{"version":1,"kind":"discovery-review-decisions","generated_at":"2026-11-06T18:42:17Z","counts":{"curated":240,"exclude":776,"hold":190},"decisions":[{"id":"scan-114199007","full_name":"omnifocal/exploitation","url":"https://github.com/omnifocal/exploitation","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"general-security","reason_en":"Jack the ROPper is a buffer-overflow and return-oriented programming challenge whose walkthrough uses binary inspection to build an exploit.","reason_zh":"Jack the ROPper 是缓冲区溢出与返回导向编程练习，题解中的二进制查看服务于漏洞利用。","evidence_url":"https://github.com/omnifocal/exploitation/blob/4ceef02a1d54317f8e8a588df0b80878b3ddecd6/README.md","reviewed_at":"2026-11-06"},{"id":"scan-114762263","full_name":"TheDS/srcds-nx","url":"https://github.com/TheDS/srcds-nx","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"general-application","reason_en":"SrcDS NX is a macOS launcher for existing Source game server libraries; its detours serve runtime compatibility, with no documented reverse-engineering analysis.","reason_zh":"SrcDS NX 是调用现有 Source 游戏服务器库的 macOS 启动程序；函数钩子用于运行兼容，仓库未记录逆向分析。","evidence_url":"https://github.com/TheDS/srcds-nx/blob/4e0020cf57e002106c07769a6768c78717701421/README.md","reviewed_at":"2026-11-06"},{"id":"scan-115353747","full_name":"lem2clide/Chip8-Emulator","url":"https://github.com/lem2clide/Chip8-Emulator","batch_id":"run-42119584443-1","decision":"curated","curated_id":"chip8-emulator-disassembler"},{"id":"scan-115979477","full_name":"sachinsharma9393/Java_Source_Code_to_CLASSDIAGRAM","url":"https://github.com/sachinsharma9393/Java_Source_Code_to_CLASSDIAGRAM","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"development-tool","reason_en":"The Java program parses available source files into UML class diagrams for software design, without analysing compiled programs.","reason_zh":"该 Java 程序把已有源码解析成 UML 类图，用于理解代码结构；项目没有分析编译后程序。","evidence_url":"https://github.com/sachinsharma9393/Java_Source_Code_to_CLASSDIAGRAM/blob/4692566733d16d2926e1761b695f70fb7a4137d8/README.md","reviewed_at":"2026-11-06"},{"id":"scan-116836628","full_name":"romatthe/nedism","url":"https://github.com/romatthe/nedism","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"no-real-content","reason_en":"The README is a placeholder and the Haskell source only prints a sample message, with no disassembler implementation.","reason_zh":"README 仍是占位文字，所附 Haskell 源码仅输出示例消息，没有反汇编器实现。","evidence_url":"https://github.com/romatthe/nedism/blob/afbaacf617194fdc710f55319a370b79546f51ca/src/Lib.hs","reviewed_at":"2026-11-06"},{"id":"scan-120153102","full_name":"Connor-McMillin/CTF-Write-Ups","url":"https://github.com/Connor-McMillin/CTF-Write-Ups","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"general-security","reason_en":"The repository is a small collection of miscellaneous CTF write-ups, with no documented reverse-engineering focus in its README or visible challenge paths.","reason_zh":"仓库是少量杂项 CTF 解题记录，README 和可见的题目路径均未显示以逆向工程为主题。","evidence_url":"https://github.com/Connor-McMillin/CTF-Write-Ups/blob/413af2087e2671d924f1bf965aeea5de2d85a82e/README.md","reviewed_at":"2026-11-06"},{"id":"scan-122334567","full_name":"adwait1-g/ieee_workshop","url":"https://github.com/adwait1-g/ieee_workshop","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"general-security","reason_en":"The Perfect Hack workshop centers on gaining server access and exploiting a buggy application; reverse engineering appears only in introductory reading links.","reason_zh":"The Perfect Hack 工作坊以攻入服务器和利用程序漏洞为主，逆向工程只出现在入门阅读链接中。","evidence_url":"https://github.com/adwait1-g/ieee_workshop/blob/68f92c25587d65f7405b83931e3dd4983b3f2a3f/README.md","reviewed_at":"2026-11-06"},{"id":"scan-126789015","full_name":"joker-returns/ctf_writeups","url":"https://github.com/joker-returns/ctf_writeups","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"general-security","reason_en":"The three documented Securinets solutions cover archive inspection, a JavaScript challenge and RSA cryptography, rather than a reverse-engineering subject.","reason_zh":"仓库中的三份 Securinets 解题记录分别涉及压缩包检查、JavaScript 条件判断和 RSA 密码学，主题不是程序逆向。","evidence_url":"https://github.com/joker-returns/ctf_writeups/blob/a6c076c3aebe817567b4e548dfaff27ccf9b246f/README.md","reviewed_at":"2026-11-06"},{"id":"scan-128731094","full_name":"dengV/lldb_DNG","url":"https://github.com/dengV/lldb_DNG","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"general-programming-tutorial","reason_en":"The LLDB notes demonstrate debugger commands and Swift/Objective-C calling behavior, largely as copied learning notes, without a distinct RE investigation.","reason_zh":"这些 LLDB 笔记演示调试命令及 Swift、Objective-C 调用行为，主要是学习摘记，没有独立的逆向研究。","evidence_url":"https://github.com/dengV/lldb_DNG/blob/68c0dec916c965441f81c86c83bcdd0aacb1853b/README.md","reviewed_at":"2026-11-06"},{"id":"scan-132149983","full_name":"abhishekarya1/Mumblr","url":"https://github.com/abhishekarya1/Mumblr","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"general-application","reason_en":"Mumblr is a local Wi-Fi and Bluetooth communication app; its decompilation and rebuild instructions are incidental development steps, with no analysis findings.","reason_zh":"Mumblr 是局域 Wi-Fi 与蓝牙通信应用；反编译和重新构建步骤只是项目操作说明，没有提供逆向分析发现。","evidence_url":"https://github.com/abhishekarya1/Mumblr/blob/691bac7f9fcf50b6db448f22b04c26136a559cb3/README.md","reviewed_at":"2026-11-06"},{"id":"scan-136004757","full_name":"djbarrow/rsacrack","url":"https://github.com/djbarrow/rsacrack","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"unrelated","reason_en":"The C experiments attempt RSA factorization through number theory, while the README’s reverse-engineering phrase refers to multiplication rather than software or device analysis.","reason_zh":"这些 C 语言实验研究 RSA 大数分解；文中的“逆向”指推回乘法因子，并非分析软件或设备。","evidence_url":"https://github.com/djbarrow/rsacrack/blob/1c05bb972c0a34d994aa6540de8f22a9f439c693/README.md","reviewed_at":"2026-11-06"},{"id":"scan-137551190","full_name":"R0ronoaZoro/reversing","url":"https://github.com/R0ronoaZoro/reversing","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"no-real-content","reason_en":"reversing contains one binary and links to an external walkthrough, but its own files provide no analysis or findings about that binary.","reason_zh":"reversing 只存放一个二进制文件并链接到外部讲解，仓库自身没有提供该文件的分析过程或发现。","evidence_url":"https://github.com/R0ronoaZoro/reversing/blob/6823d999e92fdd4d588f4a11833e623afeaa6976/README.md","reviewed_at":"2026-11-06"},{"id":"scan-138144613","full_name":"zero-gear/keygen_for_lostit_brute-strength","url":"https://github.com/zero-gear/keygen_for_lostit_brute-strength","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"general-security","reason_en":"The KeygenMe entry supplies a multithreaded brute-force solution but no documented reverse-engineering findings about the challenge's validation logic.","reason_zh":"这个 KeygenMe 条目提供多线程暴力求解程序，却没有记录对题目校验逻辑的逆向分析。","evidence_url":"https://github.com/zero-gear/keygen_for_lostit_brute-strength/blob/cc7ca301cf361640dc0e340015a874741c183be2/README.md","reviewed_at":"2026-11-06"},{"id":"scan-139031276","full_name":"zero-gear/keygen_for_lostit_psychic_powers","url":"https://github.com/zero-gear/keygen_for_lostit_psychic_powers","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"fork-or-mirror","reason_en":"The keygen write-up and image point to smart-rabbit/keygen_for_lostit_psychic_powers as the source of the same project, with no distinct contribution identified here.","reason_zh":"密钥生成器的解题文章和配图都指向 smart-rabbit/keygen_for_lostit_psychic_powers，当前仓库未说明独立贡献。","evidence_url":"https://github.com/zero-gear/keygen_for_lostit_psychic_powers/blob/d7ff6deaae47016ed14361119ff2e29133f20b14/README.md","reviewed_at":"2026-11-06"},{"id":"scan-141160305","full_name":"MinaMeh/Shellmates_Mini_CTF_2018-My_writeups","url":"https://github.com/MinaMeh/Shellmates_Mini_CTF_2018-My_writeups","batch_id":"run-42201075883-1","decision":"hold","reason_code":"insufficient-docs","reason_en":"The repository lists three reverse-challenge PDFs, but the README only calls them CTF write-ups and does not document their analysis or findings.","reason_zh":"仓库列有三份逆向题 PDF，但 README 只称其为 CTF 题解，没有说明分析过程或结论。","evidence_url":"https://github.com/MinaMeh/Shellmates_Mini_CTF_2018-My_writeups/blob/c166afdce4f861b5fc8af848ed1495ed849e7d47/README.md","reviewed_at":"2026-11-06"},{"id":"scan-141327922","full_name":"ShellAddicted/hx03wRE","url":"https://github.com/ShellAddicted/hx03wRE","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"general-application","reason_en":"HX03W is a smartband control API for heart rate, clock, battery and pedometer functions; it does not document recovered BLE message formats or analysis findings.","reason_zh":"HX03W 是读取心率、电量、计步及设置时钟的手环控制 API，没有记录恢复出的 BLE 报文格式或分析发现。","evidence_url":"https://github.com/ShellAddicted/hx03wRE/blob/cbd8a91d2cc6734d34117c0cb2394aa8b0d0a149/readme.md","reviewed_at":"2026-11-06"},{"id":"scan-142204253","full_name":"wildcat2083/mypokered","url":"https://github.com/wildcat2083/mypokered","batch_id":"run-42201075883-1","decision":"hold","reason_code":"linking-policy","reason_en":"mypokered publishes a Pokémon Red and Blue disassembly with game graphics in the tree and points readers to a pre-built ROM release, requiring a redistribution decision.","reason_zh":"mypokered 发布 Pokémon Red and Blue 的反汇编工程，仓库含大量游戏图像，并引导读者获取预构建 ROM，需判断其再发布问题。","evidence_url":"https://github.com/wildcat2083/mypokered/blob/030c08d33d4399ed52f2b5056be7571c00190097/README.md","reviewed_at":"2026-11-06"},{"id":"scan-142771890","full_name":"icyphox/re","url":"https://github.com/icyphox/re","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"fork-or-mirror","reason_en":"icyphox/re presents code and notes from the already curated Reverse Engineering for Beginners book without documenting an independent course or analysis contribution.","reason_zh":"icyphox/re 标明内容来自已收录的《Reverse Engineering for Beginners》，没有说明独立课程或新的分析成果。","evidence_url":"https://github.com/icyphox/re/blob/3d6dd9edf5da7a962b58f6d5f3ecdbe02af31ed3/README.md","reviewed_at":"2026-11-06"},{"id":"scan-142861992","full_name":"J1Weng/MyBatis-generator","url":"https://github.com/J1Weng/MyBatis-generator","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"unrelated","reason_en":"Here MyBatis “reverse engineering” means generating POJO and mapper files from database tables, a database-code generation task.","reason_zh":"这里的 MyBatis“逆向工程”是依据数据库表自动生成 POJO 和 mapper 文件，属于数据库代码生成。","evidence_url":"https://github.com/J1Weng/MyBatis-generator/blob/68b915e4a4a689881a4d7e33d74daf013af68b06/README.md","reviewed_at":"2026-11-06"},{"id":"scan-143565088","full_name":"yaseen-elolemy/My-crackmes","url":"https://github.com/yaseen-elolemy/My-crackmes","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"no-real-content","reason_en":"The repository offers two crackme executables, but its short READMEs provide no challenge objective, reverse-engineering lesson, findings, or solution.","reason_zh":"仓库仅提供两个 crackme 可执行文件，简短说明没有题目目标、逆向教学、分析发现或解答。","evidence_url":"https://github.com/yaseen-elolemy/My-crackmes/blob/a093f4a73d8b8d3f396f6fc5156e6baf2dae253c/README.md","reviewed_at":"2026-11-06"},{"id":"scan-146018206","full_name":"masspe/buildExe","url":"https://github.com/masspe/buildExe","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"development-tool","reason_en":"buildExe teaches manual construction of a small PE executable and its headers; it does not analyse or reconstruct an existing program.","reason_zh":"buildExe 演示如何手工构造带 PE 头的小型可执行文件，没有分析或重建现有程序。","evidence_url":"https://github.com/masspe/buildExe/blob/c4407ddf8983972fdff903b74140f2abf9bad05f/README.md","reviewed_at":"2026-11-06"},{"id":"scan-148918269","full_name":"dylanarmstrong/patches","url":"https://github.com/dylanarmstrong/patches","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The scripts patch Crusader Kings III and Europa Universalis IV to disable checksum validation and enable otherwise restricted commands.","reason_zh":"脚本修改《十字军之王 3》和《欧陆风云 4》，用于关闭校验并启用受限命令，属于游戏规避工具。","evidence_url":"https://github.com/dylanarmstrong/patches/blob/e19dc29af8365814981c68efd21f03a685df556f/README.md","reviewed_at":"2026-11-06"},{"id":"scan-149362716","full_name":"jwill9999/sinon_reverse_engineered","url":"https://github.com/jwill9999/sinon_reverse_engineered","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"general-programming-tutorial","reason_en":"The project teaches how Sinon spies and stubs work through a small JavaScript example, with no software reverse-engineering analysis or findings.","reason_zh":"项目用简短 JavaScript 示例讲解 Sinon 的 spy 和 stub，未提供软件逆向分析或研究发现。","evidence_url":"https://github.com/jwill9999/sinon_reverse_engineered/blob/255f9efb371d0749e5a766fd88c7e4562c53d74f/README.md","reviewed_at":"2026-11-06"},{"id":"scan-152901048","full_name":"minchingtonak/DashDance","url":"https://github.com/minchingtonak/DashDance","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"general-application","reason_en":"DashDance describes a car-and-music hackathon project; its README presents no reverse-engineering target, technique or findings.","reason_zh":"DashDance 的简介只介绍让汽车随音乐互动的黑客松项目，没有说明逆向对象、方法或成果。","evidence_url":"https://github.com/minchingtonak/DashDance/blob/cf13a4dd493291d17d6cdfcfc1c6ff904219b113/README.md","reviewed_at":"2026-11-06"},{"id":"scan-154221367","full_name":"ms02-1337/CRET","url":"https://github.com/ms02-1337/CRET","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"fork-or-mirror","reason_en":"CRET's README and image links point to the original amb0070/CRET project, while this repository presents the same toolkit without identifying independent development.","reason_zh":"CRET 的说明和图片链接指向原项目 amb0070/CRET；此仓库展示同一套工具，未说明有独立开发内容。","evidence_url":"https://github.com/ms02-1337/CRET/blob/c132ce75c5377ec9100807f0e45155d426abf657/README.md","reviewed_at":"2026-11-06"},{"id":"scan-154562919","full_name":"t94j0/discord-x86-bot","url":"https://github.com/t94j0/discord-x86-bot","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"unrelated","reason_en":"The x86 Discord bot responds to messages with random instruction content; its documentation contains no binary analysis or reverse-engineering workflow.","reason_zh":"该 Discord 机器人按消息返回随机 x86 指令内容，文档没有二进制分析或逆向工作流程。","evidence_url":"https://github.com/t94j0/discord-x86-bot/blob/c122c0a955c29b74e7f694d5e7abf08dd30b2a9e/README.md","reviewed_at":"2026-11-06"},{"id":"scan-154694739","full_name":"imlishant/Google-CTF","url":"https://github.com/imlishant/Google-CTF","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"no-real-content","reason_en":"The repository contains only a one-line title and no challenge files, analysis, write-ups, or tools.","reason_zh":"仓库只有一行标题，没有题目文件、分析记录、题解或工具。","evidence_url":"https://github.com/imlishant/Google-CTF/blob/7fd1459a540dfd2aef17bc46acc5e77ba585fdda/README.md","reviewed_at":"2026-11-06"},{"id":"scan-154776258","full_name":"fadhiilrachman/CHDK-CanonIxus285HS-ELPH360","url":"https://github.com/fadhiilrachman/CHDK-CanonIxus285HS-ELPH360","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"malware-samples","reason_en":"The repository has only a one-line CHDK claim and a committed camera firmware dump, with no CHDK source, analysis or findings.","reason_zh":"仓库只有一句 CHDK 说明和一份相机固件转储，没有 CHDK 源码、分析记录或研究结果。","evidence_url":"https://github.com/fadhiilrachman/CHDK-CanonIxus285HS-ELPH360/blob/9f0d97c8d2eed3b93eddb918b294f0bf1065e5eb/README.md","reviewed_at":"2026-11-06"},{"id":"scan-155212552","full_name":"humanova/soldat-cam-stabilizer","url":"https://github.com/humanova/soldat-cam-stabilizer","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"general-application","reason_en":"soldat-cam-stabilizer manipulates Soldat memory to stabilize spectator footage and collect images, but documents no investigation of the game’s code or formats.","reason_zh":"soldat-cam-stabilizer 修改 Soldat 的内存以稳定观战画面并采集图像，但没有记录对游戏代码或格式的调查。","evidence_url":"https://github.com/humanova/soldat-cam-stabilizer/blob/76f2695fdaefd10b7f77b50f54313d5b93b71efc/README.md","reviewed_at":"2026-11-06"},{"id":"scan-159181457","full_name":"kthordarson/avidsen-ipc380-i-root","url":"https://github.com/kthordarson/avidsen-ipc380-i-root","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"general-security","reason_en":"The Avidsen IPC380 guide explains UART access, single-user boot, and filesystem dumping to root a camera, without documenting reverse-engineering analysis.","reason_zh":"Avidsen IPC380 文档讲解通过 UART、中断启动和单用户模式取得摄像头 root 权限及转储文件系统，没有记录逆向分析。","evidence_url":"https://github.com/kthordarson/avidsen-ipc380-i-root/blob/bdecc097e934a18d8fade04b92c8c6c1669198bb/README.md","reviewed_at":"2026-11-06"},{"id":"scan-160101897","full_name":"gdelfe/Functional-network-construction-from-fMRI-signals","url":"https://github.com/gdelfe/Functional-network-construction-from-fMRI-signals","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"unrelated","reason_en":"The scripts infer brain connectivity from task-based fMRI signals using voxel correlations and LASSO; they do not analyse software or devices.","reason_zh":"这些脚本通过体素相关矩阵和 LASSO 推断任务态 fMRI 的脑网络连接，研究对象并非软件或设备。","evidence_url":"https://github.com/gdelfe/Functional-network-construction-from-fMRI-signals/blob/3a74a802a0a24b79c61011585546a62040319418/README.md","reviewed_at":"2026-11-06"},{"id":"scan-160576428","full_name":"dustinsilveri/exploit-dev","url":"https://github.com/dustinsilveri/exploit-dev","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"general-security","reason_en":"The repository contains x86 exploit scripts, while its brief description identifies exploit development rather than reverse-engineering analysis as its subject.","reason_zh":"仓库收录 x86 漏洞利用脚本，简介将主题定为安全研究与漏洞利用开发，未介绍逆向分析成果。","evidence_url":"https://github.com/dustinsilveri/exploit-dev/blob/993057119d3eba4a064f83b9c489d3318dde3ec6/README.md","reviewed_at":"2026-11-06"},{"id":"scan-163582021","full_name":"george-hopkins/minmon","url":"https://github.com/george-hopkins/minmon","batch_id":"run-42201075883-1","decision":"hold","reason_code":"insufficient-docs","reason_en":"minmon states that it decrypts bindings in hardened Android apps, but gives no input format, method or usage despite containing implementation files.","reason_zh":"minmon 声称可解密加固 Android 应用的绑定数据，但现有说明未交代输入格式、解密方法或使用方式，尽管仓库包含实现代码。","evidence_url":"https://github.com/george-hopkins/minmon/blob/fcf9a5fc3216f5b0123886f6c2fd485ade0553d6/README.md","reviewed_at":"2026-11-06"},{"id":"scan-164506643","full_name":"vladistan/codebreaker-2018-blockchain","url":"https://github.com/vladistan/codebreaker-2018-blockchain","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"general-security","reason_en":"The repository holds organizer-provided smart contracts and exploit tests for a blockchain challenge; it documents exploitation, not reverse engineering of a target.","reason_zh":"仓库收录区块链挑战赛提供的智能合约和利用测试，介绍的是漏洞利用，并未记录对目标的逆向分析。","evidence_url":"https://github.com/vladistan/codebreaker-2018-blockchain/blob/de423199d0b2ef966520e8d16279ce720ac02e89/README.md","reviewed_at":"2026-11-06"},{"id":"scan-164506904","full_name":"vladistan/codebreaker-2018-explore","url":"https://github.com/vladistan/codebreaker-2018-explore","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"general-security","reason_en":"The README only says the notebook explores a blockchain, and nothing in the documented work establishes software or protocol reverse engineering.","reason_zh":"简介仅称笔记本用于探索区块链，没有说明软件或协议逆向的对象、方法或发现。","evidence_url":"https://github.com/vladistan/codebreaker-2018-explore/blob/cac7b42162d4683a8270acd69e35324adab49aa0/README.md","reviewed_at":"2026-11-06"},{"id":"scan-166093898","full_name":"anamritraj/my-react","url":"https://github.com/anamritraj/my-react","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"general-programming-tutorial","reason_en":"My React is a small educational implementation of React concepts with only render implemented, without analysis of the shipped library.","reason_zh":"My React 是学习 React 概念的小型实现，目前只实现 render，没有分析已发布的 React 程序或库。","evidence_url":"https://github.com/anamritraj/my-react/blob/cf930c1a10a09e2676842ecf48209f41832cab80/README.md","reviewed_at":"2026-11-06"},{"id":"scan-167390528","full_name":"GrossTor/response-logic","url":"https://github.com/GrossTor/response-logic","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"unrelated","reason_en":"response-logic infers networks from perturbation-response data in systems biology; its use of reverse engineering refers to biological networks.","reason_zh":"response-logic 从扰动响应数据推断生物网络；其中的“逆向工程”指系统生物学中的网络推断。","evidence_url":"https://github.com/GrossTor/response-logic/blob/d44a9404418804e4693b3150d79110396e0a378e/README.md","reviewed_at":"2026-11-06"},{"id":"scan-168142021","full_name":"Kishore180994/Android-repackaging-attack","url":"https://github.com/Kishore180994/Android-repackaging-attack","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"malware-samples","reason_en":"The repository ships an Attack.apk and malicious smali code whose demonstrated effect is deleting device contacts, alongside repackaging and prevention instructions.","reason_zh":"仓库附有会删除设备联系人的 Attack.apk 和恶意 smali 代码，并提供重打包与防护步骤，主体是攻击样本。","evidence_url":"https://github.com/Kishore180994/Android-repackaging-attack/blob/8a9f80748e91438105ea1ad9da86137eccc85e80/README.md","reviewed_at":"2026-11-06"},{"id":"scan-171145702","full_name":"bediger4000/clean-php","url":"https://github.com/bediger4000/clean-php","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"protection-tool","reason_en":"clean-php renames PHP identifiers to generic names to anonymize source code; its documented function is source transformation, not analysis or deobfuscation.","reason_zh":"clean-php 将 PHP 标识符替换为通用名称以匿名化源码，项目描述的是源码变换，而非分析或去混淆。","evidence_url":"https://github.com/bediger4000/clean-php/blob/8b9d9a3f85205bca0bcbd4ad575f66eed6558e08/README.md","reviewed_at":"2026-11-06"},{"id":"scan-175381018","full_name":"zyazhb/Writeups","url":"https://github.com/zyazhb/Writeups","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"general-security","reason_en":"The repository is a broad CTF write-up archive spanning web, cryptography and exploitation challenges, with reverse engineering only one part of its contents.","reason_zh":"该仓库汇集 Web、密码学和利用题等多类 CTF 解题材料，逆向分析只是其中一部分。","evidence_url":"https://github.com/zyazhb/Writeups/blob/a69bb51a1c6bc4cc2048cc43a9f5c07b918721c0/README.md","reviewed_at":"2026-11-06"},{"id":"scan-175968860","full_name":"hi-dhl/DebugApkSmali","url":"https://github.com/hi-dhl/DebugApkSmali","batch_id":"run-42119584443-1","decision":"hold","reason_code":"linking-policy","reason_en":"The Smali debugging guide is substantive, but its sample project commits an APK and about 1,900 decompiled Smali files, requiring a decision on target-derived material.","reason_zh":"Smali 调试教程内容充实，但示例工程提交了 APK 和约 1900 个反编译 Smali 文件，目标衍生内容需由维护者判断。","evidence_url":"https://github.com/hi-dhl/DebugApkSmali/blob/a7a988e5ec8135142724686ba3fb2a4eaa059ca8/README.md","reviewed_at":"2026-11-06"},{"id":"scan-180836793","full_name":"ByteBandits/bytebandits.github.io","url":"https://github.com/ByteBandits/bytebandits.github.io","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"community-or-event","reason_en":"The repository is a static ByteBandits team website that links to a separate writeups repository; it contains no reverse-engineering writeups of its own.","reason_zh":"该仓库是 ByteBandits 团队的静态网站，题解放在另一个仓库，本仓库没有独立的逆向分析内容。","evidence_url":"https://github.com/ByteBandits/bytebandits.github.io/blob/60f2294b50ec4bc2a647cd48e94c7199822a0036/README.md","reviewed_at":"2026-11-06"},{"id":"scan-183297522","full_name":"nv1t/blog-backup","url":"https://github.com/nv1t/blog-backup","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"personal-profile","reason_en":"The repository is a personal blog built from the Beautiful Jekyll template, with mixed blog posts rather than a reverse-engineering resource as its primary subject.","reason_zh":"该仓库是基于 Beautiful Jekyll 模板的个人博客，文章主题混杂，整体并非逆向工程资源。","evidence_url":"https://github.com/nv1t/blog-backup/blob/5de2f538c820595fabf719b1a962982d23d9b88f/README.md","reviewed_at":"2026-11-06"},{"id":"scan-185720674","full_name":"umjammer/codavaj","url":"https://github.com/umjammer/codavaj","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"development-tool","reason_en":"CODAVAJ chiefly generates Java source declarations from Javadoc; its decompiled-source example adds comments to output produced by Fernflower.","reason_zh":"CODAVAJ 主要根据 Javadoc 生成 Java 源码声明；涉及反编译的示例只是给 Fernflower 已生成的源码补充注释。","evidence_url":"https://github.com/umjammer/codavaj/blob/88aad9a7268698779f9ff33f33ce5a25b2ebe69a/README.md","reviewed_at":"2026-11-06"},{"id":"scan-192774984","full_name":"ZenTauro/blog-posts","url":"https://github.com/ZenTauro/blog-posts","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"general-programming-tutorial","reason_en":"blog-posts holds personal articles on Rust shell parsing, Gatsby and programming; the repository has no documented reverse-engineering resource.","reason_zh":"blog-posts 收录 Rust shell 解析、Gatsby 和编程等个人文章，没有记载逆向工程专题内容。","evidence_url":"https://github.com/ZenTauro/blog-posts/blob/7909a0c1a86f237f5d4c9a3c712e5dd6f3a388da/README.md","reviewed_at":"2026-11-06"},{"id":"scan-192812267","full_name":"nooperation/SanHook","url":"https://github.com/nooperation/SanHook","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"SanHook's Sansar client hooks include fly mode, avatar-position changes, and packet modification, making game manipulation a central use.","reason_zh":"SanHook 对 Sansar 客户端的钩子包含飞行模式、角色位置修改和数据包改写，核心用途涉及操纵游戏行为。","evidence_url":"https://github.com/nooperation/SanHook/blob/4b8b7ac3238441b49b285442397b67aafea6967f/SanHook/main.cpp","reviewed_at":"2026-11-06"},{"id":"scan-192876586","full_name":"4RG0S/2019-Summer-Mobile-App-Reversing","url":"https://github.com/4RG0S/2019-Summer-Mobile-App-Reversing","batch_id":"run-42201075883-1","decision":"hold","reason_code":"insufficient-docs","reason_en":"The README only names a mobile app reversing project; the PDF exists, but its contents are unavailable, so its methods and findings cannot be assessed.","reason_zh":"README 只给出移动应用逆向项目的标题；仓库虽有 PDF，但其内容未展示，无法判断具体方法和成果。","evidence_url":"https://github.com/4RG0S/2019-Summer-Mobile-App-Reversing/blob/5d18dbaeea0f34e1c914b76f37c2e90276c2350c/README.md","reviewed_at":"2026-11-06"},{"id":"scan-197297041","full_name":"GH-Rake/Binary-To-AOB","url":"https://github.com/GH-Rake/Binary-To-AOB","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"development-tool","reason_en":"Binary-To-AOB converts arbitrary files into C++ byte-array headers for embedding in applications; it does not inspect or analyze the input.","reason_zh":"Binary-To-AOB 将任意文件转换成便于嵌入 C++ 程序的字节数组头文件，不对输入进行逆向分析。","evidence_url":"https://github.com/GH-Rake/Binary-To-AOB/blob/2447f40f4f4d78179e0e9fb945576e834065a6c7/README.md","reviewed_at":"2026-11-06"},{"id":"scan-198916754","full_name":"D3vle0/WriteUp","url":"https://github.com/D3vle0/WriteUp","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"general-security","reason_en":"WriteUp is a mixed CTF and programming-challenge archive spanning network, cryptography, web and binary tasks, without reverse engineering as its main subject.","reason_zh":"WriteUp 汇集网络、密码学、网页、二进制及编程类 CTF 题解，逆向工程并非仓库的主要主题。","evidence_url":"https://github.com/D3vle0/WriteUp/blob/b23912c169b9e50e60beed35f72e95d12ab34785/README.md","reviewed_at":"2026-11-06"},{"id":"scan-199821489","full_name":"c3r34lk1ll3r/maba","url":"https://github.com/c3r34lk1ll3r/maba","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"general-application","reason_en":"maba is a general MBR and GPT partition viewer and extractor; its only stated reverse-engineering connection is a passing note about IoT work.","reason_zh":"maba 是通用的 MBR／GPT 分区查看和提取脚本；与逆向工程的联系仅是作者提到自己的 IoT 工作。","evidence_url":"https://github.com/c3r34lk1ll3r/maba/blob/f64d30a33321d87eae26fe45992c3b5ce16a0526/README.md","reviewed_at":"2026-11-06"},{"id":"scan-203217184","full_name":"CanvizTechnologies/cloud-claw","url":"https://github.com/CanvizTechnologies/cloud-claw","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"distribution-site","reason_en":"The English README repeatedly sends readers to a committed .vscode ZIP download for an OpenClaw cloud app, with no reverse-engineering subject.","reason_zh":"英文文档反复引导下载仓库 .vscode 目录中的 ZIP；项目是 OpenClaw 云端应用，没有逆向研究主题。","evidence_url":"https://github.com/CanvizTechnologies/cloud-claw/blob/a0ee52ab72fdc92a551594e9e84def8c336e0d84/README.md","reviewed_at":"2026-11-06"},{"id":"scan-204145075","full_name":"awoimbee-42/corewar","url":"https://github.com/awoimbee-42/corewar","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"development-tool","reason_en":"corewar primarily implements a 42-school virtual arena and assembler; its disassembler is a small companion to that programming project.","reason_zh":"corewar 主要实现 42 学校课程中的虚拟竞技场和汇编器，反汇编器只是该编程项目的附带组件。","evidence_url":"https://github.com/awoimbee-42/corewar/blob/9db3ee09afd92c7cb0f21e1250ad72e1dfc86be0/README.md","reviewed_at":"2026-11-06"},{"id":"scan-204293595","full_name":"lion-chen/AREK","url":"https://github.com/lion-chen/AREK","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"no-real-content","reason_en":"AREK consists of a short script that invokes apktool to decode an APK, with no distinct analysis capability or findings.","reason_zh":"AREK 只有一个调用 apktool 解包 APK 的简短脚本，没有独立的分析能力或研究结果。","evidence_url":"https://github.com/lion-chen/AREK/blob/82788e0610745992bde31eddc000fda789d3964c/index.py","reviewed_at":"2026-11-06"},{"id":"scan-205262028","full_name":"Christochi/COMP-3220-OOAD","url":"https://github.com/Christochi/COMP-3220-OOAD","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"general-programming-tutorial","reason_en":"COMP-3220-OOAD contains object-oriented analysis and design coursework; its TicTacToe reverse-and-forward-engineering assignment is a small part of a general course.","reason_zh":"COMP-3220-OOAD 收录面向对象分析与设计课程作业；井字棋逆向及正向工程只是通用课程中的一项练习。","evidence_url":"https://github.com/Christochi/COMP-3220-OOAD/blob/ffeec3b765934b536a2547cc03a4dc2398ea755e/README.md","reviewed_at":"2026-11-06"},{"id":"scan-205331243","full_name":"StingrayCZ/Spoiler-for-Lotus-car","url":"https://github.com/StingrayCZ/Spoiler-for-Lotus-car","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"unrelated","reason_en":"The project redesigns a physical Lotus spoiler using 3D scanning, CAD and printing; its use of reverse engineering concerns mechanical shape recovery.","reason_zh":"项目通过 3D 扫描、CAD 和打印重新设计 Lotus 汽车尾翼；其中的逆向工程指机械外形复原。","evidence_url":"https://github.com/StingrayCZ/Spoiler-for-Lotus-car/blob/bfc24aa526d23ee688213af2f67918134edb7aea/README.md","reviewed_at":"2026-11-06"},{"id":"scan-206492139","full_name":"au5ton/watchdox","url":"https://github.com/au5ton/watchdox","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"watchdox