeekDecomprove", "id": "scan-922289790", "license": "GPL-3.0", "observed_at": "2026-10-18T14:37:33.009145Z", "pushed_at": "2025-10-08T14:48:46Z", "readme_sha256": "cc93adc50453abf9d4105c130866635bf949d739f25b4117d95915000070e4e0", "readme_url": "https://github.com/Zeyad-Azima/GhidraDeepSeekDecomprove/blob/3e05f8166ed427aae50c863a2bce4988fc30b89a/README.md", "stars": 18, "targets": [ "binary" ], "topics": [ "ai", "chatgpt", "decompile", "decompiler", "deepseek", "ghidra", "ghidra-extension", "ghidra-plugin", "reverse-engineering" ], "url": "https://github.com/Zeyad-Azima/GhidraDeepSeekDecomprove", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "r2 the Rhme3! The RHme (Riscure Hack me) is a low level hardware CTF that comes in the form of an Arduino board (AVR architecture). It involves a set of SW and HW challenges to test your skills in different areas such as side channel analysis, fault injection, reverse-engineering and software exploitation. In our talk we will briefly recap RHme2 and introduce the upcoming RHme3. This year we decided to create a special target called the Riscurino board which features CAN controllers for a real automotive hacking experience! During the r2con we challenge you to solve as many challenges as you can using radare2. Are you up to the task? By the time the r2con takes place the registration for RHme3 will be closed. However, we reserved 5 Riscurino boards for giving away during the conference. Be at r2con and win one of these boards by solving the qualification challenge(s) using radare2!", "description_language": "bilingual", "description_zh": "使用 r2 挑战 RHme3！RHme（Riscure Hack me）是以 Arduino 板（AVR 架构）为载体的底层硬件 CTF，包含软件和硬件题目，考验侧信道分析、故障注入、逆向工程及软件漏洞利用等技能。演讲将简要回顾 RHme2，并介绍即将举行的 RHme3。本届特别制作了带 CAN 控制器的 Riscurino 目标板，带来真实的汽车安全研究体验。在 r2con 期间，参与者可用 radare2 尽可能多地解题。r2con 举办时 RHme3 报名将已结束，但我们为大会预留了 5 块 Riscurino 板，使用 radare2 解出资格题即可争取获得。", "full_name": "enovella/r2con-prequals-rhme3", "id": "scan-102797827", "license": null, "observed_at": "2026-10-16T01:37:09.124772Z", "pushed_at": "2017-10-06T11:23:25Z", "readme_sha256": "99303de41ce95fc460ea7c64c00f2ebd37cd67ddb2cbb1869bbf8e641d57c1b8", "readme_url": "https://github.com/enovella/r2con-prequals-rhme3/blob/master/README.md", "stars": 17, "targets": [ "binary" ], "topics": [ "antidebugging", "antihooking", "challenge", "exploitation", "ollvm-obfuscation", "r2con", "ra", "radare2", "reverse-engineering" ], "url": "https://github.com/enovella/r2con-prequals-rhme3", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "PoC code and tools for Black Hat EU 2020", "description_language": "bilingual", "description_zh": "Black Hat EU 2020 的概念验证代码和工具。", "full_name": "FFRI/XtaTools", "id": "scan-319182945", "license": "Apache-2.0", "observed_at": "2026-10-16T01:37:09.328323Z", "pushed_at": "2020-12-09T02:30:02Z", "readme_sha256": "b90a198df0f71a4c3b8134cac299a374c5ee20e0e9d7951e62c2f12e70b75559", "readme_url": "https://github.com/FFRI/XtaTools/blob/main/README.md", "stars": 17, "targets": [ "binary" ], "topics": [ "black-hat", "code-injection", "jit-binary-translation", "radare2", "shellcode", "windows10-arm", "xta-cache" ], "url": "https://github.com/FFRI/XtaTools", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "An AI-powered extension for Ghidra that enhances analysis.", "description_language": "bilingual", "description_zh": "利用 AI 增强分析能力的 Ghidra 扩展。", "full_name": "mooncat-greenpy/KinGAidra", "id": "scan-882829605", "license": null, "observed_at": "2026-10-18T14:37:33.009922Z", "pushed_at": "2026-10-13T18:16:41Z", "readme_sha256": "33889d6c529229988e80712bf719d38e61bc6849be5c98265cbaa31b20b57266", "readme_url": "https://github.com/mooncat-greenpy/KinGAidra/blob/cdf108f0fb2957ded13595af25501158d113362a/README.md", "stars": 17, "targets": [ "binary" ], "topics": [ "ai", "chatgpt", "ghidra", "ghidra-extension", "ghidra-plugin", "llm", "local-llm", "openai", "reverse-engineering" ], "url": "https://github.com/mooncat-greenpy/KinGAidra", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "ARM 32-bit Raspberry Pi Hacking Hello World example in Kali Linux.", "description_language": "bilingual", "description_zh": "Kali Linux 下 ARM 32 位 Raspberry Pi 安全研究的 Hello World 示例。", "full_name": "mytechnotalent/0x01-ARM-32-Hacking-Hello-World", "id": "scan-309793252", "license": "Apache-2.0", "observed_at": "2026-10-16T01:37:09.266043Z", "pushed_at": "2025-11-27T00:29:44Z", "readme_sha256": "3cea1d055f2429c5153c952499065a9f56e6a89c4346a0069229d79bed2e9dcb", "readme_url": "https://github.com/mytechnotalent/0x01-ARM-32-Hacking-Hello-World/blob/main/README.md", "stars": 17, "targets": [ "binary" ], "topics": [ "arm", "assembler", "assembly", "assembly-language", "assembly-language-programming", "cyber", "cyber-security", "cyber-security-team", "cyber-threat-intelligence", "cybersecurity", "hack", "hacking", "iot", "radare", "radare2", "red-team", "red-team-engagement", "reverse-engineer", "reverse-engineering", "reverse-engineering-tutorial" ], "url": "https://github.com/mytechnotalent/0x01-ARM-32-Hacking-Hello-World", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Source code of the paper \"FirmRCA: Towards Post-Fuzzing Analysis on ARM Embedded Firmware with Efficient Event-based Fault Localization\"", "description_language": "bilingual", "description_zh": "论文《FirmRCA：利用高效的事件驱动故障定位，对 ARM 嵌入式固件进行模糊测试后分析》的源代码。", "full_name": "NESA-Lab/FirmRCA", "id": "scan-752091396", "license": "GPL-3.0", "observed_at": "2026-10-16T10:47:51.859176Z", "pushed_at": "2026-01-06T14:01:48Z", "readme_sha256": "997b93a04157941827d4c5a466953e77f337ab22cdf728989dd15b4c898e4e5a", "readme_url": "https://github.com/NESA-Lab/FirmRCA/blob/main/README.md", "stars": 17, "targets": [ "binary", "firmware" ], "topics": [ "fault-localization", "firmware" ], "url": "https://github.com/NESA-Lab/FirmRCA", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Sample radare2 project templates ", "description_language": "bilingual", "description_zh": "radare2 项目模板示例。", "full_name": "radareorg/radare2-skel", "id": "scan-718263134", "license": null, "observed_at": "2026-10-16T01:37:09.033723Z", "pushed_at": "2026-01-23T22:47:29Z", "readme_sha256": "3136a8618e7c58c305f9ab80b0fee562f372d58826f73d5e3997c1d1f5ce072a", "readme_url": "https://github.com/radareorg/radare2-skel/blob/main/README.md", "stars": 17, "targets": [ "binary" ], "topics": [ "plugins", "radare2", "scripts", "skeleton" ], "url": "https://github.com/radareorg/radare2-skel", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "The first-ever native PC port of the original Xbox Dashboard (build 3944) — static recompilation of xboxdash.xbe (x86 → C) on the xboxrecomp toolkit, with a D3D8→D3D11 backend.", "description_language": "bilingual", "description_zh": "原版 Xbox Dashboard（构建 3944）的首个原生 PC 移植版：使用 xboxrecomp 工具集静态重编译 xboxdash.xbe（x86 → C），并采用 D3D8 → D3D11 后端。", "full_name": "sp00nznet/xboxdashboard", "id": "scan-1187695877", "license": "NOASSERTION", "observed_at": "2026-10-16T11:55:15.102840Z", "pushed_at": "2026-10-14T08:36:01Z", "readme_sha256": "3eccbab92889c4872ace4766ba122ee28133d459950c26b5a07217e9786f82f0", "readme_url": "https://github.com/sp00nznet/xboxdashboard/blob/main/README.md", "stars": 17, "targets": [ "binary", "game" ], "topics": [ "d3d11", "dashboard", "game-preservation", "recompilation", "reverse-engineering", "static-recompilation", "xbox" ], "url": "https://github.com/sp00nznet/xboxdashboard", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Firmware analysis console for Magic Lantern", "description_language": "bilingual", "description_zh": "用于 Magic Lantern 的固件分析控制台。", "full_name": "alexdu/ARM-console", "id": "scan-1125600", "license": null, "observed_at": "2026-10-16T10:47:52.071098Z", "pushed_at": "2012-01-09T20:37:47Z", "readme_sha256": "793990dfdd2f8a6c4479cdbfa14c03bd26de251694f136c6e20b7b11e4406826", "readme_url": "https://github.com/alexdu/ARM-console/blob/master/README.md", "stars": 16, "targets": [ "binary", "firmware" ], "topics": [], "url": "https://github.com/alexdu/ARM-console", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Reverse-engineering Legend of Legaia (PSX, 1999): Ghidra-traced format documentation, Rust extractors for every asset on the disc, and an engine reimplementation targeting wgpu/SDL3 with optional WASM. BYO-disc model, no assets distributed.", "description_language": "bilingual", "description_zh": "《Legend of Legaia》（PSX，1999）逆向工程：依据 Ghidra 跟踪编写的格式文档、覆盖光盘全部资源的 Rust 提取器，以及面向 wgpu/SDL3、可选支持 WASM 的引擎重新实现。需自备光盘，不分发游戏资源。", "full_name": "AndrewAltimit/legend-of-legaia-re", "id": "scan-1229734860", "license": "Unlicense", "observed_at": "2026-10-16T07:15:04.753548Z", "pushed_at": "2026-10-15T23:03:45Z", "readme_sha256": "9ae9592b6055f1772645956a30a06256a11a5a2a28ec1713f67e02388ad9e3c7", "readme_url": "https://github.com/AndrewAltimit/legend-of-legaia-re/blob/main/README.md", "stars": 16, "targets": [ "binary", "game" ], "topics": [ "decompilation", "game-preservation", "ghidra", "legaia", "legend-of-legaia", "playstation", "ps1", "psx", "reverse-engineering", "rust", "wasm", "webassembly", "wgpu" ], "url": "https://github.com/AndrewAltimit/legend-of-legaia-re", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Anti Cheat runtime import resolver, how it rebuilds its IAT at load time to hide API usage from static analysis.", "description_language": "bilingual", "description_zh": "反作弊运行时导入解析器：展示其如何在加载时重建 IAT，以向静态分析隐藏 API 使用情况。", "full_name": "Aspasia1337/IATResolution", "id": "scan-1147512818", "license": null, "observed_at": "2026-10-18T14:37:59.727250Z", "pushed_at": "2026-02-10T21:12:23Z", "readme_sha256": "c0945e74dd3c5973337054595bde8e9a1170291453da7c5147dfee0d6fd33a14", "readme_url": "https://github.com/Aspasia1337/IATResolution/blob/7a5290fd543082c560b8909115a2404a7cf55641/README.md", "stars": 16, "targets": [ "binary" ], "topics": [ "anti-cheat", "idapro", "reverse-engineering", "x64dbg" ], "url": "https://github.com/Aspasia1337/IATResolution", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "MediaTek MD32 processor module for Ghidra.", "description_language": "bilingual", "description_zh": "Ghidra 的 MediaTek MD32 处理器模块。", "full_name": "cyrozap/ghidra-md32", "id": "scan-319196970", "license": "Apache-2.0", "observed_at": "2026-10-18T14:37:33.010146Z", "pushed_at": "2024-04-10T00:56:04Z", "readme_sha256": "0fed329c8c21f8b52cf1919c51207aa5dd1de293624e88d129131fdb9b978bf8", "readme_url": "https://github.com/cyrozap/ghidra-md32/blob/0d7b84207c09aac3375df0dd1592dc7f1bc161f9/README.md", "stars": 16, "targets": [ "binary" ], "topics": [ "ghidra", "ghidra-plugin" ], "url": "https://github.com/cyrozap/ghidra-md32", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A protocol reverse engineering tool for industrial binary protocol based on pin tool", "description_language": "bilingual", "description_zh": "基于 Pin 工具的工业二进制协议逆向工程工具。", "full_name": "nesclab/ProtocolTaint", "id": "scan-248966780", "license": "MIT", "observed_at": "2026-10-16T10:48:01.235402Z", "pushed_at": "2020-10-22T06:14:38Z", "readme_sha256": "2ba9d49881c94d58852603b02ed541fb2713c0550eee9dbd8a08e61a8845739c", "readme_url": "https://github.com/nesclab/ProtocolTaint/blob/master/README.md", "stars": 16, "targets": [ "binary" ], "topics": [], "url": "https://github.com/nesclab/ProtocolTaint", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "RevEng.AI Radare2 Plugin", "description_language": "bilingual", "description_zh": "RevEng.AI 的 radare2 插件。", "full_name": "RevEngAI/reai-r2", "id": "scan-548960141", "license": null, "observed_at": "2026-10-16T01:37:09.444911Z", "pushed_at": "2025-07-13T15:31:14Z", "readme_sha256": "a9d3e75a777861aafc6211e93cb2c0844caef43715150e9ffc0296539c10fa58", "readme_url": "https://github.com/RevEngAI/reai-r2/blob/master/README.md", "stars": 16, "targets": [ "binary" ], "topics": [ "artificial-intelligence", "binary-analysis", "defensive-security", "exploit-development", "offensive-security", "radare2", "radare2-plugin", "reverse-engineering", "vulnerability-research" ], "url": "https://github.com/RevEngAI/reai-r2", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Hub for iOS UE4 reverse-engineering notes (arm64/arm64e) and how they fit together", "description_language": "bilingual", "description_zh": "汇集 iOS UE4 逆向工程笔记（arm64/arm64e），并说明各部分如何关联。", "full_name": "shiedless/ios-ue4-re", "id": "scan-1381407775", "license": "MIT", "observed_at": "2026-10-16T11:54:33.954402Z", "pushed_at": "2026-09-30T18:42:16Z", "readme_sha256": "ef967ef0709da44e0828e655f52495257fbd81f2bb71ecbdd9f4ebfc812fa3ee", "readme_url": "https://github.com/shiedless/ios-ue4-re/blob/main/README.md", "stars": 16, "targets": [ "app", "binary", "game" ], "topics": [ "arm64", "arm64e", "awesome-list", "ios", "reverse-engineering", "unreal-engine-4" ], "url": "https://github.com/shiedless/ios-ue4-re", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Reversing Roblox's Luau VM on iOS: functions, anchors, lua_State layout", "description_language": "bilingual", "description_zh": "逆向分析 iOS 上 Roblox 的 Luau VM：函数、锚点和 lua_State 布局", "full_name": "shiedless/roblox-ios-luau-vm-notes", "id": "scan-1383770882", "license": "MIT", "observed_at": "2026-10-16T11:54:34.200652Z", "pushed_at": "2026-09-30T17:46:11Z", "readme_sha256": "9acf8b6a94bed5a7659d1d3154bf141a6c43aae6702bbba19edddb814de88738", "readme_url": "https://github.com/shiedless/roblox-ios-luau-vm-notes/blob/main/README.md", "stars": 16, "targets": [ "app", "binary" ], "topics": [ "arm64", "ios", "lua", "luau", "reverse-engineering", "roblox" ], "url": "https://github.com/shiedless/roblox-ios-luau-vm-notes", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Collection of IDA helpers", "description_language": "bilingual", "description_zh": "IDA 辅助工具合集。", "full_name": "VoidSec/ida-helpers", "id": "scan-211372679", "license": null, "observed_at": "2026-10-18T14:38:04.562037Z", "pushed_at": "2022-07-25T21:38:59Z", "readme_sha256": "4bce54806bbeec97dd1273901c596cfae4b25c7da68bd6c907bb56bc86b839dc", "readme_url": "https://github.com/VoidSec/ida-helpers/blob/61ea890f6ffe1fd1590466d5e142c43cbca62771/README.md", "stars": 16, "targets": [ "binary" ], "topics": [ "ida", "ida-plugin", "ida-pro", "idapro", "idapython", "idapython-plugin", "reverse-engineering" ], "url": "https://github.com/VoidSec/ida-helpers", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A Ghidra MCP Server for Claude Code - Binary Analysis Made Adorable. Keywords: ghidra, mcp, ghidra-mcp, model-context-protocol, binary-analysis, reverse-engineering, decompiler", "description_language": "bilingual", "description_zh": "面向 Claude Code 的 Ghidra MCP 服务，让二进制分析也能很可爱。关键词：ghidra、mcp、ghidra-mcp、模型上下文协议、二进制分析、逆向工程、反编译器。", "full_name": "wagonbomb/kawaiidra-mcp", "id": "scan-1132033704", "license": "MIT", "observed_at": "2026-10-16T10:48:01.506472Z", "pushed_at": "2026-10-14T18:42:10Z", "readme_sha256": "d0f3523ea7d8a72ae52aa530b2b8ac29c3d1bf8d82ec4423448fd3e11581f509", "readme_url": "https://github.com/wagonbomb/kawaiidra-mcp/blob/master/README.md", "stars": 16, "targets": [ "binary" ], "topics": [ "binary-analysis", "claude", "claude-code", "decompiler", "disassembler", "ghidra", "ghidra-mcp", "mcp", "model-context-protocol", "reverse-engineering" ], "url": "https://github.com/wagonbomb/kawaiidra-mcp", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Learning assembly x86 programming and reverse engineering", "description_language": "bilingual", "description_zh": "学习 x86 汇编编程与逆向工程。", "full_name": "Catherine22/Assembly", "id": "scan-319931110", "license": "MIT", "observed_at": "2026-10-16T01:37:09.586827Z", "pushed_at": "2020-12-23T23:24:18Z", "readme_sha256": "68b739650cfb4e58b099a4f9e2de3f021fb44102feaef6d07952745470750fa8", "readme_url": "https://github.com/Catherine22/Assembly/blob/main/README.md", "stars": 15, "targets": [ "binary" ], "topics": [ "assembly", "assembly-x86", "c", "nasm", "radare2", "reverse-engineering" ], "url": "https://github.com/Catherine22/Assembly", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "PICO8 Extractor is a user-friendly tool designed to convert PICO-8 JavaScript cart exports into binary .p8.rom files that can be directly loaded in the PICO-8 fantasy console.", "description_language": "bilingual", "description_zh": "PICO8 Extractor 是易用的工具，可将 PICO-8 导出的 JavaScript 卡带转换为能在 PICO-8 虚拟主机中直接加载的二进制 .p8.rom 文件。", "full_name": "erenkaraoglu/PICO8-Extractor", "id": "scan-1065321678", "license": "NOASSERTION", "observed_at": "2026-10-16T07:14:53.044617Z", "pushed_at": "2025-09-27T14:37:54Z", "readme_sha256": "b6e426dd92088d7ace98a2134ccfa04c2b54b5246b44100c4b69c3391a9f81c7", "readme_url": "https://github.com/erenkaraoglu/PICO8-Extractor/blob/main/README.md", "stars": 15, "targets": [ "app", "binary", "game" ], "topics": [ "game-preservation", "gui", "gui-app", "javascript", "js-to-rom", "pico-8", "pico8", "pico8-extractor", "python", "pywebview", "retro-gaming", "reverse-engineering", "rom-extraction", "tool" ], "url": "https://github.com/erenkaraoglu/PICO8-Extractor", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Open source Filza Jailed tweak injector for iOS 17.0-26.0.1, adding jailed support for Filza IPA on supported devices", "description_language": "bilingual", "description_zh": "面向 iOS 17.0-26.0.1 的开源 Filza Jailed 插件注入器，为受支持设备上的 Filza IPA 添加未越狱环境支持。", "full_name": "Fazechristian00/FilzaJailedDS", "id": "scan-1224053689", "license": null, "observed_at": "2026-10-16T11:54:22.893385Z", "pushed_at": "2026-10-12T04:53:52Z", "readme_sha256": "8dd148cefdf0519406adfc5aa592ad1daaadc99d0edaeddbd1c6ead4c4df5cd1", "readme_url": "https://github.com/Fazechristian00/FilzaJailedDS/blob/main/README.md", "stars": 15, "targets": [ "app", "binary" ], "topics": [ "arch-user-repository", "archlinux", "arm", "cpp", "cydia", "emulator", "github-config", "iocage", "ios", "logos", "nds", "r", "reverse-engineering", "swiftui", "theos", "tweak", "vnet", "zfs" ], "url": "https://github.com/Fazechristian00/FilzaJailedDS", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Local-first, deterministic MCP server for IDA Pro/Home: 109 strict-schema reverse-engineering operations, evidence-backed findings, and policy-gated IDB edits.", "description_language": "bilingual", "description_zh": "面向 IDA Pro/Home 的本地优先、确定性 MCP 服务器：提供 109 项严格遵循模式定义的逆向工程操作、具有证据支持的发现，以及受策略控制的 IDB 编辑。", "full_name": "GrecAndrei/ida-pro-mcp", "id": "scan-1117022155", "license": "NOASSERTION", "observed_at": "2026-10-16T01:36:20.806452Z", "pushed_at": "2026-10-12T18:47:00Z", "readme_sha256": "11bbe2673ffeee6f2ff3aa8779b4b1cd9af594f76910d8a144a2ada7c88ba8e5", "readme_url": "https://github.com/GrecAndrei/ida-pro-mcp/blob/master/README.md", "stars": 15, "targets": [ "binary", "firmware" ], "topics": [ "binary-analysis", "claude", "coding-agents", "decompiler", "firmware-analysis", "ida-home", "ida-plugin", "ida-pro", "idapython", "llm", "malware-analysis", "mcp", "mcp-server", "model-context-protocol", "reverse-engineering", "static-analysis" ], "url": "https://github.com/GrecAndrei/ida-pro-mcp", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Memory Engine and Scanner for iOS/MacOS using Mach API", "description_language": "bilingual", "description_zh": "使用 Mach API 的 iOS/macOS 内存引擎和扫描器。", "full_name": "OPSphystech420/CGuardProbe", "id": "scan-802035530", "license": "NOASSERTION", "observed_at": "2026-10-16T11:54:18.088579Z", "pushed_at": "2024-11-16T10:00:40Z", "readme_sha256": "7b8fd89bcdc1e668d49ca5f4cbf1246fa70f5ef925b94a5a95ca0838675d96e9", "readme_url": "https://github.com/OPSphystech420/CGuardProbe/blob/main/README.md", "stars": 15, "targets": [ "app", "binary" ], "topics": [ "api", "cpp", "error-logging", "hooks", "ida", "instruction-decoding", "ios", "mach-o", "macos", "memory", "memory-scanning", "reverse-engineering", "security", "vmt-hooking" ], "url": "https://github.com/OPSphystech420/CGuardProbe", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Advanced Python tool for extracting Protocol Buffer schemas from iOS IPA files. Perfect for reverse engineering, security research, and API analysis. Supports automatic .proto reconstruction, binary analysis, and comprehensive protobuf extraction from any iOS application.", "description_language": "bilingual", "description_zh": "用于从 iOS IPA 文件提取 Protocol Buffer 模式定义的高级 Python 工具，适用于逆向工程、安全研究和 API 分析。支持自动重建 .proto、二进制分析，以及从任意 iOS 应用全面提取 protobuf。", "full_name": "riyadmondol2006/iOS-Protobuf-Extractor", "id": "scan-1009280103", "license": "NOASSERTION", "observed_at": "2026-10-16T10:48:01.590249Z", "pushed_at": "2025-06-27T01:51:19Z", "readme_sha256": "0c17ef074d39351d64e3a455acc9e0f4a92dfbad9611dba319eaa9d761ac3333", "readme_url": "https://github.com/riyadmondol2006/iOS-Protobuf-Extractor/blob/main/README.md", "stars": 15, "targets": [ "app", "binary" ], "topics": [], "url": "https://github.com/riyadmondol2006/iOS-Protobuf-Extractor", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "C++ tool that converts WebAssembly (`.wasm`) binaries to JavaScript, with an optional AI-powered pass using the Gemini API to rename variables and summarize functions.", "description_language": "bilingual", "description_zh": "将 WebAssembly（.wasm）二进制文件转换为 JavaScript 的 C++ 工具，可选通过 Gemini API 执行 AI 处理，重命名变量并总结函数。", "full_name": "SerialHooker/WASM2JS-Transpiler", "id": "scan-1009980547", "license": null, "observed_at": "2026-10-16T07:14:52.892437Z", "pushed_at": "2026-02-27T14:51:26Z", "readme_sha256": "c4ad235df1ae1797fc3a8bbb07da41245a3b7adda5cba4d186b8a98851b5696e", "readme_url": "https://github.com/SerialHooker/WASM2JS-Transpiler/blob/main/README.md", "stars": 15, "targets": [ "binary" ], "topics": [ "captcha", "captchas", "engineering", "javascript", "js", "reverse", "reverse-engineering", "reversing", "virtual-machine", "vms", "wasm", "webapp", "webassembly" ], "url": "https://github.com/SerialHooker/WASM2JS-Transpiler", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "MediaTek CCPU (GCPU) processor module for Ghidra.", "description_language": "bilingual", "description_zh": "Ghidra 的 MediaTek CCPU（GCPU）处理器模块。", "full_name": "cyrozap/ghidra-ccpu", "id": "scan-332817830", "license": "Apache-2.0", "observed_at": "2026-10-18T14:37:33.010602Z", "pushed_at": "2023-10-15T02:23:34Z", "readme_sha256": "4e77395491dc9ac7e3492ae74b7566a45bb301bb51f34409c598805f9824ca65", "readme_url": "https://github.com/cyrozap/ghidra-ccpu/blob/80295ba53091b6dc80b2af2814e5cc5b4b12ab30/README.md", "stars": 14, "targets": [ "binary" ], "topics": [ "ghidra", "ghidra-plugin" ], "url": "https://github.com/cyrozap/ghidra-ccpu", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Beyond Dark Castle (1987, Mac) game disassembly, in Motorola 68000 assembly language.", "description_language": "bilingual", "description_zh": "《Beyond Dark Castle》（1987，Mac）的游戏反汇编，采用 Motorola 68000 汇编语言。", "full_name": "r41n60w/bdc_disasm", "id": "scan-294005229", "license": null, "observed_at": "2026-10-16T01:37:09.666977Z", "pushed_at": "2023-04-18T21:34:24Z", "readme_sha256": "48c86dc882d23a25a6dd59063ec8efbf38556e27f610d8b190b41fbe40ee936d", "readme_url": "https://github.com/r41n60w/bdc_disasm/blob/master/README.md", "stars": 14, "targets": [ "binary", "game" ], "topics": [ "68000", "68k", "68k-assembly", "assembly-68000", "disasm", "disassembly", "disassembly-notes", "m680x0", "m68k", "macintosh-arcade-games", "mini-vmac", "motorola-68000", "plus-emu", "quickdraw", "radare2", "rasm2", "resedit" ], "url": "https://github.com/r41n60w/bdc_disasm", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Reverse engineering exchange format", "description_language": "bilingual", "description_zh": "逆向工程交换格式。", "full_name": "v-p-b/reshare", "id": "scan-1082546131", "license": null, "observed_at": "2026-10-16T01:37:09.724322Z", "pushed_at": "2026-03-01T14:46:08Z", "readme_sha256": "0bd7c820ba9b971cab42bef4a54fc186e9036a53991f0a2f307db95319d9d11f", "readme_url": "https://github.com/v-p-b/reshare/blob/main/README.md", "stars": 14, "targets": [ "binary" ], "topics": [ "binary-ninja", "binaryninja", "ghidra", "ida", "idapro", "r2", "radare2", "reverse-engineering", "reverseengineering" ], "url": "https://github.com/v-p-b/reshare", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Multi-LLM iOS reverse-engineering toolkit. 10-phase workflow with adapters for Claude Opus/Code, Cursor, Qwen Coder, MiniMax, Codex/GPT-5, Aider, Cline. Adapted from incogbyte/iOS-reverse-engineering-claude-skill (Unlicense).", "description_language": "bilingual", "description_zh": "支持多种大语言模型的 iOS 逆向工程工具包。包含十阶段工作流，适配 Claude Opus/Code、Cursor、Qwen Coder、MiniMax、Codex/GPT-5、Aider 和 Cline。改编自 incogbyte/iOS-reverse-engineering-claude-skill（Unlicense）。", "full_name": "anatoly505/ios-reverse-skills", "id": "scan-1217996660", "license": "Unlicense", "observed_at": "2026-10-16T01:37:10.041625Z", "pushed_at": "2026-05-06T07:33:14Z", "readme_sha256": "926aa0b4a5b64458c3a8edac2e91f2896cf83e6c8a707673d333d2179c906ce1", "readme_url": "https://github.com/anatoly505/ios-reverse-skills/blob/main/README.md", "stars": 13, "targets": [ "app", "binary" ], "topics": [ "ai-agents", "claude", "cursor", "ghidra", "ios", "ipa", "ipsw", "llm", "mach-o", "minimax", "opus", "qwen", "radare2", "reverse-engineering", "security", "skill" ], "url": "https://github.com/anatoly505/ios-reverse-skills", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A hexagonal, adapter-headed reverse-engineering platform — durable RE domain core + disposable protocol heads (MCP first). Sibling to GayHydra (Ghidra fork.)", "description_language": "bilingual", "description_zh": "采用六边形架构、以适配器作为接口的逆向工程平台：持久的逆向工程领域核心，加上可替换的协议接口（优先支持 MCP）。它是 GayHydra（Ghidra 分支）的姊妹项目。", "full_name": "CryptoJones/Scylla", "id": "scan-1275806041", "license": "Apache-2.0", "observed_at": "2026-10-16T10:48:02.629205Z", "pushed_at": "2026-09-15T18:23:00Z", "readme_sha256": "7108029ef36baecc07bba55965f7799e093b202745dafa2c10db32c94c9db55f", "readme_url": "https://github.com/CryptoJones/Scylla/blob/main/README.md", "stars": 13, "targets": [ "binary" ], "topics": [], "url": "https://github.com/CryptoJones/Scylla", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A processor module for Ghidra for ASMedia's 8051-based chips.", "description_language": "bilingual", "description_zh": "面向 ASMedia 基于 8051 的芯片的 Ghidra 处理器模块。", "full_name": "cyrozap/ghidra-asmedia-8051", "id": "scan-960215907", "license": "Apache-2.0", "observed_at": "2026-10-18T14:37:33.010849Z", "pushed_at": "2025-12-12T01:33:54Z", "readme_sha256": "76e30ade8a20696de60880711c5305d7f0e3f6359c677fb7451dc83497bf3fc0", "readme_url": "https://github.com/cyrozap/ghidra-asmedia-8051/blob/31554b50f57cc8100c2d52a8c15ad9b1ae568408/README.md", "stars": 13, "targets": [ "binary" ], "topics": [ "ghidra", "ghidra-plugin" ], "url": "https://github.com/cyrozap/ghidra-asmedia-8051", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Reverse-engineered Rust reimplementation of the Johnny Castaway screensaver (Screen Antics, Sierra/Dynamix, 1992) for Windows, macOS and Linux", "description_language": "bilingual", "description_zh": "通过逆向工程，以 Rust 重新实现 Johnny Castaway 屏保（Screen Antics，Sierra/Dynamix，1992），支持 Windows、macOS 和 Linux。", "full_name": "glauberlima/open-scrantic", "id": "scan-1422369754", "license": "MIT", "observed_at": "2026-10-18T13:14:43.109507Z", "pushed_at": "2026-10-18T02:22:13Z", "readme_sha256": "450e5be4fc5d83490c2dc3be4009c264d719d355f8d0013910929f81424f0ee7", "readme_url": "https://github.com/glauberlima/open-scrantic/blob/main/README.md", "stars": 13, "targets": [ "app", "binary" ], "topics": [ "claude-code", "disassembly", "dynamix", "johnny-castaway", "nostalgia", "rea", "rea-tools", "reimplementation", "retro", "reverse-engineer-anything", "reverse-engineering", "rust", "screen-antics", "screensaver", "sierra" ], "url": "https://github.com/glauberlima/open-scrantic", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Midnight Club: Los Angeles on iPhone and iPad — ARM64 static recompilation, native Metal, and an experimental 60 FPS patch. Bring your own game files.", "description_language": "bilingual", "description_zh": "在 iPhone 和 iPad 上运行《Midnight Club: Los Angeles》：ARM64 静态重编译、原生 Metal，以及实验性的 60 FPS 补丁。需自备游戏文件。", "full_name": "KoreanSeats1/MCLA-4iOS", "id": "scan-1405117631", "license": "GPL-3.0", "observed_at": "2026-10-16T11:55:17.350082Z", "pushed_at": "2026-10-09T14:00:22Z", "readme_sha256": "459324e252b9586a1aa2d49c7b55d0fd3537ecae43d585fc63060de808572f54", "readme_url": "https://github.com/KoreanSeats1/MCLA-4iOS/blob/main/README.md", "stars": 13, "targets": [ "app", "binary", "game" ], "topics": [ "ios", "ipados", "metal", "midnight-club", "static-recompilation" ], "url": "https://github.com/KoreanSeats1/MCLA-4iOS", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "ARM 32-bit Raspberry Pi Hacking Int example in Kali Linux.", "description_language": "bilingual", "description_zh": "Kali Linux 下 ARM 32 位 Raspberry Pi 安全研究的整数示例。", "full_name": "mytechnotalent/0x02-ARM-32-Hacking-Int", "id": "scan-310319647", "license": "Apache-2.0", "observed_at": "2026-10-16T01:37:09.933752Z", "pushed_at": "2025-11-27T00:28:07Z", "readme_sha256": "f5b813f5d6e02c27490199325e6ff1087f03592149836889d353762c843eccc9", "readme_url": "https://github.com/mytechnotalent/0x02-ARM-32-Hacking-Int/blob/main/README.md", "stars": 13, "targets": [ "binary" ], "topics": [ "arm", "assembler", "assembly", "assembly-language", "assembly-language-programming", "c", "cyber", "cyber-security", "cyber-security-team", "cyber-threat-intelligence", "cybersecurity", "hack", "hacking", "iot", "radare", "radare2", "red-team", "red-team-engagement", "reverse-engineering", "reverse-engineering-tutorial" ], "url": "https://github.com/mytechnotalent/0x02-ARM-32-Hacking-Int", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Substrate tweak that fixes WPA2/WPA3 transitional WiFi on iOS 3.x-12.x by stripping unsupported AKM suites from the RSN IE parser", "description_language": "bilingual", "description_zh": "通过在 RSN IE 解析器中剔除不支持的 AKM 套件，修复 iOS 3.x–12.x 上 WPA2/WPA3 过渡模式 WiFi 的 Substrate 插件。", "full_name": "PlayDay-iOS/LegacyWiFiFix", "id": "scan-1206373201", "license": "MIT", "observed_at": "2026-10-16T11:54:22.064875Z", "pushed_at": "2026-04-15T06:35:08Z", "readme_sha256": "94832eec36639a406d607324d0d9d7da41a7519c9e8c7d75ab329e6de0564560", "readme_url": "https://github.com/PlayDay-iOS/LegacyWiFiFix/blob/master/README.md", "stars": 13, "targets": [ "app", "binary" ], "topics": [ "arm64", "armv7", "cydia", "ios", "jailbreak", "mobilesubstrate", "objective-c", "reverse-engineering", "theos", "tweak", "wifi", "wpa2", "wpa3" ], "url": "https://github.com/PlayDay-iOS/LegacyWiFiFix", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Hexagon disassembler code generator from the official instruction manual.", "description_language": "bilingual", "description_zh": "根据官方指令手册生成 Hexagon 反汇编器代码的工具。", "full_name": "radareorg/r2hexagon", "id": "scan-168802349", "license": "BSD-2-Clause", "observed_at": "2026-10-16T01:37:10.265445Z", "pushed_at": "2020-04-16T16:33:12Z", "readme_sha256": "9c387795de724d5e7eb10afcc35539f12ebab1b40b047b4a88658cd4906210be", "readme_url": "https://github.com/radareorg/r2hexagon/blob/master/README.md", "stars": 13, "targets": [ "binary" ], "topics": [ "hexagon", "hexagon-disassembler", "qdsp", "radare2" ], "url": "https://github.com/radareorg/r2hexagon", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Gears of War 2 native PC port: the Xbox 360 game statically recompiled to x64 (not an emulator). 