Star on GitHubStar1.1k stars

THE REPOSITORY DIRECTORY

Websites

Browse 217 repositories with project descriptions, upstream links, and license information.

Search repositoriesCurated resources 1,253Repository selection JSON ↓
About this index

This published selection contains 3,500 captured repository records and 3,309 browsable entries. The 187 scope-excluded entries and 4 whose upstream repository is no longer available remain in the published JSON.

This repository index is discovered automatically and unreviewed. Categories come from metadata; descriptions have AI-assisted translations. Stars and last-push months are collection-time snapshots.

Scan methodology ↗ · Scope exclusions ↗

Original public capture evidence 39323601991 (withdrawn)

217 repositories

Selection published: 2026-10-20 UTC

The first AI agent that builds permissionless integrations through reverse engineering platforms' internal APIs.

Cross-platform GUI tool for decompiling WeChat mini programs, with .wxapkg file scanning, decryption, and unpacking.

A search-first, profile-aware reverse-engineering workspace for AI agents — 735 tools across 36 domains in one MCP server.

🚀 AI-powered JavaScript decompiler and deobfuscator. Uses AI and ASTs for code analysis and deobfuscation, turning unreadable build artifacts into understandable code.

Browse any app normally. Spectral captures the traffic, understands what each API call does, and generates MCP tools that AI agents can call directly.

Advanced EDR Evasion via AI Telemetry Spoofing & WASM Sandboxing. Project Onyx is a PoC Red Team pipeline designed to demonstrate advanced evasion techniques against modern EDR systems. It shifts away from traditional signature-based obfuscation towards behavioral camouflage.

The most powerful and lightweight API that allows you to develop your original Haxball(www.haxball.com) host, client, and standalone applications both on node.js and browser environments and also includes every possible hack and functionality that you can imagine.

Bun decompiler-style JavaScript extractor for Bun-compiled executables. Zero-dependency Python tool for reverse engineering, malware analysis, and code recovery.

Clean-room reader for Autodesk Revit files (.rvt/.rfa/.rte/.rft) without Revit: metadata and schema of 2016-2026 files, typed elements with measured geometry from 2024 and 2025 projects, exported as IFC4, glTF and plan SVG. Rust, Python, WebAssembly. Apache-2.0.

Zero-dependency Web Bluetooth driver + reverse-engineered protocol docs to print Niimbot label printers straight from the browser — no app. Validated on B1, B1 Pro, B2 Pro, M2-H, D11_H, D110 and N1.

Chrome extension to capture and reverse engineer API calls on any website — fetch + XHR interceptor with tab-scoped recording and JSON export

CyberSec Resources: FRAMEWORKS & STANDARDS; Pentesting Audits & Hacking; PURPLE TEAMING, AD, API, web, clouds, CTF, OSINT, Pentest tools, Network Security, Privilege escalation, Exploiting, Reversing, Secure Code, Bug Bounty, ...

Open-source AI browser agent for web reverse engineering. Turn websites into browser-free API clients and crawlers with CDP, network tracing, and JavaScript analysis.

Reverse-engineered Kasada p.js VM that generates x-kpsdk-ct outside the browser.

A professional extraction & reconstruction platform delivered as a Chrome extension: analyze any web page, map its structure to Elementor widgets, refine the result in a visual builder, and export Elementor-ready JSON together with a complete assets package.

AI-native web scraping and JavaScript reverse-engineering platform powered by DSH, Patchright/CDP, and an independent semantic runtime, recovering parameter-generation logic from browser evidence and delivering verifiable Solvers.

Chrome extension (MV3) that scans live Elementor pages and reconstructs full section/widget structure into an import-ready JSON template — no DB access needed.

An open-source emulation framework designed as a virtual laboratory for exploring, building, and modifying classic computer systems in real-time.

Self-host your own API to use ChatGPT for free. Lovelace also provides you with an intuitive multilanguage web application, as well as detailed documentation for using the software. Interact with Ada and implement it in your applications!

DeBash is an online tool that deobfuscates Bash scripts using JavaScript.

A powerful MCP (Model Context Protocol) server for browser debugging and reverse engineering. Provides AI coding assistants with comprehensive browser automation, JavaScript debugging, and network analysis capabilities.