publishes a script specifically to bypass BlackBerry Workspaces DRM and export protected documents through browser JavaScript overrides.","reason_zh":"watchdox 发布的脚本以绕过 BlackBerry Workspaces 的 DRM 并导出受保护文档为目的，使用浏览器 JavaScript 覆盖来实现。","evidence_url":"https://github.com/au5ton/watchdox/blob/723dccf5d1035398c210c5771e86914740a22f77/README.md","reviewed_at":"2026-11-06"},{"id":"scan-212730191","full_name":"patricksferraz/hackathon","url":"https://github.com/patricksferraz/hackathon","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"general-programming-tutorial","reason_en":"hackathon aggregates coursework, security challenges, web apps, and programming answers; reverse engineering appears only as one CS:APP lab topic.","reason_zh":"hackathon 汇集课程作业、安全挑战、网页项目和编程题答案；逆向工程只是其中一项 CS:APP 实验主题。","evidence_url":"https://github.com/patricksferraz/hackathon/blob/ce01723ad704e29e54cd48a1722ddab8d6b551b2/README.md","reviewed_at":"2026-11-06"},{"id":"scan-213442394","full_name":"SimoMett/Starsky-and-Hutch-addons","url":"https://github.com/SimoMett/Starsky-and-Hutch-addons","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The DLL is presented as cheats for the 2003 Starsky and Hutch game and is injected into its executable; the proposed multiplayer-client analysis is only an intention.","reason_zh":"该 DLL 被明确介绍为 2003 年《Starsky and Hutch》的作弊程序，并通过注入游戏进程使用；自制联机客户端仍只是设想。","evidence_url":"https://github.com/SimoMett/Starsky-and-Hutch-addons/blob/9927b170e43974222cb3b730f16c2232a1eb1f85/README.md","reviewed_at":"2026-11-06"},{"id":"scan-213939472","full_name":"GiacomoFerro/malware-analysis","url":"https://github.com/GiacomoFerro/malware-analysis","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"malware-samples","reason_en":"The repository commits the Win32/Expiro executable sample itself alongside reports; the published malware binary makes it a sample distribution repository.","reason_zh":"该仓库除分析报告外还直接提交 Win32/Expiro 可执行样本，因此属于恶意软件样本分发仓库。","evidence_url":"https://github.com/GiacomoFerro/malware-analysis/blob/ebff1969ef87ad598a24a524f4b04267536153c0/README.md","reviewed_at":"2026-11-06"},{"id":"scan-220883410","full_name":"EAX94/TestMVPMatrixAndW2S","url":"https://github.com/EAX94/TestMVPMatrixAndW2S","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"development-tool","reason_en":"The DirectX sample tests MVP matrix and WorldToScreen functions in a windowed game process; it documents no executable analysis or recovered game behavior.","reason_zh":"这个 DirectX 示例在窗口模式游戏中测试 MVP 矩阵和 WorldToScreen 函数，没有记录可执行文件分析或游戏行为还原。","evidence_url":"https://github.com/EAX94/TestMVPMatrixAndW2S/blob/3ff980a2159e8d07713129f1263b7698308bac2e/README.md","reviewed_at":"2026-11-06"},{"id":"scan-223820561","full_name":"vastopol/romp","url":"https://github.com/vastopol/romp","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"distribution-site","reason_en":"romp chiefly hosts extracted ROM and firmware binary dumps from devices, with brief chip notes rather than a reusable analysis tool or developed findings.","reason_zh":"romp 主要存放从设备读取的 ROM 和固件二进制转储，辅以简短芯片笔记，没有可复用的分析工具或成体系的研究成果。","evidence_url":"https://github.com/vastopol/romp/blob/8000c986f5efe45364972557b0624ef54989c218/README.md","reviewed_at":"2026-11-06"},{"id":"scan-228590503","full_name":"raadfhaddad/Binary-CTF","url":"https://github.com/raadfhaddad/Binary-CTF","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"no-real-content","reason_en":"The repository contains only a beginner binary challenge and an invitation to request hints, with no analysis, tooling or course material.","reason_zh":"仓库只有一道入门二进制题和索取提示的说明，没有分析过程、工具或课程内容。","evidence_url":"https://github.com/raadfhaddad/Binary-CTF/blob/4a31b98644a40df37349d0900a33f7fbdf2151f7/README.md","reviewed_at":"2026-11-06"},{"id":"scan-236491472","full_name":"abduallahJamal/abduallahJamal","url":"https://github.com/abduallahJamal/abduallahJamal","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"personal-profile","reason_en":"The repository is a personal GitHub profile presenting the author's roles, skills and links to separate projects, with no RE artifact of its own.","reason_zh":"该仓库是个人 GitHub 简介，展示职业方向、技能和其他项目链接，本仓库没有独立逆向成果。","evidence_url":"https://github.com/abduallahJamal/abduallahJamal/blob/e49cd8b4213a185a4d6e33e870424a2d10641135/README.md","reviewed_at":"2026-11-06"},{"id":"scan-237577497","full_name":"sreeharshabandi/Malware-Analysis","url":"https://github.com/sreeharshabandi/Malware-Analysis","batch_id":"run-42186805426-1","decision":"hold","reason_code":"insufficient-docs","reason_en":"Two technical-report PDFs are present, but the one-line README gives no target, analytical method or findings from either report.","reason_zh":"仓库包含两份技术报告 PDF，但一行 README 未说明各报告的分析对象、方法或发现。","evidence_url":"https://github.com/sreeharshabandi/Malware-Analysis/blob/11160d5c80b479cd0532d07e0bfb5485e782ea56/README.md","reviewed_at":"2026-11-06"},{"id":"scan-240305600","full_name":"krystalsavv/Architecture-Mining","url":"https://github.com/krystalsavv/Architecture-Mining","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"unrelated","reason_en":"Architecture Miner derives class-dependency graphs from available C++ source code; its architecture reconstruction is source-code mining rather than target reverse engineering.","reason_zh":"Architecture Miner 从已有 C++ 源码提取类依赖图；这里的架构重建是源码挖掘，而非对目标程序的逆向分析。","evidence_url":"https://github.com/krystalsavv/Architecture-Mining/blob/da47474f90bfb928ee65967610cb5ebb22057bb1/README.md","reviewed_at":"2026-11-06"},{"id":"scan-241549731","full_name":"debbie23/Anker_Prime_BLE_hacking","url":"https://github.com/debbie23/Anker_Prime_BLE_hacking","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"no-real-content","reason_en":"The README is a generic hello-world statement, and the only other listed item is a ZIP archive; no accessible analysis, protocol notes or tool source is supplied.","reason_zh":"README 只有通用的 hello-world 自述，文件清单中另有一个 ZIP 包；仓库资料没有可审阅的分析、协议笔记或工具源码。","evidence_url":"https://github.com/debbie23/Anker_Prime_BLE_hacking/blob/2afcb7023b6170c7d7d5eaafc6b315bad2bae547/README.md","reviewed_at":"2026-11-06"},{"id":"scan-242456121","full_name":"ehrenb/machina","url":"https://github.com/ehrenb/machina","batch_id":"run-42186805426-1","decision":"hold","reason_code":"capability-unclear","reason_en":"Machina documents file-type routing to workers, but the repository does not describe the analysis or findings those workers produce.","reason_zh":"Machina 说明了按文件类型向工作模块分派任务，但现有文本未交代这些模块具体产出哪些分析结果。","evidence_url":"https://github.com/ehrenb/machina/blob/56f4d257e1f4d38b9954f6e570257a3f38d85c38/configs/README.md","reviewed_at":"2026-11-06"},{"id":"scan-266072136","full_name":"daringjoker/Injector","url":"https://github.com/daringjoker/Injector","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"development-tool","reason_en":"Injector currently only adds arbitrary data as a PE section; its dump-on-execute analysis feature appears solely as a TODO.","reason_zh":"Injector 目前只负责向 PE 文件加入数据节；与分析有关的运行时转储功能仍列在待办事项中。","evidence_url":"https://github.com/daringjoker/Injector/blob/64ef2999858112d4265bbff7c2d4649504a2ce80/README.md","reviewed_at":"2026-11-06"},{"id":"scan-281293049","full_name":"thelumberjhack/thelumberjhack.github.io","url":"https://github.com/thelumberjhack/thelumberjhack.github.io","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"personal-profile","reason_en":"The README presents a personal Jekyll website, while the post contents do not establish a repository-level reverse-engineering resource.","reason_zh":"README 将仓库介绍为个人 Jekyll 网站；仓库资料没有展示可作为逆向资源收录的具体文章内容。","evidence_url":"https://github.com/thelumberjhack/thelumberjhack.github.io/blob/ea58c9b2f481dfce790176f916c5fccdf1765a33/README.md","reviewed_at":"2026-11-06"},{"id":"scan-328388910","full_name":"4zv4l/SimCTF","url":"https://github.com/4zv4l/SimCTF","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"general-security","reason_en":"SimCTF distributes challenge binaries and password-protected source archives as a flag-finding exercise, with no reverse-engineering findings or methods documented.","reason_zh":"SimCTF 提供题目二进制文件和以旗标为密码的源码压缩包，属于解题练习，未记录逆向方法或发现。","evidence_url":"https://github.com/4zv4l/SimCTF/blob/51ab99b39eadca1539fb6557f262ba444b8cd9e9/README.md","reviewed_at":"2026-11-06"},{"id":"scan-384633210","full_name":"HadiAsyrafi/HadiAsyrafi.github.io","url":"https://github.com/HadiAsyrafi/HadiAsyrafi.github.io","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"personal-profile","reason_en":"The repository is a personal Jekyll site built from a Chirpy starter template, with one introductory I2C post rather than a reverse-engineering resource.","reason_zh":"该仓库是基于 Chirpy 模板搭建的个人 Jekyll 网站，仅有一篇 I2C 入门文章，未形成逆向工程资源。","evidence_url":"https://github.com/HadiAsyrafi/HadiAsyrafi.github.io/blob/c02a195c4f77e5d72b420102d4ab6ebc43da34ac/README.md","reviewed_at":"2026-11-06"},{"id":"scan-494453909","full_name":"N3dal/binary-2-gray","url":"https://github.com/N3dal/binary-2-gray","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"unrelated","reason_en":"The script converts numbers between binary and Gray code; the source documents no analysis of software, executables or other targets.","reason_zh":"这个脚本只做二进制码与格雷码互转，材料没有描述对程序、可执行文件或其他对象的逆向分析。","evidence_url":"https://github.com/N3dal/binary-2-gray/blob/8be9897a5553557607b8485ec1ed19840faab26f/README.md","reviewed_at":"2026-11-06"},{"id":"scan-496391203","full_name":"florczakraf/gta-iii-radio-for-all-vehicles","url":"https://github.com/florczakraf/gta-iii-radio-for-all-vehicles","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"game-mod-no-re","reason_en":"The repository supplies a GTA III radio-enabling ASI mod and points to an external reversing story, but its project content documents no analysis findings.","reason_zh":"仓库提供让 GTA III 所有车辆都能播放电台的 ASI 模组，并链接站外逆向文章；仓库内容没有分析发现。","evidence_url":"https://github.com/florczakraf/gta-iii-radio-for-all-vehicles/blob/80c4ee8b932e6688d72401a8dde078a34e83192b/README.md","reviewed_at":"2026-11-06"},{"id":"scan-497149337","full_name":"EteimZ/x86_asm","url":"https://github.com/EteimZ/x86_asm","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-programming-tutorial","reason_en":"x86_asm is chiefly an introduction to x86-64 registers and instructions, with assembly exercises and a small license-check example.","reason_zh":"x86_asm 主要是 x86-64 寄存器与指令的入门笔记，附有汇编练习和简单的密钥检查示例。","evidence_url":"https://github.com/EteimZ/x86_asm/blob/1eaa4363e636c6e7c01127f3d63bd303e5ac8ad7/README.md","reviewed_at":"2026-11-06"},{"id":"scan-500455733","full_name":"msmaiaa/solaire","url":"https://github.com/msmaiaa/solaire","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The supplied example changes Assault Cube ammunition and removes recoil in a running process, making game cheating the concrete demonstrated use.","reason_zh":"所附示例直接改写 Assault Cube 进程中的弹药数并移除后坐力，具体展示用途是游戏作弊。","evidence_url":"https://github.com/msmaiaa/solaire/blob/60e797026d5285107922a02b35619cd76e4efbf8/src/bin/external.rs","reviewed_at":"2026-11-06"},{"id":"scan-500559576","full_name":"SplitgateDevelopment/DiscordBot","url":"https://github.com/SplitgateDevelopment/DiscordBot","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-application","reason_en":"DiscordBot presents a Splitgate Discord bot and depends on splitgate.js; its source gives no analysis or reconstruction of the game's interface.","reason_zh":"DiscordBot 是使用 splitgate.js 的 Splitgate Discord 机器人，仓库资料没有展示游戏接口分析或重建过程。","evidence_url":"https://github.com/SplitgateDevelopment/DiscordBot/blob/438ce1a413ab1b860981f02bb7fce99f9b86adc2/README.md","reviewed_at":"2026-11-06"},{"id":"scan-502315722","full_name":"GaiBrutman/feb","url":"https://github.com/GaiBrutman/feb","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"no-real-content","reason_en":"FEB describes itself only as exploring binaries, while the files show package scaffolding without an analyzer, findings, or usage documentation.","reason_zh":"FEB 只笼统称自己探索二进制文件；仓库文件仅见包工程骨架，没有分析器、研究结果或使用说明。","evidence_url":"https://github.com/GaiBrutman/feb/blob/4c78885465ae26673b0f89b48b2ffb32c4cb6cc7/README.md","reviewed_at":"2026-11-06"},{"id":"scan-506207261","full_name":"Dam4323/EGDataset","url":"https://github.com/Dam4323/EGDataset","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"detection-only","reason_en":"EGDataset is a static and dynamic feature dataset for Android malware classification, with detection results rather than reverse-engineering findings.","reason_zh":"EGDataset 提供 Android 恶意软件分类用的静态和动态特征及检测结果，未记录逆向分析发现。","evidence_url":"https://github.com/Dam4323/EGDataset/blob/745741b08297a9aab51fdffee3c45a93334a6557/README.md","reviewed_at":"2026-11-06"},{"id":"scan-509475626","full_name":"doyaGu/CKRasterizerLib","url":"https://github.com/doyaGu/CKRasterizerLib","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-application","reason_en":"CKRasterizerLib provides Virtools rasterizer interfaces and implementations, while its text documents no reverse-engineering activity or findings.","reason_zh":"CKRasterizerLib 提供 Virtools 光栅化器接口和实现；现有材料未记录逆向分析活动或发现。","evidence_url":"https://github.com/doyaGu/CKRasterizerLib/blob/65b44955eb7599415abfe5ed42dc367799e15509/include/CKRasterizer.h","reviewed_at":"2026-11-06"},{"id":"scan-510017947","full_name":"Dam4323/AndroidMalware-CGDATASET","url":"https://github.com/Dam4323/AndroidMalware-CGDATASET","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"detection-only","reason_en":"AndroidMalware-CGDATASET distributes call-graph features for classifying malware families; it contains no reverse-engineering analysis or tool, and the model code is unavailable.","reason_zh":"AndroidMalware-CGDATASET 提供用于恶意软件家族分类的调用图特征数据，没有逆向分析工具或研究内容，模型代码也未公开。","evidence_url":"https://github.com/Dam4323/AndroidMalware-CGDATASET/blob/68a9277878147285a7dab8d6431080283822cc8b/README.md","reviewed_at":"2026-11-06"},{"id":"scan-511284292","full_name":"nevioo1337/RustScriptCfgExtractor","url":"https://github.com/nevioo1337/RustScriptCfgExtractor","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-application","reason_en":"The C++ program reads Rust game configuration files and prints settings and key mappings; it documents no analysis of game code or protocol behavior.","reason_zh":"该 C++ 程序读取 Rust 游戏配置文件并输出设置和按键映射，没有记录游戏代码或通信行为的逆向分析。","evidence_url":"https://github.com/nevioo1337/RustScriptCfgExtractor/blob/a496e3f37fa49bce86ad4490e933292383546948/RustCfgExtractor.cpp","reviewed_at":"2026-11-06"},{"id":"scan-513291378","full_name":"vrojasosorio/CC5325","url":"https://github.com/vrojasosorio/CC5325","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-security","reason_en":"CC5325 is a personal copy of a broad competitive-hacking course's challenges and solutions, covering steganography, cryptography, web tasks, and forensics rather than RE as its main subject.","reason_zh":"CC5325 是综合黑客竞赛课程题目与解答的个人存档，涵盖隐写、密码学、网页题和取证，逆向工程并非其主要主题。","evidence_url":"https://github.com/vrojasosorio/CC5325/blob/7e44f619076df05990bc083977f6496484a47069/README.md","reviewed_at":"2026-11-06"},{"id":"scan-513954874","full_name":"loneicewolf/CheatEngine-Automation","url":"https://github.com/loneicewolf/CheatEngine-Automation","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"no-real-content","reason_en":"CheatEngine-Automation contains only a one-line description and a TODO list; the file list has no scripts, templates or analysis.","reason_zh":"CheatEngine-Automation 只有一句简介和待办清单，文件列表中没有脚本、模板或分析内容。","evidence_url":"https://github.com/loneicewolf/CheatEngine-Automation/blob/2b463c1ab204ab9b0f57f902d8f1b1301c2207bc/README.md","reviewed_at":"2026-11-06"},{"id":"scan-518029812","full_name":"Ninja-Yubaraj/picoCTF-Writeups","url":"https://github.com/Ninja-Yubaraj/picoCTF-Writeups","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-security","reason_en":"The picoCTF notes span beginner cryptography, forensics, general skills and web exploitation as well as a few reverse-engineering puzzles.","reason_zh":"这份 picoCTF 初级题解同时覆盖密码、取证、基础技能和网页漏洞利用，仅有少数逆向题，并非以逆向分析为主体。","evidence_url":"https://github.com/Ninja-Yubaraj/picoCTF-Writeups/blob/b8b2653e29399cc9aa55760067a79802fdb72b1d/README.md","reviewed_at":"2026-11-06"},{"id":"scan-521677448","full_name":"nevioo1337/NaturalExplorer","url":"https://github.com/nevioo1337/NaturalExplorer","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-application","reason_en":"NaturalExplorer describes parsing Natural-language source references and generating an HTML tree; its source does not document reverse engineering of a target.","reason_zh":"NaturalExplorer 描述了对 Natural 程序引用关系的解析及 HTML 树生成，来源材料未记录对目标的逆向分析。","evidence_url":"https://github.com/nevioo1337/NaturalExplorer/blob/10c1cce64fb3f432ebdcead8c6fe73dcc578c0c9/README.md","reviewed_at":"2026-11-06"},{"id":"scan-522473803","full_name":"ShifatSahariar/AndroidLeakageFinder","url":"https://github.com/ShifatSahariar/AndroidLeakageFinder","batch_id":"run-42186805426-1","decision":"hold","reason_code":"linking-policy","reason_en":"The Android leakage analyzer may be in scope, but the repository commits input APKs and decompiled Smali output, requiring a decision on redistributed app material.","reason_zh":"Android 信息泄露分析器可能符合收录范围，但仓库提交了输入 APK 和反编译后的 Smali 输出，需要先判断这些应用材料的再分发问题。","evidence_url":"https://github.com/ShifatSahariar/AndroidLeakageFinder/blob/68408e45cee51dbedfef4cedf7e2e40500035efa/README.md","reviewed_at":"2026-11-06"},{"id":"scan-522506459","full_name":"lumenthi/override","url":"https://github.com/lumenthi/override","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-security","reason_en":"Override is a 42 exploit-course solution collection centered on exploiting ten binary levels, including overflow, shellcode and ret2libc tasks.","reason_zh":"Override 是 42 学校的漏洞利用课程题解集，十关主要围绕溢出、shellcode 和 ret2libc 等利用技术。","evidence_url":"https://github.com/lumenthi/override/blob/5800b76e11cdad2d9b266cb1aea22ca17b9c1d8d/README.md","reviewed_at":"2026-11-06"},{"id":"scan-529788378","full_name":"YoungHaKim7/Arm64_Assembly_Language","url":"https://github.com/YoungHaKim7/Arm64_Assembly_Language","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-programming-tutorial","reason_en":"The repository collects ARM assembly learning links and small C, Rust and assembly examples, rather than teaching analysis of an existing target.","reason_zh":"仓库汇集 ARM 汇编学习链接及 C、Rust 和汇编小例子，主题是编程入门，而非分析现有程序。","evidence_url":"https://github.com/YoungHaKim7/Arm64_Assembly_Language/blob/69e247368e6ee5b8dcce9a914051bbeff7b9cd91/README.md","reviewed_at":"2026-11-06"},{"id":"scan-530486614","full_name":"SamRB-dev/AsmForRE","url":"https://github.com/SamRB-dev/AsmForRE","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-programming-tutorial","reason_en":"AsmForRE's README offers basic x86 assembly examples, an assembler helper and general learning links, without a documented reverse-engineering exercise.","reason_zh":"AsmForRE 的 README 介绍基础 x86 汇编示例、汇编辅助脚本和通用学习链接，没有记录具体的逆向分析练习。","evidence_url":"https://github.com/SamRB-dev/AsmForRE/blob/4f164835ee3a35e10e6588c220afa645036575a6/README.md","reviewed_at":"2026-11-06"},{"id":"scan-533021852","full_name":"vobst/ctf-hireme","url":"https://github.com/vobst/ctf-hireme","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-security","reason_en":"The notebook solves a supplied-source cryptographic programming challenge by analyzing and reversing its algorithm, rather than investigating shipped software.","reason_zh":"笔记本分析并逆推一道已给出 C 源码的密码算法编程挑战，主题并非对已发布软件进行逆向调查。","evidence_url":"https://github.com/vobst/ctf-hireme/blob/905220e9e1aec726bcd547540ef98fc708e8f96a/HireMe.c.ipynb","reviewed_at":"2026-11-06"},{"id":"scan-534771728","full_name":"mediaexplorer74/YaTa","url":"https://github.com/mediaexplorer74/YaTa","batch_id":"run-42186805426-1","decision":"hold","reason_code":"linking-policy","reason_en":"YaTa says its included Yandex assemblies were decompiled with dotPeek, and the file list contains extensive generated C# and C output from those components.","reason_zh":"YaTa 称仓库中的 Yandex 程序集由 dotPeek 反编译，文件列表也显示大量由相关组件生成的 C# 与 C 文件，需审查链接政策。","evidence_url":"https://github.com/mediaexplorer74/YaTa/blob/0abe8b653db281caa4cb8cc411fd78bebed96824/Readme.md","reviewed_at":"2026-11-06"},{"id":"scan-536444891","full_name":"ThomasHartDev/Computer-Security-Project-Reports","url":"https://github.com/ThomasHartDev/Computer-Security-Project-Reports","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-security","reason_en":"These PDF course reports cover broad computer-security labs and homework, including cryptography, TLS, password cracking, and exploitation; binary patching is one exercise.","reason_zh":"这些 PDF 是计算机安全课程的实验报告和作业，主题涵盖密码学、TLS、密码破解与漏洞利用；二进制修改只是其中一项练习。","evidence_url":"https://github.com/ThomasHartDev/Computer-Security-Project-Reports/blob/f9a3e8f6a5040ab1913ecd89383a3a744012ddb6/README.md","reviewed_at":"2026-11-06"},{"id":"scan-536728686","full_name":"mediaexplorer74/MSBandDesktopApp","url":"https://github.com/mediaexplorer74/MSBandDesktopApp","batch_id":"run-42186805426-1","decision":"hold","reason_code":"linking-policy","reason_en":"The repository contains a large decompilation of Microsoft's commercial Band desktop app, so inclusion needs a maintainer decision on redistributed derived source.","reason_zh":"仓库提交了微软 Band 商业桌面应用的大量反编译代码，是否收录这类派生源码需要维护者决定。","evidence_url":"https://github.com/mediaexplorer74/MSBandDesktopApp/blob/0bf7aabe890e16c388d81a72f739c9464f5c1c12/README.md","reviewed_at":"2026-11-06"},{"id":"scan-537850667","full_name":"tejas-kand/Buffer-Overflow-for-Beginners","url":"https://github.com/tejas-kand/Buffer-Overflow-for-Beginners","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-security","reason_en":"The repository teaches Vulnserver buffer-overflow exploitation with fuzzing and exploit scripts; the stated reverse engineering is incidental to exploit development.","reason_zh":"该仓库以 Vulnserver 缓冲区溢出利用教学为主，提供模糊测试和漏洞利用脚本；提及的逆向分析只是辅助步骤。","evidence_url":"https://github.com/tejas-kand/Buffer-Overflow-for-Beginners/blob/004c33340aa2309be84c58dbc390bc1aaeda5657/README.md","reviewed_at":"2026-11-06"},{"id":"scan-540452418","full_name":"CheckReverse/CutterPython","url":"https://github.com/CheckReverse/CutterPython","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"development-tool","reason_en":"CutterPython adds a run-script command and exception display to Cutter, but documents no binary analysis or reverse-engineering method of its own.","reason_zh":"CutterPython 为 Cutter 添加运行脚本和显示异常的便利功能，没有记录自身的二进制分析或逆向方法。","evidence_url":"https://github.com/CheckReverse/CutterPython/blob/0958dc2926feb1a0584eadf2b8039655fa86a65b/README.md","reviewed_at":"2026-11-06"},{"id":"scan-544068731","full_name":"scirpter/Nebul0us.rs","url":"https://github.com/scirpter/Nebul0us.rs","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The Rust entry point creates multiple game bots and starts each one's cheat loop; the repository presents no separate protocol investigation as its main work.","reason_zh":"Rust 入口会创建多个游戏机器人并启动各自的作弊循环；项目主体不是独立的协议研究。","evidence_url":"https://github.com/scirpter/Nebul0us.rs/blob/f50b58c810d6851369a3dccea320ecd298cdd564/src/main.rs","reviewed_at":"2026-11-06"},{"id":"scan-554369499","full_name":"MathisBurger/mcheli-1.12.2","url":"https://github.com/MathisBurger/mcheli-1.12.2","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"game-mod-no-re","reason_en":"The abandoned MCHelicopter 1.12.2 rebuild discusses Forge API migration and Kotlin mod development, without documenting analysis of the original mod or game.","reason_zh":"这个已停止开发的 MCHelicopter 1.12.2 重建项目讨论 Forge API 迁移和 Kotlin 模组开发，没有记录对原模组或游戏的逆向分析。","evidence_url":"https://github.com/MathisBurger/mcheli-1.12.2/blob/55e731d04ffa5817eee2c77f671cbe39c6045db1/README.md","reviewed_at":"2026-11-06"},{"id":"scan-555333242","full_name":"ross-spencer/hmmunpack","url":"https://github.com/ross-spencer/hmmunpack","batch_id":"run-42186805426-1","decision":"hold","reason_code":"target-unsupported","reason_en":"hmmunpack documents and extracts HMMSys packfiles, but the repository does not directly establish whether the format belongs to a game or another supported target.","reason_zh":"hmmunpack 记录并解包 HMMSys 包文件，但现有源码未直接说明该格式属于游戏还是其他受支持的目标。","evidence_url":"https://github.com/ross-spencer/hmmunpack/blob/6b62bc0e61b9901c997da06bacb13c63bb576d1b/hmmunpack.py","reviewed_at":"2026-11-06"},{"id":"scan-559810375","full_name":"lephuduc/CTFs-Honors","url":"https://github.com/lephuduc/CTFs-Honors","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-security","reason_en":"The repository is a broad CTF challenge and write-up archive containing reversing alongside other contest material, rather than a focused reverse-engineering resource.","reason_zh":"该仓库是混合题型的 CTF 赛题与题解归档，逆向题只是其中一部分，整体主题并非逆向工程。","evidence_url":"https://github.com/lephuduc/CTFs-Honors/blob/81105801ee09a2cc0fec2b972ac0f4753d6a8b7b/README.md","reviewed_at":"2026-11-06"},{"id":"scan-564840584","full_name":"andylvua/PCO_DisassemblyLab","url":"https://github.com/andylvua/PCO_DisassemblyLab","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The lab's stated task is to alter a password-checking binary so formerly invalid passwords pass, and the README walks through reversing its conditional jump.","reason_zh":"这份实验的明确任务是修改密码检查程序，使原本无效的密码通过；文档逐步说明如何反转条件跳转。","evidence_url":"https://github.com/andylvua/PCO_DisassemblyLab/blob/521e9264547f708cc9baeac5500f210e1fc831a4/README.md","reviewed_at":"2026-11-06"},{"id":"scan-567639212","full_name":"Yashodhanvivek/esp_binary","url":"https://github.com/Yashodhanvivek/esp_binary","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"distribution-site","reason_en":"esp_binary consists of firmware BIN files and an extracted text dump, with no analysis code, findings or format documentation.","reason_zh":"esp_binary 主要存放固件 BIN 文件及提取出的文本，没有分析代码、研究结论或格式文档。","evidence_url":"https://github.com/Yashodhanvivek/esp_binary/blob/f36a8e58fdf0532c62f1e8ab63b18f0601821b73/README.md","reviewed_at":"2026-11-06"},{"id":"scan-568556266","full_name":"ok-nick/ubs","url":"https://github.com/ok-nick/ubs","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-application","reason_en":"ubs fetches and parses public university class schedules; the source documents web requests and HTML extraction but no investigation of the service.","reason_zh":"ubs 通过请求和解析公开网页获取大学课程表，文档没有展示对该服务的逆向研究。","evidence_url":"https://github.com/ok-nick/ubs/blob/7b00bf55dddac99e3c8fd98c3dd8e1d23ee64677/README.md","reviewed_at":"2026-11-06"},{"id":"scan-568572231","full_name":"0xFh/0xfh.github.io","url":"https://github.com/0xFh/0xfh.github.io","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"personal-profile","reason_en":"The repository is a personal blog built on a Jekyll template, with mixed security posts rather than a reverse-engineering resource as its primary subject.","reason_zh":"该仓库是基于 Jekyll 模板的个人博客，文章涵盖多种安全主题，整体并非专门的逆向资源。","evidence_url":"https://github.com/0xFh/0xfh.github.io/blob/74794ad673c1480d2a565b1c12853723f92cdcd7/README.md","reviewed_at":"2026-11-06"},{"id":"scan-573757859","full_name":"Drew-Alleman/csgo-hops","url":"https://github.com/Drew-Alleman/csgo-hops","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"csgo-hops is a CS:GO bunny-hop cheat whose variable-name obfuscation is described as making detection by VAC harder.","reason_zh":"csgo-hops 是 CS:GO 自动连跳作弊程序，文档明确称混淆变量名是为了增加 VAC 检测难度。","evidence_url":"https://github.com/Drew-Alleman/csgo-hops/blob/478230d6078c745014fffa9a01278f0fe511ddd8/README.md","reviewed_at":"2026-11-06"},{"id":"scan-574167550","full_name":"dsp-re/suzirya","url":"https://github.com/dsp-re/suzirya","batch_id":"run-42186805426-1","decision":"hold","reason_code":"capability-unclear","reason_en":"Suzirya calls itself a reimplementation of an unnamed reverb plugin and contains DSP code, but gives no original plugin or reconstruction observations.","reason_zh":"Suzirya 自称重实现了一款未具名的混响插件，也有 DSP 代码，但未说明原插件或重建所依据的观察结果。","evidence_url":"https://github.com/dsp-re/suzirya/blob/11f07fbbcab33d8bf82cfa419365532d29df101c/README.md","reviewed_at":"2026-11-06"},{"id":"scan-574312130","full_name":"colemancda/MapleStory","url":"https://github.com/colemancda/MapleStory","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-application","reason_en":"The source describes a Swift MapleStory library and implements packets and networking, but documents no reconstruction from observation or reverse-engineering findings.","reason_zh":"现有资料将其描述为 Swift 版 MapleStory 库，源码实现封包和网络处理，但未记录观察原版后的重建过程或逆向发现。","evidence_url":"https://github.com/colemancda/MapleStory/blob/50d5d31c4bd31f772a5a51b27dc5a3d198ea94a8/README.md","reviewed_at":"2026-11-06"},{"id":"scan-579730971","full_name":"nevioo1337/mem","url":"https://github.com/nevioo1337/mem","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-application","reason_en":"The source identifies only a single-header x86/x64 process-memory read/write wrapper and gives no reverse-engineering analysis or target-specific use.","reason_zh":"来源仅说明这是一个 x86/x64 进程内存读写的单头文件封装，没有记录逆向分析能力或具体分析对象。","evidence_url":"https://github.com/nevioo1337/mem/blob/5a181f52ac83cc8eb387ceff95dff5237613089c/README.md","reviewed_at":"2026-11-06"},{"id":"scan-581159881","full_name":"GraphicsAndroid65/Traffic-Rider-Graphics-mod","url":"https://github.com/GraphicsAndroid65/Traffic-Rider-Graphics-mod","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"game-promotion-page","reason_en":"The README advertises a Traffic Rider graphics and currency mod, while the repository contains only a download-link file and no source or analysis.","reason_zh":"README 宣传 Traffic Rider 画质与货币模组，仓库却只有下载链接文件，没有源码或分析内容。","evidence_url":"https://github.com/GraphicsAndroid65/Traffic-Rider-Graphics-mod/blob/ef25e3619809a763aa96c90294fa69af69bac492/README.md","reviewed_at":"2026-11-06"},{"id":"scan-581301761","full_name":"Mingyang-Li/mattr-vii","url":"https://github.com/Mingyang-Li/mattr-vii","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-application","reason_en":"The repository is a typed Node.js client for published MATTR VII APIs; its README documents API calls but no reverse-engineering work.","reason_zh":"仓库是面向已公开 MATTR VII API 的 Node.js 类型化客户端；README 只介绍接口调用，没有逆向研究。","evidence_url":"https://github.com/Mingyang-Li/mattr-vii/blob/1a254c024379c00114dc1a6857f06472df55d406/README.md","reviewed_at":"2026-11-06"},{"id":"scan-583770383","full_name":"maxamula/dx11hk","url":"https://github.com/maxamula/dx11hk","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"development-tool","reason_en":"dx11hk supplies generic DirectX 11 Present hooks, but its example does not document tracing, analysis or reconstruction of a target.","reason_zh":"dx11hk 提供通用的 DirectX 11 Present 钩子，示例未记录对任何目标进行跟踪、分析或重建的用途。","evidence_url":"https://github.com/maxamula/dx11hk/blob/24a68577a8c9c37a24cc47b2ac563beac01d537e/README.md","reviewed_at":"2026-11-06"},{"id":"scan-588405405","full_name":"h0ffmann/h0ffmann","url":"https://github.com/h0ffmann/h0ffmann","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"personal-profile","reason_en":"h0ffmann