1440p/4K, FSR, 4K texture packs, keyboard & mouse, Android in progress. Bring your own copy.", "description_language": "bilingual", "description_zh": "《Gears of War 2》原生 PC 移植：将 Xbox 360 游戏静态重编译为 x64，不是模拟器。支持 1440p／4K、FSR、4K 纹理包及键盘鼠标，Android 支持仍在开发中。需自备副本。", "full_name": "santiquiroz/gears-of-war-2-pc-port", "id": "scan-1418303519", "license": "BSD-3-Clause", "observed_at": "2026-10-16T11:55:17.620244Z", "pushed_at": "2026-10-16T10:43:03Z", "readme_sha256": "5eb682fbba10eabb021c6117cef9d356a788a486c0c720399ced2722604d2bad", "readme_url": "https://github.com/santiquiroz/gears-of-war-2-pc-port/blob/master/README.md", "stars": 13, "targets": [ "app", "binary", "game" ], "topics": [ "android", "cpp", "fidelityfx", "fsr", "game-preservation", "gears-of-war", "gears-of-war-2", "native-port", "pc-port", "recomp", "recompilation", "reverse-engineering", "rexglue", "static-recompilation", "ue3", "unreal-engine-3", "windows", "xbox-360", "xbox360", "xenia" ], "url": "https://github.com/santiquiroz/gears-of-war-2-pc-port", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Ghidra's development plugins, scripts, contributing. Presentation", "description_language": "bilingual", "description_zh": "关于 Ghidra 开发插件、脚本及参与贡献的演示文稿。", "full_name": "saruman9/ghidra_dev_pres", "id": "scan-281713969", "license": null, "observed_at": "2026-10-18T14:37:33.012575Z", "pushed_at": "2020-08-10T08:37:04Z", "readme_sha256": "fa23273f93473f69db2b024bf32c7f60d33d49d0d5773f3b4913213f5b8f4bd8", "readme_url": "https://github.com/saruman9/ghidra_dev_pres/blob/8393b9bfe2fb26d0eeec34569f01c7e97496ab74/Readme.org", "stars": 13, "targets": [ "binary" ], "topics": [ "ghidra", "ghidra-extension", "ghidra-plugin", "ghidra-scripts", "howto", "presentation", "reveal-js" ], "url": "https://github.com/saruman9/ghidra_dev_pres", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Dump ntoskrnl.exe important offsets for building your navigation system in the Windows Kernel, using Radare2 and Rust", "description_language": "bilingual", "description_zh": "使用 radare2 和 Rust 转储 ntoskrnl.exe 的重要偏移量，为构建 Windows 内核导航系统提供支持。", "full_name": "vtorres/ntoskrnl-offsets-dumper", "id": "scan-560168406", "license": null, "observed_at": "2026-10-16T01:37:09.726213Z", "pushed_at": "2022-11-01T01:32:28Z", "readme_sha256": "99ae57064ba8cac9572978453b548aab56726838cdb5fecfaf6302f02851ded0", "readme_url": "https://github.com/vtorres/ntoskrnl-offsets-dumper/blob/main/README.md", "stars": 13, "targets": [ "binary" ], "topics": [ "byovd", "kernel", "ntoskrnl", "radare2", "rust", "windows" ], "url": "https://github.com/vtorres/ntoskrnl-offsets-dumper", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "ReaCut — REA × CapCut: an independent, open-source video editor rebuilt from REA-assisted, authorized local behavior and format research. No copied CapCut proprietary code or assets. Offline desktop app + Codex plugin.", "description_language": "bilingual", "description_zh": "ReaCut — REA × CapCut：通过 REA 辅助、经授权的本地行为与格式研究，独立重建的开源视频编辑器。未复制 CapCut 的专有代码或素材。包含离线桌面应用与 Codex 插件。", "full_name": "Xiangyu-CAS/rea-capcut", "id": "scan-1416877883", "license": "MIT", "observed_at": "2026-10-16T10:47:47.513264Z", "pushed_at": "2026-10-13T11:26:03Z", "readme_sha256": "80605f5290e3872c29a153e44b389c28e616c4987ab6d812cbbf8db0428d1fa9", "readme_url": "https://github.com/Xiangyu-CAS/rea-capcut/blob/main/README.md", "stars": 13, "targets": [ "app", "binary" ], "topics": [ "agent-skills", "capcut", "capcut-for-free", "claude-code", "codex", "ghidra", "rea", "reverse-engineering" ], "url": "https://github.com/Xiangyu-CAS/rea-capcut", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A learning-focused PE analysis engine with modular detectors, heuristic analysis, and HTML reporting.", "description_language": "bilingual", "description_zh": "以学习为目标的 PE 分析引擎，提供模块化检测器、启发式分析和 HTML 报告。", "full_name": "bilal-ctf/Windows-PE-Analyzer", "id": "scan-1213109835", "license": "MIT", "observed_at": "2026-10-16T01:37:19.544958Z", "pushed_at": "2026-05-19T23:09:54Z", "readme_sha256": "810be0d624c289beff29551a104762f19df3a2405bca500795850b8009870f28", "readme_url": "https://github.com/bilal-ctf/Windows-PE-Analyzer/blob/main/README.md", "stars": 12, "targets": [ "binary" ], "topics": [ "binary-analysis", "cybersecurity", "cybersecurity-education", "cybersecurity-tools", "detection-engine", "malware-analysis", "pe-analysis", "pe-parser", "python-security", "reverse-engineering-tools", "security-research", "static-analysis", "threat-detection" ], "url": "https://github.com/bilal-ctf/Windows-PE-Analyzer", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A little commandline tool to start PowerPoint in merge mode.", "description_language": "bilingual", "description_zh": "以合并模式启动 PowerPoint 的小型命令行工具。", "full_name": "jessehouwing/ppt-diffmerge", "id": "scan-454586426", "license": "MIT", "observed_at": "2026-10-16T01:37:02.419514Z", "pushed_at": "2026-10-15T11:51:25Z", "readme_sha256": "6b5ef8185ec1ecbb5583bfd1cda7050ab46fc04f8961782a7ba0e4669cad870b", "readme_url": "https://github.com/jessehouwing/ppt-diffmerge/blob/main/README.md", "stars": 12, "targets": [ "binary" ], "topics": [ "binary-diffing", "diff", "git", "merge", "powerpoint" ], "url": "https://github.com/jessehouwing/ppt-diffmerge", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Fast iOS decompiler & Mach-O disassembler in Rust — arm64, Objective-C class-dump, Swift metadata, and a native desktop GUI. Reads .ipa/App Store binaries directly, no Ghidra, IDA, radare2, or LLVM.", "description_language": "bilingual", "description_zh": "使用 Rust 编写的快速 iOS 反编译器与 Mach-O 反汇编器：支持 arm64、Objective-C 类转储、Swift 元数据及原生桌面图形界面。直接读取 .ipa／App Store 二进制，无需 Ghidra、IDA、radare2 或 LLVM。", "full_name": "JRBusiness/REipa", "id": "scan-1288599580", "license": "MIT", "observed_at": "2026-10-16T11:54:26.409548Z", "pushed_at": "2026-10-04T20:01:17Z", "readme_sha256": "aad43d1e726fae6f029cfd1795c69123c2efb86e9acf2f78a115a54a86804c65", "readme_url": "https://github.com/JRBusiness/REipa/blob/main/README.md", "stars": 12, "targets": [ "app", "binary" ], "topics": [ "aarch64", "apple", "arm64", "binary-analysis", "class-dump", "decompiler", "disassembler", "ghidra-alternative", "ida-pro", "ios", "ios-security", "ipa", "mach-o", "macho", "malware-analysis", "objective-c", "reverse-engineering", "rust", "static-analysis", "swift" ], "url": "https://github.com/JRBusiness/REipa", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Naruto: Rise of a Ninja (Xbox 360) running natively on Android ARM64 — static recompilation, Vulkan, 360p to 4K, FXAA/FSR.", "description_language": "bilingual", "description_zh": "让 Naruto: Rise of a Ninja（Xbox 360）在 Android ARM64 上原生运行：静态重编译、Vulkan、360p 至 4K，以及 FXAA/FSR。", "full_name": "Masterllgod/naruto-rise-of-a-ninja-port-nativo", "id": "scan-1418247764", "license": null, "observed_at": "2026-10-16T11:55:17.703779Z", "pushed_at": "2026-10-14T21:03:47Z", "readme_sha256": "49f355003800457678e05d074c93e45a6b7652cebc0689c682291c5b2ec6e33b", "readme_url": "https://github.com/Masterllgod/naruto-rise-of-a-ninja-port-nativo/blob/main/README.md", "stars": 12, "targets": [ "app", "binary" ], "topics": [ "android", "naruto", "port", "static-recompilation", "vulkan", "xbox360" ], "url": "https://github.com/Masterllgod/naruto-rise-of-a-ninja-port-nativo", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A Calculator plugin for Ghidra that adds a GUI calculator and right-click options for adding addresses, memory, and constant values to the calculator, as well as options for calculating distance between addresses.", "description_language": "bilingual", "description_zh": "Ghidra 计算器插件，添加 GUI 计算器以及将地址、内存和常量值加入计算器的右键选项，还提供计算地址之间距离的选项。", "full_name": "mobilemutex/GhidraCalculator", "id": "scan-1023347102", "license": "Apache-2.0", "observed_at": "2026-10-18T14:37:33.013184Z", "pushed_at": "2025-09-14T21:37:35Z", "readme_sha256": "9c25b4694c76550a131af2260725deb0b7ee23e1e9d832f2026c4557f6d45a73", "readme_url": "https://github.com/mobilemutex/GhidraCalculator/blob/e91bfb7186970a5a4de76e719dd2aa486e969f37/README.md", "stars": 12, "targets": [ "binary" ], "topics": [ "ghidra", "ghidra-extension", "ghidra-plugin", "re", "reverse-engineering" ], "url": "https://github.com/mobilemutex/GhidraCalculator", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Evaluating function diffing existing techniques", "description_language": "bilingual", "description_zh": "评估现有函数差异比较技术。", "full_name": "MohamadMansouri/funcDiffEval", "id": "scan-171370336", "license": null, "observed_at": "2026-10-16T01:37:10.462572Z", "pushed_at": "2019-02-19T03:42:33Z", "readme_sha256": "829c2a07ac57b638f5231c79ccead4d7a2a95eefc3369aa1f049b2f62a5892cb", "readme_url": "https://github.com/MohamadMansouri/funcDiffEval/blob/master/README.md", "stars": 12, "targets": [ "binary" ], "topics": [ "data-mining", "evaluation", "ida-pro", "radare2", "reverse-engineering" ], "url": "https://github.com/MohamadMansouri/funcDiffEval", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "radare2 script to help on COM objects reverse engineering", "description_language": "bilingual", "description_zh": "辅助逆向分析 COM 对象的 radare2 脚本。", "full_name": "newlog/r2com", "id": "scan-86132650", "license": null, "observed_at": "2026-10-16T01:37:10.357325Z", "pushed_at": "2017-04-23T19:50:21Z", "readme_sha256": "57d6dceba3c410da2f07e5421684c4043c530d70f632b31e3ae41607ccf3ca74", "readme_url": "https://github.com/newlog/r2com/blob/master/README.md", "stars": 12, "targets": [ "binary" ], "topics": [ "com", "radare2", "reverse-engineering" ], "url": "https://github.com/newlog/r2com", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Recover symbols, types, interfaces, and method signatures from stripped Go binaries. Ghidra, IDA, and Binary Ninja exporters included.", "description_language": "bilingual", "description_zh": "从剥离符号的 Go 二进制文件中恢复符号、类型、接口和方法签名。包含 Ghidra、IDA 和 Binary Ninja 导出器。", "full_name": "riven-labs/unstrip", "id": "scan-1252935537", "license": "Apache-2.0", "observed_at": "2026-10-18T14:37:38.543228Z", "pushed_at": "2026-07-01T12:35:40Z", "readme_sha256": "ff05482114fa5caa6056b9f86f0a907b9dec7b143963d7348201ede7d0068ec6", "readme_url": "https://github.com/riven-labs/unstrip/blob/9aa84afd6fc1aaf7170281df9cb47d6e9134a399/README.md", "stars": 12, "targets": [ "binary" ], "topics": [ "binary-analysis", "binary-ninja", "decompiler-helper", "garble", "ghidra", "ghidra-plugin", "go", "golang", "ida-plugin", "ida-pro", "malware-analysis", "pclntab", "reverse-engineering", "rust", "security-tools", "stripped-binaries", "symbol-recovery" ], "url": "https://github.com/riven-labs/unstrip", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "AI assisted tools for Ghidra. Azure OpenAI, DeepSeek, Anthropic Claude, Ollama.", "description_language": "bilingual", "description_zh": "Ghidra 的 AI 辅助工具，支持 Azure OpenAI、DeepSeek、Anthropic Claude、Ollama。", "full_name": "APiTJLillo/GhAIdra", "id": "scan-928618874", "license": null, "observed_at": "2026-10-18T14:37:38.543929Z", "pushed_at": "2025-02-09T14:49:40Z", "readme_sha256": "a60f40c9c0ca240ff3a4dee0118ec22ca3587b49b7c0f052582b8a12a111af05", "readme_url": "https://github.com/APiTJLillo/GhAIdra/blob/a03d502dfd5740b6ec1f8636b87d1439b0ad3242/README.md", "stars": 11, "targets": [ "binary" ], "topics": [ "ai", "analysis", "anthropic", "anthropic-claude", "binary", "chatgpt", "ghidra", "ghidra-extension", "ghidra-plugin", "hacking", "llm", "ml", "openai", "re", "reverse-engineering", "security" ], "url": "https://github.com/APiTJLillo/GhAIdra", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Rust library to interface with BinDiff", "description_language": "bilingual", "description_zh": "用于与 BinDiff 交互的 Rust 库。", "full_name": "blacktop/bindiff-rs", "id": "scan-918393833", "license": "MIT", "observed_at": "2026-10-16T01:37:02.466651Z", "pushed_at": "2025-01-19T07:05:02Z", "readme_sha256": "a7079854f372a40072f5609f252a5889796d6694b4692e9cace8f5331945adcc", "readme_url": "https://github.com/blacktop/bindiff-rs/blob/main/README.md", "stars": 11, "targets": [ "binary" ], "topics": [ "binary-diffing", "bindiff", "bindings", "binexport", "rust" ], "url": "https://github.com/blacktop/bindiff-rs", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "What if Ghidra had a responsive UI?", "description_language": "bilingual", "description_zh": "如果 Ghidra 的 UI 响应流畅，会怎样？", "full_name": "garyttierney/ghidralite", "id": "scan-783112296", "license": null, "observed_at": "2026-10-18T14:37:38.544725Z", "pushed_at": "2024-07-30T00:17:17Z", "readme_sha256": "8f9addfcc5b8803ca173181b9ddc7a843c57497751615e18d8e2d5590398c6d9", "readme_url": "https://github.com/garyttierney/ghidralite/blob/6a117e2ff2c71ec4db85c9e5444f1c4b85adf602/README.md", "stars": 11, "targets": [ "binary" ], "topics": [ "ghidra", "ghidra-extension", "ghidra-plugin" ], "url": "https://github.com/garyttierney/ghidralite", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Patches The Amazing Spider-Man 2 (iOS 1.3.1) to launch, play and save entirely offline, years after Gameloft's servers went dark. Nine arm64 instructions, no injected code, no size change.", "description_language": "bilingual", "description_zh": "为 The Amazing Spider-Man 2（iOS 1.3.1）打补丁，使其在 Gameloft 服务器关闭多年后仍可完全离线启动、游玩与保存。仅改动九条 arm64 指令，不注入代码，不改变文件大小。", "full_name": "Jonathan8520/patch-tasm2", "id": "scan-1311167388", "license": "MIT", "observed_at": "2026-10-16T11:54:27.249627Z", "pushed_at": "2026-07-30T18:46:39Z", "readme_sha256": "418fefa6cc6140eefcd292083f7f9264039e128fd9bec5fbf6659fa7886fc7ac", "readme_url": "https://github.com/Jonathan8520/patch-tasm2/blob/main/README.md", "stars": 11, "targets": [ "app", "binary", "game" ], "topics": [ "arm64", "binary-patching", "game-preservation", "gameloft", "ios", "mach-o", "offline", "reverse-engineering" ], "url": "https://github.com/Jonathan8520/patch-tasm2", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A cross platform framework to recover driver's communication interface.", "description_language": "bilingual", "description_zh": "用于恢复驱动程序通信接口的跨平台框架。", "full_name": "kirasys/irec", "id": "scan-299515707", "license": "BSD-3-Clause", "observed_at": "2026-10-16T01:37:10.549794Z", "pushed_at": "2021-03-26T16:15:15Z", "readme_sha256": "9870200b8de0bd39fd5fff7703696f2621ba67462c846a71fa1960a8be8fcc68", "readme_url": "https://github.com/kirasys/irec/blob/master/README.md", "stars": 11, "targets": [ "binary" ], "topics": [ "angr", "fuzzing", "radare2", "symbolic-execution", "windows-driver" ], "url": "https://github.com/kirasys/irec", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Reverse-engineering suite for omp: radare2 tools, evidence store, signed audit log, RE status band, and report generator.", "description_language": "bilingual", "description_zh": "面向 omp 的逆向工程套件，包含 radare2 工具、证据存储、签名审计日志、逆向工程状态栏和报告生成器。", "full_name": "lancejames221b/omp-re", "id": "scan-1322133539", "license": "MIT", "observed_at": "2026-10-16T01:37:10.466804Z", "pushed_at": "2026-08-04T11:57:47Z", "readme_sha256": "28723f436f7ad2f5dbb7dbc377c609737265a84217e8e7d5065908b328affa17", "readme_url": "https://github.com/lancejames221b/omp-re/blob/main/README.md", "stars": 11, "targets": [ "binary" ], "topics": [ "malware-analysis", "omp", "plugin", "radare2", "reverse-engineering" ], "url": "https://github.com/lancejames221b/omp-re", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Ghidra's plugin recursively search dependencies of the variable and change their names and types.", "description_language": "bilingual", "description_zh": "Ghidra 插件，递归查找变量的依赖项，并更改其名称和类型。", "full_name": "saruman9/recaster", "id": "scan-633613735", "license": "Apache-2.0", "observed_at": "2026-10-18T14:37:38.544248Z", "pushed_at": "2023-06-08T09:48:23Z", "readme_sha256": "cdd216b2d97ac236100a2230edff6faa1ad8c2ef04da669daa681fc00a28f193", "readme_url": "https://github.com/saruman9/recaster/blob/0a7f2c05db23de3300cd989a655a379d4868f1db/README.md", "stars": 11, "targets": [ "binary" ], "topics": [ "analysis", "ghidra", "ghidra-extension", "ghidra-plugin", "java", "reverse-engineering" ], "url": "https://github.com/saruman9/recaster", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "IDA Pro + ImGui", "description_language": "bilingual", "description_zh": "IDA Pro + ImGui", "full_name": "thebabush/idagui", "id": "scan-1041711491", "license": null, "observed_at": "2026-10-18T14:38:04.564608Z", "pushed_at": "2025-08-21T01:33:28Z", "readme_sha256": "64c153161b718c3cad99f77c52daab926eb02b077e84c65aee2057703fc63b85", "readme_url": "https://github.com/thebabush/idagui/blob/8c8b7e0951015f73dafb9c881e65dbc6e14be380/README.md", "stars": 11, "targets": [ "binary" ], "topics": [ "decompiler", "hex-rays", "idapro", "imgui", "reverse-engineering" ], "url": "https://github.com/thebabush/idagui", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A library for creating and patching binary diffs. Based on bsdiff.", "description_language": "bilingual", "description_zh": "用于创建和应用二进制差异补丁的库，基于 bsdiff。", "full_name": "woodruffw/libbdiff", "id": "scan-26870614", "license": null, "observed_at": "2026-10-16T01:37:02.545094Z", "pushed_at": "2014-11-23T18:32:57Z", "readme_sha256": "b82c01de1c3bfa25e450a7a52be2b4f9f70ae5ffe9338db66c2906eccbc20e24", "readme_url": "https://github.com/woodruffw/libbdiff/blob/master/README.md", "stars": 11, "targets": [ "binary" ], "topics": [ "binary-diffing", "bsdiff", "c", "diff" ], "url": "https://github.com/woodruffw/libbdiff", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A Radare2 based Python module for Binary Analysis and Reverse Engineering.", "description_language": "bilingual", "description_zh": "基于 radare2 的 Python 模块，用于二进制分析与逆向工程。", "full_name": "CYB3RMX/Zepu1chr3", "id": "scan-456242022", "license": "Apache-2.0", "observed_at": "2026-10-16T01:37:10.740780Z", "pushed_at": "2022-02-07T09:05:41Z", "readme_sha256": "c1d3138aa5673ffb75e07ac89574af8df4273f4b4e3a8789f2128898f4b5e89b", "readme_url": "https://github.com/CYB3RMX/Zepu1chr3/blob/main/README.md", "stars": 10, "targets": [ "binary" ], "topics": [ "binary", "binary-analysis", "development", "malware-analysis", "python", "r2pipe", "radare2", "reverse-engineering" ], "url": "https://github.com/CYB3RMX/Zepu1chr3", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "MediaTek PCM (SPM) processor module for Ghidra.", "description_language": "bilingual", "description_zh": "Ghidra 的 MediaTek PCM（SPM）处理器模块。", "full_name": "cyrozap/ghidra-pcm", "id": "scan-320381361", "license": "Apache-2.0", "observed_at": "2026-10-18T14:37:38.544914Z", "pushed_at": "2023-05-14T04:04:20Z", "readme_sha256": "4555cdc8b4fb7e65830d80f0a06c1ee10dfdd62506579048018be7219be924fb", "readme_url": "https://github.com/cyrozap/ghidra-pcm/blob/70740b96a3aad64990abb14f243e46b03ea8e11d/README.md", "stars": 10, "targets": [ "binary" ], "topics": [ "ghidra", "ghidra-plugin" ], "url": "https://github.com/cyrozap/ghidra-pcm", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "radare2 based alternative to apktool", "description_language": "bilingual", "description_zh": "基于 radare2 的 apktool 替代工具。", "full_name": "h4ng3r/r2apktool", "id": "scan-95497583", "license": "GPL-3.0", "observed_at": "2026-10-16T01:37:10.483710Z", "pushed_at": "2017-09-08T11:26:53Z", "readme_sha256": "40a2150524c29bcd64f543d23b99fdb453f3a655573def91aed92caeab52c6ec", "readme_url": "https://github.com/h4ng3r/r2apktool/blob/master/README.md", "stars": 10, "targets": [ "app", "binary" ], "topics": [ "android", "decompiler", "radare2", "smali" ], "url": "https://github.com/h4ng3r/r2apktool", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A toolsuite of advanced WASM static binary analysis tools designed to reverse engineer WebAssembly binaries.", "description_language": "bilingual", "description_zh": "用于逆向分析 WebAssembly 二进制文件的高级 Wasm 静态二进制分析工具套件。", "full_name": "Lucrehulk/WasmCrack", "id": "scan-1189672512", "license": "MIT", "observed_at": "2026-10-16T07:15:05.185875Z", "pushed_at": "2026-07-29T12:52:49Z", "readme_sha256": "8cbcfbd9175dada0aea660864c29931f505fc81fe85c632e4568c58820151c35", "readme_url": "https://github.com/Lucrehulk/WasmCrack/blob/main/README.md", "stars": 10, "targets": [ "binary", "game" ], "topics": [ "binary-analysis", "heuristics", "io-game", "io-games", "memory-analysis", "reverse-engineering", "static-analysis", "wasm", "webassembly", "webhacking" ], "url": "https://github.com/Lucrehulk/WasmCrack", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Grand Theft Auto IV's engine, being rewritten in Rust one function at a time by AI agents, for 64-bit Windows, Windows on ARM and macOS. Contains no game code or assets.", "description_language": "bilingual", "description_zh": "AI 智能体正用 Rust 逐个函数重写 Grand Theft Auto IV 的引擎，面向 64 位 Windows、Windows on ARM 和 macOS。不包含游戏代码或资源。", "full_name": "monstercameron/LibertyFlux", "id": "scan-1403730962", "license": "MIT", "observed_at": "2026-10-18T13:14:18.106092Z", "pushed_at": "2026-10-12T08:41:26Z", "readme_sha256": "cdc8c4ff6f0fc510e0a5c730a8ba0c7c540c78a7265413e1c5b10881e43a24df", "readme_url": "https://github.com/monstercameron/LibertyFlux/blob/main/README.md", "stars": 10, "targets": [ "binary", "game" ], "topics": [ "ai-agents", "arm64", "decompilation", "game-engine", "game-preservation", "ghidra", "grand-theft-auto", "gta-iv", "macos", "modding", "rage-engine", "reimplementation", "reverse-engineering", "rust", "vulkan", "windows" ], "url": "https://github.com/monstercameron/LibertyFlux", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "r2 plugin to add MSDN documentation URLs and parameter names to imported function calls", "description_language": "bilingual", "description_zh": "为导入函数调用添加 MSDN 文档 URL 和参数名的 r2 插件。", "full_name": "newlog/r2msdn", "id": "scan-89147436", "license": null, "observed_at": "2026-10-16T01:37:10.807988Z", "pushed_at": "2017-04-23T21:39:08Z", "readme_sha256": "a56c29a134602f56986ef176015f63b7bc3b9c5ce86f05062067b67a297be03e", "readme_url": "https://github.com/newlog/r2msdn/blob/master/README.md", "stars": 10, "targets": [ "binary" ], "topics": [ "msdn-documentation", "radare2", "reverse-engineering" ], "url": "https://github.com/newlog/r2msdn", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Build and apply binary patches to Docker Images", "description_language": "bilingual", "description_zh": "为 Docker 镜像构建并应用二进制补丁。", "full_name": "parrotmac/docker-patcher", "id": "scan-182826620", "license": "Apache-2.0", "observed_at": "2026-10-16T01:37:02.728804Z", "pushed_at": "2023-08-08T17:02:07Z", "readme_sha256": "72e12a1ae8d114a0a36db34fd5820c846c1211c902bf33daf03e56fc012f72ab", "readme_url": "https://github.com/parrotmac/docker-patcher/blob/main/README.md", "stars": 10, "targets": [ "binary" ], "topics": [ "binary-diffing", "docker", "iot" ], "url": "https://github.com/parrotmac/docker-patcher", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Notes on Reverse Engineering EVM Bytecode", "description_language": "bilingual", "description_zh": "EVM 字节码逆向工程笔记。", "full_name": "refcell/reversevm", "id": "scan-446142223", "license": "AGPL-3.0", "observed_at": "2026-10-16T01:37:10.730400Z", "pushed_at": "2022-01-10T14:06:41Z", "readme_sha256": "a75bde3c61f50797329aa00be1a13302f2b8c98a000212a01ed9de236e2e01c6", "readme_url": "https://github.com/refcell/reversevm/blob/master/README.md", "stars": 10, "targets": [ "binary" ], "topics": [ "bytecode", "ethereum", "evm", "radare2", "reverse-engineering" ], "url": "https://github.com/refcell/reversevm", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "🔎 Function Change Differ | A diffing tool for binary files when comparing obfuscated and changed function contents between versions 🛠️", "description_language": "bilingual", "description_zh": "🔎 Function Change Differ：二进制文件差异比较工具，用于比较不同版本间被混淆和修改的函数内容。🛠️", "full_name": "user1342/Just-Another-Differ", "id": "scan-739150162", "license": "GPL-3.0", "observed_at": "2026-10-16T01:37:02.619831Z", "pushed_at": "2024-04-13T06:36:24Z", "readme_sha256": "a5308db46ac863ae7af0ef951579937cfb696060afe896b6389fb1250f629e76", "readme_url": "https://github.com/user1342/Just-Another-Differ/blob/main/README.md", "stars": 10, "targets": [ "binary" ], "topics": [ "binary-analysis", "binary-diffing", "ghidra", "obfuscation", "versioning" ], "url": "https://github.com/user1342/Just-Another-Differ", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "AMD Radeon F32 processor module for Ghidra.", "description_language": "bilingual", "description_zh": "Ghidra 的 AMD Radeon F32 处理器模块。", "full_name": "cyrozap/ghidra-radeon-f32", "id": "scan-783161911", "license": "Apache-2.0", "observed_at": "2026-10-18T14:37:38.545342Z", "pushed_at": "2024-10-04T13:42:24Z", "readme_sha256": "a790cbc0513f19f32db2323141c9d0bbbb6ab15986a982537300bca1e823cd0c", "readme_url": "https://github.com/cyrozap/ghidra-radeon-f32/blob/6693e360dfd4457dcd0ff311e4bdfac00015619a/README.md", "stars": 9, "targets": [ "binary" ], "topics": [ "ghidra", "ghidra-plugin" ], "url": "https://github.com/cyrozap/ghidra-radeon-f32", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Useful plugin for reverse engineering code that makes use of C++ protobuf", "description_language": "bilingual", "description_zh": "用于逆向分析使用 C++ protobuf 的代码的实用插件。", "full_name": "devgianlu/GhidraProtobufCpp", "id": "scan-729567538", "license": null, "observed_at": "2026-10-18T14:37:38.545093Z", "pushed_at": "2023-12-09T16:33:09Z", "readme_sha256": "042a37c55e3efd259e9470a9d6ffeac495ae89041d0bbb57b3db246e27c08e6b", "readme_url": "https://github.com/devgianlu/GhidraProtobufCpp/blob/a27ac17b3dd55b60f8572fe90d9d0011ae3b9621/README.md", "stars": 9, "targets": [ "binary" ], "topics": [ "cpp", "ghidra", "ghidra-plugin", "ghidra-scripts", "protobuf" ], "url": "https://github.com/devgianlu/GhidraProtobufCpp", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "An open-source Python implementation and protocol mapping for the Even Realities G2 smart glasses, enabling full third-party interoperability, native dashboard control, and raw LC3 audio streaming via BlueZ.", "description_language": "bilingual", "description_zh": "Even Realities G2 智能眼镜的开源 Python 实现和协议映射，可实现完整第三方互操作、原生仪表盘控制，以及通过 BlueZ 传输原始 LC3 音频流。", "full_name": "ithinkthisiscool/even-g2-protocol", "id": "scan-1403356157", "license": null, "observed_at": "2026-10-16T01:37:19.558989Z", "pushed_at": "2026-10-13T19:42:57Z", "readme_sha256": "42950b94896ab5f0e4e81cadd4f266291572aea3d3dee0be20c61833cb90be4b", "readme_url": "https://github.com/ithinkthisiscool/even-g2-protocol/blob/main/README.md", "stars": 9, "targets": [ "binary" ], "topics": [ "ble-protocol", "even-g2", "even-realities", "even-realities-g2", "eveng2", "g2-glasses", "python", "reverse-engineering", "reverse-engineering-framework", "reverse-engineering-source-code", "reverse-engineering-tools" ], "url": "https://github.com/ithinkthisiscool/even-g2-protocol", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A program diffing extension for Ghidra.", "description_language": "bilingual", "description_zh": "Ghidra 的程序差异比较扩展。", "full_name": "johnfxgalea/Dragon-Fang", "id": "scan-457487612", "license": "Apache-2.0", "observed_at": "2026-10-16T01:37:02.898966Z", "pushed_at": "2022-02-23T17:55:07Z", "readme_sha256": "2d76d1e986e325687c803c094bbb02a8597092e2a18bb2c96e594e5c1102b0a4", "readme_url": "https://github.com/johnfxgalea/Dragon-Fang/blob/main/README.md", "stars": 9, "targets": [ "binary" ], "topics": [ "binary-diffing", "ghidra-extension" ], "url": "https://github.com/johnfxgalea/Dragon-Fang", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Midtown Madness 3 PC Native: an improved and modded MM3 PC port for Windows 10/11 x64. Xbox static recompilation with Direct3D 11, keyboard controls, widescreen, custom cars, gameplay fixes and performance improvements. Build from your own game disc.", "description_language": "bilingual", "description_zh": "Midtown Madness 3 PC Native：经过改进和模组修改的 MM3 PC 移植版，支持 Windows 10/11 x64。通过 Xbox 静态重编译实现，配备 Direct3D 11、键盘控制、宽屏、自定义车辆、游戏逻辑修复及性能优化。