Selected practical web-scraping examples from various websites, with detailed blog explanations, concept summaries, difficulty comparisons, and links. Covers asynchronous scraping, automated crawling, the Scrapy framework, and other key topics.

[ACL 2025] Instruction-Tuning Data Synthesis from Scratch via Web Reconstruction

An open-source project for opening, annotating, and saving DocuWorks (.xdw / .xbd) files anywhere, with a Rust engine, a single-file browser editor, and format specifications. Not affiliated with Fujifilm.

Complete reverse engineering of PerimeterX (HUMAN Security) anti-bot SDK · pure-algo _px3/_px2 generator (no browser, no Selenium) · iFood + Grubhub + Bundle 10/10 verified · WASM PoW solved · 68 production gotchas · AI Skill included.

Reverse engineer anything. Paste a repo, website, product, or idea -- get an implementation blueprint, CLAUDE.md, and Initial Build Prompt for any AI coding tool.

💫 An re-implementation of GameMaker: Studio's runner (YoYo Runner) in Kotlin, targeting Undertale v1.08 (WAD Version 16)

A versatile text transformation toolkit in pure Rust with a dependency-free core. Encoding, decoding, formatting, cryptography, and (de)compression and more through CLI, web UI, or as a library.

Evidence-driven website teardown, faithful cloning, and creative reconstruction, powered by Design DNA and WebGL forensics.

Universal decompiler + compiler in Rust: ELF, PE, Mach-O, 6502 round-trip byte-identically through a readable .ud source language.

Linux RGB controller for the Redragon Fizz K617 — daemon + CLI + Electron GUI with 3D keyboard, 60+ presets including Minecraft day/night, interactive Pong played from the physical keyboard, animated thumbnails, and global tonality control.

In-browser JavaScript deobfuscation workbench format, deobfuscate (Webcrack / Synchrony / Wakaru), and binding-aware rename.

Advanced client-side PDF to HTML converter with WASM parsing, OCR support, and intelligent text layout reconstruction. Perfect for document management systems and web applications.

VidNest-Decryptor is a specialized backend utility built to address the increasing complexity of web-based video ciphers. Unlike traditional scrapers, it doesn't just "fetch" data—it reverse-engineers the bit-stream obfuscation layers at the source Level.

A practical exercise in professional web development through reconstructing a fast-food ordering interface, with an Angular focus.

A comprehensive VBA macro that extracts 60 formatting, styling, and data properties from Excel workbooks. Ideal for mapping templates for web frontend reconstruction.

jd — JavaScript deobfuscator (obfuscator.io + unminify). Go port of webcrack and synchrony.

Clone any website and rebuild it as your own. A Claude Code skill: recon → DNA → rebuild → verify, with a real-source-first evidence gate. Named after the Pokémon that becomes anything.

StrataScan is a gray-hat hackers attack-surface reconstruction engine that transforms web history into actionable security intelligence. It combines OSINT, archive forensics, DNS/TLS analysis, subdomain discovery, secret detection, temporal diffing, live verification, evidence correlation, and automated reporting.

A custom function-key and microphone bridge for the RK R87 Pro AI keyboard, built with Electron and a reverse-engineered protocol for Windows/macOS, without requiring the official software.

OpenAI-compatible local shim over DeepSeek's web chat. Proof-of-work reimplemented in Python and verified against the vendor's own wasm module (research tool)

Reverse-engineering analysis of hologram-ai: formal functions, Alloy models, exact arithmetic, executable oracle. AGPL-3.0-only.

REA Web Inspector — Reverse-engineer any website with an in-browser AI Copilot. Inspect tech stacks, audit leaked secrets, and generate 1-click rebuild prompts for Cursor, Claude, v0 & Windsurf. 100% client-side BYOK.

Drive the cloud machine behind a Grok Bot (xAI computer-use agent) from Python: there is no API, so attach over the Chrome DevTools Protocol to the Electron app's noVNC webview, screenshot the desktop, send input, run shell commands.

Reverse engineering toolkit for WebAssembly. Parser, IR, pseudo-C decompiler, call graph, struct recovery, forward/backward taint.

A collaborative project on satellite signal processing and image reconstruction, integrating MATLAB algorithms with web-based visualization for enhanced data analysis.