is a personal profile repository containing a CV, biography, journal and profile-site code rather than an RE resource.","reason_zh":"h0ffmann 是个人资料仓库，收录履历、自我介绍、日志和个人网站代码，不是逆向工程资源。","evidence_url":"https://github.com/h0ffmann/h0ffmann/blob/2f2813d9626d45dd262ea2c871a9571513f6f421/README.md","reviewed_at":"2026-11-06"},{"id":"scan-588625469","full_name":"eric070021/2022-Computer-Security","url":"https://github.com/eric070021/2022-Computer-Security","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-security","reason_en":"The README presents a broad computer-security coursework repository spanning crypto, reverse, exploitation and web assignments, rather than a focused RE resource.","reason_zh":"README 将仓库列为涵盖密码学、逆向、漏洞利用和 Web 的计算机安全课程作业，并非专门的逆向资源。","evidence_url":"https://github.com/eric070021/2022-Computer-Security/blob/36e5564ce4e7f748d3b42a25388bd2277d348c78/README.md","reviewed_at":"2026-11-06"},{"id":"scan-593569992","full_name":"1337nemojj/IDAstrings","url":"https://github.com/1337nemojj/IDAstrings","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"no-real-content","reason_en":"IDAstrings contains only a small text-file pattern and substring filter for already exported strings, without its own binary analysis or target findings.","reason_zh":"IDAstrings 仅对已导出的字符串文本做前缀和子串筛选，没有独立的二进制分析能力或目标研究结果。","evidence_url":"https://github.com/1337nemojj/IDAstrings/blob/224888b9edb0a19728448951bb1b49775f6ffc71/README.md","reviewed_at":"2026-11-06"},{"id":"scan-594131610","full_name":"qiarhadempta/PicoCTF-Write-Up","url":"https://github.com/qiarhadempta/PicoCTF-Write-Up","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-security","reason_en":"The repository is a broad PicoCTF write-up set spanning cryptography, web exploitation, forensics, and general skills; reverse engineering is one small section.","reason_zh":"该仓库是覆盖密码学、Web 漏洞利用、取证和通用技能的 PicoCTF 题解合集，逆向工程仅占其中一小部分。","evidence_url":"https://github.com/qiarhadempta/PicoCTF-Write-Up/blob/751eb8c6889838e0fa81bd6bc46c793943683a12/README.md","reviewed_at":"2026-11-06"},{"id":"scan-594448684","full_name":"hackolade/CouchbaseV7Plus","url":"https://github.com/hackolade/CouchbaseV7Plus","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"unrelated","reason_en":"CouchbaseV7Plus is a Hackolade data-modeling plugin for Couchbase schemas; its reverse-engineering code concerns database structure.","reason_zh":"CouchbaseV7Plus 是 Hackolade 的 Couchbase 数据建模插件，其所谓逆向处理针对数据库结构。","evidence_url":"https://github.com/hackolade/CouchbaseV7Plus/blob/b5f13068cca3fe52a1ef040845ce65cc43b6ee04/README.md","reviewed_at":"2026-11-06"},{"id":"scan-599717268","full_name":"dtki7/flow-obfuscator","url":"https://github.com/dtki7/flow-obfuscator","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"protection-tool","reason_en":"FlowObfuscator is an LLVM-based obfuscation project whose stated purpose is malware evasion by moving functionality into threads.","reason_zh":"FlowObfuscator 是 LLVM 混淆项目，README 明确将功能转移到线程中用于恶意软件规避。","evidence_url":"https://github.com/dtki7/flow-obfuscator/blob/9ba4817574e91c15977c276b32f0f62dc677194c/README.md","reviewed_at":"2026-11-06"},{"id":"scan-602250271","full_name":"StackOverflowExcept1on/function-interceptor","url":"https://github.com/StackOverflowExcept1on/function-interceptor","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"development-tool","reason_en":"function-interceptor is a demonstration of hooking its own sample program with funchook and Frida, without a documented reverse-engineering target or analysis workflow.","reason_zh":"function-interceptor 演示如何用 funchook 和 Frida 挂钩仓库自带的示例程序，未记录逆向目标或分析流程。","evidence_url":"https://github.com/StackOverflowExcept1on/function-interceptor/blob/5aab358f0f7aac229e3c1459cce0481f4d795605/README.md","reviewed_at":"2026-11-06"},{"id":"scan-613516354","full_name":"mbbsemu/.github","url":"https://github.com/mbbsemu/.github","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"personal-profile","reason_en":"This .github repository contains only an organization profile pointing to the separate MBBSEmu project; it contains no emulator code or investigation.","reason_zh":"这个 .github 仓库只存放组织介绍，并指向另一个 MBBSEmu 仓库；自身没有模拟器代码或分析内容。","evidence_url":"https://github.com/mbbsemu/.github/blob/50bd26873ce6e84bc44996824dabe0489c6a8161/profile/readme.md","reviewed_at":"2026-11-06"},{"id":"scan-614985165","full_name":"alinaduca/IP_Lab4","url":"https://github.com/alinaduca/IP_Lab4","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-programming-tutorial","reason_en":"The README presents a software-engineering lab's C4 and class diagrams with forward and reverse screenshots, without binary or application analysis.","reason_zh":"README 展示软件工程实验的 C4 图、类图及正向和反向工程截图，没有二进制或应用程序分析内容。","evidence_url":"https://github.com/alinaduca/IP_Lab4/blob/d087c224b7eab3113aace7aad1d28e181c83fde2/README.md","reviewed_at":"2026-11-06"},{"id":"scan-618899426","full_name":"LeonBurghardtDev/Injectify","url":"https://github.com/LeonBurghardtDev/Injectify","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"development-tool","reason_en":"Injectify is a general DLL injector for running processes; its source describes no analysis, tracing or target-specific reverse-engineering function.","reason_zh":"Injectify 是通用运行进程 DLL 注入器，说明中没有分析、追踪或针对特定目标的逆向功能。","evidence_url":"https://github.com/LeonBurghardtDev/Injectify/blob/417bd9bf37d55c5cb81094d0c18d4bf5f9439648/README.md","reviewed_at":"2026-11-06"},{"id":"scan-619228642","full_name":"dungwinux/sapphire","url":"https://github.com/dungwinux/sapphire","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-security","reason_en":"sapphire is presented only as a Heaven's Gate reversing CTF challenge; the README supplies no solution, analysis notes or reusable reverse-engineering teaching material.","reason_zh":"sapphire 仅被介绍为基于 Heaven's Gate 的逆向 CTF 题目；README 没有题解、分析笔记或可复用的逆向教学内容。","evidence_url":"https://github.com/dungwinux/sapphire/blob/ebd20e7c26722ad3a02b86a733f8c3ffbdab10ee/README.md","reviewed_at":"2026-11-06"},{"id":"scan-619344099","full_name":"Roturgo/Malware-Analysis","url":"https://github.com/Roturgo/Malware-Analysis","batch_id":"run-42186805426-1","decision":"hold","reason_code":"insufficient-docs","reason_en":"The README names two malware-analysis PDFs but gives no methods or findings from either report, so their reverse-engineering substance cannot be described.","reason_zh":"README 只列出两份恶意软件分析 PDF，没有说明分析方法或发现，现有文字不足以准确描述其逆向内容。","evidence_url":"https://github.com/Roturgo/Malware-Analysis/blob/1e2c50b9083d2ec0a735e4cf9c902c9825bd0b71/README.md","reviewed_at":"2026-11-06"},{"id":"scan-622625273","full_name":"laqieer/fe-decomp-portal","url":"https://github.com/laqieer/fe-decomp-portal","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-application","reason_en":"The code implements a Next.js dashboard that fetches and plots other projects' decompilation progress; it performs no reverse engineering itself.","reason_zh":"代码实现的是从外部数据源读取并绘制其他项目反编译进度的 Next.js 看板，自身没有逆向分析功能。","evidence_url":"https://github.com/laqieer/fe-decomp-portal/blob/327c2ff0c5f46147e5fb0780a72ad724f1902b5a/pages/progress.tsx","reviewed_at":"2026-11-06"},{"id":"scan-626582050","full_name":"Kartik-Dixit/TechnoceanCTF","url":"https://github.com/Kartik-Dixit/TechnoceanCTF","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-security","reason_en":"TechnoceanCTF is a set of varied capture-the-flag challenges, including exploitation and password tasks, rather than a reverse-engineering resource with a defined analysis method.","reason_zh":"TechnoceanCTF 收录多类夺旗赛题，包括漏洞利用和密码任务，主体不是有明确分析方法的逆向工程资源。","evidence_url":"https://github.com/Kartik-Dixit/TechnoceanCTF/blob/9a0bc8fe6779d7da6117a01c130923107344c9dc/README.md","reviewed_at":"2026-11-06"},{"id":"scan-629206831","full_name":"ahmedosama07/DIY-modules","url":"https://github.com/ahmedosama07/DIY-modules","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"unrelated","reason_en":"The README describes making electronic modules at home, and the files are schematic and board designs without an identified original device or documented reverse engineering.","reason_zh":"README 只说在家制作电子模块，文件也只是原理图与电路板设计，未指明被研究的原设备或逆向过程。","evidence_url":"https://github.com/ahmedosama07/DIY-modules/blob/f6e7cab02a058525a6cc9aff0b18c8b5a41c30fe/README.md","reviewed_at":"2026-11-06"},{"id":"scan-629777678","full_name":"fl2on/.NET-WindowsForms-Manipulation","url":"https://github.com/fl2on/.NET-WindowsForms-Manipulation","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"DnWizard presents bypassing login systems as a purpose of its .NET assembly modification tool.","reason_zh":"DnWizard 将绕过登录系统列为修改 .NET 程序集的主要用途。","evidence_url":"https://github.com/fl2on/.NET-WindowsForms-Manipulation/blob/377ecee3114deb8d197aa86b547c12fda6d35ab2/README.md","reviewed_at":"2026-11-06"},{"id":"scan-630962746","full_name":"BayernMuller/alsong-time-synced-lyrics","url":"https://github.com/BayernMuller/alsong-time-synced-lyrics","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-application","reason_en":"The Alsong package is a lyrics API client; it mentions capturing one request in Wireshark but provides no protocol findings or RE investigation beyond that request.","reason_zh":"Alsong 包是歌词 API 客户端；文档仅提到用 Wireshark 抓取一次请求，没有提供协议发现或进一步的逆向研究。","evidence_url":"https://github.com/BayernMuller/alsong-time-synced-lyrics/blob/2eb0ea9bf32f8e939342cb8bf3a828c4947f1802/readme.md","reviewed_at":"2026-11-06"},{"id":"scan-631700827","full_name":"xMcacutt/RKV2-Tools","url":"https://github.com/xMcacutt/RKV2-Tools","batch_id":"run-42186805426-1","decision":"hold","reason_code":"target-unsupported","reason_en":"RKV2 Tools documents archive extraction and repacking, but the README names only Krome Studios and does not identify what product uses the format.","reason_zh":"RKV2 Tools 说明了归档提取与重打包方法，但 README 只提到 Krome Studios，未指出该格式属于哪款产品。","evidence_url":"https://github.com/xMcacutt/RKV2-Tools/blob/428c2a73abea31cc28049b96be166527ceb9baeb/README.md","reviewed_at":"2026-11-06"},{"id":"scan-633545621","full_name":"nevioo1337/SecLib","url":"https://github.com/nevioo1337/SecLib","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"protection-tool","reason_en":"SecLib was developed to secure software by checking running processes; the listed memory and signature features are unfinished protection work.","reason_zh":"SecLib 原为软件防护而开发，用于检查运行中的进程；签名扫描和内存完整性等功能仍列在待办事项中。","evidence_url":"https://github.com/nevioo1337/SecLib/blob/1417dcda75f0520f3f66124fbcdc5e3d7cf60d05/README.md","reviewed_at":"2026-11-06"},{"id":"scan-633939237","full_name":"mediaexplorer74/DevImgGen","url":"https://github.com/mediaexplorer74/DevImgGen","batch_id":"run-42186805426-1","decision":"hold","reason_code":"linking-policy","reason_en":"The author calls this reverse engineering of Microsoft's device-image generator, while the repository includes many DLLs and EXEs whose redistribution status needs review.","reason_zh":"作者称项目逆向了微软设备映像生成器，而仓库包含大量 DLL 和 EXE；这些目标文件的再分发状态需审查。","evidence_url":"https://github.com/mediaexplorer74/DevImgGen/blob/937670c76682554f8b71c48b96ca571f42eafe3d/Readme.md","reviewed_at":"2026-11-06"},{"id":"scan-635237755","full_name":"n-vh/twitch-subonly-vod-bypass","url":"https://github.com/n-vh/twitch-subonly-vod-bypass","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The userscript's stated purpose is to bypass subscriber-only Twitch VOD access by replacing the player and using a caching server.","reason_zh":"该用户脚本明确用于绕过 Twitch 仅订阅者可看的录像限制，通过替换播放器并配合缓存服务器播放。","evidence_url":"https://github.com/n-vh/twitch-subonly-vod-bypass/blob/29e1e716b1e6db7e93672b63a8bed860967ab1e4/README.md","reviewed_at":"2026-11-06"},{"id":"scan-639739146","full_name":"mk1121/bhadoo-index-response-decoder","url":"https://github.com/mk1121/bhadoo-index-response-decoder","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-application","reason_en":"The script scrapes and decodes Bhadoo Google Drive index responses, including protected links, without documenting analysis of the index implementation or format.","reason_zh":"该脚本抓取并解码 Bhadoo Google Drive 索引响应，也能处理受保护链接，但没有记录对实现或格式的逆向研究。","evidence_url":"https://github.com/mk1121/bhadoo-index-response-decoder/blob/f964791f33bac722c1f294c0bcc35bdc138aa15d/README.md","reviewed_at":"2026-11-06"},{"id":"scan-640340454","full_name":"viralvaghela/crack-this","url":"https://github.com/viralvaghela/crack-this","batch_id":"run-42186805426-1","decision":"hold","reason_code":"linking-policy","reason_en":"The Android reverse-engineering write-ups have substance, but the repository commits an APK, a challenge ZIP and extensive decompiler output.","reason_zh":"Android 逆向题解有具体内容，但仓库同时提交了 APK、挑战 ZIP 和大量反编译产物，需维护者判断链接政策。","evidence_url":"https://github.com/viralvaghela/crack-this/blob/5ae84e56a50d6f881b05fd928688521124a30d97/SeeTheSharpFlag/readme.md","reviewed_at":"2026-11-06"},{"id":"scan-640761529","full_name":"mmkhitaryan/original_apktool_comare","url":"https://github.com/mmkhitaryan/original_apktool_comare","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-application","reason_en":"original_apktool_comare is a small comparison script for APK and Apktool extraction results, centered on one observed META-INF file difference.","reason_zh":"original_apktool_comare 是比较 APK 原始解包与 Apktool 输出的小脚本，主要展示一次 META-INF 文件差异。","evidence_url":"https://github.com/mmkhitaryan/original_apktool_comare/blob/706f234eeb9eff2c1db33f9fc0c3ff6219ebb76c/README.md","reviewed_at":"2026-11-06"},{"id":"scan-642848243","full_name":"SONIC3D/genipak-magicard-tool","url":"https://github.com/SONIC3D/genipak-magicard-tool","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The tool's stated purpose is converting cheat codes for Genipak and Magicard game cartridges, despite its detailed account of their encoding.","reason_zh":"该工具的主要用途是转换 Genipak 和 Magicard 游戏作弊码，尽管文档详细解释了编码算法。","evidence_url":"https://github.com/SONIC3D/genipak-magicard-tool/blob/d9d53a5e85cbb788734c4f21d7cd14b053ec3e4f/README.md","reviewed_at":"2026-11-06"},{"id":"scan-646343187","full_name":"fl2on/UrlFinderBot","url":"https://github.com/fl2on/UrlFinderBot","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"fork-or-mirror","reason_en":"UrlFinderBot credits qzxtu as its creator and even uses an image from qzxtu/UrlFinderBot; the repository shows no distinct work beyond that original bot.","reason_zh":"UrlFinderBot 在 README 中将 qzxtu 列为原作者，截图也来自 qzxtu/UrlFinderBot；现有材料未显示区别于原项目的新增工作。","evidence_url":"https://github.com/fl2on/UrlFinderBot/blob/bf2ce8b7e8c03bed51068504a7a668f669fdf66d/README.md","reviewed_at":"2026-11-06"},{"id":"scan-648372762","full_name":"welikethestock/libutil","url":"https://github.com/welikethestock/libutil","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-application","reason_en":"libutil describes a broad CRT-free utility library whose stated goal is replacing runtime and system libraries; the RE connection is a use case.","reason_zh":"libutil 的主体是无 CRT 的通用工具库，目标是替代运行时和系统库；逆向工程只是文档列出的用途之一。","evidence_url":"https://github.com/welikethestock/libutil/blob/e443307b98e6521158fc095d138c94ad218d81d7/README.md","reviewed_at":"2026-11-06"},{"id":"scan-651716407","full_name":"mdabir1203/42_WOB_AI_Community","url":"https://github.com/mdabir1203/42_WOB_AI_Community","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"unrelated","reason_en":"The repository contains AI community workshops and image-classification examples, with no reverse-engineering subject in its documented projects.","reason_zh":"仓库收录 AI 社群工作坊和图像分类示例，所列项目没有逆向工程主题。","evidence_url":"https://github.com/mdabir1203/42_WOB_AI_Community/blob/c53a09c9b97863f2f252fd0d94e64ec0dcb8ef3a/README.md","reviewed_at":"2026-11-06"},{"id":"scan-653821821","full_name":"watchakorn-18k/talk_with_bot","url":"https://github.com/watchakorn-18k/talk_with_bot","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-application","reason_en":"talk_with_bot is a GPT chat GUI that connects to an API and displays conversations; its README and files describe no reverse-engineering activity.","reason_zh":"talk_with_bot 是连接 GPT API 并显示聊天记录的图形界面；说明和文件均未描述逆向工程工作。","evidence_url":"https://github.com/watchakorn-18k/talk_with_bot/blob/de7e2cc4f28ae5c3896b2f8c8240470425b9e10e/readme.md","reviewed_at":"2026-11-06"},{"id":"scan-654104413","full_name":"47PADO47/turborilla-api","url":"https://github.com/47PADO47/turborilla-api","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-application","reason_en":"turborilla-api chiefly exposes typed clients for game backend endpoints and CDN assets; its captured-traffic note supports request modeling but no separate analysis deliverable.","reason_zh":"turborilla-api 的主体是游戏后端和资源 CDN 的类型化客户端；虽提到依据抓取流量建模请求，仓库没有独立的逆向研究成果。","evidence_url":"https://github.com/47PADO47/turborilla-api/blob/c699d78bf256676aaa5ab159b0bddcfbdb6817e2/README.md","reviewed_at":"2026-11-06"},{"id":"scan-655269624","full_name":"aliveoutside/yam","url":"https://github.com/aliveoutside/yam","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-application","reason_en":"yam is an experimental Yandex Music Android client using an HTTP client and Yandex authentication SDK; its README documents no reverse-engineering work.","reason_zh":"yam 是使用 HTTP 客户端和 Yandex 登录 SDK 的实验性 Android 音乐客户端；文档未记录逆向分析。","evidence_url":"https://github.com/aliveoutside/yam/blob/23b912d2ca26332792a04746caea0efc25ceda23/README.md","reviewed_at":"2026-11-06"},{"id":"scan-657441395","full_name":"girlhefunnyaf44/Binary-Exploitation-Practice","url":"https://github.com/girlhefunnyaf44/Binary-Exploitation-Practice","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-security","reason_en":"The repository supplies a small crackme puzzle and Go source for others to crack, rather than an analysis tool, findings or reverse-engineering lesson.","reason_zh":"仓库提供供人破解的简单 crackme 谜题及 Go 源码，没有逆向分析工具、研究结果或教学内容。","evidence_url":"https://github.com/girlhefunnyaf44/Binary-Exploitation-Practice/blob/a5054093486f42f013d306432fbbc3a8ecdcd0f3/README.md","reviewed_at":"2026-11-06"},{"id":"scan-657619552","full_name":"stromwise/RASPBERRY-PI","url":"https://github.com/stromwise/RASPBERRY-PI","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-security","reason_en":"RASPBERRY-PI collects setup and attack tutorials for Kali, OpenWrt, mouse jacking and a USB attack device; the repository contains no RE investigation.","reason_zh":"RASPBERRY-PI 汇集 Kali、OpenWrt、鼠标劫持和 USB 攻击设备教程；仓库内容没有逆向分析调查。","evidence_url":"https://github.com/stromwise/RASPBERRY-PI/blob/0600d14a3dd61eb7219ab674b89b77a8d32713c9/MOUSE-JACKING/MOUSE-JACKING-USING-RASPBERRY-PI-ZERO.MD","reviewed_at":"2026-11-06"},{"id":"scan-659976984","full_name":"StepanTita/go-BingDALLE","url":"https://github.com/StepanTita/go-BingDALLE","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-application","reason_en":"go-BingDALLE is presented as a command-line and library bridge to Bing Image Generator; it gives no protocol findings or reverse-engineering method beyond a label.","reason_zh":"go-BingDALLE 主要是 Bing Image Generator 的命令行与库接口；除一句逆向标签外，没有协议发现或分析方法。","evidence_url":"https://github.com/StepanTita/go-BingDALLE/blob/ef4cdf763683dbb39f8789eb666890d118b158e6/README.md","reviewed_at":"2026-11-06"},{"id":"scan-660945339","full_name":"mediaexplorer74/mt","url":"https://github.com/mediaexplorer74/mt","batch_id":"run-42186805426-1","decision":"hold","reason_code":"linking-policy","reason_en":"The repository explicitly republishes decompiled Terraria client source and contains hundreds of game content files, requiring a maintainer decision.","reason_zh":"该仓库明确再发布反编译得到的 Terraria 客户端源码，并包含数百个游戏内容文件，需由维护者判断。","evidence_url":"https://github.com/mediaexplorer74/mt/blob/812e1c1d91864e78f974a0b1a7d32dca6f371afb/README.md","reviewed_at":"2026-11-06"},{"id":"scan-663572215","full_name":"A-Mahla/Security-Pentest-Part-I","url":"https://github.com/A-Mahla/Security-Pentest-Part-I","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-security","reason_en":"The Snowcrash repository is a pentest walkthrough for obtaining challenge flags; GDB reverse engineering appears in only two levels.","reason_zh":"该仓库主要是获取 Snowcrash 挑战旗标的渗透测试攻略，GDB 逆向只出现在其中两个关卡。","evidence_url":"https://github.com/A-Mahla/Security-Pentest-Part-I/blob/21ab5a14e4f9299018c738c4b287df904cc1f09f/README.md","reviewed_at":"2026-11-06"},{"id":"scan-667135477","full_name":"kr4chinin/macos-system-window","url":"https://github.com/kr4chinin/macos-system-window","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-application","reason_en":"The repository recreates a simplified macOS-looking home screen in React, but documents visual interface imitation rather than analysis of macOS code or behavior.","reason_zh":"仓库用 React 仿制简化的 macOS 主屏幕，所述工作是界面复刻，没有记录对 macOS 代码或行为的逆向分析。","evidence_url":"https://github.com/kr4chinin/macos-system-window/blob/84d6c4504fb3d37712fb6d5b7225d5764057a249/README.md","reviewed_at":"2026-11-06"},{"id":"scan-667886631","full_name":"glennhenry/cs-notes","url":"https://github.com/glennhenry/cs-notes","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-programming-tutorial","reason_en":"The repository presents a broad personal computer-science notes site; its README and file list do not establish reverse engineering as its subject.","reason_zh":"该仓库是涵盖广泛计算机科学主题的个人笔记站点； README 和文件清单没有表明逆向工程是其主题。","evidence_url":"https://github.com/glennhenry/cs-notes/blob/394fda9166fc209b9802dc374c91e054b8e30cf5/README.md","reviewed_at":"2026-11-06"},{"id":"scan-668075705","full_name":"R-Hidayatullah/tosmole","url":"https://github.com/R-Hidayatullah/tosmole","batch_id":"run-42186805426-1","decision":"hold","reason_code":"linking-policy","reason_en":"Tosmole documents game-file parsers, but its tests directory contains apparent Tree of Savior archives, models, animations and audio that need a maintainer linking decision.","reason_zh":"tosmole 提供游戏文件解析器，但 tests 目录收录了疑似《Tree of Savior》的归档、模型、动画和音频文件，需维护者判断其收录方式。","evidence_url":"https://github.com/R-Hidayatullah/tosmole/blob/4a4cde8945348d64e6a4d7e324bdfc722adb281e/README.md","reviewed_at":"2026-11-06"},{"id":"scan-668087816","full_name":"kensunjaya/csgo-client-aim-manipulation","url":"https://github.com/kensunjaya/csgo-client-aim-manipulation","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The repository implements a CS:GO aimbot that reads game offsets and automatically aims at the closest enemy, regardless of its educational disclaimer.","reason_zh":"仓库实现了 CS:GO 自瞄程序，读取游戏偏移并自动瞄准最近的敌人；教育用途声明不改变其作弊功能。","evidence_url":"https://github.com/kensunjaya/csgo-client-aim-manipulation/blob/dd5d9b7e40d71674cbc6319e6472fe26f72de0a9/README.md","reviewed_at":"2026-11-06"},{"id":"scan-668346977","full_name":"alfman99/TFG","url":"https://github.com/alfman99/TFG","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"protection-tool","reason_en":"The work's stated goal is protecting compiled programs against cracking, with authentication, obfuscation, anti-debugging, and anti-dumping components.","reason_zh":"该研究的主要目标是保护已编译程序免遭破解，方案包括认证、混淆、反调试和反转储组件。","evidence_url":"https://github.com/alfman99/TFG/blob/cd1624694b998ef52f3b9cb2de9095f953a9ff89/README.md","reviewed_at":"2026-11-06"},{"id":"scan-668845949","full_name":"mediaexplorer74/WalletPass","url":"https://github.com/mediaexplorer74/WalletPass","batch_id":"run-42186805426-1","decision":"hold","reason_code":"linking-policy","reason_en":"WalletPass commits a work-in-progress decompilation of a commercial Windows Phone app, requiring a maintainer decision on redistributed derived source.","reason_zh":"WalletPass 提交了商业 Windows Phone 应用尚未完成的反编译源码，是否收录需要维护者决定。","evidence_url":"https://github.com/mediaexplorer74/WalletPass/blob/fabf85d0733973620dd2ef54bf2421cb6e41bacd/Readme.md","reviewed_at":"2026-11-06"},{"id":"scan-669116289","full_name":"kdo2064/PyEncrypter","url":"https://github.com/kdo2064/PyEncrypter","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"protection-tool","reason_en":"PyEncrypter encrypts Python code and packages it for execution; its only reverse-engineering discussion concerns resistance to analysis.","reason_zh":"PyEncrypter 的用途是加密 Python 代码并生成可执行文件；涉及逆向工程的内容仅讨论代码能否抵抗分析。","evidence_url":"https://github.com/kdo2064/PyEncrypter/blob/4b02f7e9dfe738a32de18e82a6e040137f0a298c/README.md","reviewed_at":"2026-11-06"},{"id":"scan-669431241","full_name":"dmtai/anti_debug","url":"https://github.com/dmtai/anti_debug","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"protection-tool","reason_en":"anti_debug.cpp is presented as a Windows component that prevents a debugger from working on the host program.","reason_zh":"anti_debug.cpp 被介绍为阻止调试器检查 Windows 程序的组件，属于反调试保护工具。","evidence_url":"https://github.com/dmtai/anti_debug/blob/9a933522d5870fd861bfb7930b47ffa29bc10e7c/README.md","reviewed_at":"2026-11-06"},{"id":"scan-669650152","full_name":"CallocGD/rylix-is-a-skid","url":"https://github.com/CallocGD/rylix-is-a-skid","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"malware-samples","reason_en":"The repository distributes decompiled Python versions of alleged trojan-bearing game hacks, with little standalone analysis beyond the README's claims.","reason_zh":"仓库主要发布据称含木马的游戏外挂反编译 Python 代码，除 README 中的说法外缺少独立的分析报告。","evidence_url":"https://github.com/CallocGD/rylix-is-a-skid/blob/1ab0d9b039994105a5a8853491d9971f52b21e3d/README.md","reviewed_at":"2026-11-06"},{"id":"scan-669650984","full_name":"fuchstim/mint-client","url":"https://github.com/fuchstim/mint-client","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-application","reason_en":"mint-client documents authentication and data requests for Intuit Mint, but provides no account of analyzing or reconstructing the service.","reason_zh":"mint-client 文档只介绍 Intuit Mint 的登录和数据请求功能，没有记录对该服务的分析或协议重建。","evidence_url":"https://github.com/fuchstim/mint-client/blob/229b5b35c01bdfa87cbba819ee6fc80056486c10/README.md","reviewed_at":"2026-11-06"},{"id":"scan-670095886","full_name":"BoldlyGo88/Beefcake","url":"https://github.com/BoldlyGo88/Beefcake","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"game-mod-no-re","reason_en":"Beefcake expands Noita's modding API and provides a Lua console; the documentation describes mod creation rather than analysis of the game.","reason_zh":"Beefcake 扩展 Noita 的模组 API 并提供 Lua 控制台，文档讲的是制作模组，而非分析游戏。","evidence_url":"https://github.com/BoldlyGo88/Beefcake/blob/66230d3078a4d9f9a4f22a70345e34dcdcc1b3b3/README.md","reviewed_at":"2026-11-06"},{"id":"scan-673892983","full_name":"Zer0dox/NoMansTrainer","url":"https://github.com/Zer0dox/NoMansTrainer","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"NoMansTrainer is explicitly a trainer for No Man's Sky; the author's pointer and offset research serves the game-cheat application.","reason_zh":"NoMansTrainer 明确是《无人深空》的修改器，作者所述的指针与偏移量逆向工作服务于游戏作弊功能。","evidence_url":"https://github.com/Zer0dox/NoMansTrainer/blob/981749ad552a4de8301fab85e503fda6a9abee42/README.md","reviewed_at":"2026-11-06"},{"id":"scan-674005387","full_name":"Chloe199719/CookieClicker","url":"https://github.com/Chloe199719/CookieClicker","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-application","reason_en":"The README describes a playable cookie-clicking game with upgrades and achievements, while documenting no analysis of an original game.","reason_zh":"README 介绍的是带升级和成就的点击饼干游戏，没有记录对原版游戏的分析。","evidence_url":"https://github.com/Chloe199719/CookieClicker/blob/f1ee8f469bd7b3b287835da00418dc7a2ae8ba96/README.md","reviewed_at":"2026-11-06"},{"id":"scan-676816894","full_name":"WinkelCode/npkeymaputil","url":"https://github.com/WinkelCode/npkeymaputil","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-application","reason_en":"npkeymaputil reads and writes a keyboard keymap using USB protocol work credited to Nudelta, without documenting its own protocol investigation.","reason_zh":"npkeymaputil 利用其明确归功于 Nudelta 的 USB 协议成果读写键盘键位映射，未记录自身的协议研究。","evidence_url":"https://github.com/WinkelCode/npkeymaputil/blob/e34198654df3344f46e643370ad616dbdb3cd52c/README.md","reviewed_at":"2026-11-06"},{"id":"scan-677706256","full_name":"gherkster/settlers-5-borderless-window","url":"https://github.com/gherkster/settlers-5-borderless-window","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"game-mod-no-re","reason_en":"The Settlers 5 repository provides a borderless-window executable patch and installation instructions, without documenting analysis of the game.","reason_zh":"该仓库提供《工人物语 5》的无边框窗口补丁及安装说明，没有记录对游戏的逆向分析。","evidence_url":"https://github.com/gherkster/settlers-5-borderless-window/blob/9706c00034708415a8d00f4b2917d0b6d54303ee/README.md","reviewed_at":"2026-11-06"},{"id":"scan-679688472","full_name":"A-Mahla/Security-Pentest-Part-III","url":"https://github.com/A-Mahla/Security-Pentest-Part-III","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-security","reason_en":"The RainFall repository is chiefly a privilege-escalation and exploitation walkthrough; reverse engineering appears only as two level labels among its challenges.","reason_zh":"RainFall 仓库主要是提权与漏洞利用关卡攻略；逆向工程只出现在其中两个关卡的标签中。","evidence_url":"https://github.com/A-Mahla/Security-Pentest-Part-III/blob/dd066437aac69fa250bf698a39b63428b3a64c45/README.md","reviewed_at":"2026-11-06"},{"id":"scan-679822800","full_name":"hitchhikr/zool2","url":"https://github.com/hitchhikr/zool2","batch_id":"run-42186805426-1","decision":"hold","reason_code":"linking-policy","reason_en":"The Zool 2 disassembly and modifications are in scope, but the repository includes the game's original data, samples, and other media assets.","reason_zh":"Zool 2 的反汇编与修改属于收录范围，但仓库包含原游戏数据、声音样本等媒体素材，需维护者判断链接政策。","evidence_url":"https://github.com/hitchhikr/zool2/blob/a33a52b6db832afa00fbd36af53bb567dcc914c4/README.md","reviewed_at":"2026-11-06"},{"id":"scan-680359603","full_name":"hitchhikr/feud","url":"https://github.com/hitchhikr/feud","batch_id":"run-42186805426-1","decision":"hold","reason_code":"linking-policy","reason_en":"The repository includes a disassembly of the commercial Amiga game Feud together with game assets and executable files.","reason_zh":"仓库包含商业 Amiga 游戏 Feud 的反汇编代码，同时提交了游戏素材和可执行文件。","evidence_url":"https://github.com/hitchhikr/feud/blob/290f2d1b277fd4cc48f580140256c883cddf29e2/README.md","reviewed_at":"2026-11-06"},{"id":"scan-680517081","full_name":"BitR13x/C-Reverse","url":"https://github.com/BitR13x/C-Reverse","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-programming-tutorial","reason_en":"C-Reverse consists of small C and C++ examples and introductory GCC and GDB instructions; it offers no target investigation or RE-specific analysis method.","reason_zh":"C-Reverse 收录小型 C/C++ 示例及 GCC、GDB 入门步骤，没有针对具体目标的调查，也没有专门的逆向分析方法。","evidence_url":"https://github.com/BitR13x/C-Reverse/blob/010fe4b206efd20bde01f09ec39f2cdeef5065e2/README.md","reviewed_at":"2026-11-06"},{"id":"scan-680847765","full_name":"phil1331/HackMIT-2023-Admission-Puzzle-Solutions","url":"https://github.com/phil1331/HackMIT-2023-Admission-Puzzle-Solutions","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-security","reason_en":"The HackMIT admission-puzzle walkthrough covers a mixed