需使用自有游戏光盘构建。", "full_name": "lakshya16157/midtown-madness-3-PC-Native", "id": "scan-1413789897", "license": null, "observed_at": "2026-10-16T11:55:18.142036Z", "pushed_at": "2026-10-16T07:29:00Z", "readme_sha256": "0ec5e0ee8935bc2da73a2076a15b9dcd02f92e0904d20a5430f883e0e26b7a92", "readme_url": "https://github.com/lakshya16157/midtown-madness-3-PC-Native/blob/main/README.md", "stars": 9, "targets": [ "binary", "game" ], "topics": [ "arcade-racing", "custom-cars", "direct3d11", "game-mods", "keyboard-controls", "midtown-madness", "midtown-madness-3", "mm3", "mm3-mods", "mm3-recomp", "modding", "native-pc-port", "pc-gaming", "performance", "shader-cache", "static-recompilation", "widescreen", "windows", "windows-11", "xbox" ], "url": "https://github.com/lakshya16157/midtown-madness-3-PC-Native", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Version Control Tool for Binary Format Files.", "description_language": "bilingual", "description_zh": "二进制格式文件的版本控制工具。", "full_name": "peitaosu/Cardiff", "id": "scan-89926320", "license": "MIT", "observed_at": "2026-10-16T01:37:02.803051Z", "pushed_at": "2023-04-18T11:15:03Z", "readme_sha256": "880043462ea59f62a6324a993d4bec293e244a234cfcdd29abc3339462348835", "readme_url": "https://github.com/peitaosu/Cardiff/blob/master/README.md", "stars": 9, "targets": [ "binary" ], "topics": [ "binary-diffing", "format-parser", "version-control" ], "url": "https://github.com/peitaosu/Cardiff", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "", "description_language": "bilingual", "description_zh": "", "full_name": "psxvoid/idapython-debugging-dynamic-enrichment", "id": "scan-213150056", "license": "MIT", "observed_at": "2026-10-18T14:38:04.566172Z", "pushed_at": "2019-10-18T05:44:36Z", "readme_sha256": "4daa22c581bfe5586b5f1fe39a27c58daa8d6c7412848fbe342d06004f4ca3f0", "readme_url": "https://github.com/psxvoid/idapython-debugging-dynamic-enrichment/blob/1a853797190df8d0eddfdff5ab2fd196cce7c4e9/README.md", "stars": 9, "targets": [ "binary" ], "topics": [ "fallout-4", "ida-pro", "ida7", "idapro", "idapython", "idapython-plugin", "msvc", "reverse-engineering" ], "url": "https://github.com/psxvoid/idapython-debugging-dynamic-enrichment", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Radare2's ESIL in Rust", "description_language": "bilingual", "description_zh": "radare2 ESIL 的 Rust 实现。", "full_name": "radareorg/esil-rs", "id": "scan-49444158", "license": "BSD-3-Clause", "observed_at": "2026-10-16T01:37:10.885599Z", "pushed_at": "2020-10-20T13:50:51Z", "readme_sha256": "f0eb01287d7624e15a3791bde4519846494a776de0e31da17fdb29ba1f021150", "readme_url": "https://github.com/radareorg/esil-rs/blob/master/README.md", "stars": 9, "targets": [ "binary" ], "topics": [ "esil", "radare2" ], "url": "https://github.com/radareorg/esil-rs", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Automated Static, Hardware-Rooted & Dynamic HIL Security Analysis for Bare-Metal ESP32 (Xtensa & RISC-V) Firmware", "description_language": "bilingual", "description_zh": "针对裸机 ESP32（Xtensa 与 RISC-V）固件的自动化静态安全分析、以硬件为基础的安全分析及动态硬件在环（HIL）安全分析。", "full_name": "Srikanth-Rudrarapu/firm-lens", "id": "scan-1276628938", "license": "MIT", "observed_at": "2026-10-16T10:47:53.717218Z", "pushed_at": "2026-10-02T19:33:16Z", "readme_sha256": "baa64763809c0bfeff41644dfc50dd5b7a14a4668142ea6053c0dff81c719795", "readme_url": "https://github.com/Srikanth-Rudrarapu/firm-lens/blob/main/README.md", "stars": 9, "targets": [ "binary", "firmware" ], "topics": [ "bare-metal", "esp32", "firmware-security", "fuzzing", "hardware-in-the-loop", "risc-v", "static-analysis", "vulnerability-research", "xtensa" ], "url": "https://github.com/Srikanth-Rudrarapu/firm-lens", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "An ad-free Douban jailbreak tweak. Thanks for using it; stars are welcome.", "description_language": "bilingual", "description_zh": "豆瓣无广告越狱插件，感谢使用，欢迎 Star。", "full_name": "TouchFriend/DoubanTweak", "id": "scan-1021153007", "license": "MIT", "observed_at": "2026-10-16T11:54:19.080475Z", "pushed_at": "2026-09-19T07:45:25Z", "readme_sha256": "cce24c609f3853f5bb62ed8e142c6475d89e2600a580309f99abaac8d419e33d", "readme_url": "https://github.com/TouchFriend/DoubanTweak/blob/main/README.md", "stars": 9, "targets": [ "app", "binary" ], "topics": [ "arm64", "douban", "hook", "ios", "ios-tweak", "jailbreak", "logos", "objective-c", "reverse-engineering", "theos" ], "url": "https://github.com/TouchFriend/DoubanTweak", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Writeups, scripts and solutions for CTFs, Hack the Box, Vulnhub, exploit challenges, pwnables, crackmes, etc. Anything goes.", "description_language": "bilingual", "description_zh": "CTF、Hack The Box、Vulnhub、漏洞利用挑战、Pwn 题、CrackMe 等的题解、脚本和解答，内容不限。", "full_name": "alichtman/writeups", "id": "scan-196810793", "license": null, "observed_at": "2026-10-16T01:37:11.208076Z", "pushed_at": "2021-06-28T09:27:42Z", "readme_sha256": "6bcb66e41461739a12d1cda9f480255fe080bf6529889fe99a640c0c0526fff9", "readme_url": "https://github.com/alichtman/writeups/blob/master/README.md", "stars": 8, "targets": [ "binary" ], "topics": [ "ctf-solutions", "ctf-writeups", "hack-the-box", "radare2" ], "url": "https://github.com/alichtman/writeups", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A debloater for iOS apps", "description_language": "bilingual", "description_zh": "用于精简 iOS 应用的工具。", "full_name": "andreihirgau/ios-app-debloating", "id": "scan-86930244", "license": null, "observed_at": "2026-10-16T11:54:15.002907Z", "pushed_at": "2017-07-02T10:43:32Z", "readme_sha256": "731b94183cad0364a2ad41d35ace4dcca9810e7d9645712b11a6cc18b60b61a5", "readme_url": "https://github.com/andreihirgau/ios-app-debloating/blob/master/README.md", "stars": 8, "targets": [ "app", "binary" ], "topics": [ "armv7", "debloat", "ios", "mach-o", "macosx", "reverse-engineering", "x86-64" ], "url": "https://github.com/andreihirgau/ios-app-debloating", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "TriCore decompiler plugin for IDA Pro 9.2+", "description_language": "bilingual", "description_zh": "适用于 IDA Pro 9.2+ 的 TriCore 反编译插件。", "full_name": "arkup/tc_deer", "id": "scan-1121357365", "license": null, "observed_at": "2026-10-16T01:37:19.711810Z", "pushed_at": "2026-04-25T09:28:17Z", "readme_sha256": "79ccb843c80474acb9af3ad9d553768f910033308863a565b1a9e26163a8bdba", "readme_url": "https://github.com/arkup/tc_deer/blob/main/README.md", "stars": 8, "targets": [ "binary" ], "topics": [ "ida-tricore-decompiler", "reverse-engineering-tools", "tricore-decompiler" ], "url": "https://github.com/arkup/tc_deer", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "AI-Powered Reverse Engineering with 100% Ghidra API Access", "description_language": "bilingual", "description_zh": "通过 100% 的 Ghidra API 访问能力实现 AI 驱动的逆向工程。", "full_name": "AuraFriday/ghidra_mcp", "id": "scan-1127391502", "license": "Apache-2.0", "observed_at": "2026-10-18T14:37:38.547508Z", "pushed_at": "2026-01-03T21:06:59Z", "readme_sha256": "00f5fe2c79def498c11b3a2e2d3ec319b1ce3fbad1328c45e1e4d71ece850fd6", "readme_url": "https://github.com/AuraFriday/ghidra_mcp/blob/695892d02d769b4f6970142134df1301162607c0/README.md", "stars": 8, "targets": [ "binary" ], "topics": [ "ghidra", "ghidra-plugin", "mcp", "mcp-server", "mcp-servers", "reverse-engineering" ], "url": "https://github.com/AuraFriday/ghidra_mcp", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Go package to interface with BinDiff", "description_language": "bilingual", "description_zh": "用于与 BinDiff 交互的 Go 包。", "full_name": "blacktop/go-bindiff", "id": "scan-915860706", "license": "MIT", "observed_at": "2026-10-16T01:37:02.943382Z", "pushed_at": "2025-12-15T20:22:29Z", "readme_sha256": "e66475208295db73403111f752c61527f184e78c35b84132f040b7243f5d981a", "readme_url": "https://github.com/blacktop/go-bindiff/blob/main/README.md", "stars": 8, "targets": [ "binary" ], "topics": [ "binary-diffing", "bindiff", "bindings", "golang" ], "url": "https://github.com/blacktop/go-bindiff", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Reverse-engineering Atari ST binaries back into readable, verified C.", "description_language": "bilingual", "description_zh": "通过逆向工程，将 Atari ST 二进制文件还原为可读、经过验证的 C 代码。", "full_name": "geogeo28/atari_reverse", "id": "scan-1309169920", "license": "GPL-2.0", "observed_at": "2026-10-18T13:13:38.147595Z", "pushed_at": "2026-10-18T12:59:52Z", "readme_sha256": "866ee24b6293e65dbe86d8e2df036900af38c923a62236eed8ed4c3690ac40a4", "readme_url": "https://github.com/geogeo28/atari_reverse/blob/main/README.md", "stars": 8, "targets": [ "binary", "game" ], "topics": [ "atari-st", "decompilation", "emulation", "game-preservation", "ghidra", "m68k", "retrocomputing", "reverse-engineering" ], "url": "https://github.com/geogeo28/atari_reverse", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "FASM .fas symbolic debug information loader for radare2", "description_language": "bilingual", "description_zh": "用于 radare2 的 FASM .fas 符号调试信息加载器。", "full_name": "hamidrezakp/r2fas", "id": "scan-1342055016", "license": "MIT", "observed_at": "2026-10-16T01:37:11.329595Z", "pushed_at": "2026-08-23T10:29:28Z", "readme_sha256": "2c1882351396c90088c9f3ef54266400df543f472f8fcc0d5a4cc33894cd5e77", "readme_url": "https://github.com/hamidrezakp/r2fas/blob/main/README.md", "stars": 8, "targets": [ "binary" ], "topics": [ "binary-analysis", "debug-info", "fasm", "radare2", "radare2-plugin", "reverse-engineering" ], "url": "https://github.com/hamidrezakp/r2fas", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Call of Duty (2003) multiplayer, rebuilt from scratch in Rust. Client, dedicated server and bots that speak the original wire protocol for patch 1.1, 1.5 and United Offensive, dug out of the binaries and held to retail by captures. Bring your own copy of the game. Your 2003 aim is not included.", "description_language": "bilingual", "description_zh": "用 Rust 从零重建 Call of Duty（2003）多人模式。客户端、专用服务器和机器人使用从二进制文件中挖掘出的原始网络协议，支持补丁 1.1、1.5 和 United Offensive，并通过抓包对照零售版。需自备游戏副本。不附赠你在 2003 年的枪法。", "full_name": "janost/vcod", "id": "scan-1338770265", "license": "GPL-3.0", "observed_at": "2026-10-18T13:13:49.140985Z", "pushed_at": "2026-10-18T12:36:18Z", "readme_sha256": "a713029e78f9c88fe832c70b63a36c7a991fbe7985bffd1f4229f8cbbe1c0216", "readme_url": "https://github.com/janost/vcod/blob/master/README.md", "stars": 8, "targets": [ "binary", "game" ], "topics": [ "bots", "call-of-duty", "cod-united-offensive", "cod1", "dedicated-server", "game-engine", "game-preservation", "game-server", "idtech3", "multiplayer", "netcode", "retro-gaming", "reverse-engineering", "rust", "wgpu" ], "url": "https://github.com/janost/vcod", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Experimental PSP static recompiler and native runtime using user-supplied lawful inputs.", "description_language": "bilingual", "description_zh": "实验性的 PSP 静态重编译器与原生运行时，使用用户提供的合法输入。", "full_name": "Jstar269/nakagawa-recomp", "id": "scan-1330183186", "license": "GPL-3.0", "observed_at": "2026-10-16T11:55:18.065529Z", "pushed_at": "2026-10-16T09:31:13Z", "readme_sha256": "b0a76a14095e499e0cefcac530732ab424fd52606b88dd2959b0f8caea779142", "readme_url": "https://github.com/Jstar269/nakagawa-recomp/blob/main/README.md", "stars": 8, "targets": [ "binary" ], "topics": [ "emulation", "mips", "psp", "recompilation", "reverse-engineering", "static-recompilation", "vulkan" ], "url": "https://github.com/Jstar269/nakagawa-recomp", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Binwalk plugin for IDA Pro and Binary Ninja", "description_language": "bilingual", "description_zh": "用于 IDA Pro 和 Binary Ninja 的 Binwalk 插件。", "full_name": "kevinmuoz/binwalk-reversing-plugin", "id": "scan-1163223230", "license": "Apache-2.0", "observed_at": "2026-10-16T01:37:37.775690Z", "pushed_at": "2026-03-07T12:49:04Z", "readme_sha256": "a69e3d8817396fa849f5005c143321e99a53a702d7babae490de3b3a11ce3529", "readme_url": "https://github.com/kevinmuoz/binwalk-reversing-plugin/blob/main/README.md", "stars": 8, "targets": [ "binary", "firmware" ], "topics": [ "binary-analysis", "binary-ninja", "binwalk", "firmware", "ida-plugin", "malware-analysis", "reverse-engineering" ], "url": "https://github.com/kevinmuoz/binwalk-reversing-plugin", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Add read-only REST API to your Ghidra project", "description_language": "bilingual", "description_zh": "为 Ghidra 项目添加只读 REST API。", "full_name": "kotcrab/ghidra-rest-api", "id": "scan-713058375", "license": "Apache-2.0", "observed_at": "2026-10-18T14:37:38.547912Z", "pushed_at": "2026-08-25T15:02:34Z", "readme_sha256": "b9fd5d97df6670585a9b150275ca568daaf660ab6c6ac8d956ef748e9b6f123c", "readme_url": "https://github.com/kotcrab/ghidra-rest-api/blob/7fccb62023c0b0c0b0950722fd12d9333ccca4ce/README.md", "stars": 8, "targets": [ "binary", "website" ], "topics": [ "ghidra", "ghidra-extension", "ghidra-plugin", "ghidra-plugins" ], "url": "https://github.com/kotcrab/ghidra-rest-api", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Matching decompilation of irix binary makemask", "description_language": "bilingual", "description_zh": "IRIX 二进制程序 makemask 的匹配反编译。", "full_name": "LLONSIT/makemask_re", "id": "scan-571728989", "license": null, "observed_at": "2026-10-18T13:12:41.667110Z", "pushed_at": "2022-12-29T05:14:10Z", "readme_sha256": "76db4f37ae1fbbc59856c941f43dc56fccfbe6e4ae571a79506f4d5b7ad1011d", "readme_url": "https://github.com/LLONSIT/makemask_re/blob/main/README.md", "stars": 8, "targets": [ "binary" ], "topics": [ "binary", "decompilation", "n64-dev", "reverse-engineering" ], "url": "https://github.com/LLONSIT/makemask_re", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A feature-rich markdown editor plugin for Ghidra that supports collections of notes without leaving Ghidra.", "description_language": "bilingual", "description_zh": "功能丰富的 Ghidra Markdown 编辑器插件，无需离开 Ghidra 即可使用笔记集。", "full_name": "lr-m/Ghidra-Markdown-Notepad", "id": "scan-900517732", "license": null, "observed_at": "2026-10-18T14:37:38.545775Z", "pushed_at": "2026-03-16T00:02:48Z", "readme_sha256": "fe010720c1fe451a613986cf00bde881d2f5b7a04d0d7e2fa852de471c23e202", "readme_url": "https://github.com/lr-m/Ghidra-Markdown-Notepad/blob/41e2114412430cb8a8d2877ef6cdab5187a9c482/README.md", "stars": 8, "targets": [ "binary" ], "topics": [ "ghidra", "ghidra-extension", "ghidra-plugin", "markdown", "notes", "plugin" ], "url": "https://github.com/lr-m/Ghidra-Markdown-Notepad", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A Raspberry Pi Pico RP2040 debug template repo with step-by-step instructions on how to freeze your MicroPython files into C firmware and reverse engineer the binary with OpenOCD and GDB.", "description_language": "bilingual", "description_zh": "Raspberry Pi Pico RP2040 调试模板仓库，提供逐步说明，介绍如何将 MicroPython 文件固化到 C 固件中，并使用 OpenOCD 和 GDB 对二进制文件进行逆向分析。", "full_name": "mytechnotalent/pico-micropython-debug-template", "id": "scan-537932072", "license": "MIT", "observed_at": "2026-10-16T01:36:21.540452Z", "pushed_at": "2025-11-26T23:28:15Z", "readme_sha256": "8f9fd17b4572409d9080b3911beb5544a5ec9850d3c50874d5bebc75584f5d2b", "readme_url": "https://github.com/mytechnotalent/pico-micropython-debug-template/blob/main/README.md", "stars": 8, "targets": [ "binary", "firmware" ], "topics": [ "c", "cortex-m", "debugging", "engineering", "firmware", "firmware-analysis", "firmware-hacking", "gdb", "gdbserver", "hacking", "micropython", "micropython-pico", "openocd", "pico", "raspberry-pi", "raspberry-pi-pico", "reverse", "reverse-engineering", "rp2040" ], "url": "https://github.com/mytechnotalent/pico-micropython-debug-template", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Ghidra extension that parses C/C++ headers using libclang via Panama FFI and imports types into Ghidra's data type manager", "description_language": "bilingual", "description_zh": "Ghidra 扩展，通过 Panama FFI 调用 libclang 解析 C/C++ 头文件，并将类型导入 Ghidra 数据类型管理器。", "full_name": "playday3008/GhidraClangPoweredParse", "id": "scan-1193654668", "license": "Apache-2.0", "observed_at": "2026-10-18T14:37:38.546293Z", "pushed_at": "2026-03-28T21:50:10Z", "readme_sha256": "371e552b515e8fe7fa6deb0214012bd0b899ef6b3a943a5d2e2b894926e3308d", "readme_url": "https://github.com/playday3008/GhidraClangPoweredParse/blob/e1e19487e6fbe61ced72010fa0a31b0c29f1d15b/README.md", "stars": 8, "targets": [ "binary" ], "topics": [ "c", "clang", "cpp", "data-types", "ghidra", "ghidra-extension", "ghidra-plugin", "java", "jdk21", "libclang", "llvm", "panama-ffi", "parser", "reverse-engineering" ], "url": "https://github.com/playday3008/GhidraClangPoweredParse", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Catch22 Hex Editor", "description_language": "bilingual", "description_zh": "Catch22 十六进制编辑器。", "full_name": "strobejb/q22", "id": "scan-1187565682", "license": "GPL-3.0", "observed_at": "2026-10-16T01:37:19.642819Z", "pushed_at": "2026-09-22T17:12:29Z", "readme_sha256": "ef82d10be72911551b00b9271a9159d5f94c71a3a211aace09e3f462c5b23ec8", "readme_url": "https://github.com/strobejb/q22/blob/main/README.md", "stars": 8, "targets": [ "binary" ], "topics": [ "binary-file-editor", "disassembler", "elf-parser", "hex-editor", "pe-parser", "reverse-engineering", "reverse-engineering-tools", "structured-data" ], "url": "https://github.com/strobejb/q22", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Automation plugins for various reversing tasks in IDA.", "description_language": "bilingual", "description_zh": "用于在 IDA 中自动执行各种逆向任务的插件。", "full_name": "twisted-fun/IDARE", "id": "scan-403242089", "license": "MIT", "observed_at": "2026-10-18T14:38:04.569927Z", "pushed_at": "2021-09-07T20:46:33Z", "readme_sha256": "8d7aa07dbf8b2fd838b2fc342a1d13986ec6ea42c5602c29cd8fcfc6c939ea61", "readme_url": "https://github.com/twisted-fun/IDARE/blob/60675316368be4fcb155d9b413803d4a383cb021/README.md", "stars": 8, "targets": [ "binary" ], "topics": [ "idapro", "idapython", "plugin", "reverse-engineering" ], "url": "https://github.com/twisted-fun/IDARE", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A Ghidra plugin for native code metrics", "description_language": "bilingual", "description_zh": "用于原生代码度量的 Ghidra 插件。", "full_name": "westfox-5/GhidraMetrics", "id": "scan-527160400", "license": "Apache-2.0", "observed_at": "2026-10-18T14:37:38.546519Z", "pushed_at": "2023-03-04T14:16:44Z", "readme_sha256": "3343d8afd3c97ae400ed5061d761eafdfcb14633cc30ba98580ce5f970faaf87", "readme_url": "https://github.com/westfox-5/GhidraMetrics/blob/90fb3b7ce7247623a50a2c2005bee626471d3f80/README.md", "stars": 8, "targets": [ "binary" ], "topics": [ "ghidra", "ghidra-analyzer", "ghidra-extension", "ghidra-plugin", "ghidra-scripts", "java" ], "url": "https://github.com/westfox-5/GhidraMetrics", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "XNU Image Tools is a multi-platform image processing toolkit for fuzzing UTI file formats.", "description_language": "bilingual", "description_zh": "XNU Image Tools 是一个多平台图像处理工具包，用于对 UTI 文件格式进行模糊测试。", "full_name": "xsscx/xnuimagetools", "id": "scan-806148730", "license": "GPL-3.0", "observed_at": "2026-10-16T11:54:18.243215Z", "pushed_at": "2026-09-28T20:25:01Z", "readme_sha256": "47c83bd92818267ae080193fcef921de767a9b90bb879233d05e495f93d1a24a", "readme_url": "https://github.com/xsscx/xnuimagetools/blob/main/README.md", "stars": 8, "targets": [ "app", "binary" ], "topics": [ "assembly", "debugging", "imageio", "introspection", "ios", "lldb", "macos", "profiling", "reverse-engineering", "swift", "visionpro", "watchos", "xnu" ], "url": "https://github.com/xsscx/xnuimagetools", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "iNES ghidra loader for Flare-on 6 challenge level 8", "description_language": "bilingual", "description_zh": "用于 Flare-on 6 第 8 关的 iNES Ghidra 加载器。", "full_name": "bruce30262/flareon6_NES_ghidra_loader", "id": "scan-210814517", "license": null, "observed_at": "2026-10-18T14:37:38.548664Z", "pushed_at": "2019-09-28T08:06:52Z", "readme_sha256": "9cc343c1952869a284cbd5844177f8a0c39d02a7561b77f44231f28135d9620e", "readme_url": "https://github.com/bruce30262/flareon6_NES_ghidra_loader/blob/70674896e4c8d8f37b0acf7d79f6c10c4a3cde24/README.md", "stars": 7, "targets": [ "binary" ], "topics": [ "ghidra", "ghidra-plugin", "java", "nes" ], "url": "https://github.com/bruce30262/flareon6_NES_ghidra_loader", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Binary Ninja plugin adding C166/ST10 architecture support for embedded firmware. Enables accurate disassembly and decompilation of C166/ST10 binaries for security analysis and reverse engineering.", "description_language": "bilingual", "description_zh": "为嵌入式固件添加 C166/ST10 架构支持的 Binary Ninja 插件，可准确反汇编与反编译 C166/ST10 二进制，用于安全分析和逆向工程。", "full_name": "idaholab/bn-st10-arch", "id": "scan-1095949116", "license": "MIT", "observed_at": "2026-10-16T10:47:54.831975Z", "pushed_at": "2026-09-09T17:00:44Z", "readme_sha256": "52fe463cf2664540b3d8c1cc7285d23279aca14df8ec36ab904b82fe1a374860", "readme_url": "https://github.com/idaholab/bn-st10-arch/blob/main/README.md", "stars": 7, "targets": [ "binary", "firmware" ], "topics": [], "url": "https://github.com/idaholab/bn-st10-arch", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Browse, extract and preview Black Desert Online .paz archives, with parsers for BDO binary formats.", "description_language": "bilingual", "description_zh": "浏览、提取和预览 Black Desert Online 的 .paz 归档，包含 BDO 二进制格式解析器。", "full_name": "iSayZes/BDO-PAZ-Browser", "id": "scan-1227305155", "license": "MIT", "observed_at": "2026-10-16T01:37:19.946959Z", "pushed_at": "2026-10-15T20:46:22Z", "readme_sha256": "96505f5708b38ff1a97b7b5b096cac2f7c93dfe0ace9749e8638be2cbb65bea7", "readme_url": "https://github.com/iSayZes/BDO-PAZ-Browser/blob/main/README.md", "stars": 7, "targets": [ "binary", "game", "website" ], "topics": [ "bdo", "bdo-script", "black-desert-online", "black-desert-online-script", "blackdesertonline", "blackdeserttool", "file-formats", "game-data", "paz", "python", "pywebview", "reverse-engineering", "reverse-engineering-tools" ], "url": "https://github.com/iSayZes/BDO-PAZ-Browser", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Now you can 'disassemble' Reddit!", "description_language": "bilingual", "description_zh": "现在你也可以“反汇编” Reddit！", "full_name": "kokseen1/Reddida", "id": "scan-432191582", "license": null, "observed_at": "2026-10-16T07:14:54.134984Z", "pushed_at": "2022-10-24T08:38:58Z", "readme_sha256": "a6238adc72d852fdb0f481a8dc7b11148a3471c5a340982ff9d5d09ada67861f", "readme_url": "https://github.com/kokseen1/Reddida/blob/main/README.md", "stars": 7, "targets": [ "binary" ], "topics": [ "disassembler", "ida", "ida-pro", "idapro", "javascript", "js", "reddit", "reverse-engineering" ], "url": "https://github.com/kokseen1/Reddida", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "resource for learning & playing with radare", "description_language": "bilingual", "description_zh": "学习和探索 radare 的资源。", "full_name": "kr1tzy/r2Playground", "id": "scan-157311330", "license": null, "observed_at": "2026-10-16T01:37:11.348343Z", "pushed_at": "2019-12-03T23:40:58Z", "readme_sha256": "06f0ff7719315ae946f09e3982500eb849bfd76d64361a71603445e0cf5d72ec", "readme_url": "https://github.com/kr1tzy/r2Playground/blob/master/README.md", "stars": 7, "targets": [ "binary" ], "topics": [ "radare2", "reverse-engineering" ], "url": "https://github.com/kr1tzy/r2Playground", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Open-source engine & MCP server for AI to read, write, and generate native Axure RP 11 prototype (.rp) files. Zero dependencies. Independent project, not affiliated with Axure.", "description_language": "bilingual", "description_zh": "供 AI 读取、写入和生成原生 Axure RP 11 原型（.rp）文件的开源引擎和 MCP 服务器。零依赖。独立项目，与 Axure 无隶属关系。", "full_name": "LilZeeCN/zee-rp", "id": "scan-1415732841", "license": "MIT", "observed_at": "2026-10-18T13:14:49.126668Z", "pushed_at": "2026-10-13T02:43:48Z", "readme_sha256": "9875e0ec4e3c0cf85d2aaf85f28db7489a8bb0de3b17d8ade6465edb8a1386b0", "readme_url": "https://github.com/LilZeeCN/zee-rp/blob/main/README.md", "stars": 7, "targets": [ "app", "binary" ], "topics": [ "ai-agents", "axure", "cli", "design-tools", "mcp", "model-context-protocol", "prototyping", "reverse-engineering" ], "url": "https://github.com/LilZeeCN/zee-rp", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Local, capability-aware MCP server for authorized AI-assisted macOS and iOS debugging, Simulator/device workflows, Apple binary analysis, profiling, and reproducible evidence.", "description_language": "bilingual", "description_zh": "面向授权 AI 辅助 macOS／iOS 调试的本地、能力感知 MCP 服务，支持模拟器与设备工作流、Apple 二进制分析、性能分析及可复现证据。", "full_name": "MarlonJD/apple-debug-mcp", "id": "scan-1344381799", "license": "NOASSERTION", "observed_at": "2026-10-16T11:54:29.471716Z", "pushed_at": "2026-08-27T21:53:43Z", "readme_sha256": "aba03959a281402817b8ef705a44335f6a8e769824ab412f394dd521bb6341e3", "readme_url": "https://github.com/MarlonJD/apple-debug-mcp/blob/main/README.md", "stars": 7, "targets": [ "app", "binary" ], "topics": [ "ai-agents", "apple", "binary-analysis", "coredevice", "crash-analysis", "debugging", "developer-tools", "ios", "ios-simulator", "lldb", "lldb-dap", "macos", "mcp", "mcp-server", "model-context-protocol", "reverse-engineering", "swift", "symbolication", "xcode", "xctrace" ], "url": "https://github.com/MarlonJD/apple-debug-mcp", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Complete static recompilation of Aerobiz Supersonic for the Sega Genesis ", "description_language": "bilingual", "description_zh": "Sega Genesis 游戏 Aerobiz Supersonic 的完整静态重编译项目。", "full_name": "matiaszanolli/aerobiz-disasm", "id": "scan-1165145626", "license": null, "observed_at": "2026-10-16T11:55:19.169351Z", "pushed_at": "2026-02-28T19:38:02Z", "readme_sha256": "beb3629bfbf158fa5de81f9c4459515e81c527edf01281b19a675a1f096e52ff", "readme_url": "https://github.com/matiaszanolli/aerobiz-disasm/blob/master/README.md", "stars": 7, "targets": [ "binary" ], "topics": [ "decompilation", "disassembly", "reverse-engineering", "sega-genesis", "sega-mega-drive", "static-recompilation" ], "url": "https://github.com/matiaszanolli/aerobiz-disasm", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Amiga m68k asm exporter for Ghidra", "description_language": "bilingual", "description_zh": "用于 Ghidra 的 Amiga m68k 汇编导出器。", "full_name": "Pyrdacor/AmigaAsm", "id": "scan-477773175", "license": null, "observed_at": "2026-10-18T14:37:38.548054Z", "pushed_at": "2025-11-21T15:24:16Z", "readme_sha256": "eaa5da81cf9d6548399522f260e9d22f9f1a09db1008eab186e44c010037a55d", "readme_url": "https://github.com/Pyrdacor/AmigaAsm/blob/1e550290078d4547d1707575eaf3a401dcbd1f8f/README.md", "stars": 7, "targets": [ "binary" ], "topics": [ "ghidra", "ghidra-plugin", "ghidra-plugins" ], "url": "https://github.com/Pyrdacor/AmigaAsm", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Qi-NX — reverse-engineering agents for DeepSeek Harness A reverse-engineering toolkit for DSH: three selectable Agent presets, an MCP server exposing the analysis tools, and a dependency-light Python toolkit for binaries and firmware.", "description_language": "bilingual", "description_zh": "Qi-NX：面向 DeepSeek Harness 的逆向工程智能体。该 DSH 逆向工程工具集包含三个可选智能体预设、提供分析工具的 MCP 服务，以及用于二进制和固件的轻依赖 Python 工具集。", "full_name": "Shiyou-Qi/Qi-NX-Agent", "id": "scan-1415810215", "license": null, "observed_at": "2026-10-16T10:47:54.685948Z", "pushed_at": "2026-10-15T10:55:48Z", "readme_sha256": "51cf9271d572231a7ec4e52a416d6dfcaade229fc654331f5806eb1f54c7e52b", "readme_url": "https://github.com/Shiyou-Qi/Qi-NX-Agent/blob/main/README.md", "stars": 7, "targets": [ "binary", "firmware" ], "topics": [], "url": "https://github.com/Shiyou-Qi/Qi-NX-Agent", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Fast & clean & simple binary diffing plugin for IDA Pro 9.x – finds patched functions in seconds. No Diaphora slowness, no crashes, no bloat. Made by Sin.", "description_language": "bilingual", "description_zh": "适用于 IDA Pro 9.x 的快速、干净、简单的二进制差异比较插件，可在几秒内找到被修补的函数。没有 Diaphora 的缓慢体验，无崩溃、无冗余，由 Sin 制作。", "full_name": "devilofen/SinDiff", "id": "scan-1106601434", "license": "MIT", "observed_at": "2026-10-16T01:37:03.126799Z", "pushed_at": "2026-09-07T08:14:19Z", "readme_sha256": "ead07291ea14b3b20e39a5411efa638a878ae0df694a2661872737d1db3b608f", "readme_url": "https://github.com/devilofen/SinDiff/blob/main/README.md", "stars": 6, "targets": [ "binary" ], "topics": [ "binary-diffing", "cybersecurity", "cybersecurity-tools", "diff", "diffing", "ida", "ida-plugin", "idapro", "idapython-plugin", "reverse-engineering", "reverse-engineering-tools" ], "url": "https://github.com/devilofen/SinDiff", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Micro Machines (PC, 1994) rewritten in TypeScript from the disassembly, running natively in the browser. No emulator. Bring your own copy.", "description_language": "bilingual", "description_zh": "根据反汇编结果用 TypeScript 重写 Micro Machines（PC，1994），在浏览器中原生运行。