Claude Code skill: scope-safe AST deobfuscation of minified/obfuscated JavaScript (webpack/TS bundles) — a from-scratch take on humanify

Web application security assessment covering source review, HTTP forensics, vulnerability analysis, and controlled exploit-chain reconstruction.

Assemblyline v4 service: JavaScript deobfuscation, unminification, and bundle unpacking via webcrack — extracts embedded WebAssembly and tags URLs/domains/IPs.

📧 Chrome extension for extracting business emails from live websites. Deep DOM scanning, Cloudflare deobfuscation, mailto cleanup, reversed-string detection, and background contact-page discovery. Built for lead generation and sales workflows.

Safe Rust toolkit for inspecting, unpacking, verifying, and building TI-Nspire TNS documents

Rust client for WHOOP 4.0 / 5.0 / MG straps over Bluetooth Low Energy — library, CLI, terminal UI and a WebAssembly browser build from one codebase. Fully offline: no account, no cloud.

Browser re-creation of SimJesse!, a 1993 classic Mac speech toy, with recovered sounds, artwork, and 68k speech logic

Open-source software for opening, editing, and saving Ichitaro (.jtd) documents anywhere. Includes a Rust engine, a single-file browser word processor, and format specifications. Not affiliated with JustSystems.

Forensic reconstruction of what one IP address did on a web server, recovered from access logs and drawn as an activity graph. Runs offline; every finding traces back to the log line that produced it.

Reverse-engineering toolkit for Tencent clients: QQ TEA crypto, WeChat .dat decryptor, Electron asar reader, and static clue scanner. Stdlib-only Python.

Universal Web Archive Recovery & Reconstruction Engine - discovers, indexes, downloads, verifies, and reconstructs archived web content from Wayback, archive.is, Megalodon, and Memento sources.

Hands-on playbook for REA: minimal Electron target, Evidence extractor with file:line refs, MCP probe, and a verified Decompile -> Understand -> Recreate loop. No reverse-engineering engine required.

Connect directly to the Samsung Galaxy Ring over BLE — no phone, no Samsung app. Bond, handshake, read health history, intercept the double-pinch gesture. Electron GUI + headless pinch daemon for macro apps.

Repairs DaVinci Resolve projects that crash on open — root-caused to a corrupted UI-state blob in the project database. Runs locally in your browser or on the desktop.

Super crawler agent: a self-evolving AI crawling system. Four native engines (Go/Python/Java/Rust); JavaScript reversing (AST deobfuscation, hook injection, signature tracing, WASM parsing); a six-stage evolution loop (planning, critique, execution, self-repair, evolution, reflection); adaptive anti-detection, fingerprint rotation and behavior simulation; genetic-algorithm strategy optimization; knowledge graphs and swarm coordination; LLM selector self-repair and code synthesis; cross-domain strategy transfer; Docker/K8s deployment.

Nullpoint — an unofficial desktop/web client for Sony headphones (Web Serial RFCOMM control). Not affiliated with Sony.

WebClone Studio: a workstation for high-performance web architecture extraction, lossless offline mirroring, and web reverse engineering.

MON (Moson Web Intelligence Engine) is a modular web intelligence and API reconnaissance framework designed for site inspection, API discovery, and web reconstruction.

A Node recreation of the QQ Music web encryption pipeline: a VMP sandbox reconstructs the full AES-GCM encryption → SHA-1 signing → decryption chain.

Web-based smart cube companion: GAN Bluetooth, WCA scrambles, auto-timed solves with reconstruction. Built on cubing.js.

A high-fidelity web-based reconstruction of the TORA Operations Research software. This platform provides a modernized interface for executing complex mathematical programming and optimization algorithms utilizing an AI-agent-driven development pipeline.

Resolves watchfooty.st and sportsembed HLS from watch or embed URLs via Watch Footy match lookup, protobuf /api/get with stream-lock.wasm client factor and proof signing, and x-live encrypted M3U8 decrypt. Referer-aware HLS relay, hls.js browser player, and direct M3U8 export for VLC and MPV.