CTF set including web exploitation and social engineering, with reversing only two of six challenges.","reason_zh":"这套 HackMIT 入场题解涵盖网页漏洞和社交工程等多种 CTF 题型，六题中只有两题以程序逆向为主。","evidence_url":"https://github.com/phil1331/HackMIT-2023-Admission-Puzzle-Solutions/blob/41a76089ef36febe6153adcbf22a07441e289b2d/README.md","reviewed_at":"2026-11-06"},{"id":"scan-681474663","full_name":"RamiLup/Rombi","url":"https://github.com/RamiLup/Rombi","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-application","reason_en":"Rombi repurposes a Roomba as a bird-repelling robot using its published Open Interface commands; the repository supplies no original protocol analysis or controller code.","reason_zh":"Rombi 利用已公开的 Roomba Open Interface 命令把扫地机改成驱鸟机器人；仓库未提供原创协议分析或控制程序源码。","evidence_url":"https://github.com/RamiLup/Rombi/blob/3bc3726cd4dc483c1e93a16c2fb0b1bac9a54646/README.md","reviewed_at":"2026-11-06"},{"id":"scan-682450690","full_name":"maximilianfeldthusen/x86BackToC","url":"https://github.com/maximilianfeldthusen/x86BackToC","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-programming-tutorial","reason_en":"The README is a repetitive introductory note on x86 instructions and compiler optimizations, while it describes no working binary-to-C process for the included files.","reason_zh":"README 反复介绍 x86 指令和编译器优化基础，却没有说明所附文件如何实现二进制转 C。","evidence_url":"https://github.com/maximilianfeldthusen/x86BackToC/blob/cdf0a87621f5985563b96a8be102f446ff6034e9/README.md","reviewed_at":"2026-11-06"},{"id":"scan-683791589","full_name":"mediaexplorer74/BookReaderApp","url":"https://github.com/mediaexplorer74/BookReaderApp","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"fork-or-mirror","reason_en":"BookReaderApp describes a quick Windows 10 Mobile XAML adaptation of kurema's original BookViewer/BookReader app, with no separate reverse-engineering findings.","reason_zh":"BookReaderApp 自述为 kurema 原版 BookViewer/BookReader 的 Windows 10 Mobile XAML 快速移植，没有独立的逆向成果。","evidence_url":"https://github.com/mediaexplorer74/BookReaderApp/blob/7cd4b2738ec46f4f65d3a7a89d3181366bb72abd/Readme.md","reviewed_at":"2026-11-06"},{"id":"scan-685014268","full_name":"Blaumeise03/eve-echoes-data","url":"https://github.com/Blaumeise03/eve-echoes-data","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-application","reason_en":"Eve Echoes Data Tools exports already extracted game data into a database and explicitly leaves APK extraction and decompilation to another project.","reason_zh":"Eve Echoes Data Tools 仅将已提取的游戏数据导入数据库，并明确把 APK 提取和反编译交给其他项目。","evidence_url":"https://github.com/Blaumeise03/eve-echoes-data/blob/bd4c9bd5d8570b2b7542cc7e9b4e3fab86d58b91/README.md","reviewed_at":"2026-11-06"},{"id":"scan-685666952","full_name":"Quote58/Preview","url":"https://github.com/Quote58/Preview","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-application","reason_en":"Preview is a viewer and editor for text, images, palettes, and raw graphics; the README documents editing features but no analysis of an original target or format.","reason_zh":"Preview 是文本、图像、调色板及原始图形的查看和编辑程序；README 介绍编辑功能，没有记录针对原始目标或格式的分析。","evidence_url":"https://github.com/Quote58/Preview/blob/613daac12bbd4bc833552ef51d534cff84ee852f/README.md","reviewed_at":"2026-11-06"},{"id":"scan-687836122","full_name":"hitchhikr/eaglenest","url":"https://github.com/hitchhikr/eaglenest","batch_id":"run-42186805426-1","decision":"hold","reason_code":"linking-policy","reason_en":"The Amiga Into The Eagle Nest disassembly is in scope, but the repository also supplies the game's assets and executable files.","reason_zh":"该仓库的 Amiga 游戏 Into The Eagle Nest 反汇编属于收录范围，但同时提供游戏素材和可执行文件，需维护者判断链接政策。","evidence_url":"https://github.com/hitchhikr/eaglenest/blob/6d8a627de560621a1ab46bd3a108ea4ba3f6e337/README.md","reviewed_at":"2026-11-06"},{"id":"scan-687861816","full_name":"Prottoy2938/ChatGPT","url":"https://github.com/Prottoy2938/ChatGPT","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"no-real-content","reason_en":"The repository contains only a README advertising unavailable proxy servers and discounted API accounts; it supplies no proxy code, reverse-engineering findings or documentation.","reason_zh":"仓库只有一份 README，宣传已停用的代理服务器和折价 API 账户，没有代理代码、逆向分析结果或相关文档。","evidence_url":"https://github.com/Prottoy2938/ChatGPT/blob/0a94c541eeb7437af87564808ded51eb209c3e71/README.md","reviewed_at":"2026-11-06"},{"id":"scan-699355254","full_name":"qbibubi/unabomber","url":"https://github.com/qbibubi/unabomber","batch_id":"run-42186805426-1","decision":"hold","reason_code":"linking-policy","reason_en":"unabomber is an IAT-hooking exercise, but the repository also contains WINMINE.EXE, the game executable used as its target.","reason_zh":"unabomber 是 IAT 挂钩练习，但仓库同时提交了作为分析目标的游戏可执行文件 WINMINE.EXE，需要维护者判断。","evidence_url":"https://github.com/qbibubi/unabomber/blob/a1cc1b6378cdfd51b70ee959d0c3041c64780d7d/README.md","reviewed_at":"2026-11-06"},{"id":"scan-718362717","full_name":"VityaSchel/pornolab.net","url":"https://github.com/VityaSchel/pornolab.net","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"fork-or-mirror","reason_en":"The repository identifies itself as a read-only mirror of the original pornolab.net project at git.hloth.dev, so this GitHub copy is not the original project.","reason_zh":"仓库标明自己是 git.hloth.dev 上 pornolab.net 项目的只读镜像；此 GitHub 副本并非原项目。","evidence_url":"https://github.com/VityaSchel/pornolab.net/blob/00f3557cf125860c0c069d6f94107475d60db803/README.md","reviewed_at":"2026-11-06"},{"id":"scan-741672628","full_name":"UmbertoDellaMonica/Linksys-WRT54GL-Exploitation","url":"https://github.com/UmbertoDellaMonica/Linksys-WRT54GL-Exploitation","batch_id":"run-42110758337-1","decision":"hold","reason_code":"linking-policy","reason_en":"The router investigation includes firmware extraction and binary analysis, but the file list shows a committed extracted firmware filesystem with vendor binaries.","reason_zh":"这项路由器研究包含固件提取和二进制分析，但文件列表显示仓库提交了含厂商二进制的固件解包文件系统，需维护者决定是否收录。","evidence_url":"https://github.com/UmbertoDellaMonica/Linksys-WRT54GL-Exploitation/blob/73a0266d95e32102ac1af03ae1b2939bf7cd27c2/README.md","reviewed_at":"2026-11-06"},{"id":"scan-761567655","full_name":"juanenmellare/kavak-bot","url":"https://github.com/juanenmellare/kavak-bot","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-application","reason_en":"Kavak Bot searches car listings and emails notifications; its README provides ordinary configuration and setup instructions without reverse-engineering work.","reason_zh":"Kavak Bot 用于搜索汽车列表并发送邮件提醒；README 只有常规配置与运行说明，没有逆向工作内容。","evidence_url":"https://github.com/juanenmellare/kavak-bot/blob/34e22333dfdfa2a89628d90570eb352fb1db1770/README.md","reviewed_at":"2026-11-06"},{"id":"scan-761903346","full_name":"Archips/boot2root","url":"https://github.com/Archips/boot2root","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-security","reason_en":"boot2root is a privilege-escalation challenge whose walkthroughs center on reconnaissance and gaining root access; RE tools appear only among supporting tools.","reason_zh":"boot2root 是以侦察和取得 root 权限为主的提权挑战；逆向工具只是所列辅助工具的一部分。","evidence_url":"https://github.com/Archips/boot2root/blob/18de986ba80df7ac7308d6749f7565e8e45c8fff/README.md","reviewed_at":"2026-11-06"},{"id":"scan-767881576","full_name":"dungwinux/fructose","url":"https://github.com/dungwinux/fructose","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-security","reason_en":"fructose is source and build instructions for a UMassCTF challenge, without a reverse-engineering write-up, reusable analyser, or documented reconstruction.","reason_zh":"fructose 提供 UMassCTF 赛题源码和构建说明，但没有逆向题解、可复用分析工具或重建研究。","evidence_url":"https://github.com/dungwinux/fructose/blob/dda50de879464d9fc17b0a3b882c0417595a1459/README.md","reviewed_at":"2026-11-06"},{"id":"scan-769184769","full_name":"chelast55/SourceToDoc","url":"https://github.com/chelast55/SourceToDoc","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"development-tool","reason_en":"SourceToDoc generates documentation, UML diagrams and test-coverage reports from open-source code for software evaluation, rather than analysing shipped programs.","reason_zh":"SourceToDoc 从开源代码生成文档、UML 图和测试覆盖率报告，用于评估软件；其主要功能是开发文档工具。","evidence_url":"https://github.com/chelast55/SourceToDoc/blob/18ce5afeaa29d43bd24f7d11e986a0989fc80b93/README.md","reviewed_at":"2026-11-06"},{"id":"scan-771797495","full_name":"AzureFlow/confirmed-config","url":"https://github.com/AzureFlow/confirmed-config","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-application","reason_en":"Confirmed Config Scraper downloads and decodes Adidas Confirmed remote configuration, but its documentation shows no investigation of the app or reconstruction of its format.","reason_zh":"Confirmed Config Scraper 用于下载并解码 Adidas Confirmed 的远程配置；文档没有呈现对应用或格式的逆向研究。","evidence_url":"https://github.com/AzureFlow/confirmed-config/blob/2a118d5d17f35d52a151cd9a21e15ce61676acd6/README.md","reviewed_at":"2026-11-06"},{"id":"scan-771806407","full_name":"AzureFlow/pia-proxy","url":"https://github.com/AzureFlow/pia-proxy","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-application","reason_en":"PIA Proxy is a small client for using Private Internet Access HTTPS proxies; the repository documents no reverse-engineering work.","reason_zh":"PIA Proxy 是使用 Private Internet Access HTTPS 代理的小型客户端；仓库资料没有记录逆向分析。","evidence_url":"https://github.com/AzureFlow/pia-proxy/blob/c285714b8545a5a63fd80c669d0e20cc19fe5336/README.md","reviewed_at":"2026-11-06"},{"id":"scan-774614975","full_name":"BDR-Pro/ByteWise--Beyond-Hex-Viewing","url":"https://github.com/BDR-Pro/ByteWise--Beyond-Hex-Viewing","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-application","reason_en":"ByteWise is a hex-viewing GUI that delegates executable details to an existing library and documents no new analysis method.","reason_zh":"ByteWise 是十六进制查看界面，可执行文件信息由现有库提供，文档没有描述新的分析方法。","evidence_url":"https://github.com/BDR-Pro/ByteWise--Beyond-Hex-Viewing/blob/c712c1a65c3951a9f31bdc7b7ca78927f57b01ce/README.md","reviewed_at":"2026-11-06"},{"id":"scan-775013970","full_name":"BuilderDemo7/RD3_BD7sTools","url":"https://github.com/BuilderDemo7/RD3_BD7sTools","batch_id":"run-42186805426-1","decision":"hold","reason_code":"capability-unclear","reason_en":"The README promises P3D-to-PX conversion, but the conversion method is empty; the format sketches do not establish a usable converter.","reason_zh":"README 宣称能将 P3D 转成 PX，但转换函数为空；格式结构草案也不足以证明转换工具可用。","evidence_url":"https://github.com/BuilderDemo7/RD3_BD7sTools/blob/26580c588d1db1f4245007a929b092244d41482b/RD3_p3d2px/Program.cs","reviewed_at":"2026-11-06"},{"id":"scan-780018304","full_name":"mytechnotalent/STM32F401_Button_Interrupt_Driver","url":"https://github.com/mytechnotalent/STM32F401_Button_Interrupt_Driver","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"development-tool","reason_en":"This repository supplies an original STM32F401 button interrupt driver in assembly; the reverse-engineering course is only an external link.","reason_zh":"仓库提供的是 STM32F401 按钮中断驱动的汇编实现；逆向课程仅是外部链接。","evidence_url":"https://github.com/mytechnotalent/STM32F401_Button_Interrupt_Driver/blob/8cf51c4eb211676c165dcc44b7abd14ac98fa512/README.md","reviewed_at":"2026-11-06"},{"id":"scan-782447091","full_name":"SellersHearer/Nexus","url":"https://github.com/SellersHearer/Nexus","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"no-real-content","reason_en":"Nexus contains a linked image, a licence and no source or explanation of any reverse-engineering work.","reason_zh":"Nexus 仅有图片链接和许可证，没有源码，也没有说明任何逆向工程内容。","evidence_url":"https://github.com/SellersHearer/Nexus/blob/bcd8e9eafa0e08b452d58dd38ee11e11572145a9/README.md","reviewed_at":"2026-11-06"},{"id":"scan-790350098","full_name":"Zekfad/hd-tool","url":"https://github.com/Zekfad/hd-tool","batch_id":"run-42186805426-1","decision":"hold","reason_code":"target-unsupported","reason_en":"HD Tool documents hashing and search in modified Stingray packages, but the repository does not explicitly identify the game whose packages it handles.","reason_zh":"HD Tool 说明了对修改过的 Stingray 包进行哈希处理和搜索，但现有源码未明确指出这些包属于哪款游戏。","evidence_url":"https://github.com/Zekfad/hd-tool/blob/28d0de036f09904ef54bab686788b00e0653c814/README.md","reviewed_at":"2026-11-06"},{"id":"scan-793311533","full_name":"PandLantis/TriumphAdler310","url":"https://github.com/PandLantis/TriumphAdler310","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"no-real-content","reason_en":"The teardown records basic checks and EEPROM dumps, while the proposed connector investigation and interfaces remain unfinished and no findings or tools are present.","reason_zh":"该拆解项目只记录基础检查和 EEPROM 转储；连接器研究与接口仍未开展，仓库没有可整理的分析结论或工具。","evidence_url":"https://github.com/PandLantis/TriumphAdler310/blob/165a2fc5bbac82b6c29a86febbf05a0d0a992c34/README.md","reviewed_at":"2026-11-06"},{"id":"scan-793383907","full_name":"MixDevCode/musimundo-redesign","url":"https://github.com/MixDevCode/musimundo-redesign","batch_id":"run-42186805426-1","decision":"hold","reason_code":"linking-policy","reason_en":"Musimundo Redesign documents API reverse engineering but also commits images it identifies as belonging to Musimundo and other rights holders.","reason_zh":"Musimundo Redesign 记录了 API 逆向工作，但仓库也收录了其声明属于 Musimundo 等权利方的图片。","evidence_url":"https://github.com/MixDevCode/musimundo-redesign/blob/3ffe62e06b61c3a98d6bf1bd377a6d05ef133c93/README.md","reviewed_at":"2026-11-06"},{"id":"scan-795489845","full_name":"bfjesso/jesso-injector","url":"https://github.com/bfjesso/jesso-injector","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-application","reason_en":"Jesso-Injector is a general Windows DLL injector; its documentation describes injection methods without an analysis or reverse-engineering workflow.","reason_zh":"Jesso-Injector 是通用 Windows DLL 注入器，文档只介绍注入方法，没有给出逆向分析用途或流程。","evidence_url":"https://github.com/bfjesso/jesso-injector/blob/c41822f4ffc9cf0dd7da1fe3fbbba1203d5f6cf9/README.md","reviewed_at":"2026-11-06"},{"id":"scan-804440643","full_name":"DalphanDev/DalphanAIO-Showcase","url":"https://github.com/DalphanDev/DalphanAIO-Showcase","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"DalphanAIO is an online checkout bot whose stated purpose includes slipping past retail security checks; its source documents no reverse-engineering investigation.","reason_zh":"DalphanAIO 是自动下单机器人，文档明确提到规避零售平台的安全检查，未记录逆向分析工作。","evidence_url":"https://github.com/DalphanDev/DalphanAIO-Showcase/blob/84d70e4d1d22270999d667e3cd3306103d166f70/README.md","reviewed_at":"2026-11-06"},{"id":"scan-805072668","full_name":"Sivnerof/PicoCTF","url":"https://github.com/Sivnerof/PicoCTF","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-security","reason_en":"The repository collects PicoCTF solutions across cryptography, web exploitation and forensics; the walkthroughs do not make reverse engineering its primary subject.","reason_zh":"仓库汇集 PicoCTF 的密码学、Web 利用和取证解题记录；讲解没有以逆向工程为主线。","evidence_url":"https://github.com/Sivnerof/PicoCTF/blob/1a8ceda380212eda78d1f0b4cc8849caf45efed5/README.md","reviewed_at":"2026-11-06"},{"id":"scan-807820724","full_name":"9dl/ProcessRename","url":"https://github.com/9dl/ProcessRename","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"ProcessRename terminates, renames, and hides a process specifically to bypass anti-debugging checks that inspect process names.","reason_zh":"ProcessRename 通过结束、改名并隐藏进程，专门绕过检查进程名称的反调试机制。","evidence_url":"https://github.com/9dl/ProcessRename/blob/1c68a48e68a417d4ee81471a9c2be10bd6ecd691/README.md","reviewed_at":"2026-11-06"},{"id":"scan-807842397","full_name":"JoshA02/CinemaShowtimes","url":"https://github.com/JoshA02/CinemaShowtimes","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-application","reason_en":"CinemaShowtimes fetches and displays cinema schedules through an API; its source describes API integration, not analysis or reconstruction of that API.","reason_zh":"CinemaShowtimes 通过影院 API 获取并展示排片；项目说明的是普通 API 集成，没有协议分析或重建内容。","evidence_url":"https://github.com/JoshA02/CinemaShowtimes/blob/4ce3307e54c95d1ee2f39be0ec684172c828f4de/README.md","reviewed_at":"2026-11-06"},{"id":"scan-810493519","full_name":"michal-kapala/gro-weapon-form","url":"https://github.com/michal-kapala/gro-weapon-form","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-application","reason_en":"GRO weapon form is a web form for adding records to an existing Ghost Recon Online SQLite database; the source documents no game or format investigation.","reason_zh":"GRO weapon form 是向现有 Ghost Recon Online SQLite 数据库添加武器的网页表单，资料没有说明游戏或格式逆向研究。","evidence_url":"https://github.com/michal-kapala/gro-weapon-form/blob/4ea8e0c9158019f29e26b1244ddf17d4cc21722e/README.md","reviewed_at":"2026-11-06"},{"id":"scan-811618795","full_name":"MudSplasher/launchd","url":"https://github.com/MudSplasher/launchd","batch_id":"run-42186805426-1","decision":"hold","reason_code":"linking-policy","reason_en":"The repository commits C output described as a decompiled launchd binary, so publishing a catalog link needs a maintainer decision.","reason_zh":"仓库提交了自称由 launchd 二进制反编译而来的 C 文件，收录链接需要维护者决定。","evidence_url":"https://github.com/MudSplasher/launchd/blob/efc78e420290f5b304f7b23015d1e5400c3a2f2b/README.md","reviewed_at":"2026-11-06"},{"id":"scan-811998649","full_name":"0xffvirus/AC_MultiCheat","url":"https://github.com/0xffvirus/AC_MultiCheat","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"AC MultiCheat is an AssaultCube aimbot and ESP hack, regardless of its stated training purpose.","reason_zh":"AC MultiCheat 是针对 AssaultCube 的自瞄和透视作弊程序，其教学用途说明不改变项目性质。","evidence_url":"https://github.com/0xffvirus/AC_MultiCheat/blob/677a65deca9b9475803ca3a1012669f062131dbc/README.md","reviewed_at":"2026-11-06"},{"id":"scan-817926655","full_name":"mediaexplorer74/DodoArchipelago","url":"https://github.com/mediaexplorer74/DodoArchipelago","batch_id":"run-42186805426-1","decision":"hold","reason_code":"linking-policy","reason_en":"The UWP port may contain a reconstructed world generator, but the repository also commits extensive game media and compiled assets from The Dodo Archipelago.","reason_zh":"这份 UWP 移植提到重建世界生成器，但仓库同时收录大量 The Dodo Archipelago 游戏素材和编译资源，需要维护者判断链接政策。","evidence_url":"https://github.com/mediaexplorer74/DodoArchipelago/blob/536aaa26d5130e17785f9785c04b656577cb2089/README.md","reviewed_at":"2026-11-06"},{"id":"scan-821161298","full_name":"arttttx/py_func_inject","url":"https://github.com/arttttx/py_func_inject","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"development-tool","reason_en":"The experiment splices one Python function's bytecode into another for programming use, with no documented reverse-engineering target.","reason_zh":"该实验把一个 Python 函数的字节码插入另一个函数，用于编程探索，没有记录逆向分析目标。","evidence_url":"https://github.com/arttttx/py_func_inject/blob/f20f3ede9b3439b44f1931d3e760509fd1684a0c/README.md","reviewed_at":"2026-11-06"},{"id":"scan-823653126","full_name":"Krasnikov05/socks5mitm","url":"https://github.com/Krasnikov05/socks5mitm","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-application","reason_en":"socks5mitm provides a general SOCKS5 proxy with message inspection and modification hooks; it documents no target investigation or protocol recovery.","reason_zh":"socks5mitm 提供可查看和修改消息的通用 SOCKS5 代理，文档未记录具体目标的分析或协议恢复。","evidence_url":"https://github.com/Krasnikov05/socks5mitm/blob/dc4ba4be629704e5925b03b5538f2538d28dfaf1/README.md","reviewed_at":"2026-11-06"},{"id":"scan-825111357","full_name":"branchlock/branchlock_java_obfuscator","url":"https://github.com/branchlock/branchlock_java_obfuscator","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"protection-tool","reason_en":"Branchlock sells Java and Android code obfuscation through encryption of compiled code and constants; its purpose is protecting software from analysis.","reason_zh":"Branchlock 提供 Java 和 Android 代码混淆服务，通过加密编译代码及常量防止还原，属于软件保护工具。","evidence_url":"https://github.com/branchlock/branchlock_java_obfuscator/blob/85acf4ed4db0a1dbf01d14842ec97554f2f27430/README.md","reviewed_at":"2026-11-06"},{"id":"scan-825202591","full_name":"jaredliw/sunctf","url":"https://github.com/jaredliw/sunctf","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"community-or-event","reason_en":"SunCTF contains competition deployment files and an archive; the README points to a separate repository for challenges.","reason_zh":"SunCTF 仓库保存的是赛事部署配置和归档，README 将题目指向另一个仓库。","evidence_url":"https://github.com/jaredliw/sunctf/blob/4683667f3c4f857667bea52e9410f9aff6fca1dd/README.md","reviewed_at":"2026-11-06"},{"id":"scan-831600267","full_name":"DeFexNN/LumenInjector","url":"https://github.com/DeFexNN/LumenInjector","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"Lumen Injector describes encrypted game-cheat modules, ESP overlays and window-title spoofing to avoid detection.","reason_zh":"Lumen Injector 明确提供加密游戏作弊模块、ESP 透视覆盖层及用于规避检测的窗口标题伪装。","evidence_url":"https://github.com/DeFexNN/LumenInjector/blob/eab4c45a9a151805f75a5ab7ca23b2d67e06a94d/README.md","reviewed_at":"2026-11-06"},{"id":"scan-833356480","full_name":"Probabilities/Metrix-Reverse","url":"https://github.com/Probabilities/Metrix-Reverse","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The code extracts session and nonce values from ThreatMetrix tags used by banks for 3-D Secure fraud checks, making evasion of that protection its direct purpose.","reason_zh":"代码从用于银行 3-D Secure 风控的 ThreatMetrix 标签中提取会话及 nonce 值，其直接用途是规避该保护机制。","evidence_url":"https://github.com/Probabilities/Metrix-Reverse/blob/83a1d06d99567da38e45843a9a6733fea78a9dc3/Metrix.js","reviewed_at":"2026-11-06"},{"id":"scan-837789294","full_name":"FieryBanana101/COMPFEST-16_TeamBaruBelajarCTF","url":"https://github.com/FieryBanana101/COMPFEST-16_TeamBaruBelajarCTF","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-security","reason_en":"The repository gathers COMPFEST16 CTF solutions across challenge types, and the write-up is about web exploitation rather than reverse engineering.","reason_zh":"该仓库汇集 COMPFEST16 多类 CTF 题目的解法；详细题解属于 Web 漏洞利用，未体现以逆向工程为主。","evidence_url":"https://github.com/FieryBanana101/COMPFEST-16_TeamBaruBelajarCTF/blob/b7d1fe0a30869c1bb343553fa370de5576d25d20/README.md","reviewed_at":"2026-11-06"},{"id":"scan-841754419","full_name":"gabrielgollo/AssaultCubeTrainer","url":"https://github.com/gabrielgollo/AssaultCubeTrainer","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"Despite its educational framing, the implemented product is an Assault Cube trainer with ESP, aimbot and game-value manipulation features.","reason_zh":"虽然说明将其称作教学项目，实际实现的是带有透视、自瞄和游戏数值修改功能的 Assault Cube 修改器。","evidence_url":"https://github.com/gabrielgollo/AssaultCubeTrainer/blob/e5c5c6a2a9387647c9fd159992d254b4f43a17ed/README.md","reviewed_at":"2026-11-06"},{"id":"scan-850833010","full_name":"ItsJustMeChris/macrypt","url":"https://github.com/ItsJustMeChris/macrypt","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"protection-tool","reason_en":"macrypt encrypts Mach-O code sections and checks integrity at runtime to hinder modification and reverse engineering.","reason_zh":"macrypt 加密 Mach-O 代码段并在运行时校验完整性，其用途是阻碍修改和逆向分析。","evidence_url":"https://github.com/ItsJustMeChris/macrypt/blob/53dc2cd65c75a58b51ca4847b13434fa1b8797dc/readme.md","reviewed_at":"2026-11-06"},{"id":"scan-851553776","full_name":"WindBlowAssCold/ida-heaher","url":"https://github.com/WindBlowAssCold/ida-heaher","batch_id":"run-42186805426-1","decision":"hold","reason_code":"insufficient-docs","reason_en":"The README only calls the three structure files headers for IDA; it does not explain how they are used for analysis.","reason_zh":"README 仅称三个结构文件是供 IDA 使用的头文件，未说明具体分析用途或使用方法。","evidence_url":"https://github.com/WindBlowAssCold/ida-heaher/blob/54a266dc1d464079889971c2947d2faef3c81632/README.md","reviewed_at":"2026-11-06"},{"id":"scan-858718498","full_name":"mttcrn/ODC-challenges","url":"https://github.com/mttcrn/ODC-challenges","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-security","reason_en":"ODC-challenges primarily collects offensive and defensive cybersecurity CTF solutions across ROP, heap, kernel and shellcode topics; reverse-engineering exercises are one section.","reason_zh":"ODC-challenges 主要汇集攻防安全课程的夺旗赛解答，涵盖 ROP、堆、内核及 shellcode，逆向题只是其中一类。","evidence_url":"https://github.com/mttcrn/ODC-challenges/blob/af27d2c12bc20fc656bc9a6bb83ce90e32d09f31/README.md","reviewed_at":"2026-11-06"},{"id":"scan-872296012","full_name":"MIMOCloud24/MIMOCloud24","url":"https://github.com/MIMOCloud24/MIMOCloud24","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"personal-profile","reason_en":"The sole README presents a researcher's biography, interests and future publishing plans; the repository contains no research or tooling.","reason_zh":"唯一的 README 是研究者的个人介绍、研究兴趣和发布计划，仓库没有实际研究成果或工具。","evidence_url":"https://github.com/MIMOCloud24/MIMOCloud24/blob/9417512f694a2ad229d29f354d0880c4e5704333/README.md","reviewed_at":"2026-11-06"},{"id":"scan-883626842","full_name":"mediaexplorer74/WPVXAPDeployer","url":"https://github.com/mediaexplorer74/WPVXAPDeployer","batch_id":"run-42186805426-1","decision":"hold","reason_code":"linking-policy","reason_en":"The author calls WPVXAPDeployer a draft recovery made by decompiling a discontinued WPF product, and the repository contains recovered C# source.","reason_zh":"作者称 WPVXAPDeployer 是通过反编译已停用 WPF 产品恢复的草稿，仓库含恢复出的 C# 源码，需审核。","evidence_url":"https://github.com/mediaexplorer74/WPVXAPDeployer/blob/fb55bc9478c1bb5c658a2d0d09ca117d94ca38cc/README.md","reviewed_at":"2026-11-06"},{"id":"scan-887844129","full_name":"RvaStack/Behavioral-Memory-Research","url":"https://github.com/RvaStack/Behavioral-Memory-Research","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The AssaultCube proof of concept includes a cheat executable and demonstrates health and ammunition manipulation in the game.","reason_zh":"这个 AssaultCube 示例仓库包含作弊程序，并演示修改游戏生命值与弹药，主要内容属于游戏作弊。","evidence_url":"https://github.com/RvaStack/Behavioral-Memory-Research/blob/c46c22242aa7ae958bc1ff2c9d0d62336c6f0724/README.md","reviewed_at":"2026-11-06"},{"id":"scan-888798518","full_name":"NexusAILab/bing_image_creator","url":"https://github.com/NexusAILab/bing_image_creator","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-application","reason_en":"The package generates and saves Bing Image Creator images using authentication cookies; its source gives no account of analysing the service.","reason_zh":"该包使用登录 Cookie 调用 Bing Image Creator 生成和保存图片，仓库资料没有说明对该服务的逆向分析。","evidence_url":"https://github.com/NexusAILab/bing_image_creator/blob/181f2cf699909a7698edbd0da9ea23b0c1478492/README.md","reviewed_at":"2026-11-06"},{"id":"scan-891521122","full_name":"vobst/ios_dbg","url":"https://github.com/vobst/ios_dbg","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"fork-or-mirror","reason_en":"The entry files identify this as a Python 3 port of earlier Cisco IOS MIPS and PPC debugger implementations, with no distinct analysis contribution documented.","reason_zh":"所附入口文件明确将其标为既有 Cisco IOS MIPS 与 PPC 调试器的 Python 3 移植，未记录独立的分析贡献。","evidence_url":"https://github.com/vobst/ios_dbg/blob/6eae802e24cc9c0f6be94ee886000b45d0c5daff/ios_dbg_mips.py","reviewed_at":"2026-11-06"},{"id":"scan-896474679","full_name":"faithByte/rainfall","url":"https://github.com/faithByte/rainfall","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-security","reason_en":"The RainFall material centers on setuid challenge solving and exploitation; its short disassembly passages serve that security exercise.","reason_zh":"现有 RainFall 材料围绕 setuid 关卡求解与利用展开，反汇编片段主要服务于该安全练习。","evidence_url":"https://github.com/faithByte/rainfall/blob/ae8e1b6329ee9895f0a773f7f8c93ae759840ad5/level0/README.md","reviewed_at":"2026-11-06"},{"id":"scan-897268112","full_name":"N0tMaggi/PythonProtector","url":"https://github.com/N0tMaggi/PythonProtector","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"protection-tool","reason_en":"PythonProtector is designed to prevent analysis of Python applications by detecting debuggers and virtual machines and terminating selected processes.","reason_zh":"PythonProtector 的用途是通过检测调试器和虚拟机、终止特定进程来阻碍对 Python 应用的分析。","evidence_url":"https://github.com/N0tMaggi/PythonProtector/blob/1c67bf089dd891f68791d1c6e0efc722749c5d9b/README.md","reviewed_at":"2026-11-06"},{"id":"scan-905934721","full_name":"0XC7R/DISSEM","url":"https://github.com/0XC7R/DISSEM","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"no-real-content","reason_en":"DISSEM claims a Capstone-based disassembler, but the repository contains only a README and licence with no implementation.","reason_zh":"DISSEM 声称使用 Capstone 反汇编，但仓库只有说明和许可证，没有实现代码。","evidence_url":"https://github.com/0XC7R/DISSEM/blob/d510c17ff253bb618b9e66dedd1f869729173ed4/README.md","reviewed_at":"2026-11-06"},{"id":"scan-909747153","full_name":"slimcdk/esphome-yeelight-ceiling-light","url":"https://github.com/slimcdk/esphome-yeelight-ceiling-light","batch_id":"run-42186805426-1","decision":"hold","reason_code":"linking-policy","reason_en":"The fork includes a Yeelight APK and a large JADX decompilation of that commercial app, requiring a maintainer decision before linking.","reason_zh":"该分支提交了 Yeelight APK 及大量 JADX 反编译文件，涉及商业应用内容，链接前需要维护者决定。","evidence_url":"https://github.com/slimcdk/esphome-yeelight-ceiling-light/blob/67c8b2558abd5e7349d0892e648ec8ade017264b/README.md","reviewed_at":"2026-11-06"},{"id":"scan-910521895","full_name":"nohuto/b64rev","url":"https://github.com/nohuto/b64rev","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"protection-tool","reason_en":"B64rev transforms PowerShell input into reversed Base64 strings and obfuscated decoding code, making obfuscation its main function.","reason_zh":"b64rev 将 PowerShell 内容转换为倒序 Base64 字符串和混淆后的解码代码，主要功能是代码混淆。","evidence_url":"https://github.com/nohuto/b64rev/blob/5bb7be5b3b903f2e99a5c1cbdda693506c27fa2a/README.md","reviewed_at":"2026-11-06"},{"id":"scan-913881871","full_name":"RozhakDev/Lixstreamingcaio","url":"https://github.com/RozhakDev/Lixstreamingcaio","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-application","reason_en":"Lixstreamingcaio is a video-link resolver with a desktop GUI; its README describes converting Lixbox IDs to playable URLs but provides no reverse-engineering method or findings.","reason_zh":"Lixstreamingcaio 是带桌面界面的视频链接解析器；README 只介绍将 Lixbox ID 转为播放地址，没有记录逆向方法或发现。","evidence_url":"https://github.com/RozhakDev/Lixstreamingcaio/blob/a98eca9ae10384257a1b04496f371217233ee08d/README.md","reviewed_at":"2026-11-06"},{"id":"scan-917748177","full_name":"lucas458/MM5451","url":"https://github.com/lucas458/MM5451","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-application","reason_en":"The repository provides an Arduino driver and board mapping for an MM5451 display circuit, with no documented reverse-engineering investigation.","reason_zh":"仓库提供 MM5451 显示电路的 Arduino 