不使用模拟器，需自备游戏副本。", "full_name": "hivvu/scale-miniatures", "id": "scan-1369625016", "license": "GPL-3.0", "observed_at": "2026-10-18T14:41:33.233269Z", "pushed_at": "2026-09-18T13:39:18Z", "readme_sha256": "5dc76f39b6248c402deab72205054d9bc0cf49238d914788c8ae5dbd61411e94", "readme_url": "https://github.com/hivvu/scale-miniatures/blob/28aa581b18af653145935f818a58fece1836f2fc/README.md", "stars": 6, "targets": [ "binary", "game", "website" ], "topics": [ "browser-game", "codemasters", "dos-games", "game-reimplementation", "micro-machines", "opl2", "reverse-engineering", "typescript", "web-audio" ], "url": "https://github.com/hivvu/scale-miniatures", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Desktop app for analysing iOS and macOS binaries. View headers, strings, classes, symbols, security findings, and more.", "description_language": "bilingual", "description_zh": "用于分析 iOS 与 macOS 二进制的桌面应用，可查看文件头、字符串、类、符号、安全发现等信息。", "full_name": "iCrazeiOS/AppInspect", "id": "scan-1200813362", "license": null, "observed_at": "2026-10-16T11:54:22.029050Z", "pushed_at": "2026-10-13T14:09:35Z", "readme_sha256": "cab87e8d7264412f7f971d7515d65257457aef267541d285eaecc0c3a287cc41", "readme_url": "https://github.com/iCrazeiOS/AppInspect/blob/master/README.md", "stars": 6, "targets": [ "app", "binary" ], "topics": [ "darwin", "dylib", "hex-viewer", "ios", "ios-research", "ipa", "macho", "macos", "mcp", "pentesting", "reverse-engineering", "typescript" ], "url": "https://github.com/iCrazeiOS/AppInspect", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Reverse engineering and analysis of binary data", "description_language": "bilingual", "description_zh": "二进制数据的逆向工程与分析", "full_name": "Jubulani/carta", "id": "scan-163424291", "license": "GPL-3.0", "observed_at": "2026-10-16T07:15:05.450985Z", "pushed_at": "2023-01-07T03:51:06Z", "readme_sha256": "01274979533647cf366867b04fde3162a2cc3af745440ab0354148478a6edaf9", "readme_url": "https://github.com/Jubulani/carta/blob/master/README.md", "stars": 6, "targets": [ "binary" ], "topics": [ "reverse-engineering", "rust", "visualization", "webassembly" ], "url": "https://github.com/Jubulani/carta", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Enables the development of python ghidra plugins through pyghidra without Java.", "description_language": "bilingual", "description_zh": "通过 pyghidra 开发 Python Ghidra 插件，无需 Java。", "full_name": "nightwing-us/pyghidra-decaf", "id": "scan-1246004766", "license": "Apache-2.0", "observed_at": "2026-10-18T14:37:43.148168Z", "pushed_at": "2026-07-25T07:55:32Z", "readme_sha256": "04cfbbcba2782c2115dc1d68960bd5b0b4cc3ebbc4e40bfed8cee1d80b850a86", "readme_url": "https://github.com/nightwing-us/pyghidra-decaf/blob/1a9d91d1f7784bab468670ad0520e23b70a77c9d/README.md", "stars": 6, "targets": [ "binary" ], "topics": [ "ghidra", "ghidra-plugin", "ghidra-plugins", "ghidra-python", "pyghidra", "pyhidra", "python", "reverse-engineering" ], "url": "https://github.com/nightwing-us/pyghidra-decaf", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Reverse-engineering toolchain for Denso SH705x ECUs featuring Ghidra scripts for calibration map extraction and a standalone PyQt6 viewer", "description_language": "bilingual", "description_zh": "面向 Denso SH705x ECU 的逆向工程工具链，包含用于提取标定表的 Ghidra 脚本和独立 PyQt6 查看器。", "full_name": "PabloSoage/Denso-ECU-Toolkit", "id": "scan-1209679024", "license": "GPL-3.0", "observed_at": "2026-10-16T01:36:22.153963Z", "pushed_at": "2026-09-29T16:38:34Z", "readme_sha256": "4802c0c9e9887810806ee53ada1bbc641baac33dda5164fb09a4a7714f15523b", "readme_url": "https://github.com/PabloSoage/Denso-ECU-Toolkit/blob/main/Readme.md", "stars": 6, "targets": [ "binary", "firmware" ], "topics": [ "automotive", "binary-analysis", "calibration", "denso", "ecu", "ecu-tuning", "firmware-analysis", "ghidra", "pyqt6", "python", "reverse-engineering", "sh705x" ], "url": "https://github.com/PabloSoage/Denso-ECU-Toolkit", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "🏗️ Template for building Revenge plugins", "description_language": "bilingual", "description_zh": "🏗️ 用于构建 Revenge 插件的模板。", "full_name": "revenge-mod/revenge-plugin-template", "id": "scan-1320169230", "license": "GPL-3.0", "observed_at": "2026-10-16T11:54:52.254831Z", "pushed_at": "2026-10-11T12:34:41Z", "readme_sha256": "64ecb210db603f414ab84e0db071b5d0cf64bda18b3769a49fe2a02ddf15da03", "readme_url": "https://github.com/revenge-mod/revenge-plugin-template/blob/main/README.md", "stars": 6, "targets": [ "binary" ], "topics": [ "discord", "react-native", "reverse-engineering" ], "url": "https://github.com/revenge-mod/revenge-plugin-template", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A Ghidra script to paste a raw blob into an analysed binary", "description_language": "bilingual", "description_zh": "将原始数据块写入已分析二进制文件的 Ghidra 脚本。", "full_name": "schlafwandler/ghidra_WriteBlob", "id": "scan-226532736", "license": null, "observed_at": "2026-10-18T14:37:43.147580Z", "pushed_at": "2019-12-07T15:56:52Z", "readme_sha256": "4755e0cead562ceb5593c0c6e0fe11e39cf8cbf2bf98357cf4d45e17e3b9ed5c", "readme_url": "https://github.com/schlafwandler/ghidra_WriteBlob/blob/60654110ad1c5a2130895596e95498e7ad37a997/readme.md", "stars": 6, "targets": [ "binary" ], "topics": [ "binary", "ghidra", "ghidra-extension", "ghidra-plugin", "ghidra-plugins", "patching" ], "url": "https://github.com/schlafwandler/ghidra_WriteBlob", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "radare2 script to fix disasm with call tricks for strings ", "description_language": "bilingual", "description_zh": "用于修正通过 call 技巧处理字符串时反汇编结果的 radare2 脚本。", "full_name": "therealdreg/call_trick_r2pipe", "id": "scan-314521729", "license": "MIT", "observed_at": "2026-10-16T01:37:11.686566Z", "pushed_at": "2023-08-11T06:22:26Z", "readme_sha256": "498b528504a30a16178211a9675e6757333b3d53b9158515cac12c73b9cadb11", "readme_url": "https://github.com/therealdreg/call_trick_r2pipe/blob/main/README.md", "stars": 6, "targets": [ "binary" ], "topics": [ "debugging", "debugging-tool", "r2pipe", "radare2", "reverse-engineering" ], "url": "https://github.com/therealdreg/call_trick_r2pipe", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "I created r2-syscall-printer (radare r2pipe script) because I need now Linux-kernel interface call convention support (x86 & x86_64): %rdi, %rsi, %rdx, %r10, %r8, %r9. Also you can use this tool as standalone-app to print syscall table info", "description_language": "bilingual", "description_zh": "r2-syscall-printer 是一个 radare r2pipe 脚本，旨在支持 Linux 内核接口调用约定（x86 和 x86_64）：%rdi、%rsi、%rdx、%r10、%r8、%r9。也可作为独立应用打印系统调用表信息。", "full_name": "therealdreg/r2-syscall-printer", "id": "scan-316436619", "license": "MIT", "observed_at": "2026-10-16T01:37:11.828582Z", "pushed_at": "2023-08-11T06:22:51Z", "readme_sha256": "ef521a24ff0970ea0b0b24c5182fce123bed3cd957a3c284b469bde2e91bc1e7", "readme_url": "https://github.com/therealdreg/r2-syscall-printer/blob/main/README.md", "stars": 6, "targets": [ "app", "binary" ], "topics": [ "debugging", "debugging-tool", "linux-kernel", "r2pipe", "radare2", "radare2-plugin", "reverse-engineering", "standalone-app", "syscall-table" ], "url": "https://github.com/therealdreg/r2-syscall-printer", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": " Purpose-built reverse engineering platform for Nintendo Switch firmware analysis. Parses NSO binaries, decodes AArch64 instructions, maps syscalls, and diffs firmware versions — designed to find what Ghidra can't. ", "description_language": "bilingual", "description_zh": "专为 Nintendo Switch 固件分析构建的逆向工程平台，可解析 NSO 二进制、解码 AArch64 指令、映射系统调用并比较固件版本，旨在发现 Ghidra 找不到的内容。", "full_name": "TomOstt/SwitchBlade", "id": "scan-1192904668", "license": null, "observed_at": "2026-10-16T10:47:55.897934Z", "pushed_at": "2026-04-06T17:01:50Z", "readme_sha256": "b1f21a2776484557a8dc5d13e9b41366dec80e4f366919b6433b91c0c1f151a6", "readme_url": "https://github.com/TomOstt/SwitchBlade/blob/main/README.md", "stars": 6, "targets": [ "binary", "firmware" ], "topics": [ "exploit", "nintendo", "nintendo-hacking", "nintendo-switch", "reverse", "reverseengineering" ], "url": "https://github.com/TomOstt/SwitchBlade", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A structured reverse-engineering field notebook for binary analysis, exploitation, mobile, firmware, wireless, and defensive research.", "description_language": "bilingual", "description_zh": "结构化的逆向工程实践笔记，涵盖二进制分析、漏洞利用、移动端、固件、无线及防御研究。", "full_name": "victorQ8/reverse-engineering-vault", "id": "scan-1327007844", "license": "NOASSERTION", "observed_at": "2026-10-16T10:47:55.742166Z", "pushed_at": "2026-08-09T07:58:17Z", "readme_sha256": "cdcf1dde4646246f289350ffd03deb779e62152697997b5fcabee8e6d8b1a924", "readme_url": "https://github.com/victorQ8/reverse-engineering-vault/blob/main/README.md", "stars": 6, "targets": [ "app", "binary", "firmware" ], "topics": [ "android-security", "binary-analysis", "bluetooth-low-energy", "exploit-development", "firmware", "malware-analysis", "obsidian", "reverse-engineering" ], "url": "https://github.com/victorQ8/reverse-engineering-vault", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "iOS 27 kernelcache RE: SEP dispatch map, AMFI diff, Ghidra workflow", "description_language": "bilingual", "description_zh": "iOS 27 内核缓存逆向工程：SEP 分发映射、AMFI 差异比较及 Ghidra 工作流", "full_name": "vvirei333/ABrake27", "id": "scan-1401536083", "license": null, "observed_at": "2026-10-16T11:54:35.927107Z", "pushed_at": "2026-10-06T18:13:24Z", "readme_sha256": "58a8ab1f625cf1f5b10b698a53df7448bb33e105cb1af908206a1cd123278fda", "readme_url": "https://github.com/vvirei333/ABrake27/blob/main/README.md", "stars": 6, "targets": [ "app", "binary" ], "topics": [ "ghidra", "ios", "kernelcache", "reverse-engineering", "security-research" ], "url": "https://github.com/vvirei333/ABrake27", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Hacked script to show similarities between two samples using radare2 framework.", "description_language": "bilingual", "description_zh": "使用 radare2 框架展示两个样本相似性的修改版脚本。", "full_name": "W3ndige/r2sim", "id": "scan-361083132", "license": "GPL-3.0", "observed_at": "2026-10-16T01:37:11.607194Z", "pushed_at": "2021-04-27T20:48:24Z", "readme_sha256": "fd90bb529c69ef0d85056e64a7ab1e0bf781e87b8792f3ba2f33a38d0e760104", "readme_url": "https://github.com/W3ndige/r2sim/blob/master/README.md", "stars": 6, "targets": [ "binary" ], "topics": [ "cybersecurity", "malware", "malware-analysis", "radare2", "similiarity" ], "url": "https://github.com/W3ndige/r2sim", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A cargo subcommand that displays ghidra function output through the use of the {rizin, radare2}-ghidra project", "description_language": "bilingual", "description_zh": "一个 Cargo 子命令，通过 {rizin, radare2}-ghidra 项目显示 Ghidra 函数输出。", "full_name": "wcampbell0x2a/cargo-decompile", "id": "scan-446690696", "license": null, "observed_at": "2026-10-16T01:37:11.454131Z", "pushed_at": "2025-01-20T02:05:36Z", "readme_sha256": "89a59441c0bcbdc5fd569771424df5f0e6f710eef05528fcd3e36dc33b197f8c", "readme_url": "https://github.com/wcampbell0x2a/cargo-decompile/blob/master/README.md", "stars": 6, "targets": [ "binary" ], "topics": [ "decompiler", "ghidra", "radare2", "rizin", "rust" ], "url": "https://github.com/wcampbell0x2a/cargo-decompile", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Performs firmware analysis on a given binary file.", "description_language": "bilingual", "description_zh": "对给定二进制文件执行固件分析。", "full_name": "ericyoc/iot_device_firmware_analysis_poc", "id": "scan-794758873", "license": null, "observed_at": "2026-10-16T01:36:22.474808Z", "pushed_at": "2024-09-04T16:08:43Z", "readme_sha256": "ea24145034ee7b05070c549fa3155392ced650635912f58547c6b99f9b9ab25c", "readme_url": "https://github.com/ericyoc/iot_device_firmware_analysis_poc/blob/main/README.md", "stars": 5, "targets": [ "binary", "firmware" ], "topics": [ "binary-file", "firmware-analysis", "iot-device", "reverse-engineering", "vulnerability-analysis" ], "url": "https://github.com/ericyoc/iot_device_firmware_analysis_poc", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A fully self-contained, isolated Ghidra 12.1.2 installation bundled with GhidraMCP, lx-loader, GhidraDosToolbox, and MCP bridge", "description_language": "bilingual", "description_zh": "完全自包含、隔离的 Ghidra 12.1.2 安装包，集成 GhidraMCP、lx-loader、GhidraDosToolbox 及 MCP 桥接。", "full_name": "felipe-dos-santos81/ghidra-bundle", "id": "scan-1358635228", "license": "MIT", "observed_at": "2026-10-18T14:37:43.149724Z", "pushed_at": "2026-10-10T20:52:20Z", "readme_sha256": "3cc6f9a20e076cf3b5e5e93f84ffa3ba04571926e0b66fd3b394ad47a68adabf", "readme_url": "https://github.com/felipe-dos-santos81/ghidra-bundle/blob/505c430f806ba88f4cf753a47f7e965e91b6cb6a/README.md", "stars": 5, "targets": [ "binary" ], "topics": [ "decompilation", "decompilation-pipeline", "decompiled-sources", "decompiler", "decompiler-engine", "decompiling", "ghidra", "ghidra-extension", "ghidra-plugin", "mcp", "mcp-server", "mcp-tools", "reverse-engineering" ], "url": "https://github.com/felipe-dos-santos81/ghidra-bundle", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "AIDA-AUDIT: IDA Pro + MCP + AI agents for automated binary audit.", "description_language": "bilingual", "description_zh": "AIDA-AUDIT：结合 IDA Pro、MCP 和 AI 智能体进行自动化二进制审计。", "full_name": "fire3/aida-audit", "id": "scan-1128003463", "license": "MIT", "observed_at": "2026-10-18T14:38:09.836509Z", "pushed_at": "2026-06-15T12:51:45Z", "readme_sha256": "48c6a4fd29508521700cad85d581d5c2f0104935c19a46cf1af81f6853408252", "readme_url": "https://github.com/fire3/aida-audit/blob/d7310ef991066fc66550ccc2474b545961d9b3a7/README.md", "stars": 5, "targets": [ "binary" ], "topics": [ "ai", "ai-agents", "ghidra", "ida", "idapro", "mcp", "mcp-server", "model-context-protocol", "reverse-engineering" ], "url": "https://github.com/fire3/aida-audit", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Run OFRAK remotely to modify and repack binaries from your browser", "description_language": "bilingual", "description_zh": "远程运行 OFRAK，从浏览器修改和重新打包二进制文件。", "full_name": "jstrieb/remote-ofrak", "id": "scan-634742092", "license": "MIT", "observed_at": "2026-10-16T01:36:22.392822Z", "pushed_at": "2023-05-01T06:55:06Z", "readme_sha256": "047e5079e12c82a62c4787cdab97e25f0ee75f9951952ab42101c61f4b7a914d", "readme_url": "https://github.com/jstrieb/remote-ofrak/blob/master/README.md", "stars": 5, "targets": [ "binary", "firmware", "website" ], "topics": [ "binary-analysis", "ctf", "ctf-tools", "firmware-analysis", "reverse-engineering" ], "url": "https://github.com/jstrieb/remote-ofrak", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "goodname.cfg for IDA Pro", "description_language": "bilingual", "description_zh": "用于 IDA Pro 的 goodname.cfg。", "full_name": "Mizari/idagoodnames", "id": "scan-432624495", "license": null, "observed_at": "2026-10-18T14:38:09.838306Z", "pushed_at": "2021-12-02T11:33:52Z", "readme_sha256": "6b2f09ab1e9fcf4674b02b7f4a6e85ed26b732e6515890ee21c822a01a66e9ba", "readme_url": "https://github.com/Mizari/idagoodnames/blob/7184d5718d0d019301a96f2978356fd651ce8487/README.md", "stars": 5, "targets": [ "binary" ], "topics": [ "ida", "idapro", "reverse-engineering" ], "url": "https://github.com/Mizari/idagoodnames", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "MCP server exposing IDA reverse-engineering tools to LLM clients.", "description_language": "bilingual", "description_zh": "将 IDA 逆向工程工具提供给 LLM 客户端的 MCP 服务器。", "full_name": "nightwing-us/mcpyida", "id": "scan-1252701919", "license": "Apache-2.0", "observed_at": "2026-10-18T14:38:09.837470Z", "pushed_at": "2026-08-21T16:02:30Z", "readme_sha256": "c62d7c237b886d287fd0267e8910d93d5b1184ef3439cbdb8911a6270f61d48b", "readme_url": "https://github.com/nightwing-us/mcpyida/blob/e6d36dbd9cdc48d13a8b9af734ee4389039deb98/README.md", "stars": 5, "targets": [ "binary" ], "topics": [ "binary-analysis", "ida", "idapro", "idapython", "llm", "mcp", "reverse-engineering" ], "url": "https://github.com/nightwing-us/mcpyida", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Repository to contain my notes from my self-study of binary exploitation and reverse engineering.", "description_language": "bilingual", "description_zh": "保存作者自学二进制漏洞利用和逆向工程笔记的仓库。", "full_name": "one2blame/the-dark-arts", "id": "scan-439673110", "license": null, "observed_at": "2026-10-16T01:37:03.314372Z", "pushed_at": "2022-04-02T13:39:20Z", "readme_sha256": "1cd1a1d33f8ab973df09c17899720467637797ed7defb3c5c1cc5985a1949dc4", "readme_url": "https://github.com/one2blame/the-dark-arts/blob/main/README.md", "stars": 5, "targets": [ "binary" ], "topics": [ "binary-diffing", "binary-exploitation", "ctf", "fuzzing", "reverse-engineering", "symbolic-execution" ], "url": "https://github.com/one2blame/the-dark-arts", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "🛡️ The most comprehensive deobfuscation framework for Ghidra — OLLVM/Tigress deflattening, 60 MBA rules with Z3 proof, opaque predicates, BCF removal, string decryption, VM devirtualization, full pipeline. CLI + Plugin + Analyzer.", "description_language": "bilingual", "description_zh": "🛡️ 最全面的 Ghidra 去混淆框架：OLLVM／Tigress 控制流去平坦化、60 条经 Z3 证明的 MBA 规则、不透明谓词、BCF 移除、字符串解密、虚拟机去虚拟化及完整处理流程。提供 CLI、插件和分析器。", "full_name": "overkazaf/D810G", "id": "scan-1405395929", "license": "Apache-2.0", "observed_at": "2026-10-18T14:37:43.151409Z", "pushed_at": "2026-10-09T06:30:38Z", "readme_sha256": "d7f61dbfb1209330501ac87281ea83785b9f940c051af8049f42a4c5060fe153", "readme_url": "https://github.com/overkazaf/D810G/blob/ebe120a413560a786e6150355102c9655e86e2fb/README.md", "stars": 5, "targets": [ "binary" ], "topics": [ "binary-analysis", "control-flow-flattening", "deobfuscation", "ghidra", "ghidra-plugin", "ida-pro-alternative", "mba-simplification", "ollvm", "reverse-engineering", "security-research", "symbolic-execution", "tigress", "unicorn-engine", "z3" ], "url": "https://github.com/overkazaf/D810G", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Modern Windows UI plugin for IDA Pro 9.3: rounded panels, dark styling, customizable fonts, and persistent appearance settings.", "description_language": "bilingual", "description_zh": "适用于 IDA Pro 9.3 的现代 Windows 界面插件：圆角面板、深色样式、可定制字体及持久化外观设置。", "full_name": "PoP-Lin/IDAPro-MuiLs", "id": "scan-1377219845", "license": "MIT", "observed_at": "2026-10-18T14:38:09.838130Z", "pushed_at": "2026-10-01T20:14:04Z", "readme_sha256": "421a4b4c6efddcdf7c28f2bed4ac9668e9af4fef61ded80b09b9051eabebee0c", "readme_url": "https://github.com/PoP-Lin/IDAPro-MuiLs/blob/8fe1d7789cf38990af0353cc714ee7966e9419af/README.md", "stars": 5, "targets": [ "binary" ], "topics": [ "dark-theme", "ida-plugin", "ida-pro", "idapro", "idapython", "pyside6", "python", "qt6", "reverse-engineering", "ui-customization", "windows11" ], "url": "https://github.com/PoP-Lin/IDAPro-MuiLs", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Decompiler for compiled iOS/macOS interface files (.nib, .storyboardc): object tree, wiring, custom classes, navigation graphs", "description_language": "bilingual", "description_zh": "针对已编译 iOS/macOS 界面文件（.nib、.storyboardc）的反编译器，可恢复对象树、连接关系、自定义类和导航图。", "full_name": "tokenbleed/nibkit", "id": "scan-1334437091", "license": "MIT", "observed_at": "2026-10-16T11:54:28.723217Z", "pushed_at": "2026-10-09T15:51:06Z", "readme_sha256": "0396c9c0f3a21429f9cb76867d360b51b60cc489828d1c25b139b92448c60f53", "readme_url": "https://github.com/tokenbleed/nibkit/blob/master/README.adoc", "stars": 5, "targets": [ "app" ], "topics": [ "cli", "decompiler", "go", "ios", "macos", "mcp", "mcp-server", "nib", "reverse-engineering", "storyboard" ], "url": "https://github.com/tokenbleed/nibkit", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A Python-based tool to synchronize Ghidra and x64dbg/x32dbg with minimal setup.", "description_language": "bilingual", "description_zh": "基于 Python 的工具，以少量配置同步 Ghidra 与 x64dbg／x32dbg。", "full_name": "totekuh/x64dra", "id": "scan-970375978", "license": null, "observed_at": "2026-10-18T14:37:43.150207Z", "pushed_at": "2025-04-21T23:58:25Z", "readme_sha256": "de56c64aebfacb3c6f5ce763f5fcd09bc165a0111edc9c9209021331d7febe32", "readme_url": "https://github.com/totekuh/x64dra/blob/771a823093250ad43ad2ee634c6d9ce1f62aae96/README.md", "stars": 5, "targets": [ "binary" ], "topics": [ "exploit-development", "ghidra", "ghidra-extension", "ghidra-plugin", "ghidra-scripts", "pip3", "python3", "reverse-engineering", "x64dbg", "x64dbg-plugin", "x64dbg-tools" ], "url": "https://github.com/totekuh/x64dra", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Security Research Suite for macOS binaries in Hopper Disassembler", "description_language": "bilingual", "description_zh": "用于在 Hopper Disassembler 中研究 macOS 二进制文件的安全研究套件。", "full_name": "Zeyad-Azima/HopperSRK", "id": "scan-1114060911", "license": "MIT", "observed_at": "2026-10-18T14:37:43.148839Z", "pushed_at": "2025-12-10T21:29:17Z", "readme_sha256": "f2fb8866017e5fe69d79598f7055abb1c4f3d2ab08f10374ca267245c58d3ed9", "readme_url": "https://github.com/Zeyad-Azima/HopperSRK/blob/c4e14e0b926f67d4d7fee5514faacb6070485bb7/README.md", "stars": 5, "targets": [ "binary" ], "topics": [ "exploit-development", "ghidra", "ghidra-extension", "ghidra-plugin", "hopper", "hopper-disassembler", "hopper-plugins", "idaplugin", "idapro", "macos", "malware-analysis", "malware-research", "reverse-engineering", "vulnerability" ], "url": "https://github.com/Zeyad-Azima/HopperSRK", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "This repository contains the dumped and deobfuscated version of GandCrabv5 JS Binary Dropper, along with the webpage files dropped on a GandCrab v5.1 infected system. The goal of this Repository is to attempt to make the files easier to work with and understand.", "description_language": "bilingual", "description_zh": "本仓库收录 GandCrab v5 JavaScript 二进制投放器的转储与去混淆版本，以及 GandCrab v5.1 感染系统上投放的网页文件，旨在让这些文件更易于处理和理解。", "full_name": "a0zhar/GandCrab", "id": "scan-545120002", "license": null, "observed_at": "2026-10-16T07:14:47.563301Z", "pushed_at": "2023-10-06T15:08:59Z", "readme_sha256": "55b0617410f964dd4af70c258243995f70079c2c9cd0206a850b0bb3320121a9", "readme_url": "https://github.com/a0zhar/GandCrab/blob/main/README.md", "stars": 4, "targets": [ "binary" ], "topics": [ "deobfuscation", "gandcrab", "gandcrabv5", "javascript", "malware", "ransomware", "reverse-engineering", "virus" ], "url": "https://github.com/a0zhar/GandCrab", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Windows x64 Unity IL2CPP metadata workbench for static dumping, package inspection, cross-version migration, and deterministic C++20 SDK generation with UniResolver.", "description_language": "bilingual", "description_zh": "面向 Windows x64 的 Unity IL2CPP 元数据工作台，提供静态转储、包检查、跨版本迁移，以及基于 UniResolver 的确定性 C++20 SDK 生成。", "full_name": "AlembicOrg/UniDumper", "id": "scan-1350027807", "license": "GPL-3.0", "observed_at": "2026-10-16T07:15:13.222861Z", "pushed_at": "2026-09-05T20:35:38Z", "readme_sha256": "5ac636d0c26ca14d1279207b9d3dba070f3749d6bd161fafc29cdc51b5278aba", "readme_url": "https://github.com/AlembicOrg/UniDumper/blob/main/README.md", "stars": 4, "targets": [ "binary", "game" ], "topics": [ "cpp20", "dumper", "il2cpp", "il2cpp-dumper", "il2cpp-modding", "metadata", "reverse-engineering", "sdk-generator", "uniresolver", "unity", "unity3d", "windows" ], "url": "https://github.com/AlembicOrg/UniDumper", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Annotated disassembly of Temptations (Topo Soft, MSX, 1988). All 40,449 bytes of the game are explained, 100%, reproducible byte for byte.", "description_language": "bilingual", "description_zh": "Temptations（Topo Soft，MSX，1988）的带注释反汇编。游戏的 40,449 字节得到 100% 解释，可逐字节复现。", "full_name": "antxiko/temptations-disassembly", "id": "scan-1322641383", "license": "NOASSERTION", "observed_at": "2026-10-18T13:13:43.614718Z", "pushed_at": "2026-10-14T14:31:52Z", "readme_sha256": "205cc6aacf1760d748845aaf4e4c83a8cc18c2e566f290423d54b4aa618aef78", "readme_url": "https://github.com/antxiko/temptations-disassembly/blob/main/README.md", "stars": 4, "targets": [ "binary", "game" ], "topics": [ "assembly", "disassembly", "game-preservation", "msx", "msx1", "retrocomputing", "reverse-engineering", "spanish-software", "topo-soft", "z80" ], "url": "https://github.com/antxiko/temptations-disassembly", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Fugue database importer and exporter for IDA Pro.", "description_language": "bilingual", "description_zh": "用于 IDA Pro 的 Fugue 数据库导入器与导出器。", "full_name": "fugue-re/fugue-idapro", "id": "scan-386959250", "license": "MIT", "observed_at": "2026-10-18T14:38:09.839130Z", "pushed_at": "2023-06-02T01:04:19Z", "readme_sha256": "be100458641db62f3e3286fb875a9eaa48efca50619bbf1373d68503801003e4", "readme_url": "https://github.com/fugue-re/fugue-idapro/blob/039fe3063b820281f87e72ab7ae140b46a0b5fbc/README.md", "stars": 4, "targets": [ "binary" ], "topics": [ "binary-analysis", "disassembly", "idapro", "reverse-engineering" ], "url": "https://github.com/fugue-re/fugue-idapro", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Reverse engineering the Star NX-1020 9-pin dot-matrix printer: extracted resident fonts, labeled firmware disassembly, ROM maps, and full documentation", "description_language": "bilingual", "description_zh": "对 Star NX-1020 九针点阵打印机的逆向工程，包含提取的内置字体、带标签的固件反汇编、ROM 映射和完整文档。", "full_name": "keithgh1/star-nx1020-re", "id": "scan-1327994036", "license": "MIT", "observed_at": "2026-10-16T01:36:23.262886Z", "pushed_at": "2026-08-29T18:25:05Z", "readme_sha256": "a319b5036bac3d42354c1b47da0e7346db8744720038e2c1c30b13f878c8c99c", "readme_url": "https://github.com/keithgh1/star-nx1020-re/blob/main/README.md", "stars": 4, "targets": [ "binary", "firmware" ], "topics": [ "6502", "dot-matrix-printer", "firmware-analysis", "fonts", "retrocomputing", "reverse-engineering", "star-micronics" ], "url": "https://github.com/keithgh1/star-nx1020-re", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Matching decompilation research for StarCraft: Brood War 1.16.1 — reproducible x86 function reconstruction and exact byte comparison.", "description_language": "bilingual", "description_zh": "StarCraft: Brood War 1.16.1 的匹配反编译研究：可复现的 x86 函数重建和精确字节比较。", "full_name": "nicodlz/starcraft-match", "id": "scan-1400852920", "license": "MIT", "observed_at": "2026-10-18T13:14:14.666220Z", "pushed_at": "2026-10-06T18:04:38Z", "readme_sha256": "ac495a5718365e18a4c673022c06094ab36878981237bf62ae91e02f7b9ca030", "readme_url": "https://github.com/nicodlz/starcraft-match/blob/main/README.md", "stars": 4, "targets": [ "binary" ], "topics": [ "brood-war", "c", "matching-decompilation", "reverse-engineering", "starcraft", "x86" ], "url": "https://github.com/nicodlz/starcraft-match", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "⚡ Autonomous reverse engineering engine & Model Context Protocol (MCP) server for binaries and applications in Systems Rust", "description_language": "bilingual", "description_zh": "⚡ 使用系统级 Rust 构建的自主逆向工程引擎与模型上下文协议（MCP）服务器，面向二进制文件和应用", "full_name": "ronitgupta138/rev-core", "id": "scan-1416818659", "license": "MIT", "observed_at": "2026-10-16T07:14:58.222759Z", "pushed_at": "2026-10-13T11:44:59Z", "readme_sha256": "e6f0f2ea6863b1b78afe8dea89e9f5cf4c2985485c700ce4695e9d92f05dda59", "readme_url": "https://github.com/ronitgupta138/rev-core/blob/main/README.md", "stars": 4, "targets": [ "app", "binary" ], "topics": [ "ai-agents", "asar", "binary-analysis", "claude-code", "disassembler", "electron", "elf", "forensics", "mcp", "mcp-server", "reverse-engineering", "rust", "security", "static-analysis" ], "url": "https://github.com/ronitgupta138/rev-core", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": " The SandBlaster Plugin is a sophisticated extension for Ghidra that seamlessly integrates the functionalities of the SandBlaster tool into the Ghidra environment.", "description_language": "bilingual", "description_zh": "SandBlaster 是一个先进的 Ghidra 扩展，将 SandBlaster 工具的功能无缝集成到 Ghidra 环境中。", "full_name": "shark4ce/Ghidra-SandBlaster-Plugin", "id": "scan-677411461", "license": null, "observed_at": "2026-10-16T11:54:17.674995Z", "pushed_at": "2023-09-05T14:47:02Z", "readme_sha256": "bd20b2d30b3ab87c52c6f6990f1a19c9c7e35c7a4d881237700e96c6747bd467", "readme_url": "https://github.com/shark4ce/Ghidra-SandBlaster-Plugin/blob/main/README.md", "stars": 4, "targets": [ "app", "binary" ], "topics": [ "ghidra", "ghidra-plugin", "ios", "macos", "malus-security", "reverse-engineering", "sandblaster", "sandbox-profiles", "sbpl" ], "url": "https://github.com/shark4ce/Ghidra-SandBlaster-Plugin", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Static recompilation of Shufflepuck Cafe (Broderbund, 1988): the copy-protected 68k Mac binary reverse-engineered, unpacked byte-exact, and lifted to native C. Runs through a Toolbox HAL over SDL2.", "description_language": "bilingual", "description_zh": "Shufflepuck Cafe（Broderbund，1988）的静态重编译：对带复制保护的 68k Mac 二进制文件进行逆向工程，逐字节精确解包并转换为原生 C。通过基于 SDL2 的 Toolbox HAL 运行。", "full_name": "sp00nznet/shufflepuck-cafe", "id": "scan-1290696498", "license": "MIT", "observed_at": "2026-10-18T13:13:33.094166Z", "pushed_at": "2026-10-11T17:07:12Z", "readme_sha256": "833ff2115350542fa5ee018596a7811d7edd812c20af5e2cdbf84e53f0feabf1", "readme_url": "https://github.com/sp00nznet/shufflepuck-cafe/blob/main/README.md", "stars": 4, "targets": [ "binary", "game" ], "topics": [ "68k", "broderbund", "game-preservation", "macintosh", "retrogaming", "reverse-engineering", "shufflepuck", "static-recompilation" ], "url": "https://github.com/sp00nznet/shufflepuck-cafe", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "macho_re is a lightweight lib for parsing Mach-O binaries.", "description_language": "bilingual", "description_zh": "macho_re 是一个用于解析 Mach-O 二进制文件的轻量级库。", "full_name": "tony-go/macho_re", "id": "scan-894411545", "license": null, "observed_at": "2026-10-16T11:54:18.571831Z", "pushed_at": "2025-01-08T19:23:21Z", "readme_sha256": "377154e1e5127d057087594113e188599d4c8bc4da5b8aa414ed3a9371c9ffbc", "readme_url": "https://github.com/tony-go/macho_re/blob/main/README.md", "stars": 4, "targets": [ "app", "binary" ], "topics": [ "binary-analysis", "c", "ios", "mach-o", "macos", "reverse-engineering" ], "url": "https://github.com/tony-go/macho_re", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "IDA scripts for the REshare reverse-engineering exchange format", "description_language": "bilingual", "description_zh": "面向 REshare 逆向工程交换格式的 IDA 脚本。", "full_name": "v-p-b/reshare-ida", "id": "scan-1115688514", "license": null, "observed_at": "2026-10-18T14:38:09.840305Z", "pushed_at": "2025-12-30T08:55:18Z", "readme_sha256": "8c6caee6a9baf6cb1ea46635840002d8293ec716086e1cb25755ec688d0653a1", "readme_url": "https://github.com/v-p-b/reshare-ida/blob/b164c8f281a2fc128469b13399db1a81ee915d26/README.md", "stars": 4, "targets": [ "binary" ], "topics": [ "ida", "idapro", "reverse-engineering", "reverseengineering" ], "url": "https://github.com/v-p-b/reshare-ida", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Patch iOS binaries to run on macOS", "description_language": "bilingual", "description_zh": "修补 iOS 二进制文件，使其在 macOS 上运行。", "full_name": "Xplo8E/ios2catalyst", "id": "scan-1143186966", "license": null, "observed_at": "2026-10-16T11:54:21.471334Z", "pushed_at": "2026-01-27T09:15:58Z", "readme_sha256": "ce648ca951dd490e3a537b6bdbf38ba5d11f9e9c2167dc88ad449e7fb52407a6", "readme_url": "https://github.com/Xplo8E/ios2catalyst/blob/main/README.md", "stars": 4, "targets": [ "app", "binary" ], "topics": [ "ios", "macos", "reverse-engineering" ], "url": "https://github.com/Xplo8E/ios2catalyst", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "BMK4 (Braxton · Metal · Kisak · 4): a work-in-progress arm64 iOS port of LWSS's GPL-3.0 KisakCOD Call of Duty 4 decompilation. DXVK's D3D9 frontend proven on physical iPadOS. No game assets.", "description_language": "bilingual", "description_zh": "BMK4（Braxton · Metal · Kisak · 4）：将 LWSS 采用 GPL-3.0 许可的 KisakCOD《使命召唤 4》反编译项目移植到 arm64 iOS，仍在开发中。