Here is a reconstruction of my old quote generator web app. In this repo, you find me using react to build this from scratch

A lightweight in-browser Request Viewer that intercepts and displays fetch/XHR requests in real time. Includes filters, live UI, POST parsing, export to JSON, auto-copy, and a floating DevTools console panel. Just paste it into DevTools and start capturing.

🐚 Map a web app's JavaScript to its API — endpoints, GraphQL, routes and leaked keys from bundles and source maps, plus an OpenAPI skeleton. tree-sitter, not regex.

1-to-1 reverse-engineering and architectural case study of the iJewel3D WebGL engine by Cybersecurity Researcher DDW-X. 9 deep-dive chapters covering dispersion shaders, WASM geometry decoding, and flat-buffer BVH.

GitHub Action that statically deobfuscates JavaScript, uploads findings to code scanning as SARIF, and gates the build on obfuscation or capability risk. Never executes the analysed code.

VS Code extension for Defuscator: statically deobfuscate JavaScript in the editor. Unpacks obfuscator.io string arrays, P.A.C.K.E.R., JSFuck and source maps. Never executes the analysed code.

⚡ Resilient Full-Stack E-Commerce Price Monitoring Engine & Analytics Dashboard (Node.js, Wasm JIT, SHA-256 PoW Solver, Supabase Postgres RPC, React 18, Recharts) • Built for INE Assignment

Assembler for the 6502. Originally written for my online assembler and chiplab at https://www.emulationonline.com/systems/chiplab/6502/assembler/

Opens Olympus and Grundig dictation recordings on any computer, a format locked since 1994. Replaced a paid licence and a chain of Windows machines; the fix is going upstream into FFmpeg.

A local-first notebook with OneNote's features — opens your .one notebooks, built on a clean-room study of OneNote's file format and canvas. macOS · Windows · Linux · web.

Playable Dino CPS-1 C++ reverse engineering port for WebAssembly (ROM not included)

Habbo Classic (HTML5 / Electron) client internals, complete technical documentation, and unpacked .hab asset bundles.

A source-linked catalog of decompilations, recompilations, API translations, reimplementations, emulators, and community software ports.

Lumen - ambient LED lighting controller. Reverse-engineered a closed USB device protocol, built own app: Rust daemon + Electron UI, DXGI screen capture, WASAPI audio FFT, HID.

Open-source web asset scanner and JavaScript bundle analyzer. Inspect HTML/CSS/JS, explore bundles with Webcrack, and use MCP locally.

30 practical Web/mini-app JavaScript reverse-engineering and protocol-reconstruction cases: request signing (MD5/HMAC/RSA/Chinese SM2 and SM4 cryptography), response decryption, cookie-based anti-scraping, JSVMP, WASM, font-based anti-scraping, slider/text-click CAPTCHAs, and risk controls such as Akamai and Ruishu. For learning and discussion only.

Stealth Chrome DevTools Protocol instrumentation for reverse-engineering hostile client-side JavaScript — anti-bot, captcha, fingerprinting and payment SDKs. Invisible hooks, captured ground truth, and an oracle that verifies your reimplementation. 80 MCP tools for agents.

Resolve MixDrop file IDs to direct mxcontent.net MP4 URLs. Node.js server fetches the embed page, extracts the signed CDN link from the player script, validates the stream, and exposes a referer-aware proxy for browser playback.

Run tasks on multiple Cursor Grok Bots in parallel — your laptop's RAM stays flat because the work happens in the cloud. No official API: drives the Electron UI with a 3-level fallback.

Open-source JavaScript reverse engineering toolkit for deobfuscation, AST analysis, string extraction, and web behavior discovery.

foundryvtt (https://foundryvtt) < 0.8.0 deobfuscator. other javascript-obfuscator (https://www.npmjs.com/package/javascript-obfuscator) projects prolly work as well

Offline interface recovery for Solana sBPF programs: Anchor instructions, accounts and events, each backed by byte-offset evidence. Rust, CLI and WebAssembly.

Turn Electron / CEF / WebView2 desktop apps into CLIs by attaching over the Chrome DevTools Protocol (CDP) — playbook, verified per-app contracts, and forensic tools.

Chrome extension that decompiles any web UI component into standalone, Tailwind-compatible HTML — offline, with WebGL/3D backgrounds intact.

↑↓ move↵ open⌘↵ new tab