驱动和引脚映射，没有记载逆向调查。","evidence_url":"https://github.com/lucas458/MM5451/blob/4014d38e531845e5b3a60b4af721032107ea1ad5/README.md","reviewed_at":"2026-11-06"},{"id":"scan-918708033","full_name":"hesseljonathan/libcu132","url":"https://github.com/hesseljonathan/libcu132","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-application","reason_en":"libcu132 is a serial communication library for the Carrera Digital Control Unit; its README documents connection and parsing, with no protocol research.","reason_zh":"libcu132 是 Carrera Digital Control Unit 的串口通信库；文档只说明连接、轮询和解析，没有协议研究内容。","evidence_url":"https://github.com/hesseljonathan/libcu132/blob/ec38b2df289b394ab17497f159f69565632d00e3/README.md","reviewed_at":"2026-11-06"},{"id":"scan-920185294","full_name":"yaalyy/LinuxQ_dockerEnv","url":"https://github.com/yaalyy/LinuxQ_dockerEnv","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"development-tool","reason_en":"LinuxQ_dockerEnv packages existing GDB, objdump and GCC tools into a Docker image; it supplies no new analyzer, target findings or reverse-engineered format knowledge.","reason_zh":"LinuxQ_dockerEnv 只是将现有 GDB、objdump 和 GCC 装入 Docker 镜像，没有新的分析器、目标研究结果或格式知识。","evidence_url":"https://github.com/yaalyy/LinuxQ_dockerEnv/blob/7425046eee42bb00af5d6636f9f0ead648f0c8ef/README.md","reviewed_at":"2026-11-06"},{"id":"scan-923448632","full_name":"cyruswastaken/Celestia","url":"https://github.com/cyruswastaken/Celestia","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The README explicitly calls Celestia a cheat for Assault Cube, and the file list contains its C++ project and executable.","reason_zh":"README 明确称 Celestia 是 Assault Cube 的作弊程序，文件列表也包含其 C++ 工程和可执行文件。","evidence_url":"https://github.com/cyruswastaken/Celestia/blob/3e899716f2c53ff274e0b180c675f0b3636e84c6/README.md","reviewed_at":"2026-11-06"},{"id":"scan-926355517","full_name":"karthiksiky/CTF-Writeups","url":"https://github.com/karthiksiky/CTF-Writeups","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-security","reason_en":"This is a broad CTF write-up archive spanning exploitation, cryptography, forensics, OSINT and web tasks; reverse engineering is only one section.","reason_zh":"这是覆盖漏洞利用、密码学、取证、OSINT 和 Web 题目的综合 CTF 题解库，逆向仅是其中一个栏目。","evidence_url":"https://github.com/karthiksiky/CTF-Writeups/blob/6160b721fcd6bc6e7ee9bea38f1967bcb758a356/README.md","reviewed_at":"2026-11-06"},{"id":"scan-926425174","full_name":"Mohamed-Moumni/snow-crash","url":"https://github.com/Mohamed-Moumni/snow-crash","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-security","reason_en":"The repository is a collection of Snow Crash challenge flags and walkthroughs focused on passwords and network captures, rather than a reverse-engineering resource.","reason_zh":"仓库收集 Snow Crash 挑战的 flag 和解题记录，内容主要是密码破解与抓包分析，主题属于一般安全练习。","evidence_url":"https://github.com/Mohamed-Moumni/snow-crash/blob/25701bf16b16cc38e51616e54774aaef4fbca3c1/level02/ressources/README.md","reviewed_at":"2026-11-06"},{"id":"scan-926982978","full_name":"Pranith-Jain/CTF-Writeups","url":"https://github.com/Pranith-Jain/CTF-Writeups","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-security","reason_en":"The collection mainly covers CTF security challenges; executable disassembly is one of five write-ups alongside logs, steganography, SQL injection and cryptography.","reason_zh":"这组文章以 CTF 安全题为主；可执行文件反汇编只是五篇中的一篇，其余涉及日志、隐写、SQL 注入和密码学。","evidence_url":"https://github.com/Pranith-Jain/CTF-Writeups/blob/d5f23c434da94276b829e1d44822637baf070ff4/README.md","reviewed_at":"2026-11-06"},{"id":"scan-927268612","full_name":"sw1ndle777/MegaGuard","url":"https://github.com/sw1ndle777/MegaGuard","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"protection-tool","reason_en":"MegaGuard is a MegaVolts anti-cheat payload focused on detecting tampering and hardening the client against memory inspection and hooks.","reason_zh":"MegaGuard 是《MegaVolts》的反作弊载荷，主要检测篡改并加固客户端，防止内存检查和 Hook。","evidence_url":"https://github.com/sw1ndle777/MegaGuard/blob/8788e7cb0754ae34346b2f5e9e391647c9269203/README.md","reviewed_at":"2026-11-06"},{"id":"scan-930028558","full_name":"0v41n/BrainFuck-Crackme","url":"https://github.com/0v41n/BrainFuck-Crackme","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-security","reason_en":"Brainfuck CrackMe publishes a password challenge and its source, while the author says a reverse-engineering write-up has not been written.","reason_zh":"Brainfuck CrackMe 发布的是带源码的破解练习题；作者明确表示尚未写逆向分析记录。","evidence_url":"https://github.com/0v41n/BrainFuck-Crackme/blob/00662d8139f9bcd363f658e4e4d41b777da17196/README.md","reviewed_at":"2026-11-06"},{"id":"scan-930161519","full_name":"An0n-00/mentimeter-quiz-solutions","url":"https://github.com/An0n-00/mentimeter-quiz-solutions","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The website and userscript extract answers from Mentimeter quiz responses so users can obtain quiz solutions.","reason_zh":"网页和用户脚本从 Mentimeter 测验响应中提取正确答案，供用户直接获取测验解答。","evidence_url":"https://github.com/An0n-00/mentimeter-quiz-solutions/blob/a060ad7171da8c8f7e4f1cc700b414447756701d/README.md","reviewed_at":"2026-11-06"},{"id":"scan-931140647","full_name":"bennett-sh/easypower","url":"https://github.com/bennett-sh/easypower","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-application","reason_en":"easypower is presented only as a TypeScript library for calling an app API; the README supplies no protocol investigation, recovered behavior, or analysis method.","reason_zh":"easypower 仅被介绍为调用应用 API 的 TypeScript 库；README 未提供协议研究、恢复的行为或分析方法。","evidence_url":"https://github.com/bennett-sh/easypower/blob/56f6b9f8db052b2978ead72b4f5040611c76204f/README.md","reviewed_at":"2026-11-06"},{"id":"scan-931459485","full_name":"Nukem9/hfw-gameplay-tweaks","url":"https://github.com/Nukem9/hfw-gameplay-tweaks","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"hfw-gameplay-tweaks is a Horizon Forbidden West cheat menu and mod offering infinite ammo, god mode, teleportation, and gameplay restriction overrides.","reason_zh":"hfw-gameplay-tweaks 是《Horizon Forbidden West》的作弊菜单和模组，提供无限弹药、无敌、传送及玩法限制解除。","evidence_url":"https://github.com/Nukem9/hfw-gameplay-tweaks/blob/f27da71fb68a06b00aeaadb6a7ddce9815b15d24/README.md","reviewed_at":"2026-11-06"},{"id":"scan-931523914","full_name":"Nukem9/hzdr-gameplay-tweaks","url":"https://github.com/Nukem9/hzdr-gameplay-tweaks","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The repository presents itself as a Horizon Zero Dawn Remastered gameplay-tweaks and cheat-menu mod, with inventory editing, god mode, and item unlocking as features.","reason_zh":"仓库明确将自身定位为《地平线 零之曙光 复刻版》玩法修改与作弊菜单，功能包括背包编辑、无敌模式和物品解锁。","evidence_url":"https://github.com/Nukem9/hzdr-gameplay-tweaks/blob/c254f0944f778b07641597001a1df099560a9519/README.md","reviewed_at":"2026-11-06"},{"id":"scan-931817072","full_name":"yismaili/Rainfall","url":"https://github.com/yismaili/Rainfall","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-security","reason_en":"The level walkthroughs use disassembly chiefly to identify buffer overflows and exploit challenge binaries; the collection's main subject is binary exploitation.","reason_zh":"各关卡攻略主要借助反汇编寻找缓冲区溢出并利用挑战程序，整套资料的主题是二进制漏洞利用。","evidence_url":"https://github.com/yismaili/Rainfall/blob/a696270d279aca46276cfd97bf322e4678d873a9/bonus2/walkthrough.md","reviewed_at":"2026-11-06"},{"id":"scan-932832993","full_name":"d22592/NariCTL","url":"https://github.com/d22592/NariCTL","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-application","reason_en":"NariCTL is a headset settings controller; its source text documents controls and installation but no protocol investigation or reverse-engineering findings.","reason_zh":"NariCTL 是耳机设置控制程序；文档介绍了控制功能和安装方式，没有记录协议研究或逆向发现。","evidence_url":"https://github.com/d22592/NariCTL/blob/6a034ae6fae689c68d7adb529cd91759df1577a0/README.md","reviewed_at":"2026-11-06"},{"id":"scan-933029555","full_name":"linux4life798/smart-garage-remote","url":"https://github.com/linux4life798/smart-garage-remote","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"general-application","reason_en":"The main project wires a Chamberlain remote to ESPHome for Home Assistant; its teardown describes hardware connections rather than an original protocol investigation.","reason_zh":"项目主体是把 Chamberlain 遥控器接入 ESPHome 和 Home Assistant；拆机文档说明接线与芯片接口，未呈现自主协议研究。","evidence_url":"https://github.com/linux4life798/smart-garage-remote/blob/ed13e1c0235dca4080aa7048a614972645689c54/README.md","reviewed_at":"2026-11-06"},{"id":"scan-933789371","full_name":"Subhashis360/Ghidra-Ai-Plugin","url":"https://github.com/Subhashis360/Ghidra-Ai-Plugin","batch_id":"run-42161587295-1","decision":"hold","reason_code":"insufficient-docs","reason_en":"The Ghidra script is present, but the documentation does not explain how its claimed AI deobfuscation works or distinguish its output from Ghidra decompilation.","reason_zh":"仓库有 Ghidra 脚本，但文档未说明宣称的 AI 去混淆如何实现，也无法区分其输出与 Ghidra 自带反编译结果。","evidence_url":"https://github.com/Subhashis360/Ghidra-Ai-Plugin/blob/cacc2de4212c63095263d6789dcb84cd59d2b553/README.md","reviewed_at":"2026-11-06"},{"id":"scan-936075265","full_name":"jeremytrimble/speaknspell_analysis","url":"https://github.com/jeremytrimble/speaknspell_analysis","batch_id":"run-42161587295-1","decision":"hold","reason_code":"linking-policy","reason_en":"The analysis tools require an owner-extracted flash image, but the repository also commits a compiled voice pack and hundreds of WAV files for the toy, requiring a redistribution decision.","reason_zh":"分析工具依赖用户自行提取的闪存镜像，但仓库还提交了编译后的语音包和大量玩具语音 WAV 文件，需由维护者判断收录政策。","evidence_url":"https://github.com/jeremytrimble/speaknspell_analysis/blob/bd5dbaeed2adcf58e2546a6f100eebdde80e1c2c/README.md","reviewed_at":"2026-11-06"},{"id":"scan-937757191","full_name":"calaxo/goveeRGBPC","url":"https://github.com/calaxo/goveeRGBPC","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"general-application","reason_en":"goveeRGBPC relays SignalRGB colors to a Govee H618F strip over BLE, while its README attributes the underlying protocol research to other repositories.","reason_zh":"goveeRGBPC 通过 BLE 将 SignalRGB 的颜色数据发送到 Govee H618F 灯带；README 将相关协议研究归于其他仓库。","evidence_url":"https://github.com/calaxo/goveeRGBPC/blob/451da55e282971e62bc056eb37f14beef94b0225/README.md","reviewed_at":"2026-11-06"},{"id":"scan-939821087","full_name":"depressedX/cursor-hack","url":"https://github.com/depressedX/cursor-hack","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"upstream-unavailable","reason_en":"The repository depressedX/cursor-hack no longer resolves: the GraphQL lookup and a git clone both failed on 2026-11-06.","reason_zh":"仓库 depressedX/cursor-hack 已无法访问：2026-11-06 的 GraphQL 查询和 git clone 均失败。","evidence_url":"https://github.com/depressedX/cursor-hack/blob/30c5305f4ae2ff81a547416600df5b2fd5323766/README.md","reviewed_at":"2026-11-06"},{"id":"scan-942870383","full_name":"zfi2/teavault","url":"https://github.com/zfi2/teavault","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"protection-tool","reason_en":"teavault encrypts C++ string literals at compile time to resist static string extraction; it protects software rather than analysing it.","reason_zh":"teavault 在编译时加密 C++ 字符串字面量，以阻碍静态提取，属于软件保护工具。","evidence_url":"https://github.com/zfi2/teavault/blob/5ce807bb7c2b709296a14dbc937160b92225fe8c/README.md","reviewed_at":"2026-11-06"},{"id":"scan-942931944","full_name":"DeltaTecs/VoSeS","url":"https://github.com/DeltaTecs/VoSeS","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"forensics-only","reason_en":"VoSeS searches a machine memory dump for TLS and QUIC secrets to decrypt captured traffic, a memory forensics task rather than reverse engineering.","reason_zh":"VoSeS 在机器内存转储中查找 TLS 和 QUIC 密钥以解密抓包流量，主要属于内存取证。","evidence_url":"https://github.com/DeltaTecs/VoSeS/blob/b1f56a6e0e066fcc8067f70162b23f3d349ebca3/README.md","reviewed_at":"2026-11-06"},{"id":"scan-945086014","full_name":"LakshayBaijal/PicoCTF-2025-Questions-with-Answers","url":"https://github.com/LakshayBaijal/PicoCTF-2025-Questions-with-Answers","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"general-security","reason_en":"This is a mixed PicoCTF answer archive covering exploitation, cryptography, forensics and general skills; the repository does not establish reverse engineering as its primary subject.","reason_zh":"这是涵盖漏洞利用、密码学、取证和基础技能的 PicoCTF 综合答案仓库；仓库内容未表明逆向工程是其主要主题。","evidence_url":"https://github.com/LakshayBaijal/PicoCTF-2025-Questions-with-Answers/blob/85877189a3abfe82290884a18ece6fc432eede0a/README.md","reviewed_at":"2026-11-06"},{"id":"scan-945193291","full_name":"asatpathy314/picoctf-2025","url":"https://github.com/asatpathy314/picoctf-2025","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"general-security","reason_en":"The repository collects picoCTF solutions across cryptography, forensics, exploitation, reversing, and web tasks rather than focusing on reverse engineering.","reason_zh":"仓库汇集密码学、取证、漏洞利用、逆向和 Web 等多类 picoCTF 题解，主题并非逆向工程。","evidence_url":"https://github.com/asatpathy314/picoctf-2025/blob/1fe524923f1b224c7c51743afc638e23b05d1f1e/README.md","reviewed_at":"2026-11-06"},{"id":"scan-948809184","full_name":"xCr1yptic/WebTemp","url":"https://github.com/xCr1yptic/WebTemp","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"fork-or-mirror","reason_en":"WebTemp is an automatically updated Chirpy Starter copy whose README directs contributions to the original theme repository.","reason_zh":"WebTemp 是自动跟随上游更新的 Chirpy Starter 模板副本，说明文件也将贡献引向原主题仓库。","evidence_url":"https://github.com/xCr1yptic/WebTemp/blob/65ffa0b2f82f5c78b4f0217316d653648675d7b0/README.md","reviewed_at":"2026-11-06"},{"id":"scan-949365463","full_name":"FOOTBOBIK/copilot-sdk","url":"https://github.com/FOOTBOBIK/copilot-sdk","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"general-application","reason_en":"The repository presents a GitHub Copilot integration SDK and general SDK recipes, with no documented reverse-engineering work.","reason_zh":"仓库介绍的是 GitHub Copilot 集成 SDK 和通用使用示例，没有记录逆向分析工作。","evidence_url":"https://github.com/FOOTBOBIK/copilot-sdk/blob/2e9b146e3de3b93c183d3b92436366869487f189/README.md","reviewed_at":"2026-11-06"},{"id":"scan-950632064","full_name":"Ephraim67/Python-in-CTFs-PiccoCTF","url":"https://github.com/Ephraim67/Python-in-CTFs-PiccoCTF","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"general-security","reason_en":"The repository is a small PicoCTF Python solution set whose examples concern decoding, Netcat and code fixes rather than a substantive reverse-engineering resource.","reason_zh":"仓库是 PicoCTF 的 Python 解题资料，示例涉及解码、Netcat 和代码修正，未形成具体的逆向工程资源。","evidence_url":"https://github.com/Ephraim67/Python-in-CTFs-PiccoCTF/blob/0ba66f443b083043f84d2fb3c292effd44dd6d86/README.md","reviewed_at":"2026-11-06"},{"id":"scan-952548402","full_name":"fl0l0u/decbackup","url":"https://github.com/fl0l0u/decbackup","batch_id":"run-42161587295-1","decision":"hold","reason_code":"linking-policy","reason_en":"The RE-derived decbackup clone bundles CA certificates extracted from libncrypto.so and device-derived backup containers, so those committed files need a maintainer decision.","reason_zh":"这份逆向重建的 decbackup 工具附带从 libncrypto.so 提取的 CA 证书和设备生成的备份容器；这些已提交文件需由维护者决定是否收录。","evidence_url":"https://github.com/fl0l0u/decbackup/blob/cd509a1572e2a077240da64b2b1b273ab7fd3a41/README.md","reviewed_at":"2026-11-06"},{"id":"scan-953520167","full_name":"weizhenye/binpat","url":"https://github.com/weizhenye/binpat","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"general-application","reason_en":"Binpat is a general JavaScript binary-data parser with declarative patterns; its documentation does not present reverse engineering as its subject or application.","reason_zh":"Binpat 是用声明式模式解析二进制数据的通用 JavaScript 库；文档没有将逆向分析作为项目主题或用途。","evidence_url":"https://github.com/weizhenye/binpat/blob/2a2c0b5d0f39951f4a2ecce5e4787b159659c381/README.md","reviewed_at":"2026-11-06"},{"id":"scan-953679274","full_name":"mediaexplorer74/ReechAndHait","url":"https://github.com/mediaexplorer74/ReechAndHait","batch_id":"run-42161587295-1","decision":"hold","reason_code":"linking-policy","reason_en":"ReechAndHait presents a UWP remake, while committed C# source carries assembly identity and decompilation-style comments from the original game.","reason_zh":"ReechAndHait 自称 UWP 重制版，但提交的 C# 源码保留了原游戏程序集标识及反编译风格注释，需要维护者判断。","evidence_url":"https://github.com/mediaexplorer74/ReechAndHait/blob/62094c5eca30aa6ad407d9ef5d295e2532f0beef/Src/ReechAndHait/PigeonProject/Objects/GameObject.cs","reviewed_at":"2026-11-06"},{"id":"scan-954577686","full_name":"mediaexplorer74/999AD","url":"https://github.com/mediaexplorer74/999AD","batch_id":"run-42161587295-1","decision":"hold","reason_code":"linking-policy","reason_en":"The 999 A.D. port includes numerous compiled game assets and images, so the redistribution of original game media needs a maintainer decision.","reason_zh":"999 A.D. 移植仓库包含大量已编译游戏资源和图片，原作媒体文件的再分发需要维护者判断。","evidence_url":"https://github.com/mediaexplorer74/999AD/blob/d2de6a42c55d92c08577e658db3c9fcdd0f87339/README.md","reviewed_at":"2026-11-06"},{"id":"scan-954650643","full_name":"iberniex/The-Core-Dump","url":"https://github.com/iberniex/The-Core-Dump","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"general-programming-tutorial","reason_en":"The Core Dump is a broad personal computer-science notes and programming exercise repository, with no substantive reverse-engineering material shown.","reason_zh":"The Core Dump 是个人计算机科学笔记与编程练习合集，仓库内容没有展示实质性的逆向工程资料。","evidence_url":"https://github.com/iberniex/The-Core-Dump/blob/d96293fd6b74a7d56869213e797ef977903bedd6/README.md","reviewed_at":"2026-11-06"},{"id":"scan-955549049","full_name":"PrinceTonny/level1-crackmes-solutions","url":"https://github.com/PrinceTonny/level1-crackmes-solutions","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"no-real-content","reason_en":"The README promises crackme analysis and a keygen, but the repository contains only that one-line claim and a licence, with no solution or findings.","reason_zh":"README 声称有 crackme 分析和密钥生成器，但仓库只有这一行说明和许可证，没有解题内容或分析结果。","evidence_url":"https://github.com/PrinceTonny/level1-crackmes-solutions/blob/8b89779d3a3436aac937a3d16db200ab8689bbad/README.md","reviewed_at":"2026-11-06"},{"id":"scan-955744629","full_name":"mediaexplorer74/MineWell","url":"https://github.com/mediaexplorer74/MineWell","batch_id":"run-42161587295-1","decision":"hold","reason_code":"linking-policy","reason_en":"The MineWell port includes numerous XNB game assets and media files from its target game, so linking it requires a maintainer decision under the asset-redistribution rule.","reason_zh":"MineWell 移植仓库含有大量目标游戏的 XNB 素材和媒体文件，依素材再分发规则须由维护者决定是否收录。","evidence_url":"https://github.com/mediaexplorer74/MineWell/blob/98c7b1bef575d9546d7b836bbaeca7d3f379c625/README.md","reviewed_at":"2026-11-06"},{"id":"scan-957171223","full_name":"Dra-Ganzz/REVERSED","url":"https://github.com/Dra-Ganzz/REVERSED","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The repository offers no documented analysis and contains copied-looking spam and obfuscation tools, including code for a phone-number spam workflow.","reason_zh":"仓库没有记录逆向分析，现有代码主要是垃圾消息和混淆工具，其中包含按电话号码执行骚扰操作的流程。","evidence_url":"https://github.com/Dra-Ganzz/REVERSED/blob/f46eb3120f9a43641c0c62dc22bc52cdf1a2800e/MadKW/decode_spam.py","reviewed_at":"2026-11-06"},{"id":"scan-957388223","full_name":"eeriemyxi/qbgrch","url":"https://github.com/eeriemyxi/qbgrch","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"general-application","reason_en":"qbgrch is a grammar-checking client for Quillbot's API; its brief claim of having reverse engineered the API supplies no protocol findings or analysis as the project's subject.","reason_zh":"qbgrch 的主要功能是调用 Quillbot API 检查语法；README 虽简述曾分析该 API，却没有提供协议发现或以逆向分析为主题的成果。","evidence_url":"https://github.com/eeriemyxi/qbgrch/blob/72bd15e61d79aa7bbbe230428fc60638776e7996/README.md","reviewed_at":"2026-11-06"},{"id":"scan-957545139","full_name":"ggpabuk/lmaobox-crack-public","url":"https://github.com/ggpabuk/lmaobox-crack-public","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The C++ file decrypts a cheat module from a loader response and saves an injectable DLL, so its direct purpose is a game cheat crack.","reason_zh":"C++ 文件从加载器响应中解密作弊模块并保存为可注入 DLL，直接用途是破解游戏作弊程序。","evidence_url":"https://github.com/ggpabuk/lmaobox-crack-public/blob/7252dfa31e142c9a85544210a91f0c8a893b41f2/enigma2.cpp","reviewed_at":"2026-11-06"},{"id":"scan-958345746","full_name":"charles-m-knox/libmetropol","url":"https://github.com/charles-m-knox/libmetropol","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"Although libmetropol maps game saves, its README also gives a byte patch and instructions to unlock the shareware executable’s registration.","reason_zh":"libmetropol 虽然研究游戏存档格式，但 README 还给出修改可执行文件字节、解锁共享软件注册限制的具体步骤。","evidence_url":"https://github.com/charles-m-knox/libmetropol/blob/1cabe0459f5a96eee8f7b031482fe2273c7e7231/README.md","reviewed_at":"2026-11-06"},{"id":"scan-959909498","full_name":"Nukem9/dxgi-getcolorspace1","url":"https://github.com/Nukem9/dxgi-getcolorspace1","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"general-application","reason_en":"dxgi-getcolorspace1 is a small program demonstrating calls to an internal DXGI interface, without documenting an investigation or reusable analysis capability.","reason_zh":"dxgi-getcolorspace1 是调用 DXGI 内部接口的小型演示程序，未记录逆向调查过程，也未提供可复用的分析能力。","evidence_url":"https://github.com/Nukem9/dxgi-getcolorspace1/blob/b9acd8ff86f13ad3908eb112a94d73ec68548d80/README.md","reviewed_at":"2026-11-06"},{"id":"scan-962375352","full_name":"GianSanPedro/MaquinaVirtual2025","url":"https://github.com/GianSanPedro/MaquinaVirtual2025","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"general-programming-tutorial","reason_en":"Virtual Machine 2025 is a computer-architecture assignment implementing an invented VM and its instruction set; the disassembler supports that course interpreter.","reason_zh":"Virtual Machine 2025 是计算机体系结构课程中自定义虚拟机和指令集的实现作业，反汇编功能用于辅助该课程解释器。","evidence_url":"https://github.com/GianSanPedro/MaquinaVirtual2025/blob/0f5a5cd9001def42ee76c26a57426f7e9ae34880/README.md","reviewed_at":"2026-11-06"},{"id":"scan-962672695","full_name":"mediaexplorer74/Prototype","url":"https://github.com/mediaexplorer74/Prototype","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"game-mod-no-re","reason_en":"The README presents a UWP remake of a platformer prototype and lists unfinished gameplay work, but documents no observation or analysis of the original game.","reason_zh":"说明文件将其介绍为平台游戏原型的 UWP 重制版，并列出尚未完成的玩法工作，没有记录对原作的观察或分析。","evidence_url":"https://github.com/mediaexplorer74/Prototype/blob/aee68e9647bc640f23e0760d437f312844ec7c01/README.md","reviewed_at":"2026-11-06"},{"id":"scan-966479872","full_name":"provrb/libprocman","url":"https://github.com/provrb/libprocman","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"general-security","reason_en":"libprocman exposes Windows process, token, service and registry operations for security programming, without a documented analysis capability.","reason_zh":"libprocman 封装 Windows 进程、令牌、服务和注册表操作，资料未说明它具备逆向分析功能。","evidence_url":"https://github.com/provrb/libprocman/blob/378adaf3fe90cb12c43aa2a3e5f5fd2e2818ee33/README.md","reviewed_at":"2026-11-06"},{"id":"scan-966487452","full_name":"BiscottiMuncher/SkillsUsa_2025_Challenges","url":"https://github.com/BiscottiMuncher/SkillsUsa_2025_Challenges","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"community-or-event","reason_en":"The repository distributes challenges and PDF write-ups for a state cybersecurity competition, without presenting a reverse-engineering resource as its main subject.","reason_zh":"该仓库发布州级网络安全竞赛的题目文件及 PDF 题解，主体是赛事材料，并非逆向工程资源。","evidence_url":"https://github.com/BiscottiMuncher/SkillsUsa_2025_Challenges/blob/49ecbdc965e59a647df3e47a87f0084efc419c14/README.md","reviewed_at":"2026-11-06"},{"id":"scan-967504177","full_name":"nivedhcarr/sample","url":"https://github.com/nivedhcarr/sample","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"personal-profile","reason_en":"The root README presents a Windows-internals and malware-evasion portfolio with several separate demos, rather than a single reverse-engineering project.","reason_zh":"根 README 将仓库定位为 Windows 内部机制与恶意软件规避作品集，收录多个独立演示，并非单一逆向工程项目。","evidence_url":"https://github.com/nivedhcarr/sample/blob/331667166d5a56545a085b5afeaa9a8eae39a419/README.md","reviewed_at":"2026-11-06"},{"id":"scan-970698408","full_name":"PlexSheep/dhbw-offsec-pl","url":"https://github.com/PlexSheep/dhbw-offsec-pl","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"general-security","reason_en":"NumFUI is a mixed web-exploitation CTF challenge whose solution uses command injection and parameter brute force, with binary reverse engineering presented as optional.","reason_zh":"NumFUI 是结合网页命令注入和参数穷举的 CTF 题目，说明将完整逆向二进制文件列为非必要步骤，主体属于通用安全挑战。","evidence_url":"https://github.com/PlexSheep/dhbw-offsec-pl/blob/264b93c2a46c98cc9925bdb122c60f012c6d78d8/README.md","reviewed_at":"2026-11-06"},{"id":"scan-973217200","full_name":"MuhtarX09/OTOBOT-GameBot","url":"https://github.com/MuhtarX09/OTOBOT-GameBot","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"OTOBOT presents a Mobile2 Global game bot, and the repository contains only interface images rather than reverse-engineering findings.","reason_zh":"OTOBOT 展示的是 Mobile2 Global 游戏机器人，仓库只提供界面图片，没有逆向研究成果。","evidence_url":"https://github.com/MuhtarX09/OTOBOT-GameBot/blob/6ba672581a8e1c6db1cdfd1de87541926b6ce464/README.md","reviewed_at":"2026-11-06"},{"id":"scan-973388061","full_name":"Yurisa1918/WinRAR-Password-Cracker-Tool","url":"https://github.com/Yurisa1918/WinRAR-Password-Cracker-Tool","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"distribution-site","reason_en":"The WinRAR password tool repository contains a README and a Loader.rar download, with no source code, reverse-engineering analysis or format findings.","reason_zh":"该 WinRAR 密码工具仓库仅提供 README 和 Loader.rar 下载，没有源码、逆向分析或格式研究结果。","evidence_url":"https://github.com/Yurisa1918/WinRAR-Password-Cracker-Tool/blob/57f0163cbb71656b4de7d7949c5cb7359c020af9/README.md","reviewed_at":"2026-11-06"},{"id":"scan-973589027","full_name":"Yousha/SimpleDotNetObfuscator","url":"https://github.com/Yousha/SimpleDotNetObfuscator","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"protection-tool","reason_en":"Simple .NET Obfuscator encrypts strings, injects dead code and adds anti-debugging to hinder analysis of .NET programs.","reason_zh":"Simple .NET Obfuscator 通过字符串编码、无用代码注入和反调试机制阻碍 .NET 程序分析，属于保护工具。","evidence_url":"https://github.com/Yousha/SimpleDotNetObfuscator/blob/2b53118d2de6a5229331cc79cdd5ce0a46750d20/README.md","reviewed_at":"2026-11-06"},{"id":"scan-974852189","full_name":"webbie003/Nether-Web-CTF-Write-up","url":"https://github.com/webbie003/Nether-Web-CTF-Write-up","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"general-security","reason_en":"The eight Nether Web write-ups chiefly cover CTF exploitation, cryptography and reconnaissance; two reverse-engineering missions do not make that the collection's main subject.","reason_zh":"Nether Web 的八篇题解主要涉及 CTF 漏洞利用、密码分析和信息搜集；其中虽有两道逆向题，整套材料仍以综合安全练习为主。","evidence_url":"https://github.com/webbie003/Nether-Web-CTF-Write-up/blob/017f131efb004408d391991b7400879b56ef2db5/README.md","reviewed_at":"2026-11-06"},{"id":"scan-974927006","full_name":"Nespre/lrn-bitstream-verifier","url":"https://github.com/Nespre/lrn-bitstream-verifier","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"unrelated","reason_en":"The Python script checks Golomb postulates in abstract bit sequences and generates sequences; it does not analyse software, firmware or a communication format.","reason_zh":"这个 Python 脚本检验和生成抽象比特序列中的 Golomb 性质，并不分析软件、固件或通信格式。","evidence_url":"https://github.com/Nespre/lrn-bitstream-verifier/blob/c36454cb13d83ede372a833dadb15b85e1e0f834/README.md","reviewed_at":"2026-11-06"},{"id":"scan-979023579","full_name":"meerkatone/binary_ninja_marimo_analysis_notebook","url":"https://github.com/meerkatone/binary_ninja_marimo_analysis_notebook","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"general-application","reason_en":"The notebook only loads precomputed Binary Ninja results from a Parquet file and charts entropy and complexity; it performs no new reverse-engineering analysis.","reason_zh":"该笔记本只读取预先生成的 Binary Ninja Parquet 结果，绘制熵和复杂度图表，没有开展新的逆向分析。","evidence_url":"https://github.com/meerkatone/binary_ninja_marimo_analysis_notebook/blob/cda1c852572b027c13566b7b8f22fe480827ce2c/binary_ninja_analysis.py","reviewed_at":"2026-11-06"},{"id":"scan-981563838","full_name":"krauzermaster1/GTI","url":"https://github.com/krauzermaster1/GTI","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"general-application","reason_en":"GTI is a full-stack sector-management example with authentication and CRUD screens; its source describes no reverse-engineering work.","reason_zh":"GTI 是包含身份验证和增删改查界面的部门管理示例，源码说明没有逆向工程内容。","evidence_url":"https://github.com/krauzermaster1/GTI/blob/d2767b7a25dc40a46240971f0b2b8857aa98a7c8/README.md","reviewed_at":"2026-11-06"},{"id":"scan-986681156","full_name":"EllE961/pwnelle","url":"https://github.com/EllE961/pwnelle","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"general-security","reason_en":"pwnelle's primary workflow ranks CTF exploit paths, collects ROP gadgets and generates a pwntools exploit starter from ELF triage.","reason_zh":"pwnelle 的主要流程是根据 ELF 初筛结果排序 CTF 利用路径、收集 ROP gadget，并生成 pwntools 利用脚本模板。","evidence_url":"https://github.com/EllE961/pwnelle/blob/b5f07956995801686382cd08d5d4dbe455d30bb8/README.md","reviewed_at":"2026-11-06"},{"id":"scan-987006544","full_name":"01100010side/Boggart","url":"https://github.com/01100010side/Boggart","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"general-application","reason_en":"Boggart is described only as a data display and encoding-switching tool, with no documented reverse-engineering analysis or target.","reason_zh":"Boggart 只说明可切换编码方式查看数据，没有记录逆向分析用途或具体分析对象。","evidence_url":"https://github.com/01100010side/Boggart/blob/a578208f45dccc0b483e27896d58418f9a164e38/README.md","reviewed_at":"2026-11-06"},{"id":"scan-995996812","full_name":"AyusmanNanda/whatsapp-android-trojan-analysis","url":"https://github.com/AyusmanNanda/whatsapp-android-trojan-analysis","batch_id":"run-42201075883-1","decision":"hold","reason_code":"linking-policy","reason_en":"The Android trojan investigation includes findings, but the repository also commits an Apktool extraction with decompiled smali and application resources.","reason_zh":"该 Android 木马调查记录了分析结果，但仓库同时提交了 Apktool 解包所得的 smali 代码和应用资源，需先处理收录政策问题。","evidence_url":"https://github.com/AyusmanNanda/whatsapp-android-trojan-analysis/blob/2f1ddbcb8267a292988cf2a020a1f25d1bb489ee/README.md","reviewed_at":"2026-11-06"},{"id":"scan-997083047","full_name":"pmarreck/printable_binary","url":"https://github.com/pmarreck/printable_binary","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"general-application","reason_en":"PrintableBinary is a reversible byte-to-UTF-8 encoding utility