DXVK 的 D3D9 前端已在实体 iPadOS 设备上验证。不包含游戏资源。", "full_name": "Braxton-Bevis/bmk4", "id": "scan-1297790201", "license": "GPL-3.0", "observed_at": "2026-10-16T11:54:27.095568Z", "pushed_at": "2026-07-16T19:52:28Z", "readme_sha256": "bc94b14ec3afbd92ac1e8eed6d682715a84685fcc2154845fc6bb3d02ea8f2b0", "readme_url": "https://github.com/Braxton-Bevis/bmk4/blob/main/README.md", "stars": 3, "targets": [ "app", "binary", "game" ], "topics": [ "arm64", "cod4", "decompilation", "dxvk", "game-porting", "ios", "metal", "metalfx", "moltenvk", "reverse-engineering" ], "url": "https://github.com/Braxton-Bevis/bmk4", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Open-source Windows app for ECU binary analysis and editing: automatic map and axis detection, hex/2D/3D views, supported checksum correction, and RomRaider / TunerPro XDF / CSV / JSON export.", "description_language": "bilingual", "description_zh": "用于 ECU 二进制分析和编辑的开源 Windows 应用，支持自动检测标定表和坐标轴、十六进制/2D/3D 视图、对受支持格式进行校验和修正，以及导出 RomRaider、TunerPro XDF、CSV 和 JSON。", "full_name": "CAATZ/bimmerstein-bin-analyzer", "id": "scan-1316483907", "license": "GPL-3.0", "observed_at": "2026-10-16T01:36:23.885457Z", "pushed_at": "2026-09-19T09:59:28Z", "readme_sha256": "068be5091651ed11abf4491e993e82aaea11786686627a6a5ff30ad8afc1789d", "readme_url": "https://github.com/CAATZ/bimmerstein-bin-analyzer/blob/main/README.md", "stars": 3, "targets": [ "app", "binary", "firmware" ], "topics": [ "automotive", "binary-analysis", "bmw", "ecu", "ecu-tuning", "firmware-analysis", "ms41", "reverse-engineering", "romraider", "rust", "siemens", "svelte", "tauri", "tunerpro", "typescript" ], "url": "https://github.com/CAATZ/bimmerstein-bin-analyzer", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Native C++/Win32 PE analysis & binary triage toolkit. Inspects headers/entropy, strips ASLR/NX, inverts branch logic (Jcc/RET), scans AOB signatures, and generates instant .1337 patches, Cheat Engine scripts, or trampoline DLL hooks", "description_language": "bilingual", "description_zh": "原生 C++/Win32 PE 分析与二进制初步评估工具包。检查头部和熵、移除 ASLR/NX、反转分支逻辑（Jcc/RET）、扫描字节数组特征，并即时生成 .1337 补丁、Cheat Engine 脚本或跳板 DLL 钩子。", "full_name": "eloyssync/axianware", "id": "scan-1350934984", "license": "NOASSERTION", "observed_at": "2026-10-16T01:37:21.003768Z", "pushed_at": "2026-09-17T10:59:23Z", "readme_sha256": "429016f653b227b8655334c9b8d6073b3790d594d3638a89a6f0658d10ce8e77", "readme_url": "https://github.com/eloyssync/axianware/blob/master/README.md", "stars": 3, "targets": [ "binary" ], "topics": [ "c-plus-plus", "cheat-engine-program", "cheat-engine-tool", "patching", "patching-tool", "pe-analyzer", "pe-analyzer-gui", "reverse-engineering", "reverse-engineering-tools", "security-audit", "win32-api", "x64dbg" ], "url": "https://github.com/eloyssync/axianware", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "SmartFoxServer 2X binary protocol implementation for Python", "description_language": "bilingual", "description_zh": "SmartFoxServer 2X 二进制协议的 Python 实现。", "full_name": "KeepALifeUS/sfs2x-py", "id": "scan-1181078614", "license": "MIT", "observed_at": "2026-10-16T01:36:56.740478Z", "pushed_at": "2026-03-13T20:54:39Z", "readme_sha256": "e15d3328a393da258f0a783dd0c7f2f0c00b27160e67aedf21515160bd71dea4", "readme_url": "https://github.com/KeepALifeUS/sfs2x-py/blob/main/README.md", "stars": 3, "targets": [ "binary", "game" ], "topics": [ "binary-protocol", "game-bot", "game-hacking", "game-protocol", "mitm-proxy", "protocol-analysis", "python", "reverse-engineering", "sfs2x", "smartfoxserver" ], "url": "https://github.com/KeepALifeUS/sfs2x-py", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Advanced Ghidra processor module for flawlessly reverse-engineering, disassembling, and decompiling AVR microcontrollers.", "description_language": "bilingual", "description_zh": "高级 Ghidra 处理器模块，用于无误地逆向、反汇编及反编译 AVR 微控制器。", "full_name": "mytechnotalent/G-AVR", "id": "scan-1268598024", "license": "MIT", "observed_at": "2026-10-18T14:37:43.152568Z", "pushed_at": "2026-06-13T19:08:42Z", "readme_sha256": "0ed1dc2799fa3653fa01597681bfc6deb4f8389ab630c6b4a73bd43f0fed8957", "readme_url": "https://github.com/mytechnotalent/G-AVR/blob/a08b9e204f03954085558f2282645fa5926428d9/README.md", "stars": 3, "targets": [ "binary" ], "topics": [ "atmega328p", "atmel", "atmel-avr", "avr", "avr-assembly", "avrdude", "ghidra", "ghidra-plugin", "hacking-tool", "reverse-engineering" ], "url": "https://github.com/mytechnotalent/G-AVR", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Reverse engineering with AI agents on Windows: verifying, measuring and visualising the tools agents use, with rea and Ghidra", "description_language": "bilingual", "description_zh": "在 Windows 上使用 AI 智能体进行逆向工程，借助 rea 和 Ghidra 验证、测量及可视化智能体所用工具", "full_name": "pablodiazjorge/rea-lab", "id": "scan-1414351821", "license": "MIT", "observed_at": "2026-10-16T07:14:45.405928Z", "pushed_at": "2026-10-16T06:10:13Z", "readme_sha256": "94c68d68d087a47f64d0b99b474b46f60805c07ef71fda094580bcf0ac56ebc4", "readme_url": "https://github.com/pablodiazjorge/rea-lab/blob/main/README.md", "stars": 3, "targets": [ "binary" ], "topics": [ "agentic-ai", "ai-agents", "binary-analysis", "claude-code", "ghidra", "llm-evaluation", "mcp", "model-context-protocol", "reverse-engineering", "windows" ], "url": "https://github.com/pablodiazjorge/rea-lab", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Simple binary diffing tool written in python and built on top of angr.", "description_language": "bilingual", "description_zh": "使用 Python 编写、基于 angr 构建的简单二进制差异比较工具。", "full_name": "patacca/differ", "id": "scan-430717252", "license": "GPL-3.0", "observed_at": "2026-10-16T01:37:03.624097Z", "pushed_at": "2022-04-30T20:57:03Z", "readme_sha256": "18a0d2642dbf18bbec6b158465aa0e5b89b92ba614d1771c0f6feeb015cf80ac", "readme_url": "https://github.com/patacca/differ/blob/main/README.md", "stars": 3, "targets": [ "binary" ], "topics": [ "binary-analysis", "binary-diffing", "function-level-diffing", "python", "reverse-engineering", "weisfeiler-lehman-graph-kernel" ], "url": "https://github.com/patacca/differ", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Awesome Reverse Engineering Anything: tools, projects, case studies and research papers for websites, games, apps, binaries and firmware.", "description_language": "bilingual", "description_zh": "Awesome Reverse Engineering Anything：面向网站、游戏、应用、二进制与固件的工具、项目、案例研究及研究论文。", "full_name": "reacher-z/Awesome-REA", "id": "scan-1421473933", "license": "MIT", "observed_at": "2026-10-16T10:47:48.690661Z", "pushed_at": "2026-10-16T10:37:22Z", "readme_sha256": "2e3ce410d002cfc34910632b712c68768fd27fc7f4bbbea9755eb24b8963dad2", "readme_url": "https://github.com/reacher-z/Awesome-REA/blob/main/README.md", "stars": 3, "targets": [ "app", "binary", "firmware", "game", "website" ], "topics": [ "agent-skills", "ai-agents", "android-reverse-engineering", "awesome-list", "binary-analysis", "decompilation", "firmware-analysis", "game-reversing", "ghidra", "javascript-deobfuscation", "mcp", "rea", "research-papers", "reverse-engineering" ], "url": "https://github.com/reacher-z/Awesome-REA", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Enable full Ghidra support for the ESP32-P4 RISC-V microcontroller with custom Sleigh processor definitions, peripheral memory maps, and ROM symbol loading.", "description_language": "bilingual", "description_zh": "通过自定义 Sleigh 处理器定义、外设内存映射和 ROM 符号加载，为 ESP32-P4 RISC-V 微控制器提供完整 Ghidra 支持。", "full_name": "Seemafir6626/esp32-p4-decompiler-plugin", "id": "scan-1279344194", "license": null, "observed_at": "2026-10-16T01:36:23.531335Z", "pushed_at": "2026-10-14T07:27:01Z", "readme_sha256": "b280e0b4b78d9bd1460b923c3d122d25b6f42d5b4987e5e77fa4834f31ffee46", "readme_url": "https://github.com/Seemafir6626/esp32-p4-decompiler-plugin/blob/main/README.md", "stars": 3, "targets": [ "binary", "firmware" ], "topics": [ "decompiler", "esp32", "esp32-p4", "esp32-p4x", "espressif", "firmware-analysis", "ghidra", "ghidra-plugin", "reverse-engineering", "riscv", "sleigh" ], "url": "https://github.com/Seemafir6626/esp32-p4-decompiler-plugin", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Lightweight PE/ELF binary analyzer written in C++17.", "description_language": "bilingual", "description_zh": "使用 C++17 编写的轻量级 PE/ELF 二进制分析器。", "full_name": "thyrn90/ThyrnAnalyzer", "id": "scan-1230770867", "license": "MIT", "observed_at": "2026-10-16T01:37:20.894862Z", "pushed_at": "2026-05-12T12:51:52Z", "readme_sha256": "3b4c5fcdfdb900545a68556b815aaaf303ac9615312852048aedc3ffe4f68ea7", "readme_url": "https://github.com/thyrn90/ThyrnAnalyzer/blob/main/README.md", "stars": 3, "targets": [ "binary" ], "topics": [ "binary-analysis", "cpp17", "cybersecurity", "elf", "pe", "reverse-engineering", "reverse-engineering-tools" ], "url": "https://github.com/thyrn90/ThyrnAnalyzer", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Nasty Bytes Detector — A Ghidra plugin that identifies tricky byte patterns designed to confuse disassembly and disrupt control flow analysis, helping reverse engineers uncover obfuscated code.", "description_language": "bilingual", "description_zh": "Nasty Bytes Detector：识别旨在混淆反汇编、干扰控制流分析的特殊字节模式的 Ghidra 插件，帮助逆向工程人员发现混淆代码。", "full_name": "TrustedMechanism/NastyBitez", "id": "scan-1016805001", "license": null, "observed_at": "2026-10-18T14:37:43.152924Z", "pushed_at": "2025-07-09T15:06:44Z", "readme_sha256": "02abfd712f8d4be3e27ff8ed0daff003720a7c85723510ec4c48b9d21f8c474d", "readme_url": "https://github.com/TrustedMechanism/NastyBitez/blob/d4156a1143e96606e8da2bccf6c8e3b6d9846537/README.md", "stars": 3, "targets": [ "binary" ], "topics": [ "ghidra", "ghidra-extension", "ghidra-plugin", "ghidra-plugins", "ghidra-scripts" ], "url": "https://github.com/TrustedMechanism/NastyBitez", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "An IDA Pro plugin for binary pattern analysis and generation, featuring ARM64 assembly-to-pattern conversion capabilities.", "description_language": "bilingual", "description_zh": "用于二进制模式分析与生成的 IDA Pro 插件，支持将 ARM64 汇编转换为模式。", "full_name": "xliee/ida_mask_plugin", "id": "scan-1043889856", "license": "MIT", "observed_at": "2026-10-18T14:38:14.448991Z", "pushed_at": "2026-05-21T10:30:59Z", "readme_sha256": "371c76ff6725e7b28718294553e8a923e076e5df38a6a1939eeac93086a31553", "readme_url": "https://github.com/xliee/ida_mask_plugin/blob/c1881a74bbf35085c5aa6d6b149077ead4a0addb/README.md", "stars": 3, "targets": [ "binary" ], "topics": [ "binary-ninja", "bninja", "ghidra", "ida", "ida-plugin", "idapro", "r2", "radare2" ], "url": "https://github.com/xliee/ida_mask_plugin", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Pure-Go IPA tweak injector. Inject dylibs into IPA files & sideload on iOS 17+. Byte-faithful pyzule/cyan rewrite.", "description_language": "bilingual", "description_zh": "纯 Go 编写的 IPA 插件注入器，可将 dylib 注入 IPA 文件并侧载至 iOS 17+。按字节忠实重写 pyzule/cyan。", "full_name": "blessed0x/xkvm-ios-injector", "id": "scan-1342422036", "license": "MIT", "observed_at": "2026-10-16T11:54:29.469716Z", "pushed_at": "2026-09-13T14:11:02Z", "readme_sha256": "319477b6bead8135670ab372c5abc88e2e00490cd7ee993db9d7278aef5963ea", "readme_url": "https://github.com/blessed0x/xkvm-ios-injector/blob/main/README.md", "stars": 2, "targets": [ "app", "binary" ], "topics": [ "code-signing", "cyan", "dylib", "golang", "injection", "ios", "ipa", "jailbreak", "mach-o", "pyzule", "reverse-engineering", "sideloading", "tweak" ], "url": "https://github.com/blessed0x/xkvm-ios-injector", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Ghidra processor module (SLEIGH spec) for the Nintendo SuperFX / GSU-1 / GSU-2 co-processor — the enhancement chip in Star Fox, Yoshi's Island, Stunt Race FX, and Doom SNES.", "description_language": "bilingual", "description_zh": "适用于 Nintendo SuperFX／GSU-1／GSU-2 协处理器的 Ghidra 处理器模块（SLEIGH 规范）；这些增强芯片用于 Star Fox、Yoshi’s Island、Stunt Race FX 及 SNES 版 Doom。", "full_name": "ChekeEdd/ghidra-superfx", "id": "scan-1238137482", "license": "BSD-3-Clause", "observed_at": "2026-10-18T14:37:43.155145Z", "pushed_at": "2026-05-13T21:54:11Z", "readme_sha256": "c194533e2950211dfe7d465a9391b4225421ef47ed43b9cacd382c9b117eeda3", "readme_url": "https://github.com/ChekeEdd/ghidra-superfx/blob/306d4677ad8d57050c09f507d5df74e38d747ca5/README.md", "stars": 2, "targets": [ "binary" ], "topics": [ "decompiler", "disassembler", "emulation", "ghidra", "ghidra-extension", "ghidra-plugin", "gsu", "nintendo", "processor-module", "retro-gaming", "reverse-engineering", "sleigh", "snes", "star-fox", "superfx" ], "url": "https://github.com/ChekeEdd/ghidra-superfx", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "An all-in-one binary designed to help with locating, extracting and identifying changes between APK versions", "description_language": "bilingual", "description_zh": "一体化二进制程序，帮助定位、提取和识别不同 APK 版本间的变化。", "full_name": "ChowChowSonic/apkhound", "id": "scan-1300990885", "license": "MIT", "observed_at": "2026-10-16T01:36:29.285273Z", "pushed_at": "2026-10-07T18:51:34Z", "readme_sha256": "9e3061e3af3adc75b7e9938ac1da621bde0c5d6a1faa00935fd040ba0738e851", "readme_url": "https://github.com/ChowChowSonic/apkhound/blob/main/README.md", "stars": 2, "targets": [ "app", "binary" ], "topics": [ "android", "android-reverse-engineering", "apk", "apk-security", "reverse-engineering", "static-analysis" ], "url": "https://github.com/ChowChowSonic/apkhound", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Hand-translating console games from disassembly into readable, modifiable JavaScript, not emulation. Every ROM routine becomes a JS function you own, verified frame-by-frame against the real ROM running in an emulator. Batman (Game Boy) complete; Gradius (NES) plays end to end; DoDonPachi DaiOuJou (arcade) in progress. No ROM included.", "description_language": "bilingual", "description_zh": "手工将主机游戏反汇编代码转换为可读、可修改的 JavaScript，而非模拟运行。每个 ROM 例程都变为可自行掌控的 JS 函数，并与模拟器中运行的真实 ROM 逐帧验证。Batman（Game Boy）已完成，Gradius（NES）可从头玩到尾，DoDonPachi DaiOuJou（街机）仍在开发中，不含 ROM。", "full_name": "Fabulu/Mixup", "id": "scan-1312984205", "license": "NOASSERTION", "observed_at": "2026-10-16T07:14:55.880302Z", "pushed_at": "2026-09-07T00:19:33Z", "readme_sha256": "d558acc488db1f0e0d68ff942711677c266ced739219eee463c489ecad684b94", "readme_url": "https://github.com/Fabulu/Mixup/blob/main/README.md", "stars": 2, "targets": [ "binary", "game" ], "topics": [ "arcade", "decompilation", "disassembly", "game-boy", "game-development", "javascript", "nes", "reverse-engineering" ], "url": "https://github.com/Fabulu/Mixup", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "The 1994 DOS game LineWars II, reconstructed in C from its shipped binary and held to the original by 41 test gates, 27 of which execute the 1994 machine code in an emulator. Builds with Open Watcom, runs in DOSBox-X. Freeware with the original author's permission.", "description_language": "bilingual", "description_zh": "从发行版二进制文件将 1994 年 DOS 游戏 LineWars II 重建为 C 代码，并通过 41 项测试关卡对照原作，其中 27 项在模拟器中执行 1994 年的机器码。使用 Open Watcom 构建，在 DOSBox-X 中运行。经原作者许可作为免费软件提供。", "full_name": "fredangstadt-lang/LineWarsII-DOS", "id": "scan-1304480869", "license": "NOASSERTION", "observed_at": "2026-10-18T13:13:35.093439Z", "pushed_at": "2026-07-20T02:26:26Z", "readme_sha256": "3bb44626b1ea84885cc4c9b926aa70a0cc31efc4bd539855c7a1e6691bc2c5c7", "readme_url": "https://github.com/fredangstadt-lang/LineWarsII-DOS/blob/main/README.md", "stars": 2, "targets": [ "binary", "game" ], "topics": [ "dos", "game-preservation", "open-watcom", "retrogaming", "reverse-engineering" ], "url": "https://github.com/fredangstadt-lang/LineWarsII-DOS", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Save editor for DragonSword Awakening (2026): decrypts the SQLCipher save, edits currency, items, cooking recipes, costumes, mounts and titles in a local browser UI. Pure Go, no CGO, single static binary for Linux & Windows.", "description_language": "bilingual", "description_zh": "DragonSword Awakening（2026）的存档编辑器：解密 SQLCipher 存档，并在本地浏览器界面编辑货币、物品、烹饪配方、服装、坐骑与称号。使用纯 Go，无需 CGO，为 Linux 与 Windows 提供单个静态二进制文件。", "full_name": "gfriloux/dragonsword-save-editor", "id": "scan-1319438150", "license": "Apache-2.0", "observed_at": "2026-10-16T10:47:41.253666Z", "pushed_at": "2026-08-08T16:59:18Z", "readme_sha256": "ee4605f6d067a3ae6e9021c4ede7ff02bb92d874e6e1603a942cee4acdd3b0a2", "readme_url": "https://github.com/gfriloux/dragonsword-save-editor/blob/main/README.md", "stars": 2, "targets": [ "binary", "game", "website" ], "topics": [ "dragonsword-awakening", "game-modding", "golang", "no-cgo", "reverse-engineering", "save-editor", "savegame-editor", "sqlcipher", "sqlite", "unreal-engine" ], "url": "https://github.com/gfriloux/dragonsword-save-editor", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "AI-assisted reverse engineering tool built on Ghidra and MCP.", "description_language": "bilingual", "description_zh": "基于 Ghidra 和 MCP 的 AI 辅助逆向工程工具。", "full_name": "hexria/GhidraInsight", "id": "scan-1127879583", "license": "NOASSERTION", "observed_at": "2026-10-18T14:37:43.156301Z", "pushed_at": "2026-02-11T20:12:05Z", "readme_sha256": "60cbd172f4b5c634f6492c4967a1aeb56172d0e688c5cd3be8c6468c18085e86", "readme_url": "https://github.com/hexria/GhidraInsight/blob/37f0a2460e2d37cca665f3af706473ade87841b0/README.md", "stars": 2, "targets": [ "binary" ], "topics": [ "cybersecurity", "disassembler", "ghidra", "ghidra-plugin", "reverse-engineering", "software-analysis" ], "url": "https://github.com/hexria/GhidraInsight", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Divide-and-conquer binary diffing framework", "description_language": "bilingual", "description_zh": "采用分治策略的二进制差异比较框架。", "full_name": "huku-/reveal", "id": "scan-1276340129", "license": null, "observed_at": "2026-10-16T01:37:03.639267Z", "pushed_at": "2026-06-21T21:30:40Z", "readme_sha256": "f41077d859a3f86525652d7c677854f09fc80e8722e4ac079d2a04d026e80b83", "readme_url": "https://github.com/huku-/reveal/blob/master/README.md", "stars": 2, "targets": [ "binary" ], "topics": [ "binary-diffing", "reverse-engineering" ], "url": "https://github.com/huku-/reveal", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A personal project aiming to solve real systems problems within a specific domain: a modular desktop and cloud systems platform for automated crash diagnostics (SAGE RAG), content-addressed storage (Aduana), static JVM bytecode security, and binary NBT recovery.", "description_language": "bilingual", "description_zh": "尝试解决特定领域真实系统问题的个人项目，是模块化桌面与云系统平台，支持自动崩溃诊断（SAGE RAG）、内容寻址存储（Aduana）、静态 JVM 字节码安全分析及二进制 NBT 恢复。", "full_name": "Ian9Franco/MIM", "id": "scan-1228465919", "license": "MIT", "observed_at": "2026-10-16T07:14:58.625087Z", "pushed_at": "2026-10-04T02:29:11Z", "readme_sha256": "ac3bc20fe04dbd2ca244f5ae956b732e45987ee9487f4d8bee182bf5e3f5e77a", "readme_url": "https://github.com/Ian9Franco/MIM/blob/main/README.md", "stars": 2, "targets": [ "app", "binary" ], "topics": [ "distributed-systems", "electron", "nextjs", "offline-first", "postgresql", "rag", "reverse-engineering", "static-analysis", "supabase", "systems-engineering", "typescript" ], "url": "https://github.com/Ian9Franco/MIM", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Unofficial disassembly-backed native Windows port of SimTower (source only; original game assets excluded)", "description_language": "bilingual", "description_zh": "基于反汇编的非官方 SimTower 原生 Windows 移植版（仅含源代码；不包含原始游戏资源）。", "full_name": "kandowontu2/simtower-native-windows-port", "id": "scan-1412513166", "license": null, "observed_at": "2026-10-18T13:14:28.154620Z", "pushed_at": "2026-10-09T22:30:33Z", "readme_sha256": "ed3df23ef2f31c764649de6303820b3acdb77d4386c48c36eb1830eb258bc85c", "readme_url": "https://github.com/kandowontu2/simtower-native-windows-port/blob/main/README.md", "stars": 2, "targets": [ "binary", "game" ], "topics": [ "cpp", "game-preservation", "reverse-engineering", "simtower", "win32" ], "url": "https://github.com/kandowontu2/simtower-native-windows-port", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Reverse engineer anything. Port it anywhere. One CLI and MCP server that lets any coding agent take apart apps, games, binaries and websites — and port them to Godot, Unity, Unreal, three.js or any language.", "description_language": "bilingual", "description_zh": "逆向分析各种目标并移植到不同平台。提供 CLI 和 MCP 服务器，让任意编程智能体拆解应用、游戏、二进制文件及网站，并移植到 Godot、Unity、Unreal、three.js 或任意语言。", "full_name": "laaielichter/Reverseport", "id": "scan-1415754681", "license": "MIT", "observed_at": "2026-10-16T07:15:14.090304Z", "pushed_at": "2026-10-12T17:08:31Z", "readme_sha256": "1b6ad946d21555fbf2819dff6cb68daca1a5c045ec75b002dc34b2d7b0f3ca92", "readme_url": "https://github.com/laaielichter/Reverseport/blob/main/README.md", "stars": 2, "targets": [ "app", "binary", "game" ], "topics": [ "ai-agents", "binary-analysis", "claude-code", "decompiler", "game-development", "ghidra", "godot", "mcp", "mcp-server", "porting", "reverse-engineering", "threejs", "unity", "unreal-engine" ], "url": "https://github.com/laaielichter/Reverseport", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Read-only iOS system monitor for TrollStore. Processes, entitlements, Mach-O layout, XPC daemons, IOKit registry. Low-level C/C++ + Swift/UIKit.", "description_language": "bilingual", "description_zh": "面向 TrollStore 的只读 iOS 系统监视器，可检查进程、授权项、Mach-O 布局、XPC 守护进程和 IOKit 注册表。使用底层 C／C++ 与 Swift／UIKit。", "full_name": "lavochkaa/SystemExplorer", "id": "scan-1278363473", "license": "MIT", "observed_at": "2026-10-16T11:54:25.731703Z", "pushed_at": "2026-07-28T00:39:48Z", "readme_sha256": "c35d888983df6bfe1851dd868ec198102a56b1b90e230cb6c1260895f5d16c99", "readme_url": "https://github.com/lavochkaa/SystemExplorer/blob/main/README.md", "stars": 2, "targets": [ "app", "binary" ], "topics": [ "entitlements", "iokit", "ios", "ios-internals", "objective-c", "objective-cpp", "process-monitor-jailbreak", "reverse-engineering", "swift", "system-monitor", "trollstore", "uikit", "xpc" ], "url": "https://github.com/lavochkaa/SystemExplorer", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A native C++ CLI toolkit for reverse engineering binaries.", "description_language": "bilingual", "description_zh": "用于逆向分析二进制文件的原生 C++ 命令行工具包。", "full_name": "manop55555/roe", "id": "scan-1252955350", "license": "Apache-2.0", "observed_at": "2026-10-16T01:37:21.369887Z", "pushed_at": "2026-05-29T05:00:50Z", "readme_sha256": "a8963b57f7586cf8a6389cf5cedf40d9ca52059e430296751daf1c979f62a4de", "readme_url": "https://github.com/manop55555/roe/blob/main/README.md", "stars": 2, "targets": [ "binary" ], "topics": [ "binary-analysis", "pwnable", "reverse-engineering", "reverse-engineering-tools", "tools" ], "url": "https://github.com/manop55555/roe", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Simple script for ghidra to rename the default function names into better looking names that can be differed from afar ", "description_language": "bilingual", "description_zh": "简单的 Ghidra 脚本，将默认函数名改为更易读、远看也容易区分的名称。", "full_name": "Mohamed-Adil-Cyber/Ghidra_Sequential_Function_Renaming", "id": "scan-715511864", "license": null, "observed_at": "2026-10-18T14:37:43.154392Z", "pushed_at": "2023-11-07T22:15:34Z", "readme_sha256": "7430b8d3d59b9ea43d4e900e226dd394544c622e17cafbf959cb863185615627", "readme_url": "https://github.com/Mohamed-Adil-Cyber/Ghidra_Sequential_Function_Renaming/blob/8ff533b6c27486057ff132af00d3f4656e27e26b/README.md", "stars": 2, "targets": [ "binary" ], "topics": [ "ghidra", "ghidra-extension", "ghidra-plugin", "ghidra-scripts" ], "url": "https://github.com/Mohamed-Adil-Cyber/Ghidra_Sequential_Function_Renaming", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Binary reverse engineering toolkit in C - file analysis, ELF/PE parsing, entropy scanning, string extraction, and optional disassembly.", "description_language": "bilingual", "description_zh": "C 编写的二进制逆向工程工具包，支持文件分析、ELF/PE 解析、熵扫描、字符串提取和可选反汇编。", "full_name": "MorenoLopez/RevTool", "id": "scan-1284728100", "license": null, "observed_at": "2026-10-16T01:37:21.983641Z", "pushed_at": "2026-10-07T06:06:20Z", "readme_sha256": "2091973d96a216d40766054ac5a7eb2859fec1c6e17a10fc70299b66639f0c38", "readme_url": "https://github.com/MorenoLopez/RevTool/blob/Master/README.md", "stars": 2, "targets": [ "binary" ], "topics": [ "analysis", "disassembler", "disassembly", "pwn", "pwntools", "reverse-engineering", "reverse-engineering-tool", "reverse-engineering-tools", "scan", "scanner" ], "url": "https://github.com/MorenoLopez/RevTool", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Decompile the web's bleeding edge. The premier Ghidra processor module for reverse-engineering Wasmtime's portable Pulley ISA.", "description_language": "bilingual", "description_zh": "反编译 Web 前沿技术：面向 Wasmtime 可移植 Pulley 指令集逆向工程的领先 Ghidra 处理器模块。", "full_name": "mytechnotalent/G-Pulley", "id": "scan-1197814448", "license": "MIT", "observed_at": "2026-10-16T07:15:06.333852Z", "pushed_at": "2026-06-13T19:09:26Z", "readme_sha256": "af76a333344065d6d05ce0456ee8185e6a0fa37119f56aa8bb2da1e366a52efb", "readme_url": "https://github.com/mytechnotalent/G-Pulley/blob/main/README.md", "stars": 2, "targets": [ "binary", "website" ], "topics": [ "ghidra", "plugin", "pulley", "reverse-engineering", "rust", "rust-lang", "wasm", "wasm-component", "wasm-components", "wasmtime", "webassembly", "wit", "wit-bindgen" ], "url": "https://github.com/mytechnotalent/G-Pulley", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Reassembles split Qualcomm firmware for Ghidra, and recovers source file and line from the debug metadata left in the binary", "description_language": "bilingual", "description_zh": "将拆分的 Qualcomm 固件重新组合以供 Ghidra 使用，并从二进制文件中残留的调试元数据恢复源文件和行号。", "full_name": "NerdTIV/QDig", "id": "scan-1327931254", "license": "MIT", "observed_at": "2026-10-16T01:36:25.426945Z", "pushed_at": "2026-08-24T08:30:59Z", "readme_sha256": "a8820c6ca163b8adc00d32c94c4f7809493cb353728dc79fe0517392278a2c7b", "readme_url": "https://github.com/NerdTIV/QDig/blob/main/README.md", "stars": 2, "targets": [ "binary", "firmware" ], "topics": [ "at-commands", "baseband", "embedded", "firmware-analysis", "ghidra", "ghidra-extension", "ghidra-loader", "hexagon", "mbn", "mdt", "modem", "pil", "qdsp", "qualcomm", "quectel", "reverse-engineering" ], "url": "https://github.com/NerdTIV/QDig", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A small, code-first home hub for reverse-engineered and custom devices. Every device is a package with its own screens, settings and safety rules. Local, self-hosted, next to Home Assistant.", "description_language": "bilingual", "description_zh": "小型、代码优先的家庭中枢，面向经过逆向分析的设备和自定义设备。每个设备均为独立的软件包，拥有自己的界面、设置与安全规则。本地自行托管，与 Home Assistant 并行使用。", "full_name": "olofd/kraftverk", "id": "scan-1331282497", "license": "MIT", "observed_at": "2026-10-16T11:54:52.707047Z", "pushed_at": "2026-10-13T11:17:57Z", "readme_sha256": "ce9f2809308ae0caf2d899ac24818bff58c1b895296f4d4cdb58ccfaa65691d0", "readme_url": "https://github.com/olofd/kraftverk/blob/main/README.md", "stars": 2, "targets": [ "binary" ], "topics": [ "bluetooth-le", "bun", "device-sdk", "energy-monitoring", "expo", "home-assistant", "home-automation", "iot", "local-first", "mqtt", "power-station", "react-native", "reverse-engineering", "self-hosted", "smart-home", "solar", "sydpower", "tuya", "typescript", "web-bluetooth" ], "url": "https://github.com/olofd/kraftverk", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A Claude Code mod that keeps a live casebook of the Evidence rea gives the agent: Ghidra cold start, findings that must cite real evidence_id values, Markdown export.", "description_language": "bilingual", "description_zh": "Claude Code 模组，持续记录 rea 向智能体提供的证据，包括 Ghidra 冷启动、必须引用真实 evidence_id 的发现，以及 Markdown 导出。", "full_name": "pablodiazjorge/rea-casebook", "id": "scan-1415281601", "license": "MIT", "observed_at": "2026-10-16T07:14:45.209919Z", "pushed_at": "2026-10-13T18:31:39Z", "readme_sha256": "85d1da489e69ada6f162cf7123fb777921802885541c1c19fc3cf9b0a7d5d62e", "readme_url": "https://github.com/pablodiazjorge/rea-casebook/blob/main/README.md", "stars": 2, "targets": [ "binary" ], "topics": [ "ai-agents", "claude-code", "claude-code-mod", "ghidra", "mcp", "reverse-engineering" ], "url": "https://github.com/pablodiazjorge/rea-casebook", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "The reader you can read. Dependency-free Mach-O introspection for reverse engineers, security researchers, and build engineers — fat headers, symbols, instruction boundaries and branch edges, with a versioned JSON contract, an MCP server and an Agent Skill. Live audit report: https://ranjithrajv.github.io/MachO-explorer/", "description_language": "bilingual", "description_zh": "你可以读懂其实现的读取器。