for display, transport and fixtures; it performs no analysis of a target program or format.","reason_zh":"PrintableBinary 将字节可逆地编码为可读 UTF-8，供显示、传输和测试样例使用；它不分析目标程序或格式。","evidence_url":"https://github.com/pmarreck/printable_binary/blob/0a0c4925d3578280aedb53c94cdba8c4ccd6a7fb/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1004914000","full_name":"d1xus/cocos2d-dumper","url":"https://github.com/d1xus/cocos2d-dumper","batch_id":"run-42161587295-1","decision":"curated","curated_id":"cocos2d-dumper"},{"id":"scan-1005125105","full_name":"Aidan-Gildea/full-stack-8bit-cpu","url":"https://github.com/Aidan-Gildea/full-stack-8bit-cpu","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"development-tool","reason_en":"The assembler, disassembler and emulator target the author's newly designed SimpleISA CPU; the project teaches CPU construction rather than analysing an existing target.","reason_zh":"汇编器、反汇编器和模拟器都面向作者新设计的 SimpleISA CPU；项目重点是构建 CPU，而非分析既有目标。","evidence_url":"https://github.com/Aidan-Gildea/full-stack-8bit-cpu/blob/0e3b6ca809b0f6949f78c04736fe9bbb5eeb3fce/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1006162614","full_name":"dosa122/gta-benchmark","url":"https://github.com/dosa122/gta-benchmark","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"unrelated","reason_en":"GTA Benchmark asks participants to infer hidden byte transformations from input-output pairs as an AI reasoning puzzle, rather than investigate shipped software.","reason_zh":"GTA Benchmark 让参与者根据输入输出样例猜测隐藏的字节变换，用于评测算法推理能力，研究对象并非现有软件。","evidence_url":"https://github.com/dosa122/gta-benchmark/blob/82d68e97a10a5421ba4fa0eda94bc22a76dbca69/docs/gta_benchmark.md","reviewed_at":"2026-11-06"},{"id":"scan-1006226632","full_name":"DoranekoSystems/dyna-dbg","url":"https://github.com/DoranekoSystems/dyna-dbg","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"distribution-site","reason_en":"DynaDbg describes binary-analysis features, but the repository contains only a README and images and directs readers to a proprietary release download.","reason_zh":"DynaDbg 虽介绍了二进制分析功能，但仓库只有 README 和图片，实际软件通过专有发行包下载。","evidence_url":"https://github.com/DoranekoSystems/dyna-dbg/blob/8eecac9ba4ca05d52c3543f3d672f8fa87fae722/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1008784694","full_name":"maci0/guildhook","url":"https://github.com/maci0/guildhook","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"fork-or-mirror","reason_en":"guildhook says its Zig DLL hooks mirror the earlier The-Guild-1-HookDLLs C implementation; the documented change is a language port of those fixes.","reason_zh":"guildhook 表明其 Zig DLL 钩子沿用 The-Guild-1-HookDLLs 的 C 实现思路；文档所述改动是将这些修复移植到另一种语言。","evidence_url":"https://github.com/maci0/guildhook/blob/a7d87406b41042db064b67e1481afe45a0ee31c7/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1010105000","full_name":"goofbrush/HPCoS","url":"https://github.com/goofbrush/HPCoS","batch_id":"run-42161587295-1","decision":"hold","reason_code":"linking-policy","reason_en":"HPCoS commits an assembly disassembly of a commercial Game Boy Color game, which requires a maintainer decision on linking to derived proprietary code.","reason_zh":"HPCoS 提交了商业 Game Boy Color 游戏的汇编反汇编成果，是否收录这类衍生专有代码需由维护者决定。","evidence_url":"https://github.com/goofbrush/HPCoS/blob/99b9c19d87b7ee74a1a334ea6778c5f1a3bac6c4/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1013101913","full_name":"mediaexplorer74/Gomoku","url":"https://github.com/mediaexplorer74/Gomoku","batch_id":"run-42161587295-1","decision":"hold","reason_code":"linking-policy","reason_en":"The repository presents a reversed Gomoku build while committing many game image and audio assets, so redistribution of target media requires a maintainer decision.","reason_zh":"仓库称项目源自逆向的 Gomoku 构建，同时提交了大量游戏图片及音频素材；目标素材的再分发需维护者裁定。","evidence_url":"https://github.com/mediaexplorer74/Gomoku/blob/a57d9825ba1fe49431713064daa57e66b5cd9d91/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1015047433","full_name":"0xsl4m/Android-Pentest-Guide","url":"https://github.com/0xsl4m/Android-Pentest-Guide","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"general-security","reason_en":"Android Pentesting Roadmap is primarily a staged application security and eMAPT study plan; reverse engineering is one phase and has no notes yet.","reason_zh":"Android Pentesting Roadmap 主要是分阶段的安卓渗透测试与 eMAPT 学习计划；逆向工程只是其中一阶段，尚无笔记。","evidence_url":"https://github.com/0xsl4m/Android-Pentest-Guide/blob/e0dd1c5f6652e46249472fa4fb8b00018dcaf739/Phase-2-Static-Analysis-and-Reverse-Engineering/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1015157449","full_name":"bbangjee/cse3030_introduction_to_computer_systems","url":"https://github.com/bbangjee/cse3030_introduction_to_computer_systems","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"general-programming-tutorial","reason_en":"These computer systems course labs cover bit operations, one reversing exercise and cache simulation; reverse engineering is only one part of a general course.","reason_zh":"这是计算机系统课程的实验作业，内容包括位运算、一次逆向练习和缓存模拟，逆向工程并非课程主体。","evidence_url":"https://github.com/bbangjee/cse3030_introduction_to_computer_systems/blob/c4ba7e1b348208add2ffa1b3661fc79d684d1f23/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1016615080","full_name":"ali1571/tap-trap-malware-scanner","url":"https://github.com/ali1571/tap-trap-malware-scanner","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"detection-only","reason_en":"The Python script scans APKs for a TapTrap animation pattern associated with deceptive taps; its documented purpose is detection.","reason_zh":"该 Python 脚本扫描 APK 中与误导点击有关的 TapTrap 动画模式，文档所述用途是检测。","evidence_url":"https://github.com/ali1571/tap-trap-malware-scanner/blob/9b39650f28063ffe55a6de19b62ea7190900e16c/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1018408293","full_name":"AbdallahEidAbdallah/frida-ios-downgrade-tweak","url":"https://github.com/AbdallahEidAbdallah/frida-ios-downgrade-tweak","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"development-tool","reason_en":"The script only automates downgrading Frida server on a jailbroken iOS device; it performs no analysis or instrumentation of a target.","reason_zh":"该脚本仅自动将越狱 iOS 设备上的 Frida server 降级，没有对目标进行分析或插桩。","evidence_url":"https://github.com/AbdallahEidAbdallah/frida-ios-downgrade-tweak/blob/da5191e712bb280cbae857e9538fb447112f04f7/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1019297084","full_name":"c4-off/alt-external","url":"https://github.com/c4-off/alt-external","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"alt-external is an Alt:V multiplayer cheat that scans game memory to provide ESP and invulnerability and discusses anti-cheat evasion.","reason_zh":"alt-external 是面向 Alt:V 多人游戏的作弊工具，扫描游戏内存以提供透视和无敌功能，并提及规避反作弊。","evidence_url":"https://github.com/c4-off/alt-external/blob/5680ba6aca5d769a2b283dee517f6b3ec18a6e1c/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1019382223","full_name":"Chilfish/weibo-sdk","url":"https://github.com/Chilfish/weibo-sdk","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"general-application","reason_en":"Weibo SDK is documented as a public-data SDK, CLI and account archiver; its primary documentation does not describe an investigation of Weibo internals.","reason_zh":"Weibo SDK 的主要文档介绍公开数据读取、命令行查询和账号归档，未把微博内部机制分析作为项目主体。","evidence_url":"https://github.com/Chilfish/weibo-sdk/blob/6b73c47a240bf0a2606993f847ebd1626155d09c/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1022692661","full_name":"afterexam/rev_ham","url":"https://github.com/afterexam/rev_ham","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"rev_ham extracts an app's client KeyStore and ships client certificate and private-key files to bypass mTLS and reproduce authenticated API calls.","reason_zh":"rev_ham 从应用中导出客户端 KeyStore，且仓库附带客户端证书和私钥文件，用于绕过 mTLS 并复现认证接口调用。","evidence_url":"https://github.com/afterexam/rev_ham/blob/3f556d9dd93021bc232de1292f03cb053ba20e6d/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1025190436","full_name":"VijaysinghPuwar/x86-64-assembly-intro-lab","url":"https://github.com/VijaysinghPuwar/x86-64-assembly-intro-lab","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"general-programming-tutorial","reason_en":"The repository is a beginner NASM and ELF hardening lab built around its own programs; binary inspection supports assembly and security lessons.","reason_zh":"该仓库是围绕自编 NASM 程序的入门汇编与 ELF 加固实验；二进制检查主要用于教学和安全验证。","evidence_url":"https://github.com/VijaysinghPuwar/x86-64-assembly-intro-lab/blob/9104ebc3174a4b38a712851c43dc95a1ba9f6705/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1025618448","full_name":"IcePanorama/PyCMPtoWAV","url":"https://github.com/IcePanorama/PyCMPtoWAV","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"general-application","reason_en":"PyCMPtoWAV is documented as a converter from Harvester audio files to WAV, with no format investigation or RE method presented.","reason_zh":"PyCMPtoWAV 文档只介绍将《Harvester》音频文件转换成 WAV，没有呈现格式研究或逆向方法。","evidence_url":"https://github.com/IcePanorama/PyCMPtoWAV/blob/a7473fbff57d787a14e9c3442e80dbc204f7f0dd/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1026301524","full_name":"NicoBellanich/env-cracker-web","url":"https://github.com/NicoBellanich/env-cracker-web","batch_id":"run-42161587295-1","decision":"hold","reason_code":"target-unsupported","reason_en":"The extractor handles a proprietary .env container, but the source does not identify the application or device whose format it parses.","reason_zh":"该提取器处理专有 .env 容器，但仓库资料没有说明这一格式属于哪个应用或设备。","evidence_url":"https://github.com/NicoBellanich/env-cracker-web/blob/dfb3b5d86fcf36f8528a4ed4c5c1d6ea9b49175b/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1026444497","full_name":"meerkatone/rust_binary_analysis","url":"https://github.com/meerkatone/rust_binary_analysis","batch_id":"run-42161587295-1","decision":"curated","curated_id":"binary-ninja-security-analysis-plugin"},{"id":"scan-1026634208","full_name":"Netizen-alt/NWBinAnalyzer","url":"https://github.com/Netizen-alt/NWBinAnalyzer","batch_id":"run-42161587295-1","decision":"curated","curated_id":"nwbinanalyzer"},{"id":"scan-1039394615","full_name":"Devanik21/Eerie.EXE","url":"https://github.com/Devanik21/Eerie.EXE","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"general-application","reason_en":"Eerie.EXE is a set of Windows desktop prank scripts using Win32 APIs; the source describes interference effects rather than analysis of another program.","reason_zh":"Eerie.EXE 是使用 Win32 API 制造桌面恶作剧效果的脚本集合；材料描述的是干扰效果，而非对其他程序的分析。","evidence_url":"https://github.com/Devanik21/Eerie.EXE/blob/3f556a2515730cc660beb1c9199ee894dcecdcf4/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1039969571","full_name":"not-my-username/godot-hiqnet","url":"https://github.com/not-my-username/godot-hiqnet","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"general-application","reason_en":"The code implements HiQNet networking for Godot, but neither the one-line README nor the code documents reverse engineering or recovered protocol findings.","reason_zh":"代码是在 Godot 中实现 HiQNet 通信；简短 README 和代码均未记录逆向过程或还原出的协议发现。","evidence_url":"https://github.com/not-my-username/godot-hiqnet/blob/9fd8d22dd08b2852590a4e3042bad9c9f28d56be/hiqnet/HiQClient.gd","reviewed_at":"2026-11-06"},{"id":"scan-1040481111","full_name":"ajsb85/010-editor-scientific-templates","url":"https://github.com/ajsb85/010-editor-scientific-templates","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"unrelated","reason_en":"The 010 Editor templates parse scientific microscopy, spectroscopy, geospatial, and serialization data; the source presents scientific data analysis rather than software reverse engineering.","reason_zh":"这些 010 Editor 模板解析显微、光谱、地理空间及序列化数据；项目描述的是科学数据分析，而非软件逆向工程。","evidence_url":"https://github.com/ajsb85/010-editor-scientific-templates/blob/d9f489386e73866acc7236808e8f42a4c3bda416/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1040995362","full_name":"taneshqGupta/CS-213-Reverse-Engineering-CSE-DSE-FizzBuzz-on-Steroids","url":"https://github.com/taneshqGupta/CS-213-Reverse-Engineering-CSE-DSE-FizzBuzz-on-Steroids","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"unrelated","reason_en":"The repository implements a FizzBuzz exercise from a class titled Reverse Engineering, but documents no analysis of an existing program.","reason_zh":"仓库实现的是一门名为“Reverse Engineering”的课程中的 FizzBuzz 练习，没有记录对现有程序的分析。","evidence_url":"https://github.com/taneshqGupta/CS-213-Reverse-Engineering-CSE-DSE-FizzBuzz-on-Steroids/blob/d4b1c31271f70ec012000dd843777fda2a5687ea/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1041504857","full_name":"boy10731/SteamFlipper","url":"https://github.com/boy10731/SteamFlipper","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"SteamFlipper explicitly advertises unlocking Steam games and DLC that the account does not own by injecting ownership into the client.","reason_zh":"SteamFlipper 明确宣称可解锁账号未拥有的 Steam 游戏和 DLC，其集成文档还说明会向客户端内存注入所有权信息。","evidence_url":"https://github.com/boy10731/SteamFlipper/blob/06924d8d6b3474972e93349729bd87c4f50fd72c/STEAMFLIPPER_INTEGRATION.md","reviewed_at":"2026-11-06"},{"id":"scan-1043760865","full_name":"mediaexplorer74/AstralBattles","url":"https://github.com/mediaexplorer74/AstralBattles","batch_id":"run-42161587295-1","decision":"hold","reason_code":"linking-policy","reason_en":"AstralBattles describes its source as a dirty decompilation of the original XAP and commits extensive game imagery and audio.","reason_zh":"AstralBattles 自述源码来自原版 XAP 的反编译，并在仓库中收录大量游戏图片和音频，需维护者判断链接政策。","evidence_url":"https://github.com/mediaexplorer74/AstralBattles/blob/845ea8039d79167a06a0f33743613b2aebea0a52/Readme.md","reviewed_at":"2026-11-06"},{"id":"scan-1045293219","full_name":"benjaminwilcox/ghidra-server-iac","url":"https://github.com/benjaminwilcox/ghidra-server-iac","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"general-application","reason_en":"The Terraform project deploys an existing Ghidra collaboration server on AWS without adding analysis capability or documenting an investigation.","reason_zh":"该 Terraform 项目只在 AWS 上部署现有的 Ghidra 协作服务器，没有新增分析能力，也没有记录具体调查。","evidence_url":"https://github.com/benjaminwilcox/ghidra-server-iac/blob/c0a7d081968da7830a79f7475990a6547d0376a6/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1046600635","full_name":"meerkatone/marimo_headless","url":"https://github.com/meerkatone/marimo_headless","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"development-tool","reason_en":"The repository packages existing Ghidra, Marimo, Capa and PyGhidra tools into a Docker notebook environment without a distinct RE capability.","reason_zh":"仓库将现有 Ghidra、Marimo、Capa 和 PyGhidra 工具装入 Docker 笔记本环境，没有独立的逆向分析能力。","evidence_url":"https://github.com/meerkatone/marimo_headless/blob/78517917e10f4f5ed8bd3e0b59aadf191ca8332b/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1047202281","full_name":"kunkka-project/re_parking_sensor_protocol","url":"https://github.com/kunkka-project/re_parking_sensor_protocol","batch_id":"run-42161587295-1","decision":"curated","curated_id":"parking-sensor-protocol-case"},{"id":"scan-1050136573","full_name":"mjbommar/glaurung-models","url":"https://github.com/mjbommar/glaurung-models","batch_id":"run-42161587295-1","decision":"curated","curated_id":"glaurung-models"},{"id":"scan-1056112612","full_name":"bbayszczak/pyhaseiq","url":"https://github.com/bbayszczak/pyhaseiq","batch_id":"run-42161587295-1","decision":"curated","curated_id":"pyhaseiq-case"},{"id":"scan-1058190926","full_name":"NMSU-PEARL/Gate-Breaker","url":"https://github.com/NMSU-PEARL/Gate-Breaker","batch_id":"run-42161587295-1","decision":"hold","reason_code":"target-unsupported","reason_en":"Gate-Breaker evaluates RTL recovery from synthesized netlists, but the targets do not clearly cover abstract circuit netlists rather than a device or firmware.","reason_zh":"Gate-Breaker 评测从综合门级网表恢复 RTL，但现有目标类型无法明确涵盖抽象电路网表，而非具体设备或固件。","evidence_url":"https://github.com/NMSU-PEARL/Gate-Breaker/blob/8d0d3fa811b69d786a3b31fba607957886ae1cee/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1062238162","full_name":"WormFood/Hamsoft-for-CoCo","url":"https://github.com/WormFood/Hamsoft-for-CoCo","batch_id":"run-42161587295-1","decision":"hold","reason_code":"linking-policy","reason_en":"The cartridge investigation has original schematics and ROM-unscrambling code, but the repository also commits both original and unscrambled commercial cartridge ROM dumps.","reason_zh":"该卡带研究提供电路图和 ROM 还原代码，但仓库同时提交了商业卡带的原始及还原后 ROM 转储，需审核收录链接。","evidence_url":"https://github.com/WormFood/Hamsoft-for-CoCo/blob/a0339229e401d0a10004c8d9f9a8d04beaaeed6c/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1063524901","full_name":"ghostware0x00/CrackMes","url":"https://github.com/ghostware0x00/CrackMes","batch_id":"run-42161587295-1","decision":"curated","curated_id":"crackmes-writeups"},{"id":"scan-1064331014","full_name":"CheshirCa/SDR101_Controller","url":"https://github.com/CheshirCa/SDR101_Controller","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"general-application","reason_en":"SDR101 Controller is mainly a desktop GUI for setting receiver frequency, modulation and presets; extracting a command list from firmware is incidental to that app.","reason_zh":"SDR101 Controller 主要是调节接收机频率、调制方式和预设的桌面界面；从固件提取命令列表只是应用开发的附带工作。","evidence_url":"https://github.com/CheshirCa/SDR101_Controller/blob/85587840bb72b9f80a2f52e93fdbc9b3a9d2daa3/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1067263901","full_name":"ndenissov/notateit","url":"https://github.com/ndenissov/notateit","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"general-application","reason_en":"NotateIt Viewer Remake is a presentation viewer and asset exporter for .nat files; its source describes use of the format but no investigation or format-reconstruction findings.","reason_zh":"NotateIt Viewer Remake 是 .nat 演示文稿查看和素材导出程序；文档介绍了使用方式，却没有格式调查或还原发现。","evidence_url":"https://github.com/ndenissov/notateit/blob/e254d395c06b9ceb7c5fce4f8ecc235be6b987fb/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1070289130","full_name":"dennishilk/awesome","url":"https://github.com/dennishilk/awesome","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"unrelated","reason_en":"Awesome Weird Computing is a broad list of operating systems, ports, hardware, and experiments; reverse engineering is only one section of its subject matter.","reason_zh":"Awesome Weird Computing 汇集操作系统、硬件、移植和实验项目；逆向工程只是其中一个栏目，并非清单主旨。","evidence_url":"https://github.com/dennishilk/awesome/blob/b4d13941c9f759b95ec20d8bd1c694db8a1c6643/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1070488661","full_name":"lexicon06/ChatroomIPs.dat-Generator","url":"https://github.com/lexicon06/ChatroomIPs.dat-Generator","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"general-application","reason_en":"ChatroomIPs.dat Generator writes Ares Galaxy server-list files from JSON using a format credited to another project; it documents no original format investigation.","reason_zh":"ChatroomIPs.dat Generator 按其他项目提供的格式说明，将 JSON 服务器列表写成 Ares Galaxy 文件；仓库没有原创格式研究。","evidence_url":"https://github.com/lexicon06/ChatroomIPs.dat-Generator/blob/d8edbdcefc9ef60645e42656e2ce6512bb9ec7f7/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1073979669","full_name":"aaronwb/human-readable-decompilation","url":"https://github.com/aaronwb/human-readable-decompilation","batch_id":"run-42161587295-1","decision":"curated","curated_id":"human-readable-decompilation"},{"id":"scan-1074585639","full_name":"cas1m1r/Bubbles","url":"https://github.com/cas1m1r/Bubbles","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"protection-tool","reason_en":"Bubbles primarily builds a seccomp policy sandbox for running programs and displaying denied operations; the source does not present a reverse-engineering workflow.","reason_zh":"Bubbles 的主体是使用 seccomp 控制程序权限并显示被拒绝操作的沙箱，文档没有提出针对目标的逆向分析流程。","evidence_url":"https://github.com/cas1m1r/Bubbles/blob/c86243ee82340d1d0bfcbd960b1e67ad21e045aa/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1076144212","full_name":"viraj-rathorey/Virajrathorey-","url":"https://github.com/viraj-rathorey/Virajrathorey-","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"personal-profile","reason_en":"The README is a short self-description mentioning reverse engineering, while the file list contains only a licence, image and repository housekeeping.","reason_zh":"README 仅是提到逆向工程的个人简介，文件清单也只有许可证、图片和仓库配置。","evidence_url":"https://github.com/viraj-rathorey/Virajrathorey-/blob/8590ef69cf41240c3b5dba08450370995bdf08d0/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1076227078","full_name":"zinebac/Rainfall","url":"https://github.com/zinebac/Rainfall","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"general-security","reason_en":"Rainfall's main subject is a setuid binary exploitation wargame and privilege-escalation walkthroughs, with reverse engineering used as a step toward exploitation.","reason_zh":"Rainfall 的主体是 setuid 二进制利用与提权闯关教程；逆向分析只是构造利用过程中的一个步骤。","evidence_url":"https://github.com/zinebac/Rainfall/blob/77e3040db98a8d6cc5614c5be479b5906c17301c/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1076355310","full_name":"1051093860/BinStruct-Inspector","url":"https://github.com/1051093860/BinStruct-Inspector","batch_id":"run-42161587295-1","decision":"curated","curated_id":"binstruct-inspector"},{"id":"scan-1079312760","full_name":"0xnull007/0xnull007.github.io","url":"https://github.com/0xnull007/0xnull007.github.io","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"personal-profile","reason_en":"The repository is a personal blog site with assorted posts and write-ups, rather than a dedicated reverse-engineering project or resource.","reason_zh":"该仓库是个人博客网站，收录不同主题的文章和笔记，并非专门的逆向工程项目或资料。","evidence_url":"https://github.com/0xnull007/0xnull007.github.io/blob/e069c7a97101588c8314a9d60ef43d83db2b0b45/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1080825582","full_name":"particle99/gats-custom","url":"https://github.com/particle99/gats-custom","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"general-application","reason_en":"gats-custom is a configurable Gats.io server template with a client override; its documentation gives no account of reconstructing the game or protocol.","reason_zh":"gats-custom 提供可配置的 Gats.io 服务器模板和客户端替换文件，文档未说明对游戏或通信协议的逆向过程。","evidence_url":"https://github.com/particle99/gats-custom/blob/cbf3a6bc67bd4be52791f8427ecebb7f32ac7839/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1081273712","full_name":"mjbommar/binary-bpe","url":"https://github.com/mjbommar/binary-bpe","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"general-application","reason_en":"bbpe trains and exports byte pair tokenizers; binary and firmware files are input corpora, not subjects of reverse engineering.","reason_zh":"bbpe 用二进制文件和固件作训练语料来生成分词器，并未分析这些文件的结构或行为。","evidence_url":"https://github.com/mjbommar/binary-bpe/blob/51aa8aedf048d0421463256f5dcf452028db0cf9/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1081510066","full_name":"LoggingNewMemory/Infinix-GTBook","url":"https://github.com/LoggingNewMemory/Infinix-GTBook","batch_id":"run-42161587295-1","decision":"hold","reason_code":"linking-policy","reason_en":"The repository includes a resource extractor aimed at ControlCenter.dll and many committed DLLs and image files, requiring review of whether vendor assets are redistributed.","reason_zh":"仓库的资源提取器指向 ControlCenter.dll，且提交了大量 DLL 与图片文件，需确认是否重新分发了厂商资产。","evidence_url":"https://github.com/LoggingNewMemory/Infinix-GTBook/blob/e716f323a2c6138d489f3b40dbd9ccb2e61d63ed/Decompilers/ResourceExtractor/Program.cs","reviewed_at":"2026-11-06"},{"id":"scan-1083593735","full_name":"xlatbx59/xlatbx59","url":"https://github.com/xlatbx59/xlatbx59","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"personal-profile","reason_en":"The repository is a personal profile README listing interests, contact details and another repository, with no project content of its own.","reason_zh":"该仓库是个人主页 README，只列出兴趣、联系方式和另一项目链接，本仓库没有独立项目内容。","evidence_url":"https://github.com/xlatbx59/xlatbx59/blob/af0d75fba6d6add02d9bdf7a3e2937443aef5d29/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1086033309","full_name":"tolik518/death-by-savegame-editor","url":"https://github.com/tolik518/death-by-savegame-editor","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The repository's main product edits Death by Scrolling saves, including gem values, and warns that modified saves can trigger leaderboard bans.","reason_zh":"仓库的主要产品用于修改《Death by Scrolling》存档，包括宝石数值；文档还提醒修改后的存档可能导致排行榜封禁。","evidence_url":"https://github.com/tolik518/death-by-savegame-editor/blob/82ce76a480762b8b35abd034bc52bbdcc9e8bcb4/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1086935019","full_name":"sajvn0x/OraxarO","url":"https://github.com/sajvn0x/OraxarO","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"no-real-content","reason_en":"OraxarO claims Oracle storage decoding and visualization, but the implementation only connects to a database and exposes basic session commands.","reason_zh":"OraxarO 声称可解码和可视化 Oracle 存储结构，但实现只有数据库连接与基础会话命令。","evidence_url":"https://github.com/sajvn0x/OraxarO/blob/7839dd6d5cdb4990f18a58c85de6c5f30d54b718/src/repl/commands/oracle.ts","reviewed_at":"2026-11-06"},{"id":"scan-1087757215","full_name":"marcbal77/duo-streak-keeper","url":"https://github.com/marcbal77/duo-streak-keeper","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"general-application","reason_en":"Duo Streak Keeper primarily automates Duolingo streak-freeze purchases; its API notes support that application rather than a reverse-engineering investigation.","reason_zh":"Duo Streak Keeper 的主要用途是自动购买 Duolingo 连胜保护道具；API 资料服务于这一自动化功能，而非独立的逆向研究。","evidence_url":"https://github.com/marcbal77/duo-streak-keeper/blob/b2d1711b4f57f2dfbd865b59ae1bcf17919667bf/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1087763429","full_name":"CyberNilsen/OverTheWire-Solutions","url":"https://github.com/CyberNilsen/OverTheWire-Solutions","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"general-security","reason_en":"The available write-ups cover early OverTheWire Bandit levels using shell commands and encoding; reverse engineering appears only in the wargame platform's broad topic list.","reason_zh":"现有内容是 OverTheWire Bandit 初级关卡的命令行和编码解题笔记；逆向工程仅出现在平台的一般主题介绍中。","evidence_url":"https://github.com/CyberNilsen/OverTheWire-Solutions/blob/336c7f22a7fab35232ac76147142095a221dea5e/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1088617797","full_name":"skript023/Mono-Hacking","url":"https://github.com/skript023/Mono-Hacking","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"Despite its Mono exploration framework, the README's Valheim modules include an aimbot, triggerbot, ESP, infinite stamina and other gameplay cheats.","reason_zh":"尽管项目介绍了 Mono 探索框架，README 所列 Valheim 模块仍包含自瞄、自动开火、透视、无限耐力等游戏作弊功能。","evidence_url":"https://github.com/skript023/Mono-Hacking/blob/61312b8161e488693aae291bd6ddf19566e881bb/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1089332056","full_name":"arch-err/BinaryNinja-conf","url":"https://github.com/arch-err/BinaryNinja-conf","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"development-tool","reason_en":"BinaryNinja-conf installs Binary Ninja and supplies desktop-launcher and keybinding preferences; it adds no binary-analysis capability.","reason_zh":"BinaryNinja-conf 负责安装 Binary Ninja，并提供桌面启动器和快捷键配置；没有新增二进制分析功能。","evidence_url":"https://github.com/arch-err/BinaryNinja-conf/blob/94bb903cbf29fbe23647e830242cd9fcd71a68d7/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1090798346","full_name":"wmitq/SimpleParserPE","url":"https://github.com/wmitq/SimpleParserPE","batch_id":"run-42161587295-1","decision":"curated","curated_id":"simpleparserpe"},{"id":"scan-1091127728","full_name":"fferradamerino/bnd_extract","url":"https://github.com/fferradamerino/bnd_extract","batch_id":"run-42161587295-1","decision":"curated","curated_id":"bndextract-kuon"},{"id":"scan-1091195056","full_name":"mahmoudimus/tenet_tracer","url":"https://github.com/mahmoudimus/tenet_tracer","batch_id":"run-42161587295-1","decision":"curated","curated_id":"tenet-tracer"},{"id":"scan-1092913644","full_name":"mjbommar/binary-tokenizer-paper","url":"https://github.com/mjbommar/binary-tokenizer-paper","batch_id":"run-42161587295-1","decision":"curated","curated_id":"binary-bpe-tokenizer-research"},{"id":"scan-1094429402","full_name":"CyberAlp0/Zipalign-Linux","url":"https://github.com/CyberAlp0/Zipalign-Linux","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"distribution-site","reason_en":"Zipalign-Linux hosts a precompiled Debian package of the Android SDK zipalign utility, with no original analysis tool or reverse-engineering findings.","reason_zh":"Zipalign-Linux 只托管 Android SDK 的 zipalign 预编译 Debian 包，没有原创分析工具或逆向研究成果。","evidence_url":"https://github.com/CyberAlp0/Zipalign-Linux/blob/56c59547a6a1356d1bee3e9ae3bceab130216bc0/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1095705769","full_name":"artemiyDev/powerbi_api_scraper","url":"https://github.com/artemiyDev/powerbi_api_scraper","batch_id":"run-42161587295-1","decision":"curated","curated_id":"power-bi-report-query-case"},{"id":"scan-1097960209","full_name":"Funsol-Projects/FunGuard-SDK","url":"https://github.com/Funsol-Projects/FunGuard-SDK","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"protection-tool","reason_en":"FunGuard SDK detects root access, tampering, debuggers, emulators, and Frida to protect Android applications; it does not analyze them.","reason_zh":"FunGuard SDK 用于检测 root、篡改、调试器、模拟器和 Frida，以保护 Android 应用。","evidence_url":"https://github.com/Funsol-Projects/FunGuard-SDK/blob/2a8dc27d48e912a5a6f813a47eac3b022b6b8b51/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1098228976","full_name":"subrange/twilight-ghidra-theme","url":"https://github.com/subrange/twilight-ghidra-theme","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"development-tool","reason_en":"twilight-ghidra-theme is a visual theme imported into Ghidra and adds no analysis or reconstruction capability.","reason_zh":"twilight-ghidra-theme 只是导入 Ghidra 的界面配色主题，没有提供分析或重建功能。","evidence_url":"https://github.com/subrange/twilight-ghidra-theme/blob/9f849dc61f532a9ae70ebae35773a7aa1d4ce272/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1098829796","full_name":"PEACEBINFLOW/mindseye-binary-engine","url":"https://github.com/PEACEBINFLOW/mindseye-binary-engine","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"unrelated","reason_en":"MindsEye Binary Pattern Engine labels arbitrary bit sequences by time, entropy, motifs, and provenance for ML workflows; it does not analyse software or a reconstructed target.","reason_zh":"MindsEye Binary Pattern Engine 为任意位序列标注时间、熵、模式及来源，面向机器学习流程，没有软件分析或目标还原内容。","evidence_url":"https://github.com/PEACEBINFLOW/mindseye-binary-engine/blob/f535985a0c6648b722be610edb2af605c63d26c1/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1099078231","full_name":"UmbertoDellaMonica/m0rph-CTF-CyberChallenge.IT","url":"https://github.com/UmbertoDellaMonica/m0rph-CTF-CyberChallenge.IT","batch_id":"run-42161587295-1","decision":"curated","curated_id":"m0rph-ctf-analysis-case"},{"id":"scan-1100822918","full_name":"mediaexplorer74/OpenTracks","url":"https://github.com/mediaexplorer74/OpenTracks","batch_id":"run-42161587295-1","decision":"curated","curated_id":"opentracks-uwp-case"},{"id":"scan-1101690191","full_name":"mediaexplorer74/Spinballs","url":"https://github.com/mediaexplorer74/Spinballs","batch_id":"run-42161587295-1","decision":"hold","reason_code":"linking-policy","reason_en":"Spinballs describes recovering the old game for UWP, but its file list includes many committed XNB game assets and audio files, requiring a maintainer decision.","reason_zh":"Spinballs 记录了旧游戏的 UWP 修复工作，但仓库提交了大量 XNB 游戏资源及音频文件，需由维护者决定是否收录。","evidence_url":"https://github.com/mediaexplorer74/Spinballs/blob/9fcdc5be8a78d75d4f854e1f03d17d236307b75f/Readme.md","reviewed_at":"2026-11-06"},{"id":"scan-1102447381","full_name":"ishkabar/ogurbot-chat-detection","url":"https://github.com/ishkabar/ogurbot-chat-detection","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The memory scanner locates Metin2 chat data specifically for an automated fishing bot's bite detection, making its primary use game cheating.","reason_zh":"该内存扫描器专为自动钓鱼机器人定位《Metin2》聊天数据并检测鱼咬钩，主要用途属于游戏作弊。","evidence_url":"https://github.com/ishkabar/ogurbot-chat-detection/blob/b3563af122166d5563cf7ef155e96eaf99ef9baf/readme.md","reviewed_at":"2026-11-06"},{"id":"scan-1102718848","full_name":"ryhnmhrdka/PatriotCTF2025-Writeup","url":"https://github.com/ryhnmhrdka/PatriotCTF2025-Writeup","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"general-security","reason_en":"The repository collects PatriotCTF solutions across reverse engineering, web exploitation and cryptography, so its primary subject is a mixed CTF event.","reason_zh":"仓库汇集 PatriotCTF 的逆向、Web 利用和密码学题解，主题是综合 CTF 解题记录。","evidence_url":"https://github.com/ryhnmhrdka/PatriotCTF2025-Writeup/blob/914820775a460e596cff979f2da827e2885ed1ab/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1102861025","full_name":"Koko-boya/LightningSwordsman_Local","url":"https://github.com/Koko-boya/LightningSwordsman_Local","batch_id":"run-42161587295-1","decision":"hold","reason_code":"linking-policy","reason_en":"The local game modification includes the original game's bundled scripts and extensive image, audio and video assets, so its redistribution needs a maintainer decision.","reason_zh":"这个本地游戏修改版包含原游戏脚本和大量图片、音频、视频素材，相关转载需要维护者判断。","evidence_url":"https://github.com/Koko-boya/LightningSwordsman_Local/blob/78a1d2265e05b240b25346515ae5c595d257faf4/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1103466686","full_name":"Mraxzist/BinScan","url":"https://github.com/Mraxzist/BinScan","batch_id":"run-42161587295-1","decision":"curated","curated_id":"binscan"},{"id":"scan-1103775395","full_name":"h4ckyou/write-ups","url":"https://github.com/h4ckyou/write-ups","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"general-security","reason_en":"The repository is a broad CTF solution archive dominated by pwn and other security challenges, with reverse engineering appearing as one part of that activity.","reason_zh":"这是覆盖 pwn 等多类安全题目的 CTF 解题档案；逆向只是其中一部分，仓库整体主题仍是竞赛安全题。","evidence_url":"https://github.com/h4ckyou/write-ups/blob/44ec5c2e2da23d5a2572592cc812902c69b88f6e/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1105072695","full_name":"Harryson3001/Patch-0xC0000022","url":"https://github.com/Harryson3001/Patch-0xC0000022","batch_id":"run-42161587295-1","decision":"curated","curated_id":"patch-0xc0000022"},{"id":"scan-1106303645","full_name":"exentio/3D-X2_Filament_Dryer_Modding","url":"https://github.com/exentio/3D-X2_Filament_Dryer_Modding","batch_id":"run-42161587295-1","decision":"hold","reason_code":"linking-policy","reason_en":"The dryer PCB analysis and flashing notes are substantive, but the repository also commits an original firmware dump, which needs a maintainer decision.","reason_zh":"仓库记录了烘干机电路板分析和刷写方法，但也提交了原厂固件转储，需要维护者判断能否收录。","evidence_url":"https://github.com/exentio/3D-X2_Filament_Dryer_Modding/blob/c28abd3de2640fac548386b2c746c3a8f1670d40/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1106335342","full_name":"Cwf1997/spawnarmageddon","url":"https://github.com/Cwf1997/spawnarmageddon","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"no-real-content","reason_en":"The repository claims a Spawn: Armageddon Xbox decompilation but contains only a one-line README and a license, with no code or findings.","reason_zh":"仓库声称是 Xbox 游戏《Spawn: Armageddon》的反编译项目，却只有一句说明和许可证，没有代码或分析成果。","evidence_url":"https://github.com/Cwf1997/spawnarmageddon/blob/2ecdf5e018b1edb72e9005b064ffde225e6bf052/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1106803061","full_name":"Cwf1997/whiplash","url":"https://github.com/Cwf1997/whiplash","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"no-real-content","reason_en":"whiplash claims an Xbox decompilation, but the file list contains only the README and licence, with no recovered source.","reason_zh":"whiplash 自称 Xbox 游戏反编译项目，但仓库只有说明和许可证，没有恢复出的源代码。","evidence_url":"https://github.com/Cwf1997/whiplash/blob/7f0ec2f96855a7dd4dec840c2a4e6d99eb7001b4/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1106827116","full_name":"Cwf1997/treasureplanet","url":"https://github.com/Cwf1997/treasureplanet","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"no-real-content","reason_en":"The Treasure Planet repository contains only a short project statement and a license, with no decompiled source, findings or build files.","reason_zh":"《Treasure Planet》仓库只有一句项目说明和许可证，没有反编译源码、研究结果或构建文件。","evidence_url":"https://github.com/Cwf1997/treasureplanet/blob/524e84db6bfd06262b2c58fcd73c79c46ceb14d9/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1106827479","full_name":"Cwf1997/batmanbegins","url":"https://github.com/Cwf1997/batmanbegins","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"no-real-content","reason_en":"The README calls this an Xbox Batman Begins decompilation, but the file list contains only the README and a license, with no decompiled source or findings.","reason_zh":"说明称项目要反编译 Xbox 版《蝙蝠侠：侠影之谜》，但仓库只有说明和许可证，没有反编译代码或研究结果。","evidence_url":"https://github.com/Cwf1997/batmanbegins/blob/ff7d751031917fa88a17c06612585a8143b4e4d6/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1106828538","full_name":"Cwf1997/celdamage","url":"https://github.com/Cwf1997/celdamage","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"no-real-content","reason_en":"celdamage calls itself an Xbox Cel Damage decompilation, but its file list contains only a README and licence, with no source or findings.","reason_zh":"celdamage 自称 Xbox 版《Cel Damage》的反编译项目，但仓库只有说明和许可证，没有源码或分析成果。","evidence_url":"https://github.com/Cwf1997/celdamage/blob/e1dfd7f62e1b861233ab02e3e7f5d504913085f5/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1107141705","full_name":"f4zzie/MyNotes","url":"https://github.com/f4zzie/MyNotes","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"general-security","reason_en":"MyNotes is a broad cybersecurity writeup archive spanning exploitation, Hack The Box, CTF and malware topics; reverse engineering is one part.","reason_zh":"MyNotes 是涵盖漏洞利用、Hack The Box、CTF 和恶意软件的综合安全笔记库，逆向工程只是其中一部分。","evidence_url":"https://github.com/f4zzie/MyNotes/blob/6b2a0b211375b7c952346578e292f3d3203a1892/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1107176788","full_name":"Antrubtor/LED-controller","url":"https://github.com/Antrubtor/LED-controller","batch_id":"run-42161587295-1","decision":"curated","curated_id":"led-controller-banlanx-case"},{"id":"scan-1108079095","full_name":"Quantum54554545/Anti-Universal-Hooker","url":"https://github.com/Quantum54554545/Anti-Universal-Hooker","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"protection-tool","reason_en":"Anti Universal Hooker is a .NET anti-tamper component that intercepts memory-protection calls to frustrate hooks and runtime analysis.","reason_zh":"Anti Universal Hooker 是 .NET 防篡改组件，通过拦截内存保护调用阻止挂钩和运行时分析。","evidence_url":"https://github.com/Quantum54554545/Anti-Universal-Hooker/blob/6e9f6ae835712d4860c35e851379b3614d1bee21/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1108399895","full_name":"Rasenkai/CPQ_IOSched","url":"https://github.com/Rasenkai/CPQ_IOSched","batch_id":"run-42110758337-1","decision":"curated","curated_id":"cpq-iosched-case"},{"id":"scan-1108874339","full_name":"blark/zemismart-blind-protocol","url":"https://github.com/blark/zemismart-blind-protocol","batch_id":"run-42161587295-1","decision":"curated","curated_id":"zemismart-blind-protocol-case"},{"id":"scan-1110900815","full_name":"Dhamp1r/RE4ME-Toolbox","url":"https://github.com/Dhamp1r/RE4ME-Toolbox","batch_id":"run-42161587295-1","decision":"curated","curated_id":"re4me-toolbox"},{"id":"scan-1111861823","full_name":"Matt-17/Wotsup.org","url":"https://github.com/Matt-17/Wotsup.org","batch_id":"run-42161587295-1","decision":"hold","reason_code":"target-unsupported","reason_en":"Wotsup.org has substantial format references, but the repository spans unrelated kinds of files without establishing one supported target for the catalog entry.","reason_zh":"Wotsup.org 收录了大量格式资料，但仓库内容横跨多种文件，无法为整个条目确定一个有依据的目标类型。","evidence_url":"https://github.com/Matt-17/Wotsup.org/blob/4233a89861c4d62048c151d41b8cab645301045a/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1113440090","full_name":"ustlntz/tiktok-python-auto-posting-script","url":"https://github.com/ustlntz/tiktok-python-auto-posting-script","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"no-real-content","reason_en":"The TikTok posting README claims reverse-engineered API automation, but the file list contains only the README and none of the described source, configuration or findings.","reason_zh":"TikTok 自动发帖说明声称使用逆向接口，但仓库实际只有 README，所述源码、配置和研究结果均未出现。","evidence_url":"https://github.com/ustlntz/tiktok-python-auto-posting-script/blob/bfb967f914627a9d9e6046459b52349ee339e9c0/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1115215617","full_name":"0x0-nyan/AC46-Firmware-Tool","url":"https://github.com/0x0-nyan/AC46-Firmware-Tool","batch_id":"run-42161587295-1","decision":"curated","curated_id":"ac46-firmware-tool"},{"id":"scan-1115832106","full_name":"Cwf1997/thesecretsaturdaysbeastsofthe5thsun","url":"https://github.com/Cwf1997/thesecretsaturdaysbeastsofthe5thsun","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"no-real-content","reason_en":"The repository calls itself a PlayStation 2 game decompilation, but it contains only a one-sentence README and a license, with no source or findings.","reason_zh":"仓库自称是 PlayStation 2 游戏反编译项目，但只有一句 README 和许可证，没有源码或研究结果。","evidence_url":"https://github.com/Cwf1997/thesecretsaturdaysbeastsofthe5thsun/blob/30e5cc145e716ed69c01b490de405ba3d558bb24/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1115906694","full_name":"IsaMorphic/nu-blender","url":"https://github.com/IsaMorphic/nu-blender","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"fork-or-mirror","reason_en":"The build instructions identify leftmostcat/nu-blender on Codeberg as the source to clone, making this GitHub repository a copy of that project.","reason_zh":"构建说明要求克隆 Codeberg 上的 leftmostcat/nu-blender，表明当前 GitHub 仓库是该项目的副本。","evidence_url":"https://github.com/IsaMorphic/nu-blender/blob/38cea107c6a9038ea8d57c4f79747a9cb237b462/build/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1116330183","full_name":"Cwf1997/crashtagteamracing","url":"https://github.com/Cwf1997/crashtagteamracing","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"no-real-content","reason_en":"The Crash Tag Team Racing repository contains only a one-sentence decompilation claim and a license, with no source code, findings or build files.","reason_zh":"《Crash Tag Team Racing》仓库只有一句反编译项目声明和许可证，没有源码、研究结果或构建文件。","evidence_url":"https://github.com/Cwf1997/crashtagteamracing/blob/7b02f73be3524634262e8c3238dd135e5524f1ea/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1116944850","full_name":"Trivexion/iMonitor-System-Activity-Monitor","url":"https://github.com/Trivexion/iMonitor-System-Activity-Monitor","batch_id":"run-42161587295-1","decision":"curated","curated_id":"imonitor-system-activity-monitor"},{"id":"scan-1117512041","full_name":"Velatryx/holbertonschool-cyber_security","url":"https://github.com/Velatryx/holbertonschool-cyber_security","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"general-security","reason_en":"This is a broad cybersecurity coursework repository covering administration, exploitation, forensics, and compliance; reverse engineering is only one curriculum segment.","reason_zh":"这是涵盖系统管理、漏洞利用、取证和合规的综合网络安全课程仓库；逆向工程仅是其中一个部分。","evidence_url":"https://github.com/Velatryx/holbertonschool-cyber_security/blob/1e366175986355dafec745c77af8b2c76d72e161/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1117684642","full_name":"EricSpencer00/reverse-xoroshiro128plusplus","url":"https://github.com/EricSpencer00/reverse-xoroshiro128plusplus","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The tool uses Z3 to recover Minecraft RNG state from observed outputs for world-seed cracking and prediction of structures and loot, which the README presents as gameplay advantage.","reason_zh":"该工具用 Z3 从观察到的输出恢复 Minecraft 随机数状态，用于破解世界种子、预测建筑和战利品；README 将其作为游戏优势用途介绍。","evidence_url":"https://github.com/EricSpencer00/reverse-xoroshiro128plusplus/blob/24844880acc64ee637b875e800e91a14788184c2/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1118896811","full_name":"Operation-Vadh/operation-vadh.github.io","url":"https://github.com/Operation-Vadh/operation-vadh.github.io","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"community-or-event","reason_en":"Operation Vadh is a call to join an OSINT and cybersecurity movement; its files form a promotional website rather than RE material.","reason_zh":"Operation Vadh 是招募参与 OSINT 和网络安全行动的宣传网站，仓库文件没有逆向分析内容。","evidence_url":"https://github.com/Operation-Vadh/operation-vadh.github.io/blob/234fd45e96e80eac7657e5c66ed86bdfa1307110/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1119173898","full_name":"hiddenexee/Tiktok-Web-Signature","url":"https://github.com/hiddenexee/Tiktok-Web-Signature","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"no-real-content","reason_en":"The README lists TikTok signature features, but the only Python file prints a contact message and contains no signature implementation or findings.","reason_zh":"README 罗列 TikTok 签名功能，唯一的 Python 文件却只打印联系方式，没有签名实现或分析成果。","evidence_url":"https://github.com/hiddenexee/Tiktok-Web-Signature/blob/670917ce01cdac75ee7fda1aeda54efe3644828e/main.py","reviewed_at":"2026-11-06"},{"id":"scan-1119188335","full_name":"siklone/RegProbe","url":"https://github.com/siklone/RegProbe","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"general-application","reason_en":"RegProbe's user-facing subject is researching and applying Windows registry settings; reverse engineering appears as one supporting evidence source.","reason_zh":"RegProbe 面向用户的核心是研究和应用 Windows 注册表设置；逆向分析只是其证据来源之一。","evidence_url":"https://github.com/siklone/RegProbe/blob/5171901a2ec68fbf477fd69efbe4c00147f1c684/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1120101579","full_name":"k0nnect/NepoMenu","url":"https://github.com/k0nnect/NepoMenu","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"NepoMenu's main deliverable is an Old School cheat menu offering god mode, infinite money, teleportation and item spawning, although it notes dnSpy findings.","reason_zh":"NepoMenu 的主体是《Old School》作弊菜单，提供无敌、无限金钱、传送和生成物品等功能；dnSpy 分析笔记不改变其用途。","evidence_url":"https://github.com/k0nnect/NepoMenu/blob/8d7385f9051939f7600e7b13d9ee64945ac584de/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1120169986","full_name":"31cmTrueDamage/Thunar-s-GTA-III-Trainer-Menu","url":"https://github.com/31cmTrueDamage/Thunar-s-GTA-III-Trainer-Menu","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The GTA III DLL is a trainer that edits health, money, weapons and vehicles in a running game.","reason_zh":"这个 GTA III DLL 是游戏修改器，会在运行中改动生命值、金钱、武器和载具。","evidence_url":"https://github.com/31cmTrueDamage/Thunar-s-GTA-III-Trainer-Menu/blob/036e57da50eefe23ef738cfece05d4a16339b5aa/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1120376969","full_name":"Cwf1997/thenightmarebeforechristmasoogiesrevenge","url":"https://github.com/Cwf1997/thenightmarebeforechristmasoogiesrevenge","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"no-real-content","reason_en":"The README promises an Xbox game decompilation, but the repository contains only that one-line description and a license file.","reason_zh":"README 声称要反编译一款 Xbox 游戏，但仓库只有这一行说明和许可证文件。","evidence_url":"https://github.com/Cwf1997/thenightmarebeforechristmasoogiesrevenge/blob/aff19629090e025825d629d9dd404b5486cc0104/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1120726979","full_name":"Gautam-CyberSec/Android-Malware-Analysis-Report","url":"https://github.com/Gautam-CyberSec/Android-Malware-Analysis-Report","batch_id":"run-42161587295-1","decision":"curated","curated_id":"rto-echalan-android-analysis-case"},{"id":"scan-1121323197","full_name":"0xDelta-Research/root","url":"https://github.com/0xDelta-Research/root","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"general-security","reason_en":"The repository publishes a broad offensive and defensive security archive; malware reverse engineering is one division among many unrelated report areas.","reason_zh":"该仓库是涵盖攻防安全多个方向的研究网站，恶意软件逆向只是其中一个栏目，并非项目主线。","evidence_url":"https://github.com/0xDelta-Research/root/blob/ec229d5aae430bbc5a0979c9cce8e1fb1c493924/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1121377737","full_name":"jenska/m68kdasm","url":"https://github.com/jenska/m68kdasm","batch_id":"run-42119584443-1","decision":"curated","curated_id":"m68kdasm"},{"id":"scan-1121407023","full_name":"phour44/Malware-Analysis","url":"https://github.com/phour44/Malware-Analysis","batch_id":"run-42161587295-1","decision":"curated","curated_id":"malware-analysis-njrat-casdet-case"},{"id":"scan-1121706381","full_name":"SertraFurr/GLM4Free","url":"https://github.com/SertraFurr/GLM4Free","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"general-application","reason_en":"GLM4Free is a chat client for Z.AI with streaming and feature toggles; its README documents no analysis of the service.","reason_zh":"GLM4Free 是支持流式回复和功能开关的 Z.AI 聊天客户端，文档未介绍对该服务的逆向分析。","evidence_url":"https://github.com/SertraFurr/GLM4Free/blob/f2d7ae15cfa09731bc6a120bbefb88535c9acdb6/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1122310538","full_name":"Prajwal-kp-18/ir-analysis","url":"https://github.com/Prajwal-kp-18/ir-analysis","batch_id":"run-42161587295-1","decision":"curated","curated_id":"ir-lifting-benchmark"},{"id":"scan-1122556531","full_name":"Cwf1997/ben10alienforce","url":"https://github.com/Cwf1997/ben10alienforce","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"no-real-content","reason_en":"The repository calls itself a Ben 10: Alien Force decompilation, but its file list contains only a one-line README and a licence, with no source or findings.","reason_zh":"仓库自称《Ben 10: Alien Force》反编译项目，但文件清单只有一行 README 和许可证，没有源码或研究结果。","evidence_url":"https://github.com/Cwf1997/ben10alienforce/blob/72bdd805ad4e82a8a13052801c18f8bb70c0904b/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1122790406","full_name":"bobotechnology/termsrv_patch_locator","url":"https://github.com/bobotechnology/termsrv_patch_locator","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"Termsrv Patch Locator finds Windows Remote Desktop patch points and emits RDP Wrapper settings for multi-session access, a licence-restriction bypass.","reason_zh":"Termsrv Patch Locator 定位 Windows 远程桌面补丁点，并生成支持多会话的 RDP Wrapper 配置，属于绕过许可限制的用途。","evidence_url":"https://github.com/bobotechnology/termsrv_patch_locator/blob/25833ffacf61cdec63e7dc3f31a0d8762a3f8710/README_EN.md","reviewed_at":"2026-11-06"},{"id":"scan-1122918759","full_name":"lukejenkins/claude-openocd-spi-dump","url":"https://github.com/lukejenkins/claude-openocd-spi-dump","batch_id":"run-42161587295-1","decision":"curated","curated_id":"claude-openocd-spi-dump"},{"id":"scan-1122925403","full_name":"Emirzonee/Bin-Hunter","url":"https://github.com/Emirzonee/Bin-Hunter","batch_id":"run-42161587295-1","decision":"curated","curated_id":"bin-hunter"},{"id":"scan-1123548815","full_name":"416rehman/loonaro-kvm","url":"https://github.com/416rehman/loonaro-kvm","batch_id":"run-42161587295-1","decision":"hold","reason_code":"capability-unclear","reason_en":"The repository has VM introspection and process-monitor code, but its documentation does not establish what analysis the sandbox performs or reports.","reason_zh":"仓库含虚拟机自省和进程监控代码，但文档未说明沙箱具体分析什么、产生哪些分析结果。","evidence_url":"https://github.com/416rehman/loonaro-kvm/blob/52bcce66ea514528ba3b0aa885690bc2c2cdab46/loonaro/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1123955721","full_name":"Ashik245-commits/LLM-Filter-Probe","url":"https://github.com/Ashik245-commits/LLM-Filter-Probe","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"distribution-site","reason_en":"The README is a consumer download guide that sends readers to a versioned ZIP committed under frontend/src/, the pattern of repackaged download repositories.","reason_zh":"README 是面向普通用户的下载指引，让读者下载提交在 frontend/src/ 下的版本化 ZIP，属于转包下载仓库的典型形式。","evidence_url":"https://github.com/Ashik245-commits/LLM-Filter-Probe/blob/349876741cbf2275f689c31725f63d4483009620/PROJECT_OVERVIEW.md","reviewed_at":"2026-11-06"},{"id":"scan-1124914932","full_name":"Knight1/vanmoof-certificates","url":"https://github.com/Knight1/vanmoof-certificates","batch_id":"run-42161587295-1","decision":"curated","curated_id":"vanmoof-certificates-case"},{"id":"scan-1125077353","full_name":"covertchannelblog/iiq_decrypt","url":"https://github.com/covertchannelblog/iiq_decrypt","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"iiq_decrypt recovers plaintext SailPoint IdentityIQ configuration credentials, including secrets encrypted with a globally shipped key, making credential decryption its primary function.","reason_zh":"iiq_decrypt 的主要功能是还原 SailPoint IdentityIQ 配置凭据明文，包括使用全局附带密钥加密的机密。","evidence_url":"https://github.com/covertchannelblog/iiq_decrypt/blob/e96935e7b788f54dd23982ad38f83296fbe9857d/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1125447695","full_name":"cas1m1r/SoftRX","url":"https://github.com/cas1m1r/SoftRX","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"no-real-content","reason_en":"SoftRX describes classification, syscall interception, and memory dumping, but the file list lacks the named classifier, sysmon, and memdump modules that would provide those core capabilities.","reason_zh":"SoftRX 宣称具备分类、系统调用拦截和内存转储功能，但文件列表缺少对应的 classifier、sysmon 和 memdump 核心模块。","evidence_url":"https://github.com/cas1m1r/SoftRX/blob/ce0adb9aedd697d5087bced636eafaea14318b15/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1125494957","full_name":"Dhamp1r/AspyrArchiveTool","url":"https://github.com/Dhamp1r/AspyrArchiveTool","batch_id":"run-42161587295-1","decision":"curated","curated_id":"aspyr-archive-tool"},{"id":"scan-1125923444","full_name":"Asfand-Khann/YoutubeDownloader","url":"https://github.com/Asfand-Khann/YoutubeDownloader","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"general-application","reason_en":"The source describes a pytube-based YouTube video downloader and download archives, with no analysis of YouTube clients or formats.","reason_zh":"文档介绍的是基于 pytube 的 YouTube 视频下载器和下载压缩包，没有分析 YouTube 客户端或格式。","evidence_url":"https://github.com/Asfand-Khann/YoutubeDownloader/blob/84ff9b7339b661e2efef928c8dce83864ad50c5f/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1126162119","full_name":"Roflane/PGRTool","url":"https://github.com/Roflane/PGRTool","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"PGRTool is a Punishing: Gray Raven trainer offering an FPS unlocker, DPS meter and in-game indicators, with no analysis documented.","reason_zh":"PGRTool 面向《Punishing: Gray Raven》提供帧率解锁、伤害统计和游戏内指示器，没有记录逆向分析。","evidence_url":"https://github.com/Roflane/PGRTool/blob/f102d66f3cce095b07576e38aec2d1f37ab22a97/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1127404842","full_name":"ismailtsdln/BinaryInsight","url":"https://github.com/ismailtsdln/BinaryInsight","batch_id":"run-42161587295-1","decision":"curated","curated_id":"binaryinsight"},{"id":"scan-1128401690","full_name":"thefear078/thefear078","url":"https://github.com/thefear078/thefear078","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"personal-profile","reason_en":"This repository is a GitHub profile with capability badges and contact links; its file list contains profile assets rather than an analysis project.","reason_zh":"该仓库是展示技能标签和联系方式的 GitHub 个人主页，文件列表主要是主页素材，而非分析项目。","evidence_url":"https://github.com/thefear078/thefear078/blob/0ffbfac20627767ca03b5764bffee4f81777c9f1/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1128490524","full_name":"mbackschat/atari-st-hdbackup-recover","url":"https://github.com/mbackschat/atari-st-hdbackup-recover","batch_id":"run-42161587295-1","decision":"hold","reason_code":"linking-policy","reason_en":"The backup-format recovery tool is in scope, but the repository also ships floppy images, an extracted ZIP and recovered binaries whose redistribution needs a maintainer decision.","reason_zh":"这套备份格式恢复工具符合主题，但仓库同时附有软盘镜像、提取结果 ZIP 和恢复出的二进制文件，其再分发须由维护者判断。","evidence_url":"https://github.com/mbackschat/atari-st-hdbackup-recover/blob/609c1f72995c7460b380f7da7dbdefe1003d950a/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1128519275","full_name":"uhhKnife/ScriptSource-Dumper","url":"https://github.com/uhhKnife/ScriptSource-Dumper","batch_id":"run-42161587295-1","decision":"curated","curated_id":"scriptsource-dumper"},{"id":"scan-1128802245","full_name":"artryazanov/wide-capture","url":"https://github.com/artryazanov/wide-capture","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"general-application","reason_en":"WideCapture injects graphics hooks to record panoramic gameplay video; its documented output and purpose are video capture rather than analysis.","reason_zh":"WideCapture 通过图形 API hook 录制全景游戏视频，文档中的主要用途与产物都是视频采集。","evidence_url":"https://github.com/artryazanov/wide-capture/blob/f54b8d22b05ab9cb9344bf5cb826a5ad4092fea1/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1128880694","full_name":"rrandom/derkt","url":"https://github.com/rrandom/derkt","batch_id":"run-42119584443-1","decision":"curated","curated_id":"derkt"},{"id":"scan-1129821457","full_name":"PredatorIWD/.AUP-File-Type-Decryptor-and-Viewer","url":"https://github.com/PredatorIWD/.AUP-File-Type-Decryptor-and-Viewer","batch_id":"run-42161587295-1","decision":"curated","curated_id":"dragon-soul-aup-viewer"},{"id":"scan-1129960047","full_name":"farukalpay/AION","url":"https://github.com/farukalpay/AION","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"unrelated","reason_en":"AION's primary work is benchmarking a C11 Llama inference runtime and quantization; undocumented AMX opcodes are an implementation detail.","reason_zh":"AION 的核心是 C11 Llama 推理运行时及量化性能研究；未公开的 AMX 操作码只是实现细节。","evidence_url":"https://github.com/farukalpay/AION/blob/e0c69e0de00fcf1ad5bc934a6af8e6b9d97d0cdb/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1130358722","full_name":"kartoffelpflanze/ODIS-file-unpacker","url":"https://github.com/kartoffelpflanze/ODIS-file-unpacker","batch_id":"run-42161587295-1","decision":"curated","curated_id":"odis-file-unpacker"},{"id":"scan-1130410926","full_name":"st0de/rust-sig-gen","url":"https://github.com/st0de/rust-sig-gen","batch_id":"run-42161587295-1","decision":"curated","curated_id":"rust-sig-gen"},{"id":"scan-1131807729","full_name":"StardustVulpine/tMock-Server","url":"https://github.com/StardustVulpine/tMock-Server","batch_id":"run-42161587295-1","decision":"curated","curated_id":"tmock-server-case"},{"id":"scan-1132312973","full_name":"bigsprut/1CMDParser","url":"https://github.com/bigsprut/1CMDParser","batch_id":"run-42161587295-1","decision":"curated","curated_id":"1cmdparser"},{"id":"scan-1133171775","full_name":"bad-antics/firmware-backdoor","url":"https://github.com/bad-antics/firmware-backdoor","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"general-security","reason_en":"The README presents firmware-backdoor as an offensive security component and gives only decryption instructions, without documenting reverse-engineering analysis.","reason_zh":"README 将 firmware-backdoor 介绍为进攻性安全组件，仅提供解密说明，没有记录固件逆向分析。","evidence_url":"https://github.com/bad-antics/firmware-backdoor/blob/98d6a3d86b063b73d7ac95b4afbdd45d63506ccf/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1133497502","full_name":"gr0grig/x64dbg-tenet","url":"https://github.com/gr0grig/x64dbg-tenet","batch_id":"run-42161587295-1","decision":"curated","curated_id":"x64dbg-tenet"},{"id":"scan-1134675770","full_name":"Knight1/vanmoof-ble","url":"https://github.com/Knight1/vanmoof-ble","batch_id":"run-42161587295-1","decision":"curated","curated_id":"vanmoof-ble-protocol-case"},{"id":"scan-1135082810","full_name":"HackingLZ/holley-efi-parser","url":"https://github.com/HackingLZ/holley-efi-parser","batch_id":"run-42161587295-1","decision":"curated","curated_id":"holley-efi-parser"},{"id":"scan-1135280114","full_name":"shihwesley/agent-reverse","url":"https://github.com/shihwesley/agent-reverse","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"unrelated","reason_en":"AgentReverse extracts and installs agent skills and plugins from repositories and articles; its use of reverse engineering refers to agent capabilities, not software or protocol analysis.","reason_zh":"AgentReverse 从仓库和文章提取并安装智能体技能、插件；这里的“逆向”指分析智能体功能，并非软件或协议逆向。","evidence_url":"https://github.com/shihwesley/agent-reverse/blob/9ab6e8e36e837784d0eef6080e69ec606af18b2d/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1135550489","full_name":"mediaexplorer74/CombatHelicopter2","url":"https://github.com/mediaexplorer74/CombatHelicopter2","batch_id":"run-42161587295-1","decision":"hold","reason_code":"linking-policy","reason_en":"The README describes a dotPeek-assisted reconstruction of Combat Helicopter 2, and the repository includes numerous compiled game assets in XNB files.","reason_zh":"README 描述了借助 dotPeek 重建 Combat Helicopter 2，仓库还提交了大量 XNB 格式的游戏素材。","evidence_url":"https://github.com/mediaexplorer74/CombatHelicopter2/blob/71978c567207d6ec33d3cc17463e59448bc1d2bd/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1135750178","full_name":"11philip22/extract-shellcode","url":"https://github.com/11philip22/extract-shellcode","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"development-tool","reason_en":"extract-shellcode trims a program's own