面向逆向工程师、安全研究人员和构建工程师的无依赖 Mach-O 内省工具，涵盖胖文件头、符号、指令边界和分支边，并提供带版本的 JSON 契约、MCP 服务器和智能体技能。实时审计报告：https://ranjithrajv.github.io/MachO-explorer/", "full_name": "ranjithrajv/MachO-explorer", "id": "scan-1401580396", "license": "MPL-2.0", "observed_at": "2026-10-16T11:54:36.081919Z", "pushed_at": "2026-10-07T12:05:20Z", "readme_sha256": "0313112b075ca8c65edeaeff92796e9cf3023ad10ef42b8f4e29180da5096f4c", "readme_url": "https://github.com/ranjithrajv/MachO-explorer/blob/main/README.md", "stars": 2, "targets": [ "app", "binary" ], "topics": [ "apple", "arm64", "binary-analysis", "cli", "cross-platform", "ios", "ipados", "mach-o", "macos", "mcp", "nodejs", "reverse-engineering", "security-tools", "static-analysis", "symbol-table", "tvos", "universal-binary", "visionos", "watchos", "x86-64" ], "url": "https://github.com/ranjithrajv/MachO-explorer", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "WebAssembly analysis and decompilation support for Ghidra, developed and maintained for Ghidra 12.1.4.", "description_language": "bilingual", "description_zh": "为 Ghidra 提供 WebAssembly 分析与反编译支持，针对 Ghidra 12.1.4 开发和维护。", "full_name": "Ryxm-a/Ghidra-WebAssembly-WASM-Plugin", "id": "scan-1412427406", "license": "GPL-3.0", "observed_at": "2026-10-16T07:15:06.176849Z", "pushed_at": "2026-10-13T08:35:55Z", "readme_sha256": "93c3e2ab33fabb1f67952254c8f1707f4e77f59752ca686e95c0534a5ed9c016", "readme_url": "https://github.com/Ryxm-a/Ghidra-WebAssembly-WASM-Plugin/blob/main/README.md", "stars": 2, "targets": [ "binary" ], "topics": [ "binary", "binary-analysis", "binary-reverse-engineering", "binary-reversing", "binary-search", "decompilation", "decompiler", "disassembler", "ghidra", "ghidra-extension", "ghidra-plugin", "malware", "malware-analysis", "reverse", "reverse-engineering", "wasm", "wasm-analysis", "webassembly" ], "url": "https://github.com/Ryxm-a/Ghidra-WebAssembly-WASM-Plugin", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Patched PEDA for modern Python and GDB environments", "description_language": "bilingual", "description_zh": "针对现代 Python 和 GDB 环境修补的 PEDA。", "full_name": "sayseven7/peda-modern-gdb", "id": "scan-1209695343", "license": "MIT", "observed_at": "2026-10-16T01:37:21.654509Z", "pushed_at": "2026-04-23T20:51:12Z", "readme_sha256": "5392ce3cd95c0d0c41fdbb7e660db0936684f5847a1526be87dc906c4cd45c1c", "readme_url": "https://github.com/sayseven7/peda-modern-gdb/blob/main/README.md", "stars": 2, "targets": [ "binary" ], "topics": [ "binary-exploitation", "binary-exploitation-x86-64-assembly-gdb", "exploit-development", "gdb", "peda", "python3", "reverse-engineering", "reverse-engineering-tools" ], "url": "https://github.com/sayseven7/peda-modern-gdb", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "This repository contains a detailed technical report documenting the unpacking process of a Dridex malware sample. The analysis was performed in a controlled virtualized environment using x32dbg, Process Hacker, and PE-bear to locate, extract, and partially reconstruct PE images from memory.", "description_language": "bilingual", "description_zh": "该仓库包含记录 Dridex 恶意软件样本解包过程的详细技术报告。分析在受控虚拟化环境中使用 x32dbg、Process Hacker 和 PE-bear 进行，从内存定位、提取并部分重建 PE 镜像。", "full_name": "Vieira-Orchid/Dridex-Malware-Unpacking-Report", "id": "scan-1072274210", "license": null, "observed_at": "2026-10-18T14:36:20.245565Z", "pushed_at": "2025-10-08T21:02:06Z", "readme_sha256": "9dacc86db8b9c522cde81b81f66c0d518b6bd2481cab17e35d077fdcdc9983d6", "readme_url": "https://github.com/Vieira-Orchid/Dridex-Malware-Unpacking-Report/blob/d42e701dc356af70dec95d93464f8b950e0cf347/README.md", "stars": 2, "targets": [ "binary" ], "topics": [ "assembly", "binary", "binary-analysis", "debbuging", "dinamic-analysis", "executable", "executive-reports", "malware", "malware-analysis", "malware-detection", "malware-development", "malware-research", "memory-allocation", "obfuscation", "packaging", "packer", "report", "reporting", "unpack", "unpacking" ], "url": "https://github.com/Vieira-Orchid/Dridex-Malware-Unpacking-Report", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Identifies machine code in binary files.", "description_language": "bilingual", "description_zh": "识别二进制文件中的机器码。", "full_name": "vobst/coderec", "id": "scan-893597471", "license": "Apache-2.0", "observed_at": "2026-10-16T01:36:25.238859Z", "pushed_at": "2026-08-25T10:21:56Z", "readme_sha256": "808a654646c7197195363e6c88adf3e3f7b608eda330a751fd55b43fef2c954c", "readme_url": "https://github.com/vobst/coderec/blob/master/README.md", "stars": 2, "targets": [ "binary", "firmware" ], "topics": [ "firmware-analysis", "firmware-tools", "reverse-engineering", "unpacking" ], "url": "https://github.com/vobst/coderec", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Visualize binary data and C struct memory layouts as interactive SVG diagrams in Obsidian", "description_language": "bilingual", "description_zh": "在 Obsidian 中将二进制数据和 C 结构体内存布局可视化为交互式 SVG 图。", "full_name": "waaraawa/ByteGrid", "id": "scan-1069213703", "license": "MIT", "observed_at": "2026-10-16T01:36:57.719550Z", "pushed_at": "2026-06-17T01:24:29Z", "readme_sha256": "d907639c2655f81a7da890414db459e9a49a92ec591d6db3f4abaf98122b0ef4", "readme_url": "https://github.com/waaraawa/ByteGrid/blob/main/README.md", "stars": 2, "targets": [ "binary" ], "topics": [ "binary", "data-structure", "diagram", "memory-layout", "obsidian", "obsidian-plugin", "protocol-analysis", "reverse-engineering", "svg", "typescript", "visualization" ], "url": "https://github.com/waaraawa/ByteGrid", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "MCP server exposing the ghidriff Ghidra binary-diffing engine as tools for AI agents", "description_language": "bilingual", "description_zh": "将 ghidriff Ghidra 二进制差异比较引擎作为工具提供给 AI 智能体的 MCP 服务器。", "full_name": "waterofriver/ghidriff-mcp", "id": "scan-1374511106", "license": "NOASSERTION", "observed_at": "2026-10-16T01:37:03.590015Z", "pushed_at": "2026-09-17T15:08:42Z", "readme_sha256": "6b0ea4dc183af7558c342e5479d015b5eb592223ceeaf326cf3942ddf968b2ce", "readme_url": "https://github.com/waterofriver/ghidriff-mcp/blob/main/README.md", "stars": 2, "targets": [ "binary" ], "topics": [ "binary-diffing", "ghidra", "ghidriff", "mcp", "model-context-protocol", "patch-analysis", "python", "reverse-engineering" ], "url": "https://github.com/waterofriver/ghidriff-mcp", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A restrained, modern desktop theme plugin for IDA Pro 9.3, featuring scoped Qt styling and automatic theme persistence.", "description_language": "bilingual", "description_zh": "适用于 IDA Pro 9.3、设计克制的现代桌面主题插件，提供限定作用范围的 Qt 样式及自动主题持久化。", "full_name": "yangwar/IDAPro-MuiLs", "id": "scan-928565305", "license": "MIT", "observed_at": "2026-10-18T14:38:14.450473Z", "pushed_at": "2026-10-14T06:38:18Z", "readme_sha256": "ad672b4885725b4ac834cc3e90c5fe636d87f78e14a60e1713d5dcb70d43c2a8", "readme_url": "https://github.com/yangwar/IDAPro-MuiLs/blob/a3c0424b064cfdca0ff0eed2f9061d41acb54cff/README.md", "stars": 2, "targets": [ "app", "binary" ], "topics": [ "admin", "ai", "android", "color", "data-visualization", "datav", "files", "ida", "ida-plugin", "idapro", "ls", "nerd-fonts", "reverse-engineering", "rust", "sugar", "ui-customization" ], "url": "https://github.com/yangwar/IDAPro-MuiLs", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A file-first editor with a native macOS shell and shared Rust core. Markdown today, broader document editing over time.", "description_language": "bilingual", "description_zh": "以文件为中心的编辑器，采用原生 macOS 外壳和共享 Rust 核心。目前支持 Markdown，逐步扩展到更多文档编辑功能。", "full_name": "yruichen/lino", "id": "scan-1415680997", "license": "MIT", "observed_at": "2026-10-16T07:14:56.211862Z", "pushed_at": "2026-10-16T04:59:01Z", "readme_sha256": "07aa33c8f631b4e46eb25b155bfe5906cafff781112bf95c7f381931fb7f6b3e", "readme_url": "https://github.com/yruichen/lino/blob/main/README.md", "stars": 2, "targets": [ "binary" ], "topics": [ "cocoa", "javascript", "macos", "markdown", "research", "reverse-engineering", "static-analysis", "typora" ], "url": "https://github.com/yruichen/lino", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Generate intelligent wildcard byte signatures from x86 disassembly. Supports x64dbg, Cheat Engine, and raw hex formats.", "description_language": "bilingual", "description_zh": "从 x86 反汇编结果生成智能通配字节特征，支持 x64dbg、Cheat Engine 和原始十六进制格式。", "full_name": "ZxPwdz/Signature-Forge", "id": "scan-1130847047", "license": "MIT", "observed_at": "2026-10-16T07:14:58.531070Z", "pushed_at": "2026-01-09T05:34:17Z", "readme_sha256": "570672b007a86b43bc15a79b59fb6a252414468013f73a49a694e0d9a24e7170", "readme_url": "https://github.com/ZxPwdz/Signature-Forge/blob/main/README.md", "stars": 2, "targets": [ "app", "binary", "game" ], "topics": [ "aob-scan", "byte-pattern", "cheat-engine", "electron", "fastapi", "game-hacking", "python", "react", "reverse-engineering", "signature-scanner", "x64dbg", "x86" ], "url": "https://github.com/ZxPwdz/Signature-Forge", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Dragon Quest IX (EU) research: Nintendo DS decompilation tooling, ARM/Thumb static recompilation, and experimental SDL2/Godot native runtime. No game data.", "description_language": "bilingual", "description_zh": "《勇者斗恶龙 IX》（欧版）研究：Nintendo DS 反编译工具、ARM/Thumb 静态重编译及实验性的 SDL2/Godot 原生运行时。不含游戏数据。", "full_name": "0bAndyWirus/DQ9-Decomp", "id": "scan-1416097004", "license": "NOASSERTION", "observed_at": "2026-10-16T10:47:45.054648Z", "pushed_at": "2026-10-15T07:23:17Z", "readme_sha256": "38e079e0e07e8798f5a401c3003f3d0b79aea3632e1f95436d02f6dc19daa691", "readme_url": "https://github.com/0bAndyWirus/DQ9-Decomp/blob/main/README.md", "stars": 1, "targets": [ "binary", "game" ], "topics": [ "cpp", "decompilation", "dq9", "dqix", "dragon-quest", "dragon-quest-ix", "godot", "nintendo-ds", "reverse-engineering", "sdl2", "static-recompilation" ], "url": "https://github.com/0bAndyWirus/DQ9-Decomp", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A collection of personal ghidra scripts", "description_language": "bilingual", "description_zh": "个人 Ghidra 脚本集合。", "full_name": "0xdad0/ghidra-scripts", "id": "scan-1059497583", "license": null, "observed_at": "2026-10-18T14:37:48.584942Z", "pushed_at": "2026-02-13T19:39:13Z", "readme_sha256": "35d910927f5e38c3eb5e749498b0b790964e3651bd8bdd85266c8880200cc8de", "readme_url": "https://github.com/0xdad0/ghidra-scripts/blob/68b7eea7c889e007b5381a3c76b87a877d1a84fc/README.md", "stars": 1, "targets": [ "app", "binary" ], "topics": [ "android", "ghidra", "ghidra-plugin", "ghidra-scripts", "ios" ], "url": "https://github.com/0xdad0/ghidra-scripts", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "BinExport for Ghidra 12.x (12.1.2). Patched build of google/binexport that fixes the NoSuchFieldError LabelString$LabelType.CODE_LABEL crash (issue #166) blocking BinExport + BinDiff on Ghidra 12.0+. Prebuilt Ghidra extension + headless export. Ghidra → BinExport → BinDiff pipeline restored.", "description_language": "bilingual", "description_zh": "适用于 Ghidra 12.x（12.1.2）的 BinExport。此 google/binexport 修补版本修复了阻碍 Ghidra 12.0+ 使用 BinExport + BinDiff 的 NoSuchFieldError LabelString$LabelType.CODE_LABEL 崩溃问题（#166）。提供预编译 Ghidra 扩展和无界面导出，恢复 Ghidra → BinExport → BinDiff 流程。", "full_name": "abd3lraouf-studios/binexport-ghidra-12", "id": "scan-1318752603", "license": "Apache-2.0", "observed_at": "2026-10-16T01:37:04.008877Z", "pushed_at": "2026-08-13T02:12:21Z", "readme_sha256": "521a33ddbea81e35318c514e6fd04f7537934bd72ac3340664724e84280092a0", "readme_url": "https://github.com/abd3lraouf-studios/binexport-ghidra-12/blob/main/README.md", "stars": 1, "targets": [ "binary" ], "topics": [ "binary-diffing", "bindiff", "binexport", "ghidra", "ghidra-12", "ghidra-extension", "malware-analysis", "patch-diffing", "protobuf", "reverse-engineering", "vulnerability-research" ], "url": "https://github.com/abd3lraouf-studios/binexport-ghidra-12", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Browser-based x86-64 assembly visualizer: instruction breakdown, stack frame behavior, and control flow in AT&T syntax. Built as a learning companion for Harvard CS61.", "description_language": "bilingual", "description_zh": "基于浏览器的 x86-64 汇编可视化工具，使用 AT&T 语法展示指令拆解、栈帧行为及控制流，为哈佛 CS61 课程的辅助学习而构建。", "full_name": "AbdallaElzedy/AsmViz", "id": "scan-1119125423", "license": null, "observed_at": "2026-10-16T10:48:08.244008Z", "pushed_at": "2025-12-18T20:06:48Z", "readme_sha256": "2c9afab123e4708757bdfc762ba86937791eda5313821fc2e0f8e54847c2ac64", "readme_url": "https://github.com/AbdallaElzedy/AsmViz/blob/main/README.md", "stars": 1, "targets": [ "binary", "website" ], "topics": [ "assembly", "education", "javascript", "reverse-engineering", "visualization", "x86-64" ], "url": "https://github.com/AbdallaElzedy/AsmViz", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A simple Ghidra plugin to keep notes while reverse engineering", "description_language": "bilingual", "description_zh": "用于在逆向工程过程中记录笔记的简单 Ghidra 插件。", "full_name": "agatti/ghidranotes", "id": "scan-728421563", "license": "Apache-2.0", "observed_at": "2026-10-18T14:37:48.583178Z", "pushed_at": "2024-01-23T19:57:04Z", "readme_sha256": "41d284cf639696d2937c90ebf1dc2a2eba1413df6fa0052627afe9af549d9b8e", "readme_url": "https://github.com/agatti/ghidranotes/blob/20cb16396f8122972a75b32d8e3f26a59da05873/README.md", "stars": 1, "targets": [ "binary" ], "topics": [ "ghidra", "ghidra-plugin", "ghidra-plugins" ], "url": "https://github.com/agatti/ghidranotes", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Windows ChatGPT/Codex frontend reverse-engineering workspace: recovered UI contracts, original-runtime demos, evidence, and a deferred native Rust port.", "description_language": "bilingual", "description_zh": "Windows ChatGPT/Codex 前端逆向工程工作区：包含恢复的 UI 约定、原始运行时演示和证据，原生 Rust 移植暂缓。", "full_name": "antonio-in-stem/chatgpt-rea", "id": "scan-1416605261", "license": null, "observed_at": "2026-10-16T07:14:59.042143Z", "pushed_at": "2026-10-16T07:08:49Z", "readme_sha256": "6898313a9fd9d5ceb3ca3fa0338ab9b480765522dce088939e2293fd7c153b4e", "readme_url": "https://github.com/antonio-in-stem/chatgpt-rea/blob/main/README.md", "stars": 1, "targets": [ "app", "binary" ], "topics": [ "chatgpt", "electron", "frontend", "reverse-engineering", "rust", "ui-reconstruction", "windows" ], "url": "https://github.com/antonio-in-stem/chatgpt-rea", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "User-mode reverse-engineering memory dumper for Windows. Reconstructs packed, hollowed, and manually-mapped processes into IDA/Ghidra-loadable PEs with rebuilt imports.", "description_language": "bilingual", "description_zh": "Windows 用户态逆向工程内存转储工具。将加壳、进程空洞化及手动映射的进程重建为可由 IDA／Ghidra 加载的 PE，并重建导入表。", "full_name": "ataoytun/revdump", "id": "scan-1269475834", "license": "MIT", "observed_at": "2026-10-18T14:36:25.628478Z", "pushed_at": "2026-06-14T21:09:24Z", "readme_sha256": "7e6cd20c753243fc799e0ba531a0b56db4b5c22319fbb4df39021c6de28e8e07", "readme_url": "https://github.com/ataoytun/revdump/blob/7865ddf6d09002cb681318b5634f21f01a84de3b/README.md", "stars": 1, "targets": [ "binary" ], "topics": [ "dfir", "import-reconstruction", "malware-analysis", "memory-dump", "pe-file", "process-injection", "reverse-engineering", "rust", "unpacking", "windows" ], "url": "https://github.com/ataoytun/revdump", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Reverse-engineering Anarchy Sound Software's SwarmSynth (2003) by measuring it, not disassembling it. Wine-hosted VST2 rig, JUCE recreation, WebAssembly build.", "description_language": "bilingual", "description_zh": "通过测量而非反汇编来逆向分析 Anarchy Sound Software 的 SwarmSynth（2003）。包含运行于 Wine 的 VST2 测试环境、JUCE 复刻和 WebAssembly 构建。", "full_name": "audiodestrukt/smarmsynth", "id": "scan-1345885873", "license": "NOASSERTION", "observed_at": "2026-10-16T07:15:07.166549Z", "pushed_at": "2026-08-25T18:07:40Z", "readme_sha256": "730e53ca5eccb35d267e50f7a653f3825702f465ed2ef183d5a72f2b55f43a5d", "readme_url": "https://github.com/audiodestrukt/smarmsynth/blob/main/README.md", "stars": 1, "targets": [ "binary" ], "topics": [ "audio-dsp", "juce", "reverse-engineering", "synthesizer", "vst", "webassembly" ], "url": "https://github.com/audiodestrukt/smarmsynth", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Firmware image in, CycloneDX SBOM and EU Cyber Resilience Act gap checklist out. Reads opkg/dpkg package databases, Yocto SPDX manifests and ESP-IDF headers straight out of a binary, with no unblob or binwalk required.", "description_language": "bilingual", "description_zh": "输入固件镜像，输出 CycloneDX SBOM 和欧盟《网络韧性法案》差距检查表。直接从二进制文件读取 opkg／dpkg 软件包数据库、Yocto SPDX 清单和 ESP-IDF 头部，无需 unblob 或 binwalk。", "full_name": "BeirlaenSander/cra-scan", "id": "scan-1374883872", "license": "AGPL-3.0", "observed_at": "2026-10-16T11:54:33.409735Z", "pushed_at": "2026-09-17T18:56:15Z", "readme_sha256": "af6e6872353d713482214e30db21c63037d69bb430a648dd53d4b23509ca7583", "readme_url": "https://github.com/BeirlaenSander/cra-scan/blob/main/README.md", "stars": 1, "targets": [ "binary", "firmware" ], "topics": [ "binary-analysis", "compliance", "cra", "cyber-resilience-act", "cyclonedx", "embedded", "embedded-linux", "esp-idf", "firmware", "firmware-analysis", "iot-security", "openwrt", "python", "reverse-engineering", "sbom", "spdx", "supply-chain-security", "vulnerability-management", "yocto", "zephyr" ], "url": "https://github.com/BeirlaenSander/cra-scan", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "", "description_language": "bilingual", "description_zh": "", "full_name": "blazeleechgravity/IDA-Pro-2026-Reverse-Engineering-Toolkit", "id": "scan-1255516792", "license": null, "observed_at": "2026-10-16T11:54:24.314939Z", "pushed_at": "2026-07-15T11:32:58Z", "readme_sha256": "c91534da627121c15e4796aa296659413f23a3ed5162ff5c31219cfbc57998f6", "readme_url": "https://github.com/blazeleechgravity/IDA-Pro-2026-Reverse-Engineering-Toolkit/blob/main/README.md", "stars": 1, "targets": [ "binary", "firmware" ], "topics": [ "automation", "binary-analysis", "binary-exploitation", "cybersecurity", "debugging", "decompiler", "disassembler", "firmware-analysis", "idapython", "malware-analysis", "reverse-engineering" ], "url": "https://github.com/blazeleechgravity/IDA-Pro-2026-Reverse-Engineering-Toolkit", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Bridge Ghidra to MCP and WebSocket JSON-RPC for program analysis and automation", "description_language": "bilingual", "description_zh": "通过 MCP 和 WebSocket JSON-RPC 将 Ghidra 接入程序分析与自动化。", "full_name": "ByteLandTechnology/ghidra-bridge", "id": "scan-1389187407", "license": "Apache-2.0", "observed_at": "2026-10-18T14:37:48.582893Z", "pushed_at": "2026-10-16T03:12:03Z", "readme_sha256": "4e6cd6b9743437427653e34869bf5d223efc8ec9c2e098c4bc8ea12a5abfe356", "readme_url": "https://github.com/ByteLandTechnology/ghidra-bridge/blob/32262a9954c14a2004ab9fe2487bf9a6ee1ea6a4/README.md", "stars": 1, "targets": [ "app", "binary" ], "topics": [ "ghidra", "ghidra-extension", "ghidra-plugin", "ghidra-scripts", "mcp", "mcp-apps", "mcp-gateway", "mcp-protocol", "mcp-server", "mcp-servers", "mcp-tools", "reverse-engineering" ], "url": "https://github.com/ByteLandTechnology/ghidra-bridge", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Diff two firmware images and surface exactly what changed: new binaries, flipped config flags, added certs, and shifted entropy regions.", "description_language": "bilingual", "description_zh": "比较两个固件镜像，并明确展示改动：新增二进制文件、变更的配置开关、新增证书，以及发生变化的熵分布区域。", "full_name": "cognis-digital/fwxray", "id": "scan-1262692295", "license": "NOASSERTION", "observed_at": "2026-10-16T11:54:25.004334Z", "pushed_at": "2026-09-14T18:01:56Z", "readme_sha256": "d22b447a063687141998b8bdeb4459d159fe33e5c1c6b1fe142c50dae9771a36", "readme_url": "https://github.com/cognis-digital/fwxray/blob/main/README.md", "stars": 1, "targets": [ "binary", "firmware" ], "topics": [ "automation", "blue-team", "cli", "cognis", "cognis-digital", "cognis-neural-suite", "cybersecurity", "embedded", "firmware", "firmware-analysis", "firmware-security", "fwxray", "infosec", "iot", "mcp-server", "ot-security", "python", "reconnaissance", "security", "self-hosted" ], "url": "https://github.com/cognis-digital/fwxray", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "IDA static analysis and runtime memory verification for classic WinMine", "description_language": "bilingual", "description_zh": "经典扫雷 WinMine 的 IDA 静态分析与运行时内存验证。", "full_name": "danielcho02/win_minesweeper_hack", "id": "scan-1315673172", "license": "MIT", "observed_at": "2026-10-16T01:37:22.798851Z", "pushed_at": "2026-07-29T04:17:37Z", "readme_sha256": "07fc31f8d133c80651a33f09081cd56100115a0f103d4df0b3b2caaa91f2f0d8", "readme_url": "https://github.com/danielcho02/win_minesweeper_hack/blob/main/README.md", "stars": 1, "targets": [ "binary" ], "topics": [ "ida", "idapython", "minesweeper", "python", "reverse-engineering", "reverse-engineering-tools", "win32" ], "url": "https://github.com/danielcho02/win_minesweeper_hack", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "BinaryPacketsDSL is a domain-specific language and toolkit for describing, parsing, and analyzing binary protocol packets. It is designed for clarity, robustness, and testability, with support for structured definitions, modifiers, and dynamic field handling.", "description_language": "bilingual", "description_zh": "BinaryPacketsDSL 是用于描述、解析和分析二进制协议数据包的领域专用语言及工具包，注重清晰性、健壮性和可测试性，支持结构化定义、修饰符及动态字段处理。", "full_name": "diff3/BinaryPacketsDSL", "id": "scan-966706355", "license": "MIT", "observed_at": "2026-10-16T01:36:58.896780Z", "pushed_at": "2026-04-15T09:43:43Z", "readme_sha256": "3af5713070a3c3bbc26250379a63f8527558c972830eb358b8c9cc2fc1758549", "readme_url": "https://github.com/diff3/BinaryPacketsDSL/blob/main/README.md", "stars": 1, "targets": [ "binary" ], "topics": [ "binary-protocols", "dsl", "parser", "protocol-analysis", "python3", "reverse-engineering" ], "url": "https://github.com/diff3/BinaryPacketsDSL", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Alley Cat (1984): byte-exact disassembly, static JavaScript translation, and HD graphics with a live CGA comparison slider.", "description_language": "bilingual", "description_zh": "Alley Cat（1984）：逐字节精确的反汇编、静态 JavaScript 转译，以及可通过实时滑块与 CGA 画面对比的高清图形。", "full_name": "dk8827/alleycat-remastered", "id": "scan-1411406852", "license": null, "observed_at": "2026-10-16T10:48:08.717700Z", "pushed_at": "2026-10-09T08:18:22Z", "readme_sha256": "4b43d46a20af5278eb55179357bc6b78e3a5621931319554239dfdf612857f0e", "readme_url": "https://github.com/dk8827/alleycat-remastered/blob/main/README.md", "stars": 1, "targets": [ "binary", "game" ], "topics": [ "disassembly", "dos", "game-preservation", "javascript", "remaster", "retro-gaming", "reverse-engineering", "static-recompilation" ], "url": "https://github.com/dk8827/alleycat-remastered", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Epson S1C33000 support in Ghidra", "description_language": "bilingual", "description_zh": "在 Ghidra 中支持 Epson S1C33000。", "full_name": "dogtopus/slac33", "id": "scan-1003044927", "license": null, "observed_at": "2026-10-18T14:37:48.584126Z", "pushed_at": "2025-06-24T09:48:51Z", "readme_sha256": "36f581f73a9beabba9d5630775991bc416b87817d36579203a7a9ac5ce365b72", "readme_url": "https://github.com/dogtopus/slac33/blob/bb3b15554721f5f60af6090bc3ed2b40dcf2fe83/README.md", "stars": 1, "targets": [ "binary" ], "topics": [ "ghidra", "ghidra-extension", "ghidra-plugin", "s1c33" ], "url": "https://github.com/dogtopus/slac33", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "🔐 AI/ML-powered tool for identifying cryptographic primitives in multi-architecture firmware binaries. Built with Streamlit, scikit-learn & Plotly.", "description_language": "bilingual", "description_zh": "🔐 由 AI／机器学习驱动的工具，用于识别多架构固件二进制文件中的密码学原语。使用 Streamlit、scikit-learn 和 Plotly 构建。", "full_name": "Drago1314/cryptofirmware-analyzer", "id": "scan-1213887708", "license": "MIT", "observed_at": "2026-10-16T11:54:22.449277Z", "pushed_at": "2026-04-18T00:59:06Z", "readme_sha256": "1f3abac28ab9063953797f48760641709a8e60501813d85a5477ac7ce07881bf", "readme_url": "https://github.com/Drago1314/cryptofirmware-analyzer/blob/master/README.md", "stars": 1, "targets": [ "binary", "firmware" ], "topics": [ "binary-analysis", "cryptography", "cybersecurity", "firmware-analysis", "machine-learning", "python", "scikit-learn", "streamlit" ], "url": "https://github.com/Drago1314/cryptofirmware-analyzer", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Full-stack C decompilation (ARM9/ARM7/overlays, 7,140 functions), asset extraction pipelines and hardware research for Dragon Quest Monsters: Joker (NDS). Contact: fanta@dqmj1.wiki", "description_language": "bilingual", "description_zh": "《勇者斗恶龙怪兽篇 Joker》（NDS）的全栈 C 反编译（ARM9／ARM7／覆盖模块，7,140 个函数）、素材提取流程及硬件研究。联系方式：fanta@dqmj1.wiki", "full_name": "FantasmaGlad/DQMJ1_Ultimate_Decompilation", "id": "scan-1396542040", "license": "MIT", "observed_at": "2026-10-16T10:47:43.877349Z", "pushed_at": "2026-10-07T21:50:50Z", "readme_sha256": "b93d63877e6f3483aa8a3cdc36b969520700af35528d33db99c2ea639fe3efb9", "readme_url": "https://github.com/FantasmaGlad/DQMJ1_Ultimate_Decompilation/blob/main/README.md", "stars": 1, "targets": [ "binary" ], "topics": [ "arm7", "arm9", "c", "decompilation", "disassembly", "dqmj", "dqmj1", "dragon-quest", "dragon-quest-monsters-joker", "ghidra", "nintendo-ds", "retro-engineering", "reverse-engineering", "rom-hacking", "wiki" ], "url": "https://github.com/FantasmaGlad/DQMJ1_Ultimate_Decompilation", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Browser-based viewer for ELF file structure, focused on RISC-V.", "description_language": "bilingual", "description_zh": "在浏览器中查看 ELF 文件结构的工具，重点支持 RISC-V。", "full_name": "gpthimble/elf-studio", "id": "scan-1363771745", "license": null, "observed_at": "2026-10-16T10:48:10.314728Z", "pushed_at": "2026-09-13T04:42:17Z", "readme_sha256": "8dd254e5ade7c5f60ddfc2c8346077386ad288df120cfd36c5c23cd92dc32eac", "readme_url": "https://github.com/gpthimble/elf-studio/blob/main/README.md", "stars": 1, "targets": [ "binary", "website" ], "topics": [ "binary-analysis", "developer-tools", "disassembler", "elf", "elf-parser", "hex-viewer", "javascript", "relocation", "reverse-engineering", "riscv", "symbol-table", "visualization" ], "url": "https://github.com/gpthimble/elf-studio", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Fast, zero-dependency, no_std Rust crate for scanning PE signatures with IDA-style patterns", "description_language": "bilingual", "description_zh": "快速、零依赖、支持 no_std 的 Rust crate，使用 IDA 风格模式扫描 PE 特征。", "full_name": "H0llyW00dzZ/pe-sigscan", "id": "scan-1227637496", "license": "Apache-2.0", "observed_at": "2026-10-16T01:37:22.090289Z", "pushed_at": "2026-08-04T00:23:33Z", "readme_sha256": "00355e5630e2a88110f2b913d6d828c8d73c0797a1636ebb6f35fb97a34d3de6", "readme_url": "https://github.com/H0llyW00dzZ/pe-sigscan/blob/master/README.md", "stars": 1, "targets": [ "binary" ], "topics": [ "binary", "cheat-engine-tool", "ghidra", "ida", "pe-signature", "reverse-engineering", "reverse-engineering-tools" ], "url": "https://github.com/H0llyW00dzZ/pe-sigscan", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": " Local web dashboard unifying OSINT, reverse engineering, binary exploitation, web/directory recon, and cryptography tools for CTF and authorized security research — upload a file, click Run, get a result.", "description_language": "bilingual", "description_zh": "本地 Web 仪表盘，整合 OSINT、逆向工程、二进制漏洞利用、Web/目录侦察及密码学工具，用于 CTF 和授权安全研究。上传文件、点击运行，即可获取结果。", "full_name": "JerenzeLevi/cyberdesk", "id": "scan-1347384451", "license": null, "observed_at": "2026-10-16T01:37:22.441179Z", "pushed_at": "2026-09-17T13:31:20Z", "readme_sha256": "1c62043f5bf7b2615cda4d59e65e782a9b6f45be9b03aa6a67f37398928b93b6", "readme_url": "https://github.com/JerenzeLevi/cyberdesk/blob/main/README.md", "stars": 1, "targets": [ "binary", "website" ], "topics": [ "binary-exploitation", "capture-the-flag", "cryptography", "ctf", "ctf-tools", "dashboard", "flask", "infosec", "osint", "osint-tool", "pwntools", "python", "reverse-engineering", "reverse-engineering-tools", "security-tools" ], "url": "https://github.com/JerenzeLevi/cyberdesk", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Static security analyzer for Android APK and iOS IPA packages (authorized review, static only). Built-in binary AXML decoder, manifest and Info.plist checks, JSON and SARIF output.", "description_language": "bilingual", "description_zh": "面向 Android APK 和 iOS IPA 包的静态安全分析器，仅用于授权审查和静态分析。内置二进制 AXML 解码器、Manifest 和 Info.plist 检查，支持 JSON 与 SARIF 输出。", "full_name": "joemunene-by/ghostmobile", "id": "scan-1275556115", "license": "MIT", "observed_at": "2026-10-16T01:36:34.018900Z", "pushed_at": "2026-06-21T22:04:03Z", "readme_sha256": "49cce4181908a31cf48363f52febbbdd971ea79e760de2754d868bb0f91a0bad", "readme_url": "https://github.com/joemunene-by/ghostmobile/blob/main/README.md", "stars": 1, "targets": [ "app", "binary" ], "topics": [ "android", "apk-analysis", "appsec", "ios", "mobile-security", "python", "sarif", "sast", "static-analysis" ], "url": "https://github.com/joemunene-by/ghostmobile", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A Ghidra processor extension for the Altera Nios II", "description_language": "bilingual", "description_zh": "适用于 Altera Nios II 的 Ghidra 处理器扩展。", "full_name": "jtang613/ghidra_processor_nios_II", "id": "scan-936312710", "license": null, "observed_at": "2026-10-18T14:37:48.581587Z", "pushed_at": "2025-03-05T14:11:42Z", "readme_sha256": "5c4078394fa598a23cf0ec7db2e3b7a093658169d936e49278515846d675a4c7", "readme_url": "https://github.com/jtang613/ghidra_processor_nios_II/blob/99b6b47d0751274975b62c7114774261888a6c3e/README.md", "stars": 1, "targets": [ "binary" ], "topics": [ "ghidra", "ghidra-extension", "ghidra-plugin", "ghidra-processor", "nios-ii", "nios-ii-processor", "nios2" ], "url": "https://github.com/jtang613/ghidra_processor_nios_II", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "", "description_language": "bilingual", "description_zh": "", "full_name": "keremmisik/freertos-ghidra", "id": "scan-1272146224", "license": "MIT", "observed_at": "2026-10-16T11:54:25.525041Z", "pushed_at": "2026-06-19T06:26:45Z", "readme_sha256": "9afd7caf85bc9a10443637ba4703eac3601fb83f1f5dbec7a23a89099993ab0b", "readme_url": "https://github.com/keremmisik/freertos-ghidra/blob/main/README.md", "stars": 1, "targets": [ "binary", "firmware" ], "topics": [ "embedded", "firmware-analysis", "freertos", "ghidra", "ghidra-scripts", "iot-security", "reverse-engineering", "rtos", "static-analysis" ], "url": "https://github.com/keremmisik/freertos-ghidra", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Binwalk FZ scans firmware/binary files on Flipper microSD for validated signatures and offsets. Adds Linux/Raspberry Pi mode using upstream Binwalk, with Flipper as UART controller and results display.", "description_language": "bilingual", "description_zh": "Binwalk FZ 扫描 Flipper microSD 上的固件／二进制文件，识别经校验的特征与偏移。新增使用上游 Binwalk 的 Linux／Raspberry Pi 模式，由 Flipper 充当 UART 控制器和结果显示器。", "full_name": "KernFerm/Binwalk-FZ", "id": "scan-1389624155", "license": "GPL-3.0", "observed_at": "2026-10-16T11:54:34.650321Z", "pushed_at": "2026-10-15T17:27:52Z", "readme_sha256": "fd7cb7928295ea0ad9610d177b092f5f3726cb092fb9f9f010922a023f03b555", "readme_url": "https://github.com/KernFerm/Binwalk-FZ/blob/main/README.md", "stars": 1, "targets": [ "binary", "firmware" ], "topics": [ "binary-analysis", "binwalk", "cybersecurity", "embedded-systems", "entropy-analysis", "fap", "file-signatures", "firmware-analysis", "flipper-zero", "flipperzero", "hex-viewer", "linux", "raspberry-pi", "reverse-engineering", "uart" ], "url": "https://github.com/KernFerm/Binwalk-FZ", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "reverse engineering assistant for strings, IOCs, imports, and Ghidra assisted analysis", "description_language": "bilingual", "description_zh": "逆向工程助手，支持字符串、失陷指标（IOC）、导入项及 Ghidra 辅助分析。", "full_name": "Luvvydev/reassist", "id": "scan-1135351843", "license": "MIT", "observed_at": "2026-10-18T14:37:48.582021Z", "pushed_at": "2026-01-16T02:04:26Z", "readme_sha256": "dc96f45d8aa8dcacf4b4b584ce8d6d9846b1f80f08100fabd531454916f20f31", "readme_url": "https://github.com/Luvvydev/reassist/blob/7464cbaa49fe7362e36bb3360bc0c8a30ea39ea2/README.md", "stars": 1, "targets": [ "binary" ], "topics": [ "ghidra", "ghidra-extension", "ghidra-plugin", "ghidra-plugins", "ghidra-scripts", "imports", "iocs", "python", "reverse-engineering", "security", "strings", "tooling" ], "url": "https://github.com/Luvvydev/reassist", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Compare binaries inside Binary Ninja with synchronized graph and linear diffs, corpus comparisons, and symbol transfer.", "description_language": "bilingual", "description_zh": "在 Binary Ninja 中比较二进制文件，提供同步图形与线性差异视图、语料库比较和符号迁移。", "full_name": "meerkatone/binja_diff_view", "id": "scan-1408712003", "license": "MIT", "observed_at": "2026-10-16T01:37:03.816111Z", "pushed_at": "2026-10-14T07:52:13Z", "readme_sha256": "5650d69c6a780c641ab84dd1b69f6ca266600f7f4acee61f3faf0e335b2ff7cc", "readme_url": "https://github.com/meerkatone/binja_diff_view/blob/main/README.md", "stars": 1, "targets": [ "binary" ], "topics": [ "binary-diffing", "binary-ninja-plugin" ], "url": "https://github.com/meerkatone/binja_diff_view", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Automated static-analysis pipeline for embedded Linux firmware. Systematically extracts and audits credentials, cryptographic keys, password hashes, ELF binary hardening, unsafe C functions, and debug interfaces.", "description_language": "bilingual", "description_zh": "面向嵌入式 Linux 固件的自动化静态分析流程，系统地提取并审计凭据、加密密钥、密码哈希、ELF 二进制加固、不安全 C 函数和调试接口。", "full_name": "mosfaqur/firmware-extract", "id": "scan-1357936093", "license": "MIT", "observed_at": "2026-10-16T11:54:31.790099Z", "pushed_at": "2026-09-16T23:33:25Z", "readme_sha256": "86a41ac8ec0a4b043d5471b4eb4131969c38fecbb50dcfdef307f7c97e41c408", "readme_url": "https://github.com/mosfaqur/firmware-extract/blob/main/README.md", "stars": 1, "targets": [ "binary", "firmware" ], "topics": [ "arm64", "binary-analysis", "binwalk", "cryptographic-hygiene", "cybersecurity-research", "embedded-linux", "femtocell", "firmware-analysis", "firmware-extraction", "hashcat", "iot-security", "mips", "reverse-engineering", "static-analysis", "telecom-security" ], "url": "https://github.com/mosfaqur/firmware-extract", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Automated vulnerability assessment and risk analysis platform with Nmap scanning, CVE intelligence, binary analysis, YARA threat detection, and PDF security reporting", "description_language": "bilingual", "description_zh": "自动化漏洞评估与风险分析平台，提供 Nmap 扫描、CVE 情报、二进制分析、YARA 威胁检测和 PDF 安全报告。", "full_name": "mustafajaved304/VulnX", "id": "scan-1358090537", "license": null, "observed_at": "2026-10-16T01:37:22.440587Z", "pushed_at": "2026-09-05T10:52:37Z", "readme_sha256": "245ec98a18c8f86aae1b24adb60aa9845816fcd08df05318e92d805a912fca6d", "readme_url": "https://github.com/mustafajaved304/VulnX/blob/main/README.md", "stars": 1, "targets": [ "binary" ], "topics": [ "binary-analysis", "binary-analysis-and-reverse-engineering-framework", "cve", "cvss", "cybersecurity", "cybersecurity-projects", "malware-analysis", "network-security", "nmap", "nmap-scan", "penetration-testing", "penetration-testing-framework", "penetration-testing-tools", "reverse-engineering", "reverse-engineering-tools", "risk-analysis", "streamlit", "vulnerability-assessment", "vulnerability-assessment-and-penetration-testing", "yara-rules" ], "url": "https://github.com/mustafajaved304/VulnX", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "An in-depth technical investigation of REA: source-code mechanisms, original papers, reproducible experiments, and evidence-driven behavior reconstruction.", "description_language": "bilingual", "description_zh": "REA 深度技术调查：源码机制、原始论文、可复现实验与证据驱动的行为重建。", "full_name": "neuralsun/rea-deep-dive", "id": "scan-1416261358", "license": "NOASSERTION", "observed_at": "2026-10-16T07:14:59.829088Z", "pushed_at": "2026-10-13T00:18:28Z", "readme_sha256": "7497f3b23114f2ec65c411185b69d9e30d2095673f8c2c82beb6eeb6f751b716", "readme_url": "https://github.com/neuralsun/rea-deep-dive/blob/main/README.md", "stars": 1, "targets": [ "app", "binary" ], "topics": [ "ai-agents", "binary-analysis", "chinese", "electron", "mcp", "research", "reverse-engineering", "technical-writing" ], "url": "https://github.com/neuralsun/rea-deep-dive", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Fast, open binary diff for ELF/PE — reports structural changes and, for x86-64, which functions were added, removed, or modified. Rust CLI + library.", "description_language": "bilingual", "description_zh": "用于 ELF/PE 的快速开源二进制差异比较工具，报告结构变化；对于 x86-64，还能指出新增、删除或修改的函数。提供 Rust 命令行工具和库。", "full_name": "nico-perales/deltabin", "id": "scan-1329737045", "license": "Apache-2.0", "observed_at": "2026-10-16T01:37:03.953473Z", "pushed_at": "2026-09-01T16:53:18Z", "readme_sha256": "56d4af735ae214e2835c0ed33a684676eb915cfa979b0ae0b0d8943fae826c95", "readme_url": "https://github.com/nico-perales/deltabin/blob/main/README.md", "stars": 1, "targets": [ "binary" ], "topics": [ "binary-diffing", "cli", "disassembly", "elf", "malware-analysis", "patch-diffing", "pe", "reverse-engineering", "rust", "security" ], "url": "https://github.com/nico-perales/deltabin", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "TypingMaster 12.0.1.981 - full reverse-engineering source tree, analysis and documentation", "description_language": "bilingual", "description_zh": "TypingMaster 12.0.1.981：完整的逆向工程源码树、分析及文档。", "full_name": "NurMohammadDuari/TypingMaster12-Source-Code-Decoded", "id": "scan-1410716637", "license": "NOASSERTION", "observed_at": "2026-10-18T14:36:25.627643Z", "pushed_at": "2026-10-09T03:18:04Z", "readme_sha256": "de4e09df7e0ca18d27bfdc389bccbb1cfffefa5cc565c270cdbed1c2867c858f", "readme_url": "https://github.com/NurMohammadDuari/TypingMaster12-Source-Code-Decoded/blob/1f190cfb817450fea6ace3bf9861028268edd70c/README.md", "stars": 1, "targets": [ "binary" ], "topics": [ "delphi", "disassembly", "ghidra", "packer", "pe32", "reverse-engineering", "typingmaster", "unpacking", "vcl", "wine" ], "url": "https://github.com/NurMohammadDuari/TypingMaster12-Source-Code-Decoded", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "PS2 look for GTA San Andreas – The Definitive Edition: skygfx-style colour filter, PS2 timecyc, radiosity, SpeedFX, grain, neo water drops, GTA fog – on top of DE's modern renderer. x64 ASI plugin with an in-game debug menu.", "description_language": "bilingual", "description_zh": "为 GTA San Andreas – The Definitive Edition 带来 PS2 风格：在 DE 的现代渲染器之上提供 skygfx 风格色彩滤镜、PS2 timecyc、辐射度效果、SpeedFX、颗粒、neo 水滴和 GTA 雾效。带游戏内调试菜单的 x64 ASI 插件。", "full_name": "RAZORRZR0/SkyGfxDE", "id": "scan-1392205851", "license": "MIT", "observed_at": "2026-10-16T10:47:43.957368Z", "pushed_at": "2026-10-11T22:22:46Z", "readme_sha256": "afc6a461ec3e4f0df2aea5f8f13dded714b655556b8bd5aea62ef31c0f567404", "readme_url": "https://github.com/RAZORRZR0/SkyGfxDE/blob/main/README.md", "stars": 1, "targets": [ "binary", "game" ], "topics": [ "asi-plugin", "definitive-edition", "directx11", "gta-san-andreas", "gta-trilogy", "modding", "reverse-engineering", "skygfx", "unreal-engine" ], "url": "https://github.com/RAZORRZR0/SkyGfxDE", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Complete static reconstruction of vgui2.dll (GoldSrc) from its binary: our own code, the original ABI, 349/349 methods, 18 tests, GPL v3.", "description_language": "bilingual", "description_zh": "从二进制文件完整静态重建 vgui2.dll（GoldSrc）：自主代码、原始 ABI、349/349 个方法、18 项测试，采用 GPL v3。", "full_name": "V3tR1l1oN/vgui2-reconstruction", "id": "scan-1363253664", "license": "GPL-3.0", "observed_at": "2026-10-16T01:37:22.165579Z", "pushed_at": "2026-09-11T23:19:38Z", "readme_sha256": "2d3baceb08a5c694c86447bc0893c29959c06bace36133c43afb18cad9bf256a", "readme_url": "https://github.com/V3tR1l1oN/vgui2-reconstruction/blob/main/README.md", "stars": 1, "targets": [ "binary" ], "topics": [ "binary-analysis", "capstone", "cpp", "dll", "goldsrc", "gpl-v3", "halflife", "keyvalues", "msvc", "reconstruction", "reverse-engineering", "reverse-engineering-tools", "rtti", "vgui2", "win32", "windows" ], "url": "https://github.com/V3tR1l1oN/vgui2-reconstruction", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A Steam installation of The Murder of Sonic the Hedgehog (SEGA, 2023), measured file by file: 178 files, 468,913,725 bytes; four UnityFS bundles opened with residue 0; 996,569,296 headerless side-file bytes attributed, 433 left over; and 124 of 137 binaries carrying a hash where a date should be. No game assets here, only measurements.", "description_language": "bilingual", "description_zh": "逐文件测量 The Murder of Sonic the Hedgehog（SEGA，2023）的 Steam 安装：178 个文件，468,913,725 字节；4 个 UnityFS 包被打开且剩余未解析字节为 0；996,569,296 字节的无头旁置文件数据已归属，剩余 433 字节；137 个二进制文件中有 124 个在本应存放日期的位置含有哈希。此处没有游戏资源，只有测量结果。", "full_name": "vs-sr-dev/pc-themurderofsonicthehedgehog-doc", "id": "scan-1360640389", "license": null, "observed_at": "2026-10-16T10:48:14.520695Z", "pushed_at": "2026-09-07T20:31:42Z", "readme_sha256": "6c3299e20ff047bd1b3805d233960ffaf0e5cfe5b9871eae22592320ee0fa545", "readme_url": "https://github.com/vs-sr-dev/pc-themurderofsonicthehedgehog-doc/blob/master/README.md", "stars": 1, "targets": [ "binary", "game" ], "topics": [ "addressables", "file-format", "fmod", "ink", "pe-format", "reverse-engineering", "sonic", "steam", "unity", "unityfs" ], "url": "https://github.com/vs-sr-dev/pc-themurderofsonicthehedgehog-doc", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A set of five plugins designed to work in Ghidra providing support for Debugging, Config Extraction, API Mapping, Visualisation and Taint Analysis", "description_language": "bilingual", "description_zh": "用于 Ghidra 的五个插件，支持调试、配置提取、API 映射、可视化及污点分析。", "full_name": "x0prc/PrismGhidra", "id": "scan-946112625", "license": "MIT", "observed_at": "2026-10-18T14:37:48.583914Z", "pushed_at": "2026-02-16T14:28:27Z", "readme_sha256": "9b244c97db656042c7bd66ce0dd68dc51cc5b33c2bf4e430b9ca5559fc1d5017", "readme_url": "https://github.com/x0prc/PrismGhidra/blob/d7b1de11d04e7c1cd04da334315d308deb7ba17c/README.md", "stars": 1, "targets": [ "binary" ], "topics": [ "ghidra", "ghidra-extension", "ghidra-plugin", "java" ], "url": "https://github.com/x0prc/PrismGhidra", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Discord Rich Presence extension for Ghidra with customizable display, privacy and session options.", "description_language": "bilingual", "description_zh": "Ghidra 的 Discord Rich Presence 扩展，可定制显示、隐私及会话选项。", "full_name": "Zoxemik/GhidraRichPresence", "id": "scan-1279753077", "license": "Apache-2.0", "observed_at": "2026-10-18T14:37:48.585682Z", "pushed_at": "2026-06-25T08:46:58Z", "readme_sha256": "33a02562fb37710f72f00331fd5796862042de775ee418452e4d3352c7163bf6", "readme_url": "https://github.com/Zoxemik/GhidraRichPresence/blob/8b39a8561d4915b0cef58299c35100ef1610b4f6/README.md", "stars": 1, "targets": [ "binary" ], "topics": [ "discord", "discordrichpresence", "ghidra", "ghidra-plugin", "java", "java21", "reverse-engineering" ], "url": "https://github.com/Zoxemik/GhidraRichPresence", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "100% client-side multi-architecture static disassembler", "description_language": "bilingual", "description_zh": "完全在客户端运行的多架构静态反汇编器。", "full_name": "zrnge/webasm", "id": "scan-1260196669", "license": null, "observed_at": "2026-10-16T07:15:06.691511Z", "pushed_at": "2026-06-06T06:10:26Z", "readme_sha256": "43fc01e0e2738762957b20495dcd719293c235a128afabfba3317add5410819b", "readme_url": "https://github.com/zrnge/webasm/blob/main/README.md", "stars": 1, "targets": [ "binary" ], "topics": [ "arm", "arm64", "binary-analysis", "capstone-engine", "client-side", "disassembler", "elf-parser", "malware-analysis", "pe-parser", "react", "reverse-engineering", "security-tools", "static-site", "typescript", "wasm", "webassembly", "x64", "x86" ], "url": "https://github.com/zrnge/webasm", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Ghidra for local AI models — decompile, inspect, and patch GGUF / LoRA / Ollama models in a visual workbench, and build new ones from modular \"sector\" adapters. No retraining required.", "description_language": "bilingual", "description_zh": "面向本地 AI 模型的 Ghidra：在可视化工作台中反编译、检查和修补 GGUF/LoRA/Ollama 模型，并使用模块化“sector”适配器构建新模型，无需重新训练。", "full_name": "zxkuhl/SectorForge", "id": "scan-1400821927", "license": "MIT", "observed_at": "2026-10-16T01:37:22.862692Z", "pushed_at": "2026-10-08T00:08:59Z", "readme_sha256": "2eba1750ae9b8fb14bf90f28ddfbb2098353018b84b95c953acdb006abe93454", "readme_url": "https://github.com/zxkuhl/SectorForge/blob/main/README.md", "stars": 1, "targets": [ "app", "binary" ], "topics": [ "ai-tools", "electron", "electronjs", "fine-tuning", "fine-tuning-llm", "fine-tuning-llms", "fine-tuning-model", "ggml", "gguf", "interpretability", "llm", "llms", "lora", "mmproj", "model-editing", "ollama", "reverse-engineering", "reverse-engineering-api", "reverse-engineering-tool", "reverse-engineering-tools" ], "url": "https://github.com/zxkuhl/SectorForge", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Reverse-engineer runnable targets (websites, SPAs, browser apps, mini programs, Electron, binaries) into evidence-backed mechanism notes, then distill them into build-ready functional specs.", "description_language": "bilingual", "description_zh": "逆向分析可运行目标（网站、SPA、浏览器应用、小程序、Electron、二进制程序），生成有证据支持的机制笔记，再提炼为可直接实施的功能规格。", "full_name": "zz2007327-code/Open-Source-Everything", "id": "scan-1418420303", "license": "NOASSERTION", "observed_at": "2026-10-16T01:37:22.343122Z", "pushed_at": "2026-10-14T06:55:49Z", "readme_sha256": "e5ca7248e50fbcfbff36d194beac973bf3374cbd844abf37a5701760ad4bb247", "readme_url": "https://github.com/zz2007327-code/Open-Source-Everything/blob/main/README.md", "stars": 1, "targets": [ "app", "binary", "website" ], "topics": [ "ai-skills", "clean-room-rewrite", "functional-specification", "reverse-engineering", "reverse-engineering-tools", "sandbox-analysis", "teardown" ], "url": "https://github.com/zz2007327-code/Open-Source-Everything", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Real-world reverse engineering with AI agents. Explore REA case studies, software reconstructions, demos, source code, and the evidence behind each result.", "description_language": "bilingual", "description_zh": "使用 AI 智能体开展真实逆向工程，探索 REA 案例、软件重建、演示、源代码及每项结果背后的证据。", "full_name": "aliaihub/rea-casebook", "id": "scan-1419902445", "license": "MIT", "observed_at": "2026-10-16T07:15:00.821286Z", "pushed_at": "2026-10-15T03:32:45Z", "readme_sha256": "6f466751d99d8ee50448c0b90090369ff1a6c5ec91b4b09355418f8c81aa61fc", "readme_url": "https://github.com/aliaihub/rea-casebook/blob/main/README.md", "stars": 0, "targets": [ "app", "binary" ], "topics": [ "ai-agents", "binary-analysis", "case-studies", "decompilation", "developer-tools", "electron", "ghidra", "mcp", "rea-showcase", "reverse-engineering", "software-preservation", "software-reconstruction" ], "url": "https://github.com/aliaihub/rea-casebook", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Learn assembly from zero: ARM64 on Apple Silicon, plus x86-64, RISC-V, reverse engineering, WebAssembly, and hands-on projects — served as a clean Astro course site.", "description_language": "bilingual", "description_zh": "从零学习汇编：涵盖 Apple Silicon 上的 ARM64，以及 x86-64、RISC-V、逆向工程、WebAssembly 和实践项目，以简洁的 Astro 课程网站呈现。", "full_name": "aliakbar-zohour/ASM_ZERO", "id": "scan-1313922267", "license": null, "observed_at": "2026-10-16T07:15:07.959955Z", "pushed_at": "2026-07-29T00:01:09Z", "readme_sha256": "df954644442f2e3583516df3bb33cc963c2d665940e4c89b60457490483a4ed8", "readme_url": "https://github.com/aliakbar-zohour/ASM_ZERO/blob/main/README.md", "stars": 0, "targets": [ "binary" ], "topics": [ "aarch64", "apple-silicon", "arm64", "assembly", "astro", "astrojs", "education", "macos", "reverse-engineering", "riscv", "systems-programming", "wasm", "webassembly", "x86-64" ], "url": "https://github.com/aliakbar-zohour/ASM_ZERO", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Open, local-first reverse engineering platform — PE/ELF/Mach-O, x86/x64/AArch64 disassembly, graphs, pseudocode. Rust engine, desktop app.", "description_language": "bilingual", "description_zh": "开放、本地优先的逆向工程平台，支持 PE/ELF/Mach-O、x86/x64/AArch64 反汇编、图形和伪代码，采用 Rust 引擎与桌面应用。", "full_name": "Altumptic/paranoia", "id": "scan-1421113223", "license": "Apache-2.0", "observed_at": "2026-10-16T07:15:01.314034Z", "pushed_at": "2026-10-15T18:13:15Z", "readme_sha256": "628aae3a96c37797352f2ced212d2ef059e4ea4e7aa7eae4e8cdff1a26648a13", "readme_url": "https://github.com/Altumptic/paranoia/blob/main/README.md", "stars": 0, "targets": [ "app", "binary" ], "topics": [ "binary-analysis", "decompiler", "disassembler", "electron", "ida-alternative", "reverse-engineering", "rust", "security" ], "url": "https://github.com/Altumptic/paranoia", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A browser re-implementation of PopCap's Insaniquarium Deluxe (2004), built on constants recovered by decompiling the original binary rather than tuned by feel. TypeScript, Phaser 3, a pure deterministic simulation, 4,967 tests.", "description_language": "bilingual", "description_zh": "PopCap 的 Insaniquarium Deluxe（2004）的浏览器重新实现，使用反编译原始二进制恢复的常量，而非凭感觉调参。采用 TypeScript、Phaser 3、纯确定性模拟，包含 4,967 项测试。", "full_name": "AmeerMH/insaniquarium-web", "id": "scan-1359215755", "license": "NOASSERTION", "observed_at": "2026-10-18T14:41:33.241090Z", "pushed_at": "2026-09-06T14:22:08Z", "readme_sha256": "4b0ae88aeb03a89cb97e79c3c36906c56f9a0f6add921787ac81792209b72bd0", "readme_url": "https://github.com/AmeerMH/insaniquarium-web/blob/f3fe0565a91553c1b0f69d50cf44df48ece2b5aa/README.md", "stars": 0, "targets": [ "binary", "game", "website" ], "topics": [ "deterministic-simulation", "game-development", "game-reimplementation", "ghidra", "phaser", "reverse-engineering", "typescript", "webgl" ], "url": "https://github.com/AmeerMH/insaniquarium-web", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "AXI-compliant CLI for agent-driven Flutter app automation - widget-tree snapshots, driver interactions, native device control, multi-app orchestration", "description_language": "bilingual", "description_zh": "符合 AXI 的命令行工具，用于智能体驱动的 Flutter 应用自动化，支持组件树快照、驱动交互、原生设备控制和多应用编排。", "full_name": "ammar00sheikh/flutter-axi", "id": "scan-1289563234", "license": "MIT", "observed_at": "2026-10-16T11:55:04.681510Z", "pushed_at": "2026-07-05T05:20:41Z", "readme_sha256": "d0fbcfd2e4691037b3ebccde8e131dc961a63b2649c358306efe6226e958d8d0", "readme_url": "https://github.com/ammar00sheikh/flutter-axi/blob/main/README.md", "stars": 0, "targets": [ "app", "binary" ], "topics": [], "url": "https://github.com/ammar00sheikh/flutter-axi", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Learn reverse-engineering techniques, covering static and dynamic analysis as well as advanced binary protections such as packing, obfuscation and encryption.", "description_language": "bilingual", "description_zh": "学习逆向工程技术，涵盖静态／动态分析以及加壳、混淆和加密等进阶二进制保护。", "full_name": "atomjay/reverse_analysis", "id": "scan-1010511574", "license": null, "observed_at": "2026-10-18T14:36:30.411880Z", "pushed_at": "2025-06-29T08:26:02Z", "readme_sha256": "da5b22d918207c19c4f815f40a9c98f7ea998b0310aa1650e6ea287f826810f1", "readme_url": "https://github.com/atomjay/reverse_analysis/blob/eb99ac6f8aad3ca74f7ca6c7aaee54ab28e5baeb/README.md", "stars": 0, "targets": [ "binary" ], "topics": [ "assembly", "binary-analysis", "disassembly", "dynamic-analysis", "malware-analysis", "obfuscation", "packing", "reverse-engineering", "static-analysis", "unpacking" ], "url": "https://github.com/atomjay/reverse_analysis", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Firmware binary analysis tool in Rust — magic byte scanning, Shannon entropy analysis, string extraction and JSON reporting for embedded security research.", "description_language": "bilingual", "description_zh": "使用 Rust 编写的固件二进制分析工具，为嵌入式安全研究提供魔数字节扫描、香农熵分析、字符串提取和 JSON 报告。", "full_name": "Benjaminjacob443/firmware-analyzer", "id": "scan-1221872005", "license": null, "observed_at": "2026-10-16T11:54:22.863483Z", "pushed_at": "2026-04-26T19:41:30Z", "readme_sha256": "01a3a5b4d4baf72bdf9350dc96a01378053740b6306a2f7a2f9aa2ce9e238fe7", "readme_url": "https://github.com/Benjaminjacob443/firmware-analyzer/blob/main/Readme.md", "stars": 0, "targets": [ "binary", "firmware" ], "topics": [ "binary-analysis", "embedded-security", "entropy-analysis", "firmware", "firmware-analysis", "iot-security", "offensive-security", "reverse-engineering", "rust", "security-tools" ], "url": "https://github.com/Benjaminjacob443/firmware-analyzer", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Ω Zero-dependency JS security scanner — deobfuscates webpack bundles, AST taint tracking, SW analysis, chunk graph. 273 findings on Juice Shop in 10.7s. Termux-native.", "description_language": "bilingual", "description_zh": "Ω 零依赖 JavaScript 安全扫描器，支持 webpack 打包代码去混淆、AST 污点追踪、Service Worker 分析和分块依赖图。称在 10.7 秒内从 Juice Shop 中发现 273 项问题，可在 Termux 中原生运行。", "full_name": "Black0ffR/omega-unified", "id": "scan-1286119998", "license": null, "observed_at": "2026-10-16T07:14:49.441152Z", "pushed_at": "2026-07-01T19:22:24Z", "readme_sha256": "c8f3fda168a5f9f9174a3a840e48a16bc01e4f962c5b5c118d2918bf01a90bee", "readme_url": "https://github.com/Black0ffR/omega-unified/blob/main/README.md", "stars": 0, "targets": [ "binary" ], "topics": [ "ast-taint", "bug-bounty", "deobfuscation", "javascript", "js-scanner", "offensive-security", "prototype-pollution", "recon", "security", "static-analysis", "termux", "webpack", "xss-detection", "zero-dependency" ], "url": "https://github.com/Black0ffR/omega-unified", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A blog post on how i reverse engineered the osu!collector app", "description_language": "bilingual", "description_zh": "一篇介绍作者如何逆向分析 osu!collector 应用的博客文章。", "full_name": "borgox/osu-collector-reverse", "id": "scan-1124867513", "license": null, "observed_at": "2026-10-16T07:15:01.485230Z", "pushed_at": "2025-12-29T18:52:07Z", "readme_sha256": "bc25e88938241d455a51c7731c4917a0fbb33e5a250f10e667c26a07057b9d5e", "readme_url": "https://github.com/borgox/osu-collector-reverse/blob/main/README.md", "stars": 0, "targets": [ "app", "binary" ], "topics": [ "assembly-x86", "electron", "osu", "reverse-engineering" ], "url": "https://github.com/borgox/osu-collector-reverse", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "ARMv7-M (Thumb) instruction decoder and disassembler in Python - full instruction set, objdump-compatible output, generated from a YAML spec.", "description_language": "bilingual", "description_zh": "使用 Python 编写的 ARMv7-M（Thumb）指令解码器与反汇编器：覆盖完整指令集，输出兼容 objdump，并从 YAML 规范生成。", "full_name": "chgroeling/armv7m-decoder", "id": "scan-1313391759", "license": "GPL-3.0", "observed_at": "2026-10-16T11:54:27.369394Z", "pushed_at": "2026-08-04T06:53:06Z", "readme_sha256": "59042609766d2cf733fcbb47b1c9fb671bdc6b239d87d32a24b5b7dda6ee3b72", "readme_url": "https://github.com/chgroeling/armv7m-decoder/blob/main/README.md", "stars": 0, "targets": [ "binary", "firmware" ], "topics": [ "arm", "armv7m", "code-generation", "cortex-m", "dissassembler", "embedded", "firmware-analysis", "instruction-decoding", "objdump", "python", "reverse-engineering", "thumb" ], "url": "https://github.com/chgroeling/armv7m-decoder", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Python library for analyzing malicious binaries through emulation, pattern matching, and integration with reverse engineering tools.", "description_language": "bilingual", "description_zh": "用于分析恶意二进制文件的 Python 库，结合模拟、模式匹配及逆向工程工具集成。", "full_name": "deja666/azazel", "id": "scan-1206193775", "license": "MIT", "observed_at": "2026-10-18T14:37:48.586517Z", "pushed_at": "2026-04-10T06:53:02Z", "readme_sha256": "e966fba5e8ea47cdace3669d67193122e8b446192b62a48ef98c095021b8e110", "readme_url": "https://github.com/deja666/azazel/blob/8f8f1ea601de901730451a7016e0ac424ff17d1b/README.md", "stars": 0, "targets": [ "binary" ], "topics": [ "binary", "ghidra-plugin", "library", "malware-analysis", "pattern-matching", "python", "reverse-engineering", "rich", "yara-rules" ], "url": "https://github.com/deja666/azazel", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "EA Sports Cricket 07 (2006) running in the browser: every function statically recompiled from x86 to C, then WebAssembly, with Direct3D 8 rebuilt on WebGPU. Bring your own copy.", "description_language": "bilingual", "description_zh": "让 EA Sports Cricket 07（2006）在浏览器中运行：将所有函数从 x86 静态重编译为 C，再编译为 WebAssembly，并在 WebGPU 上重建 Direct3D 8。需自备游戏副本。", "full_name": "Dhaiwat10/cricket07-browser", "id": "scan-1421885485", "license": "MIT", "observed_at": "2026-10-16T10:47:48.456481Z", "pushed_at": "2026-10-16T08:58:39Z", "readme_sha256": "e9d98171c51d7e0a3119e4b3132b37587b6316e0827c83d07bd4f6ef019c1773", "readme_url": "https://github.com/Dhaiwat10/cricket07-browser/blob/main/README.md", "stars": 0, "targets": [ "binary", "website" ], "topics": [ "cricket", "direct3d", "emscripten", "reverse-engineering", "static-recompilation", "webassembly", "webgpu" ], "url": "https://github.com/Dhaiwat10/cricket07-browser", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Non-destructive reverse engineering of the TP-Link Archer C7 v1.1 router. Includes UART access, full NOR flash dump without desoldering, firmware analysis, kernel binary patching, proprietary image reconstruction, and temporary RAM boot (TFTP) to obtain an early root shell.", "description_language": "bilingual", "description_zh": "对 TP-Link Archer C7 v1.1 路由器进行非破坏性逆向工程，包括 UART 访问、无需拆焊的完整 NOR 闪存转储、固件分析、内核二进制修补、专有镜像重建，以及通过 TFTP 临时从 RAM 启动以获得早期 root Shell。", "full_name": "frontal1660/archer-c7-firmware-reverse", "id": "scan-1362023973", "license": null, "observed_at": "2026-10-16T11:54:32.344900Z", "pushed_at": "2026-09-09T08:07:17Z", "readme_sha256": "e5e1e5ec2dab0021d0fed94f9b7782264cf6f8d767e78dc7ea64ceb20c7c231b", "readme_url": "https://github.com/frontal1660/archer-c7-firmware-reverse/blob/main/README.md", "stars": 0, "targets": [ "binary", "firmware" ], "topics": [ "archer-c7", "binary-patching", "embedded-systems", "firmware-analysis", "firmware-dump", "firmware-extraction", "kernel-patching", "reverse-engineering", "tftp", "tp-link", "u-boot", "uart" ], "url": "https://github.com/frontal1660/archer-c7-firmware-reverse", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A local multi-agent AI system featuring two specialised assistants: a software development assistant for code generation and review, and a reverse engineering assistant for analysing assembly and decompiled binaries.", "description_language": "bilingual", "description_zh": "本地多智能体 AI 系统，包含两种专用助手：用于代码生成与审查的软件开发助手，以及用于分析汇编和反编译二进制文件的逆向工程助手。", "full_name": "hui-joyce/local-multi-agent-dev", "id": "scan-1217744432", "license": null, "observed_at": "2026-10-16T11:54:22.824135Z", "pushed_at": "2026-08-16T05:00:10Z", "readme_sha256": "d75539bf22a0652a976def6a4b7f8f34ad226cd9518b2bd76578bba184314ef9", "readme_url": "https://github.com/hui-joyce/local-multi-agent-dev/blob/main/README.md", "stars": 0, "targets": [ "app", "binary", "firmware" ], "topics": [ "apple", "apple-silicon", "firmware-analysis", "ios", "ipsw", "jenkins", "langgraph", "llm-agents", "mlx", "mlx-lm" ], "url": "https://github.com/hui-joyce/local-multi-agent-dev", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Play EA Sports Rugby 08 (PC, 2007) in the browser: static recompilation of the x86 game to WebAssembly, Direct3D 8 on WebGL 2. Installable PWA. Bring your own copy.", "description_language": "bilingual", "description_zh": "在浏览器中运行 EA Sports Rugby 08（PC，2007）：将 x86 游戏静态重编译为 WebAssembly，并在 WebGL 2 上实现 Direct3D 8。支持安装为 PWA，需自行提供游戏副本。", "full_name": "IFAKA/rugby08-web", "id": "scan-1419966096", "license": null, "observed_at": "2026-10-16T07:15:08.969812Z", "pushed_at": "2026-10-15T00:34:03Z", "readme_sha256": "039566bb5d273b49fee04aad31919b7f97f39e439d4e3c23ac2dfea9a8d9a148", "readme_url": "https://github.com/IFAKA/rugby08-web/blob/main/README.md", "stars": 0, "targets": [ "binary", "game", "website" ], "topics": [ "browser-game", "direct3d8", "emscripten", "game-port", "pwa", "recompilation", "reverse-engineering", "rugby", "rugby-08", "static-recompilation", "webassembly", "webgl2" ], "url": "https://github.com/IFAKA/rugby08-web", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Academic security project demonstrating an Android repackaging attack, where a legitimate APK is disassembled, modified with malicious smali code, re-signed, and redeployed to perform privacy-invasive actions such as contact deletion and location tracking (Information Technology Security, UNIWA).", "description_language": "bilingual", "description_zh": "演示 Android 重打包攻击的学术安全项目：对合法 APK 进行反汇编、加入恶意 smali 代码、重新签名并部署，以执行删除联系人和位置跟踪等侵犯隐私的行为（UNIWA 信息技术安全课程）。", "full_name": "Information-Technology-Security/Android-Repackaging", "id": "scan-870241659", "license": null, "observed_at": "2026-10-16T01:36:34.355167Z", "pushed_at": "2026-02-19T01:11:16Z", "readme_sha256": "4d8931206b97b76bea9cce27f8560cb72867f5d54076141feaf7c38de1e05adf", "readme_url": "https://github.com/Information-Technology-Security/Android-Repackaging/blob/main/README.md", "stars": 0, "targets": [ "app", "binary" ], "topics": [ "academic-project", "android-repackaging", "android-security", "apk-analysis", "cybersecurity", "ethical-hacking", "information-security", "malware-analysis", "mobile-security", "reverse-engineering", "seed-labs", "smali", "uniwa" ], "url": "https://github.com/Information-Technology-Security/Android-Repackaging", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Educational, cloud-free React Native companion for Oura rings, built on the reverse-engineered open_oura BLE protocol. Scores computed on-device. Not affiliated with Oura.", "description_language": "bilingual", "description_zh": "用于教育、不依赖云端的 Oura 戒指 React Native 配套应用，基于逆向获得的 open_oura BLE 协议构建，评分在设备上计算。与 Oura 无关联。", "full_name": "jlm0/kore-health", "id": "scan-1395920221", "license": null, "observed_at": "2026-10-16T11:54:53.359637Z", "pushed_at": "2026-09-29T18:36:03Z", "readme_sha256": "4ce7fec6fce6f69d634a6680c3bb095a4fcb4976691b7bd32c7908f36a6e1543", "readme_url": "https://github.com/jlm0/kore-health/blob/main/README.md", "stars": 0, "targets": [ "binary" ], "topics": [ "bluetooth-low-energy", "educational", "expo", "health", "oura", "oura-ring", "react-native", "reverse-engineering", "rust", "wearables" ], "url": "https://github.com/jlm0/kore-health", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A single-file, offline analyzer for source code, binaries, packages, documents, SBOMs, and security metadata — entirely in your browser.", "description_language": "bilingual", "description_zh": "单文件离线分析器，可完全在浏览器中分析源代码、二进制文件、软件包、文档、SBOM 和安全元数据。", "full_name": "Kaklaber/Momus", "id": "scan-1338303306", "license": "MIT", "observed_at": "2026-10-16T01:36:36.794514Z", "pushed_at": "2026-08-19T12:05:34Z", "readme_sha256": "354ee31680411d98ea802591e92a8218307c1dbcd432197e1bdd87ec25073a91", "readme_url": "https://github.com/Kaklaber/Momus/blob/main/README.md", "stars": 0, "targets": [ "app", "binary", "website" ], "topics": [ "apk-analysis", "binary-analysis", "browser-tool", "code-analysis", "file-formats", "html", "javascript", "offline-first", "reverse-engineering", "software-composition-analysis", "static-analysis" ], "url": "https://github.com/Kaklaber/Momus", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Python tooling for embedded benchmark analysis — objdump call-graph parser, .map code-size extractor, ARM vs RISC-V visualisation", "description_language": "bilingual", "description_zh": "用于嵌入式基准分析的 Python 工具，包含 objdump 调用图解析器、.map 代码体积提取器，以及 ARM 与 RISC-V 的对比可视化。", "full_name": "Karthik-Swaminathan98/mcu-function-size-analyser", "id": "scan-1185248819", "license": null, "observed_at": "2026-10-16T11:54:21.774297Z", "pushed_at": "2026-03-19T14:46:08Z", "readme_sha256": "c3f28bc009c2a33b9c396e36d4c2d9587fbefea817ad7e0eca75f039a678dd1c", "readme_url": "https://github.com/Karthik-Swaminathan98/mcu-function-size-analyser/blob/main/README.md", "stars": 0, "targets": [ "binary", "firmware" ], "topics": [ "arm", "arm-cortex-m", "benchmarking", "cmsis", "code-size", "data-visualisation", "elf", "embedded", "embedded-toolchain", "firmware", "firmware-analysis", "nmsis", "objdump", "python", "risc-v" ], "url": "https://github.com/Karthik-Swaminathan98/mcu-function-size-analyser", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Windows build & precompiled binaries for blutter - Flutter/Dart AOT snapshot reverse engineering tool (upstream: worawit/blutter)", "description_language": "bilingual", "description_zh": "blutter 的 Windows 构建和预编译二进制文件；blutter 是 Flutter/Dart AOT 快照逆向工程工具（上游：worawit/blutter）。", "full_name": "luotianyiismywife/blutter-windows", "id": "scan-1357669094", "license": "MIT", "observed_at": "2026-10-16T10:48:07.130306Z", "pushed_at": "2026-09-05T01:11:26Z", "readme_sha256": "c4c0d957113ec351b51ef15f52ad527b73e43187a36c6e64076107e310b3a669", "readme_url": "https://github.com/luotianyiismywife/blutter-windows/blob/main/README.md", "stars": 0, "targets": [ "binary" ], "topics": [ "aot-snapshot", "blutter", "dart", "flutter", "reverse-engineering", "windows" ], "url": "https://github.com/luotianyiismywife/blutter-windows", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A byte-oriented matching language for finding meaning in changing binaries. MAML stands for Mahmoud's Address Matching Language", "description_language": "bilingual", "description_zh": "面向字节的匹配语言，用于从不断变化的二进制文件中发现含义。MAML 是 Mahmoud’s Address Matching Language 的缩写。", "full_name": "mahmoudimus/maml", "id": "scan-1360674315", "license": "NOASSERTION", "observed_at": "2026-10-16T01:37:04.007952Z", "pushed_at": "2026-10-01T23:21:43Z", "readme_sha256": "7d674f934321a5545c21768e625ab6cab63160fbfe37cc44400a23f77f489967", "readme_url": "https://github.com/mahmoudimus/maml/blob/main/README.md", "stars": 0, "targets": [ "binary" ], "topics": [ "address-resolution", "binary-analysis", "binary-diffing", "binary-patterns", "byte-pattern", "cpp", "cython", "malware-analysis", "maml", "pattern-matching", "program-analysis", "reverse-engineering", "signature-scanning", "simd", "static-analysis" ], "url": "https://github.com/mahmoudimus/maml", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Marimo notebook to compare and search the binary diffing results.", "description_language": "bilingual", "description_zh": "用于比较和搜索二进制差异比较结果的 Marimo 笔记本。", "full_name": "meerkatone/binary_diffing_and_marimo_rust", "id": "scan-1033303520", "license": "MIT", "observed_at": "2026-10-16T01:37:04.137734Z", "pushed_at": "2026-08-29T20:08:42Z", "readme_sha256": "080426573be163d503e74a00f9db6961f4029a0838c2903bed4a403dd9f9750b", "readme_url": "https://github.com/meerkatone/binary_diffing_and_marimo_rust/blob/main/README.md", "stars": 0, "targets": [ "binary" ], "topics": [ "binary-diffing", "binary-ninja", "marimo-notebook" ], "url": "https://github.com/meerkatone/binary_diffing_and_marimo_rust", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "", "description_language": "bilingual", "description_zh": "", "full_name": "motan1337/ghidra-py", "id": "scan-1364245544", "license": "MIT", "observed_at": "2026-10-18T14:37:48.586803Z", "pushed_at": "2026-10-13T21:25:07Z", "readme_sha256": "b0f0d8ff8cc965a7b70b07e0c6b4c028f132597196ae9c70c620cb9e41344106", "readme_url": "https://github.com/motan1337/ghidra-py/blob/355fb546a57109df0aed4e312cc6f9b3cc244b8b/README.md", "stars": 0, "targets": [ "binary" ], "topics": [ "binaryninja", "binaryninja-plugin", "ghidra", "ghidra-analyzer", "ghidra-decompiler", "ghidra-extension", "ghidra-gcc-rtti", "ghidra-loader", "ghidra-plugin", "ghidra-plugins", "ghidra-processor", "ghidra-scripts", "ida", "ida-plugin", "idapython", "pyghidra", "re", "reverse-engineering", "x64dbg", "x64dbg-plugin" ], "url": "https://github.com/motan1337/ghidra-py", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Evidence-first binary and firmware analysis. Every finding is a structured claim linked to the artifacts that support it - free-text security claims are unrepresentable by design. Builds on Ghidra headless and binwalk; zero runtime dependencies.", "description_language": "bilingual", "description_zh": "以证据为先的二进制与固件分析。每项发现都是关联支撑产物的结构化主张，设计上无法表示自由文本形式的安全主张。基于 Ghidra 无界面模式和 binwalk，运行时零依赖。", "full_name": "n-3-0-l-d-3-v/ultron", "id": "scan-1347601513", "license": "Apache-2.0", "observed_at": "2026-10-16T11:54:30.079804Z", "pushed_at": "2026-09-23T13:16:31Z", "readme_sha256": "1eddffb805a7ed639dc6f1e847b162c9875fad2826ee1563c1dc2f3ae1402594", "readme_url": "https://github.com/n-3-0-l-d-3-v/ultron/blob/main/README.md", "stars": 0, "targets": [ "binary", "firmware" ], "topics": [ "binary-analysis", "binwalk", "evidence-graph", "firmware-analysis", "ghidra", "mcp", "reverse-engineering", "sbom", "security-tools" ], "url": "https://github.com/n-3-0-l-d-3-v/ultron", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Preserve compiled ARM64 code and initialized objects as portable Node and browser APIs.", "description_language": "bilingual", "description_zh": "将编译后的 ARM64 代码与已初始化对象保留为可移植的 Node 和浏览器 API。", "full_name": "nazeeh111/Capsulith", "id": "scan-1416144713", "license": "GPL-2.0", "observed_at": "2026-10-16T07:15:08.194515Z", "pushed_at": "2026-10-13T22:32:47Z", "readme_sha256": "4e2e1a5ebf1a989b71c29ebfaf4851b406b092dc8f96881f1f7740cb26a51bc3", "readme_url": "https://github.com/nazeeh111/Capsulith/blob/main/README.md", "stars": 0, "targets": [ "binary", "website" ], "topics": [ "arm64", "binary-analysis", "checkpointing", "data-preservation", "developer-tools", "emulation", "image-codec", "lz4", "mach-o", "native-code", "nodejs", "portable-runtime", "qoi", "reverse-engineering", "unicorn-engine", "webassembly" ], "url": "https://github.com/nazeeh111/Capsulith", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Learn binary file structure from examples and build guarded standalone editors, entirely in your browser.", "description_language": "bilingual", "description_zh": "完全在浏览器中通过示例学习二进制文件结构，并构建具有保护性检查的独立编辑器。", "full_name": "nazeeh111/Reclay", "id": "scan-1415878270", "license": "MIT", "observed_at": "2026-10-16T07:15:07.685523Z", "pushed_at": "2026-10-14T00:23:36Z", "readme_sha256": "84f342a2e1bd38c115b49099a84cfef22c45aa1c47bde6fcccdbd9dbcffa5a4d", "readme_url": "https://github.com/nazeeh111/Reclay/blob/main/README.md", "stars": 0, "targets": [ "binary", "website" ], "topics": [ "binary-analysis", "binary-format", "browser", "crc32", "data-preservation", "developer-tools", "file-editing", "format-inference", "local-first", "pointer-relocation", "pyodide", "python", "reverse-engineering", "serialization", "webassembly" ], "url": "https://github.com/nazeeh111/Reclay", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Digging symbols out of TI WiLink firmware. Ghidra loader plus symbolisation: starts from the debug trace database TI forgot to strip, deduces the rest from the binary itself. 435 named functions, 358 inferred MMIO registers, 82 source modules.", "description_language": "bilingual", "description_zh": "从 TI WiLink 固件中挖掘符号。包含 Ghidra 加载器与符号化功能：从 TI 未剥离的调试跟踪数据库出发，再根据二进制本身推断其余内容。提供 435 个已命名函数、358 个推断的 MMIO 寄存器和 82 个源模块。", "full_name": "NerdTIV/WiDig", "id": "scan-1340062802", "license": "MIT", "observed_at": "2026-10-16T11:54:29.031416Z", "pushed_at": "2026-08-19T22:09:35Z", "readme_sha256": "72704928e9c7cbb4afb2ea59b1b88a50372e97b021189c851e98239b813bbdc8", "readme_url": "https://github.com/NerdTIV/WiDig/blob/main/README.md", "stars": 0, "targets": [ "binary", "firmware" ], "topics": [ "arm", "binary-analysis", "blue", "bluetooth", "corte", "cortex-m", "embedded", "firmware", "firmware-analysis", "ghidra", "ghidra-extension", "ghidra-loader", "reverse-engineering", "texas-instruments", "thumbs", "wilink", "wl18xx" ], "url": "https://github.com/NerdTIV/WiDig", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Automated Ghidra headless scripts for batch decompilation, metadata extraction, and programmatic memory constant retrieval. ", "description_language": "bilingual", "description_zh": "自动化 Ghidra 无界面脚本，用于批量反编译、元数据提取及以程序方式检索内存常量。", "full_name": "olivercase/ghidra_headless", "id": "scan-1208112885", "license": "MIT", "observed_at": "2026-10-18T14:37:48.588689Z", "pushed_at": "2026-04-11T21:53:17Z", "readme_sha256": "69539c8320e9ba5690cb19653682bbfc10854e0bccfc673f249c187188f356e3", "readme_url": "https://github.com/olivercase/ghidra_headless/blob/df32fbe4c7486622b49860e7ebebe2d0c2663d95/README.md", "stars": 0, "targets": [ "binary" ], "topics": [ "automation", "bash-scripting", "ghidra", "ghidra-extension", "ghidra-plugin", "ghidra-scripts", "headless-analysis", "java" ], "url": "https://github.com/olivercase/ghidra_headless", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Ghidra extension that resolves x86 DOS/BIOS interrupt calls using Ralf Brown's Interrupt List", "description_language": "bilingual", "description_zh": "使用 Ralf Brown’s Interrupt List 解析 x86 DOS／BIOS 中断调用的 Ghidra 扩展。", "full_name": "playday3008/GhidraDosInterruptResolver", "id": "scan-1196391180", "license": "Apache-2.0", "observed_at": "2026-10-18T14:37:48.587111Z", "pushed_at": "2026-03-30T17:11:57Z", "readme_sha256": "f41235688a45c557b7ebc24cf6e84c7fab8edf4c157fb4c74fbd152fd722d05b", "readme_url": "https://github.com/playday3008/GhidraDosInterruptResolver/blob/b0680606fb2a1c710a16ca2e85ba2aadadb8bc10/README.md", "stars": 0, "targets": [ "binary", "firmware" ], "topics": [ "bios", "dos", "ghidra", "ghidra-extension", "ghidra-plugin", "interrupts", "java", "ralf-browns-interrupt-list", "reverse-engineering", "x86" ], "url": "https://github.com/playday3008/GhidraDosInterruptResolver", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Unofficial Zalo Linux port (x86_64) — every native module ported: file-utils, file-utilities, zwalker, zfile, v8-profiles, mp4thumb, zimage, zjxl, zcall wire bridge + live call recon", "description_language": "bilingual", "description_zh": "非官方 Zalo Linux 移植版（x86_64），已移植所有原生模块：file-utils、file-utilities、zwalker、zfile、v8-profiles、mp4thumb、zimage、zjxl，以及 zcall 通信桥接和实时通话逆向分析。", "full_name": "RuriMeiko/zalo-linux-native", "id": "scan-1361683086", "license": null, "observed_at": "2026-10-16T07:15:00.980617Z", "pushed_at": "2026-10-15T10:07:49Z", "readme_sha256": "47e2d65b3d7d7b6ef69b64c0bdd78270cc30378f31ef3a8e7f51df2caf290240", "readme_url": "https://github.com/RuriMeiko/zalo-linux-native/blob/main/README.md", "stars": 0, "targets": [ "app", "binary" ], "topics": [ "electron", "linux", "native-modules", "reverse-engineering", "zalo" ], "url": "https://github.com/RuriMeiko/zalo-linux-native", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "KUDU (KUliah DUlu) is a personal hobby project combining UIN Jakarta campus services, such as academics, e-letters, and other services, in one integrated application.", "description_language": "bilingual", "description_zh": "KUDU（KUliah DUlu）是一个个人兴趣项目，将 UIN Jakarta 的学务、电子信函等多个校园服务整合到同一款应用中。", "full_name": "RyyzDev/kudu", "id": "scan-1376537800", "license": "MIT", "observed_at": "2026-10-16T11:54:53.501560Z", "pushed_at": "2026-10-16T06:29:05Z", "readme_sha256": "d25c11b91ee6534b9b303f81e74a0493788d36c69ff4d37e41384ee4bdb1112f", "readme_url": "https://github.com/RyyzDev/kudu/blob/main/README.md", "stars": 0, "targets": [ "app", "binary" ], "topics": [ "api-gateway", "mobile-app", "react-native", "reverse-engineering", "unified-api" ], "url": "https://github.com/RyyzDev/kudu", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Scriptable multi-format disassembler & decompiler — a browser-based Hopper alternative", "description_language": "bilingual", "description_zh": "可脚本化的多格式反汇编与反编译器，是基于浏览器的 Hopper 替代工具。", "full_name": "sagarchive/rdis", "id": "scan-1418436197", "license": "MIT", "observed_at": "2026-10-16T07:15:08.490443Z", "pushed_at": "2026-10-16T03:23:56Z", "readme_sha256": "a1c7f0660bfdc06d6ea5d8dfda6122c7ec4e9002948db5965fae3618f61c0318", "readme_url": "https://github.com/sagarchive/rdis/blob/main/README.md", "stars": 0, "targets": [ "binary", "website" ], "topics": [ "capstone", "decompiler", "disassembler", "mcp", "reverse-engineering", "webassembly" ], "url": "https://github.com/sagarchive/rdis", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Automotive Red Team platform featuring CAN spoofing, CAN replay attacks, Gateway IDS/IPS, native C SocketCAN ECUs, ARM firmware analysis, and Ghidra-based reverse engineering.", "description_language": "bilingual", "description_zh": "汽车红队平台，提供 CAN 欺骗、CAN 重放攻击、网关 IDS/IPS、原生 C SocketCAN ECU、ARM 固件分析及基于 Ghidra 的逆向工程。", "full_name": "samartha-2601/AutoRed", "id": "scan-1273549578", "license": null, "observed_at": "2026-10-16T11:54:25.369901Z", "pushed_at": "2026-06-19T02:33:27Z", "readme_sha256": "8adf813de4efdf1bbfb07e25ed8d8eb765e6096201aa18c8beae95aa86450de6", "readme_url": "https://github.com/samartha-2601/AutoRed/blob/main/README.md", "stars": 0, "targets": [ "binary", "firmware" ], "topics": [ "arm", "automotive-security", "c", "can-bus", "cybersecurity", "embedded-security", "firmware-analysis", "ghidra", "ids", "ips", "penetration-testing", "python", "red-team", "replay-attack", "reverse-engineering", "socketcan", "spoofing-attack", "streamlit", "vehicle-security" ], "url": "https://github.com/samartha-2601/AutoRed", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "DVFA: A FinTech security lab mapping 10 vulnerabilities to the OWASP Mobile Top 10. Focused on AOT binary analysis, deep link hijacking, and SQL injection, featuring a Dockerized mock backend.", "description_language": "bilingual", "description_zh": "DVFA：将 10 个漏洞映射至 OWASP Mobile Top 10 的金融科技安全实验室。重点涵盖 AOT 二进制分析、深链接劫持和 SQL 注入，并提供 Docker 容器化模拟后端。", "full_name": "Schmiemandev/dvfa", "id": "scan-1188976036", "license": "MIT", "observed_at": "2026-10-16T10:48:06.132511Z", "pushed_at": "2026-03-22T21:35:09Z", "readme_sha256": "36e4e0f3d4da5dd0b9800b6ee72fd85bbf68e3e7e530a00ba114c6f015201b14", "readme_url": "https://github.com/Schmiemandev/dvfa/blob/main/README.md", "stars": 0, "targets": [ "app", "binary" ], "topics": [ "dva", "dvfa", "flutter", "infosec", "owasp-mobile", "pentesting", "reverse-engineering", "security-research" ], "url": "https://github.com/Schmiemandev/dvfa", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Ghidra language module for Infineon C166/XC166 (Tasking VX-C166) firmware", "description_language": "bilingual", "description_zh": "适用于 Infineon C166/XC166（Tasking VX-C166）固件的 Ghidra 语言模块。", "full_name": "TheFlashBold/ghidra-c166-haldex", "id": "scan-1397230173", "license": null, "observed_at": "2026-10-16T11:54:35.323449Z", "pushed_at": "2026-09-30T07:02:07Z", "readme_sha256": "b9f7e6a7f25fc67d0658bd92a7121c10048343b364c3187d69061bb9768bbcce", "readme_url": "https://github.com/TheFlashBold/ghidra-c166-haldex/blob/main/README.md", "stars": 0, "targets": [ "binary", "firmware" ], "topics": [ "automotive", "c166", "c167", "decompiler", "disassembler", "ecu", "firmware-analysis", "ghidra", "ghidra-extension", "ghidra-processor", "haldex", "infineon", "reverse-engineering", "sleigh", "tasking", "xc166" ], "url": "https://github.com/TheFlashBold/ghidra-c166-haldex", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A reproducible firmware-security pipeline for OpenWRT 22.03 on ath79/MIPS", "description_language": "bilingual", "description_zh": "面向 ath79/MIPS 平台 OpenWRT 22.03 的可复现固件安全流程。", "full_name": "thunderstornX/firmware-analysis-walkthrough", "id": "scan-1237190237", "license": "MIT", "observed_at": "2026-10-16T11:54:23.716722Z", "pushed_at": "2026-06-10T10:55:44Z", "readme_sha256": "5133930e8a59a45fb3559284ba0d77e607c50014ab3070c893cef786da542abf", "readme_url": "https://github.com/thunderstornX/firmware-analysis-walkthrough/blob/main/README.md", "stars": 0, "targets": [ "binary", "firmware" ], "topics": [ "embedded-security", "firmware-analysis", "iot-security", "mips", "openwrt", "reverse-engineering", "security" ], "url": "https://github.com/thunderstornX/firmware-analysis-walkthrough", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Hermes bytecode disassembler and assembler for React Native bundles", "description_language": "bilingual", "description_zh": "用于 React Native 打包文件的 Hermes 字节码反汇编器与汇编器。", "full_name": "tuvior/Talaria", "id": "scan-1236303920", "license": "MIT", "observed_at": "2026-10-16T11:54:52.968014Z", "pushed_at": "2026-05-15T13:30:18Z", "readme_sha256": "a8ab0d43d93c5e447678d33b2bc2f7ad4274b1cccb5976ce09d3f8482906a197", "readme_url": "https://github.com/tuvior/Talaria/blob/main/README.md", "stars": 0, "targets": [ "binary" ], "topics": [ "assembler", "disassembler", "hermes", "hermes-bytecode", "hermes-engine", "react-native", "reverse-engineering" ], "url": "https://github.com/tuvior/Talaria", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A security-first, API-driven data workbench being built in Rust. Inspired by CyberChef, designed for encoding, decoding, cryptography, and binary analysis through composable recipes, with browser-based WebAssembly and optional server execution.", "description_language": "bilingual", "description_zh": "正在用 Rust 构建的安全优先、API 驱动数据工作台。受 CyberChef 启发，通过可组合的配方处理编码、解码、密码学和二进制分析，支持浏览器端 WebAssembly 及可选服务端执行。", "full_name": "valkyoth/runasmidja", "id": "scan-1402399654", "license": "EUPL-1.2", "observed_at": "2026-10-16T07:15:07.601145Z", "pushed_at": "2026-10-04T20:40:45Z", "readme_sha256": "45c9e0579d1f6716dff4dfefe66297008d96ff5beb27f8fd01220fbdc146d996", "readme_url": "https://github.com/valkyoth/runasmidja/blob/main/README.md", "stars": 0, "targets": [ "binary", "website" ], "topics": [ "api-first", "binary-analysis", "cryptography", "cybersecurity", "data-processing", "data-transformation", "decoding", "developer-tools", "digital-forensics", "encoding", "extensible", "hashing", "privacy", "reverse-engineering", "rust", "self-hosted", "web-workers", "webassembly", "workflow-engine" ], "url": "https://github.com/valkyoth/runasmidja", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "See inside a Windows DLL: colour-coded memory map, explained PE headers, imports/exports, PDB symbols and live disassembly - 100% in your browser.", "description_language": "bilingual", "description_zh": "查看 Windows DLL 内部：彩色内存映射、带解释的 PE 头、导入与导出、PDB 符号及实时反汇编，完全在浏览器中运行。", "full_name": "vineeththomasalex/dll-visualizer", "id": "scan-1318741232", "license": "MIT", "observed_at": "2026-10-16T07:15:08.677837Z", "pushed_at": "2026-07-31T21:35:44Z", "readme_sha256": "dbd6e7c002c1bb188289b30aedda7858c253b5822ac5ec1604edb0c13d4cfd13", "readme_url": "https://github.com/vineeththomasalex/dll-visualizer/blob/main/README.md", "stars": 0, "targets": [ "binary", "website" ], "topics": [ "disassembler", "dll", "pdb", "pe-format", "react", "reverse-engineering", "typescript", "visualization", "webassembly", "windows" ], "url": "https://github.com/vineeththomasalex/dll-visualizer", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "MONSTRUM (Team Junkfish, Unity 5.5, 2018) from a GOG Galaxy install, read as bytes: 19 serialized files, 825 textures closed and rendered, 2,215 FSB5 banks, 9 escape films, the assembly to its members, a co-op at zero, the owner's play log and a 2018 minidump.", "description_language": "bilingual", "description_zh": "以字节方式读取 GOG Galaxy 安装的 MONSTRUM（Team Junkfish，Unity 5.5，2018）：19 个序列化文件、825 张完成解析并渲染的纹理、2,215 个 FSB5 音频库、9 段逃脱影片、程序集及其成员、“co-op at zero”记录、拥有者的游玩日志，以及一份 2018 年的小型转储。", "full_name": "vs-sr-dev/pc-monstrum-doc", "id": "scan-1367652860", "license": null, "observed_at": "2026-10-16T11:54:33.015068Z", "pushed_at": "2026-09-12T20:08:57Z", "readme_sha256": "88fdc069894d153f55c37827f32d565fe957fd92be30fbfc9d7d542c4d4237c6", "readme_url": "https://github.com/vs-sr-dev/pc-monstrum-doc/blob/master/README.md", "stars": 0, "targets": [ "binary", "game" ], "topics": [ "documentation", "ecma-335", "file-formats", "fsb5", "gog", "minidump", "monstrum", "reverse-engineering", "serializedfile", "unity", "unity5" ], "url": "https://github.com/vs-sr-dev/pc-monstrum-doc", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A GOG offline installer measured as an object: 2 files, 2,891,523,108 B, 100.0000 % placed with residue 0. Inno Setup 5.6.2 Unicode over a shop naming layer derived here -- 788 files it would write, never run. Five content descriptors. 101 of 101 script opcodes of the 1994 original in the 2024 assembly.", "description_language": "bilingual", "description_zh": "将 GOG 离线安装器作为对象测量：2 个文件，2,891,523,108 B，100.0000 % 已定位，残余为 0。包含 Inno Setup 5.6.2 Unicode 及本项目推导出的商店命名层；安装器将写入 788 个文件，但从未运行。包含五个内容描述符。在 2024 年的程序集中找到 1994 年原版全部 101 个脚本操作码中的 101 个。", "full_name": "vs-sr-dev/pc-twinsensquest-doc", "id": "scan-1360450358", "license": null, "observed_at": "2026-10-16T11:54:32.293217Z", "pushed_at": "2026-09-07T16:36:11Z", "readme_sha256": "baca105bf36361d7e28c305f56194afc28cd7e2ebfa021d18666408c8a75fdcb", "readme_url": "https://github.com/vs-sr-dev/pc-twinsensquest-doc/blob/master/README.md", "stars": 0, "targets": [ "binary", "game" ], "topics": [ "authenticode", "file-formats", "gog", "inno-setup", "installer", "little-big-adventure", "reverse-engineering", "unity" ], "url": "https://github.com/vs-sr-dev/pc-twinsensquest-doc", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "A high-performance C++ forensic tool for deep binary analysis of Qualcomm (SD665) firmware dumps. Specialized in identifying Gatekeeper hash patterns and secure element signatures using advanced heuristic pattern matching.", "description_language": "bilingual", "description_zh": "用于深入分析 Qualcomm（SD665）固件转储的高性能 C++ 取证工具，专门通过高级启发式模式匹配识别 Gatekeeper 哈希模式和安全元件特征。", "full_name": "Waseemshahazad/trinket-core-analyzer", "id": "scan-1211134203", "license": "GPL-3.0", "observed_at": "2026-10-16T11:54:22.390815Z", "pushed_at": "2026-05-20T06:28:43Z", "readme_sha256": "793a7cdd96ce5832159c52382cc84b63a2972ba8ec8f365eec7f0bca0247848d", "readme_url": "https://github.com/Waseemshahazad/trinket-core-analyzer/blob/main/README.md", "stars": 0, "targets": [ "binary", "firmware" ], "topics": [ "binary-parser", "cpp-forensics", "digital-forensics", "embedded-systems", "firmware-analysis", "hex-parser", "reverse-engineering", "security-research", "static-analysis" ], "url": "https://github.com/Waseemshahazad/trinket-core-analyzer", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Picture Man 1.55 (1991-1993), the true-color image editor for Windows 3.x, rebuilt in Rust from its binaries - runs on the desktop and in the browser", "description_language": "bilingual", "description_zh": "根据二进制文件使用 Rust 重建 Windows 3.x 真彩色图像编辑器 Picture Man 1.55（1991–1993），可在桌面和浏览器中运行。", "full_name": "yovico-ai/pictureman", "id": "scan-1408116793", "license": "MIT", "observed_at": "2026-10-16T07:15:08.633700Z", "pushed_at": "2026-10-07T17:00:50Z", "readme_sha256": "a47aa3031e9f82c11d5f6f17a0e32e1e3f4a0505c8ca16469611407ba3083ca2", "readme_url": "https://github.com/yovico-ai/pictureman/blob/main/README.md", "stars": 0, "targets": [ "app", "binary", "website" ], "topics": [ "disassembly", "egui", "image-editor", "image-processing", "retrocomputing", "reverse-engineering", "rust", "webassembly", "windows-3x" ], "url": "https://github.com/yovico-ai/pictureman", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Static analyzer for Flutter/Dart AOT snapshots", "description_language": "bilingual", "description_zh": "Flutter/Dart AOT 快照静态分析器。", "full_name": "zboralski/unflutter", "id": "scan-1157362267", "license": "BSD-3-Clause", "observed_at": "2026-10-16T10:48:06.912567Z", "pushed_at": "2026-07-23T13:37:12Z", "readme_sha256": "ce6ac9d0e67d120b17ee354a7079edb8c10a257d141d1f5608aec53e80023491", "readme_url": "https://github.com/zboralski/unflutter/blob/main/README.md", "stars": 0, "targets": [ "binary" ], "topics": [ "aot", "dart", "decompiler", "disassembler", "flutter", "reverse-engineering", "reversing", "static-analysis", "static-analyzer" ], "url": "https://github.com/zboralski/unflutter", "verification": "automated-readme-scan" }, { "category": "native-analysis", "description_en": "Unofficial REA tutorials and comparisons for installing and using Reverse Engineer Anything with coding agents.", "description_language": "bilingual", "description_zh": "非官方 REA 教程和比较资料，介绍如何安装 Reverse Engineer Anything 并与编码智能体配合使用。", "full_name": "ZooHero500/reatool", "id": "scan-1415810701", "license": null, "observed_at": "2026-10-16T07:15:02.255263Z", "pushed_at": "2026-10-14T05:59:13Z", "readme_sha256": "2504b9c863ff2e11b0a328b8c2072da6b629eb8e5121a33a3ca3a6d7c86ae306", "readme_url": "https://github.com/ZooHero500/reatool/blob/main/README.md", "stars": 0, "targets": [ "app", "binary" ], "topics": [ "claude-code", "codex", "electron", "ghidra", "mcp", "rea", "reverse-engineering", "tutorial" ], "url": "https://github.com/ZooHero500/reatool", "verification": "automated-readme-scan" } ], "snapshot": "2026-10-20", "verification": "automated-readme-scan", "version": 1 }