PE .text section using its matching linker map and optionally executes the result; the workflow is build validation rather than target analysis.","reason_zh":"extract-shellcode 根据匹配的链接器映射裁剪程序自身的 PE .text 节，并可执行结果；该流程用于构建验证，并非目标分析。","evidence_url":"https://github.com/11philip22/extract-shellcode/blob/30ac11fb913a07ee185f1d5d68412e4b31f09803/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1136021608","full_name":"Knight1/vanmoof-canbus","url":"https://github.com/Knight1/vanmoof-canbus","batch_id":"run-42161587295-1","decision":"curated","curated_id":"vanmoof-can-bus-parser"},{"id":"scan-1136428669","full_name":"electrondefuser/cbfirestorm","url":"https://github.com/electrondefuser/cbfirestorm","batch_id":"run-42161587295-1","decision":"curated","curated_id":"cosmic-byte-firestorm-controller-case"},{"id":"scan-1136675295","full_name":"NuVelocity/NuVelocity","url":"https://github.com/NuVelocity/NuVelocity","batch_id":"run-42161587295-1","decision":"curated","curated_id":"nuvelocity-engine-case"},{"id":"scan-1136681007","full_name":"NuVelocity/FRS42","url":"https://github.com/NuVelocity/FRS42","batch_id":"run-42161587295-1","decision":"curated","curated_id":"freers42-ricochet-xtreme-case"},{"id":"scan-1136898940","full_name":"HeathLoganCampbell/Valorant-Replay-Parser","url":"https://github.com/HeathLoganCampbell/Valorant-Replay-Parser","batch_id":"run-42161587295-1","decision":"hold","reason_code":"capability-unclear","reason_en":"The README sketches a likely VALORANT replay parser and file layout, but the repository has no parser code or demonstrated findings from an actual replay.","reason_zh":"README 主要推测 VALORANT 回放解析器及文件布局；仓库没有解析器代码，也未展示实际回放文件的分析结果。","evidence_url":"https://github.com/HeathLoganCampbell/Valorant-Replay-Parser/blob/b4b2936cdb78ef6b015d5a19ccfd118484a977df/readme.md","reviewed_at":"2026-11-06"},{"id":"scan-1137014199","full_name":"TheJazz123/Universal-GBA-Pokedex","url":"https://github.com/TheJazz123/Universal-GBA-Pokedex","batch_id":"run-42161587295-1","decision":"curated","curated_id":"universal-gba-pokedex"},{"id":"scan-1137601648","full_name":"thisarasewmina/DbgNexum","url":"https://github.com/thisarasewmina/DbgNexum","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"general-security","reason_en":"DbgNexum is presented as a Windows shellcode injector using the Debugging API; its stated task is injecting code into a process, with no reverse-engineering analysis.","reason_zh":"DbgNexum 的主要用途是通过 Windows 调试 API 向进程注入 shellcode，资料没有描述对程序进行逆向分析。","evidence_url":"https://github.com/thisarasewmina/DbgNexum/blob/995fb2b13c50a97b6b11579090937cd8eeb26016/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1137762808","full_name":"ike9000e/game-patches-or-codes","url":"https://github.com/ike9000e/game-patches-or-codes","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The repository consists of PCSX2 cheat patches for Gran Turismo 4 variants, including credits, license unlocks and tire-wear changes.","reason_zh":"仓库内容是《Gran Turismo 4》不同版本的 PCSX2 作弊补丁，包括点数、驾照解锁和轮胎磨损修改。","evidence_url":"https://github.com/ike9000e/game-patches-or-codes/blob/9c53fbe4f94d8a868a5fc12ad7396a7e982d33b7/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1137924409","full_name":"lwtw123456/Win7MinesweeperHack","url":"https://github.com/lwtw123456/Win7MinesweeperHack","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"Win7MinesweeperHack is a Minesweeper trainer with god mode, automatic play and instant-win features, despite documenting memory analysis techniques.","reason_zh":"Win7MinesweeperHack 是带无敌、自动扫雷和直接获胜功能的游戏修改器，虽然介绍了内存分析技术，仍属于作弊工具。","evidence_url":"https://github.com/lwtw123456/Win7MinesweeperHack/blob/b18980c204729c814c62718a2289d8cf364b6529/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1139149025","full_name":"m3rooted/BinVaf","url":"https://github.com/m3rooted/BinVaf","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"security-testing","reason_en":"BinVaf searches symbol tables for unsafe functions and hardening gaps to assign vulnerability risk scores; its subject is security testing.","reason_zh":"BinVaf 在符号表中查找不安全函数和加固缺口，并给出漏洞风险评分，主体是安全测试。","evidence_url":"https://github.com/m3rooted/BinVaf/blob/65e11ce1934d3e285399e5ee91f35d70b1ebcca1/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1139197369","full_name":"ufnalski/lin_bus_vag_rain_light_sensor_g431kb","url":"https://github.com/ufnalski/lin_bus_vag_rain_light_sensor_g431kb","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"general-application","reason_en":"The STM32 project reads and displays a VAG rain and light sensor's LIN messages, but supplies no reverse-engineering analysis of their format.","reason_zh":"该 STM32 项目读取并显示 VAG 雨量与光线传感器的 LIN 消息，但未提供消息格式的逆向分析。","evidence_url":"https://github.com/ufnalski/lin_bus_vag_rain_light_sensor_g431kb/blob/fb73db9b7a260a96fb7fe4bbb5ab0ba977f77972/Core/Src/main.c","reviewed_at":"2026-11-06"},{"id":"scan-1139530085","full_name":"bad-antics/nullsec-bingaze","url":"https://github.com/bad-antics/nullsec-bingaze","batch_id":"run-42161587295-1","decision":"curated","curated_id":"nullsec-bingaze"},{"id":"scan-1139792087","full_name":"xu-xiang/inkeep-mcp","url":"https://github.com/xu-xiang/inkeep-mcp","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"general-application","reason_en":"Inkeep MCP scans sites for widget configuration to relay documentation queries; its main product is a documentation connector.","reason_zh":"Inkeep MCP 扫描网站以取得问答组件配置，并转发文档查询；项目主体是文档服务连接器。","evidence_url":"https://github.com/xu-xiang/inkeep-mcp/blob/b6b3908fa827ef09c6de0319b93e93edc9b49a5d/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1139890855","full_name":"LeiterConsulting/finalmouse_centerpiece","url":"https://github.com/LeiterConsulting/finalmouse_centerpiece","batch_id":"run-42161587295-1","decision":"curated","curated_id":"finalmouse-centerpiece-protocol-case"},{"id":"scan-1140037827","full_name":"Sheikyon/bsn64","url":"https://github.com/Sheikyon/bsn64","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"general-application","reason_en":"bsn64 converts Nintendo 64 save files between known emulator and hardware formats by swapping bytes and adjusting padding; it documents no format investigation.","reason_zh":"bsn64 通过字节序转换和填充调整，在现有模拟器及硬件格式之间转换 N64 存档；资料没有记录格式逆向过程。","evidence_url":"https://github.com/Sheikyon/bsn64/blob/d27d684f18681271546f961a84f4823318f1340c/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1140124121","full_name":"Tert0/openmatic-cli","url":"https://github.com/Tert0/openmatic-cli","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"general-application","reason_en":"openmatic-cli is a Linux thermostat configuration utility; its README documents profile transfer and conversion but no reverse-engineering investigation.","reason_zh":"openmatic-cli 是 Linux 恒温器配置工具，README 仅介绍配置文件读写和转换，没有逆向研究记录。","evidence_url":"https://github.com/Tert0/openmatic-cli/blob/9c227d0f7be412ae0906b3f2cd9339430856cbdc/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1141778857","full_name":"NiceDayZc/FacebookCodec","url":"https://github.com/NiceDayZc/FacebookCodec","batch_id":"run-42161587295-1","decision":"curated","curated_id":"facebookcodec"},{"id":"scan-1141875935","full_name":"wirenux/Croco-Cartridge-CLI","url":"https://github.com/wirenux/Croco-Cartridge-CLI","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"general-application","reason_en":"Croco Cartridge CLI manages ROMs and saves using a documented USB command interface; its source does not describe investigating or reconstructing that interface.","reason_zh":"Croco Cartridge CLI 通过已记录的 USB 命令管理卡带 ROM 和存档；现有材料没有记载对该接口的逆向调查或重建。","evidence_url":"https://github.com/wirenux/Croco-Cartridge-CLI/blob/889646a0db41f1ae625a54874937daa1ba0a14cf/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1142271329","full_name":"MWE-HaTN/MalFrame","url":"https://github.com/MWE-HaTN/MalFrame","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"general-application","reason_en":"MalFrame is primarily a browser dashboard for recording malware cases, mapping indicators and exporting reports; its stated code-analysis sections are documentation fields.","reason_zh":"MalFrame 主要是记录恶意软件案例、整理指标并导出报告的浏览器面板；其代码分析栏目用于填写分析记录。","evidence_url":"https://github.com/MWE-HaTN/MalFrame/blob/5f997a1415258fcc5a1d648e455ae817374a138a/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1143812228","full_name":"nikaiw/pdbinspector","url":"https://github.com/nikaiw/pdbinspector","batch_id":"run-42161587295-1","decision":"curated","curated_id":"pdbinspector"},{"id":"scan-1144596076","full_name":"player0601/WillRock-Beta-Source-Reconstruction","url":"https://github.com/player0601/WillRock-Beta-Source-Reconstruction","batch_id":"run-42161587295-1","decision":"hold","reason_code":"linking-policy","reason_en":"The repository commits hundreds of decompiled C++ files reconstructed from a commercial Will Rock beta executable, requiring a maintainer decision on linking.","reason_zh":"仓库提交了数百个从商业游戏 Will Rock 测试版可执行文件反编译重建的 C++ 文件，收录链接需由维护者决定。","evidence_url":"https://github.com/player0601/WillRock-Beta-Source-Reconstruction/blob/4dedf1fcd519c7977ba138a90a5765d431086ed0/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1145976154","full_name":"Phoenix-Assassins/ac3-docs","url":"https://github.com/Phoenix-Assassins/ac3-docs","batch_id":"run-42161587295-1","decision":"curated","curated_id":"ac3-online-service-docs"},{"id":"scan-1146183656","full_name":"Xernary/CVE-2025-15545","url":"https://github.com/Xernary/CVE-2025-15545","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"general-security","reason_en":"The repository provides a command-injection exploit for a TP-Link repeater; its README presents a vulnerability chain and proof of concept, not reverse-engineering findings.","reason_zh":"仓库提供针对 TP-Link 中继器命令注入漏洞的利用脚本；README 介绍漏洞链和验证步骤，没有呈现逆向分析成果。","evidence_url":"https://github.com/Xernary/CVE-2025-15545/blob/0be46305cdf81aa61ae3fe6315c09f4916a36450/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1146526475","full_name":"EhosanurRahmanRomi/TikTok-V5-API-Scraper--DD","url":"https://github.com/EhosanurRahmanRomi/TikTok-V5-API-Scraper--DD","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"general-application","reason_en":"The TikTok repository's delivered workflow fetches one page of comments and prints JSON; its signature routines are experiments without documented findings or compatibility evidence.","reason_zh":"该 TikTok 项目的实际流程是抓取一页评论并输出 JSON；签名代码仍属实验，资料未给出协议研究结论或兼容性证据。","evidence_url":"https://github.com/EhosanurRahmanRomi/TikTok-V5-API-Scraper--DD/blob/75b0dfa257bf8437e00719e022a26b2cc5586c21/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1146561706","full_name":"enkomio/IntroduzioneMalwareAnalysis","url":"https://github.com/enkomio/IntroduzioneMalwareAnalysis","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"no-real-content","reason_en":"The README advertises malware-analysis course material, but the repository contains only that brief README and a background image.","reason_zh":"README 称仓库提供恶意软件分析课程资料，但文件清单只有简短说明和背景图片，没有课程内容。","evidence_url":"https://github.com/enkomio/IntroduzioneMalwareAnalysis/blob/d74a1d7bfd49dd16a12e0ad6ec811ec2a0807054/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1146951438","full_name":"ContextualWisdomLab/pg-erd-cloud","url":"https://github.com/ContextualWisdomLab/pg-erd-cloud","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"unrelated","reason_en":"pg-erd-cloud introspects database schemas to make ER diagrams and DDL; its use of reverse engineering concerns database design.","reason_zh":"pg-erd-cloud 读取数据库模式并生成 ER 图和 DDL；这里的“逆向工程”指数据库结构整理。","evidence_url":"https://github.com/ContextualWisdomLab/pg-erd-cloud/blob/8dc746920c12988f082e914879d95e13c9693535/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1147042597","full_name":"BodnarGuilherme/malware-analysis-fileless-dropper","url":"https://github.com/BodnarGuilherme/malware-analysis-fileless-dropper","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"malware-samples","reason_en":"The repository contains a technical malware report, but it also distributes a ZIP of real malware samples, which the README explicitly identifies.","reason_zh":"仓库虽有恶意软件分析报告，但也分发真实恶意软件样本 ZIP，README 对此有明确说明。","evidence_url":"https://github.com/BodnarGuilherme/malware-analysis-fileless-dropper/blob/aa1bae68b4994b13532b059b3a073398ade1dcb5/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1147217921","full_name":"pioneerman2k1/AOL7-Retro-Server","url":"https://github.com/pioneerman2k1/AOL7-Retro-Server","batch_id":"run-42161587295-1","decision":"curated","curated_id":"aol7-retro-server-case"},{"id":"scan-1147263236","full_name":"ArseniZar/Safe-Exam-Browser-Hacked","url":"https://github.com/ArseniZar/Safe-Exam-Browser-Hacked","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"This fork distributes modified Safe Exam Browser builds with features unlocked or activated for exam use; its purpose is to bypass the browser's restrictions.","reason_zh":"这是 Safe Exam Browser 的修改版，发布解锁或启用功能的考试环境构建，目的涉及规避考试浏览器限制。","evidence_url":"https://github.com/ArseniZar/Safe-Exam-Browser-Hacked/blob/9a588258856a0bef34b0ef9cafe4cb3db8329e40/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1148056015","full_name":"rootagi/anti-debug-framework","url":"https://github.com/rootagi/anti-debug-framework","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"protection-tool","reason_en":"The Rust framework detects attached debuggers and instrumentation through timing, breakpoints, ptrace, and other checks; its primary function is anti-debug protection.","reason_zh":"该 Rust 框架通过计时、断点、ptrace 等检查识别调试器和插桩，主要功能是反调试防护。","evidence_url":"https://github.com/rootagi/anti-debug-framework/blob/de7b37baecdf649d5707ba7fb3b0d94ab8da8269/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1148098150","full_name":"thefear078/ZenFlare","url":"https://github.com/thefear078/ZenFlare","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"development-tool","reason_en":"ZenFlare's implemented scope is IDE workflow, deployment and observability, with no documented reverse-engineering analysis feature.","reason_zh":"ZenFlare 的实现范围是 IDE 工作流、部署与可观测性，没有记录逆向分析功能。","evidence_url":"https://github.com/thefear078/ZenFlare/blob/50efc3ca3afd633778169edcedb60bc5253c7640/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1148100296","full_name":"TurnaboutHero/vainglory-replay-decoder","url":"https://github.com/TurnaboutHero/vainglory-replay-decoder","batch_id":"run-42161587295-1","decision":"curated","curated_id":"vainglory-replay-decoder"},{"id":"scan-1148161204","full_name":"Usman-Azfar/8086-assembly-debugger","url":"https://github.com/Usman-Azfar/8086-assembly-debugger","batch_id":"run-42119584443-1","decision":"curated","curated_id":"8086-register-command-debugger"},{"id":"scan-1148460405","full_name":"Phoenix-Assassins/ac4-docs","url":"https://github.com/Phoenix-Assassins/ac4-docs","batch_id":"run-42161587295-1","decision":"curated","curated_id":"ac4-docs"},{"id":"scan-1150013744","full_name":"Arsh-pixel-cmd/DevLens","url":"https://github.com/Arsh-pixel-cmd/DevLens","batch_id":"run-42161587295-1","decision":"curated","curated_id":"devlens-ultra"},{"id":"scan-1150468325","full_name":"emanuelbesliu/homeassistant-orange","url":"https://github.com/emanuelbesliu/homeassistant-orange","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"general-application","reason_en":"The repository provides a Home Assistant account dashboard; its traffic-capture section is a development plan rather than documented API findings.","reason_zh":"仓库主要提供 Home Assistant 账户看板；抓取网站流量的部分是开发步骤，未呈现具体 API 逆向发现。","evidence_url":"https://github.com/emanuelbesliu/homeassistant-orange/blob/e79dabb79587ed8452751045dfe589532b6797b1/GETTING_STARTED.md","reviewed_at":"2026-11-06"},{"id":"scan-1151253459","full_name":"jens62/FAAC-E145-Gate-Connect","url":"https://github.com/jens62/FAAC-E145-Gate-Connect","batch_id":"run-42161587295-1","decision":"curated","curated_id":"faac-e145-gate-connect-case"},{"id":"scan-1151505158","full_name":"Infinit3i/website","url":"https://github.com/Infinit3i/website","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"personal-profile","reason_en":"The repository presents a personal website containing security posts and challenge write-ups, without a focused reverse-engineering project or resource.","reason_zh":"仓库是个人网站，内容混合安全文章和挑战题解，没有明确聚焦的逆向工程项目或资料。","evidence_url":"https://github.com/Infinit3i/website/blob/ed6539fa344056f90e6d097565fe2462cde52b03/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1151875138","full_name":"cristeigabriela/spygirl","url":"https://github.com/cristeigabriela/spygirl","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"development-tool","reason_en":"spygirl watches Windows process creation and suspends names matching a filter, but its documentation presents no reverse-engineering analysis or target findings.","reason_zh":"spygirl 根据名称过滤器监视并挂起新建的 Windows 进程；文档没有说明逆向分析能力或目标研究成果。","evidence_url":"https://github.com/cristeigabriela/spygirl/blob/0c2515f2ed6155c35609ae29ea03bedde862ae50/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1151940896","full_name":"linux4life798/stagg-net","url":"https://github.com/linux4life798/stagg-net","batch_id":"run-42161587295-1","decision":"curated","curated_id":"stagg-net-case"},{"id":"scan-1152749033","full_name":"Spellskite-coding/Binary_Analysis","url":"https://github.com/Spellskite-coding/Binary_Analysis","batch_id":"run-42149552878-1","decision":"curated","curated_id":"malware-analysis-cti-reports"},{"id":"scan-1152835756","full_name":"monsifhmouri/pyinstaller-exe-analysis","url":"https://github.com/monsifhmouri/pyinstaller-exe-analysis","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"fork-or-mirror","reason_en":"The repository packages pyinstxtractor.py and pycdc.exe as a workflow without documenting original extraction or decompilation work.","reason_zh":"仓库把 pyinstxtractor.py 和 pycdc.exe 组合成操作流程，没有记录原创的提取或反编译功能。","evidence_url":"https://github.com/monsifhmouri/pyinstaller-exe-analysis/blob/674d0a28701507cb56613c8a5b270e6831ea92d2/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1152881273","full_name":"rtfmkiesel/advantage","url":"https://github.com/rtfmkiesel/advantage","batch_id":"run-42149552878-1","decision":"curated","curated_id":"advantage"},{"id":"scan-1153088164","full_name":"zhengyp36/pyzdb","url":"https://github.com/zhengyp36/pyzdb","batch_id":"run-42149552878-1","decision":"hold","reason_code":"target-unsupported","reason_en":"pyzdb substantially decodes ZFS disk structures, but the available target labels do not cover file systems or raw storage formats without inventing another target.","reason_zh":"pyzdb 对 ZFS 磁盘结构有实质性解析，但现有目标标签没有文件系统或原始存储格式，不能据此虚构其他目标。","evidence_url":"https://github.com/zhengyp36/pyzdb/blob/15ec6947c1efa6e982820d896e4b0208f254361e/ReadMe.md","reviewed_at":"2026-11-06"},{"id":"scan-1153962956","full_name":"Sutharshannn/Neural-Trace","url":"https://github.com/Sutharshannn/Neural-Trace","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"security-testing","reason_en":"Neural-Trace uploads assembly text to Gemini for vulnerability auditing and remediation suggestions; the documented task is security testing rather than reverse engineering.","reason_zh":"Neural-Trace 将汇编文本交给 Gemini 做漏洞审计和修复建议，文档所述核心任务是安全测试。","evidence_url":"https://github.com/Sutharshannn/Neural-Trace/blob/b751c284528cb1158ca9b5731bfae633e564af20/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1154280890","full_name":"lwtw123456/Win7HeartsHack","url":"https://github.com/lwtw123456/Win7HeartsHack","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"Win7HeartsHack is a trainer for Windows 7 Hearts that changes hands, scores, rules and AI through memory edits and injection.","reason_zh":"Win7HeartsHack 是 Windows 7《红心大战》修改器，通过改写内存和注入代码改变手牌、得分、规则及对手 AI。","evidence_url":"https://github.com/lwtw123456/Win7HeartsHack/blob/920a2b38000b38aede968483fcc25fad47ede794/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1154594471","full_name":"ridhoae303/WelcomeDialog-for-modders","url":"https://github.com/ridhoae303/WelcomeDialog-for-modders","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"general-application","reason_en":"Welcome Dialog is an Android startup UI component with visual effects and a signature check, without documented reverse-engineering analysis or tooling.","reason_zh":"Welcome Dialog 是带视觉效果和签名检查的 Android 启动界面组件，没有记录逆向分析或逆向工具功能。","evidence_url":"https://github.com/ridhoae303/WelcomeDialog-for-modders/blob/47a4897680aa7d9d7e53587ef1489247bb85fd0a/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1154815115","full_name":"3MPER0RR/HexVigil","url":"https://github.com/3MPER0RR/HexVigil","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"security-testing","reason_en":"HexVigil scans source files and executables for risky functions, strings, entropy, and security patterns, with vulnerability detection as its stated purpose.","reason_zh":"HexVigil 以漏洞筛查为主，检查源码和可执行文件中的危险函数、字符串、熵及可疑模式，并不以逆向分析为主题。","evidence_url":"https://github.com/3MPER0RR/HexVigil/blob/185b923ae59c60a5b9193d538dfbf8f22343489b/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1155443553","full_name":"Causalzap/mewgenics-game-data","url":"https://github.com/Causalzap/mewgenics-game-data","batch_id":"run-42149552878-1","decision":"hold","reason_code":"linking-policy","reason_en":"The repository publishes CSV files described as raw data extracted from Mewgenics; redistribution of game-derived data needs a maintainer decision.","reason_zh":"仓库发布了自称从 Mewgenics 提取的原始 Boss 数据 CSV；游戏衍生数据的再分发需由维护者判断。","evidence_url":"https://github.com/Causalzap/mewgenics-game-data/blob/3a6d44c0719168848f645785463bd91c41764c24/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1155560083","full_name":"fsferdows/Jarvis","url":"https://github.com/fsferdows/Jarvis","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"general-application","reason_en":"Jarvis is primarily a voice and OS assistant that invokes the existing rea-agents toolkit; the repository shows no distinct reverse-engineering capability or findings.","reason_zh":"Jarvis 主要是语音及系统操作助手，逆向功能依赖已有的 rea-agents；现有材料未展示独立的逆向能力或研究结果。","evidence_url":"https://github.com/fsferdows/Jarvis/blob/159463e6136c463aeb1bd7ebc602d861e7afec5e/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1156073582","full_name":"sivedcodes/GPKG-SCANNER","url":"https://github.com/sivedcodes/GPKG-SCANNER","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"security-testing","reason_en":"Vpatrol scans GeoPackage and GeoTIFF inputs for malicious indicators and sanitizes them; its format inspection serves a security release decision, not reverse engineering.","reason_zh":"Vpatrol 检查 GeoPackage 和 GeoTIFF 中的恶意迹象并生成净化文件；格式检查服务于安全放行判断，而非逆向工程。","evidence_url":"https://github.com/sivedcodes/GPKG-SCANNER/blob/a068fab7937953989785f0e51710518b786bb0bb/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1156176749","full_name":"driversti/erepublik-api","url":"https://github.com/driversti/erepublik-api","batch_id":"run-42149552878-1","decision":"curated","curated_id":"erepublik-api-documentation"},{"id":"scan-1156516550","full_name":"n1t3k/garmin-strength-api","url":"https://github.com/n1t3k/garmin-strength-api","batch_id":"run-42149552878-1","decision":"curated","curated_id":"garmin-strength-workout-api"},{"id":"scan-1156930814","full_name":"coconutbird/netdumper","url":"https://github.com/coconutbird/netdumper","batch_id":"run-42149552878-1","decision":"curated","curated_id":"netdumper"},{"id":"scan-1157382677","full_name":"GabriWar/tozo-control","url":"https://github.com/GabriWar/tozo-control","batch_id":"run-42149552878-1","decision":"curated","curated_id":"tozo-control-case"},{"id":"scan-1157536419","full_name":"zonfacter/bms-rs485-service-suite","url":"https://github.com/zonfacter/bms-rs485-service-suite","batch_id":"run-42149552878-1","decision":"curated","curated_id":"bms-rs485-service-suite-case"},{"id":"scan-1157680460","full_name":"KashishOO7/fpszero-lab","url":"https://github.com/KashishOO7/fpszero-lab","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"general-security","reason_en":"fpszero-lab is a broad security and systems knowledge base; reverse engineering is only one roadmap among forensics, quantum, cloud and other topics.","reason_zh":"fpszero-lab 是涵盖安全、系统、取证、量子计算及云技术的综合知识库，逆向工程只是其中一条学习路线。","evidence_url":"https://github.com/KashishOO7/fpszero-lab/blob/315a0f2ebce73396775aaa4d76836615bb76438f/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1158280133","full_name":"LiteObject/SecurityCheck","url":"https://github.com/LiteObject/SecurityCheck","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"forensics-only","reason_en":"SecurityCheck centers on npm threat detection and Windows incident-response triage; its scripts collect indicators and forensic evidence rather than analyse software internals.","reason_zh":"SecurityCheck 主要做 npm 威胁检测和 Windows 事件响应取证，脚本收集风险指标与证据，并不以软件内部分析为主体。","evidence_url":"https://github.com/LiteObject/SecurityCheck/blob/843b6578acbacf1bce374490c3a5681c45ad601a/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1158350007","full_name":"advnpzn/budsctl","url":"https://github.com/advnpzn/budsctl","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"general-application","reason_en":"budsctl is chiefly an earbuds control CLI and library; its guide teaches plugin authors to capture commands, but the repository gives no original protocol findings for a device.","reason_zh":"budsctl 的主体是耳机控制命令行程序和库；逆向指南教插件作者抓取命令，但仓库资料未呈现该项目对具体设备的原创协议发现。","evidence_url":"https://github.com/advnpzn/budsctl/blob/f772d2a759414e598ba8b58d0271fc5d1e97070b/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1158616847","full_name":"Anmoldureha/flights-skill","url":"https://github.com/Anmoldureha/flights-skill","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"general-application","reason_en":"flights-skill wraps fast-flights to return Google Flights results through Python and MCP; its own README credits the dependency with the Protobuf reverse engineering.","reason_zh":"flights-skill 将 fast-flights 包装为 Python 和 MCP 航班查询接口；其 README 明确将 Protobuf 逆向工作归于所依赖的库。","evidence_url":"https://github.com/Anmoldureha/flights-skill/blob/df6ec6da8c1195a84159aeb39fa5c302d75dcc40/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1158889136","full_name":"yutaro023/BGI-Ethornell_ConverterTGA_Sekai_VN","url":"https://github.com/yutaro023/BGI-Ethornell_ConverterTGA_Sekai_VN","batch_id":"run-42149552878-1","decision":"curated","curated_id":"bgi-ethornell-converter-tga"},{"id":"scan-1159497937","full_name":"AlcesOzdst/CTF_Challenges","url":"https://github.com/AlcesOzdst/CTF_Challenges","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"general-security","reason_en":"The only completed challenge is a Python format-string exploitation write-up; the README's reverse-engineering section contains placeholders.","reason_zh":"仓库唯一完成的题目是 Python 格式化字符串漏洞利用记录；README 中的逆向工程栏目仍是占位内容。","evidence_url":"https://github.com/AlcesOzdst/CTF_Challenges/blob/f7cc5f509b2bc84c7233064235ece6ccd0ee6415/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1163005354","full_name":"rootcastleco/rei-skills","url":"https://github.com/rootcastleco/rei-skills","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"fork-or-mirror","reason_en":"rei-skills chiefly manages a broad agent-skill library; its reverse-engineering pack is synchronized from rootcastleco/Rei-Reverse-engineer and adds packaging and adapters.","reason_zh":"rei-skills 主要管理通用智能体技能库；其中的逆向技能包同步自 rootcastleco/Rei-Reverse-engineer，新增内容主要是封装与适配。","evidence_url":"https://github.com/rootcastleco/rei-skills/blob/94a5c23e4e39b70994c0b32736978f5704b15c23/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1165132441","full_name":"rifatardarslan/Valkyrie","url":"https://github.com/rifatardarslan/Valkyrie","batch_id":"run-42149552878-1","decision":"curated","curated_id":"valkyrie-malware-analyzer"},{"id":"scan-1166914543","full_name":"ddeeduck/Pe-disassembler","url":"https://github.com/ddeeduck/Pe-disassembler","batch_id":"run-42119584443-1","decision":"curated","curated_id":"pe-disassembler-ddeeduck"},{"id":"scan-1169294114","full_name":"MN294/SICXE-Disassembler","url":"https://github.com/MN294/SICXE-Disassembler","batch_id":"run-42119584443-1","decision":"curated","curated_id":"sicxe-disassembler"},{"id":"scan-1169440543","full_name":"CodeNoob53/xenus-dt1-decompiler","url":"https://github.com/CodeNoob53/xenus-dt1-decompiler","batch_id":"run-42119584443-1","decision":"curated","curated_id":"xenus-dt1-decompiler"},{"id":"scan-1171655345","full_name":"eightmouse/KiraPatch","url":"https://github.com/eightmouse/KiraPatch","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"game-mod-no-re","reason_en":"KiraPatch primarily patches Generation 3 Pokémon ROMs to raise shiny odds; the README describes patch behavior rather than a reusable analysis tool or investigation.","reason_zh":"KiraPatch 主要修改第三世代 Pokémon ROM 的闪光出现概率；README 介绍补丁行为，没有形成可收录的逆向分析成果。","evidence_url":"https://github.com/eightmouse/KiraPatch/blob/66b38bf413bd7a35ee406db544f3e7bdf910c4a6/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1173230542","full_name":"MuazTPM-YT/libre-mp","url":"https://github.com/MuazTPM-YT/libre-mp","batch_id":"run-42149552878-1","decision":"curated","curated_id":"libremp-easymp-case"},{"id":"scan-1174746845","full_name":"alxgmpr/lutron-protocols","url":"https://github.com/alxgmpr/lutron-protocols","batch_id":"run-42149552878-1","decision":"curated","curated_id":"lutron-protocols"},{"id":"scan-1175886663","full_name":"meowdiocre/ss-overlay-hook","url":"https://github.com/meowdiocre/ss-overlay-hook","batch_id":"run-42149552878-1","decision":"curated","curated_id":"steelseries-overlay-hook-case"},{"id":"scan-1180925986","full_name":"uirip/uirip","url":"https://github.com/uirip/uirip","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"no-real-content","reason_en":"The README describes a website-inspection CLI and server pipeline, but the repository file list contains only the README, licence and logo.","reason_zh":"README 描述了网站分析命令行及服务端流程，但仓库文件清单只有 README、许可证和标志。","evidence_url":"https://github.com/uirip/uirip/blob/61353d0a68665195d8730b6abbfbbd0460102154/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1183918536","full_name":"HinnliDev/SkyProtocolTool","url":"https://github.com/HinnliDev/SkyProtocolTool","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"no-real-content","reason_en":"Sky Protocol Tool describes game HTTP hooks, but the repository has only documentation, JSON examples and offsets, with no mod implementation.","reason_zh":"Sky Protocol Tool 介绍了游戏 HTTP 钩子，但仓库只有文档、JSON 示例和偏移数据，没有实现该模组的代码。","evidence_url":"https://github.com/HinnliDev/SkyProtocolTool/blob/32e70dffe5061833dec67b10553dec26604bd59e/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1185721694","full_name":"IR0NBYTE/Sandwitcher","url":"https://github.com/IR0NBYTE/Sandwitcher","batch_id":"run-42149552878-1","decision":"curated","curated_id":"sandwitcher"},{"id":"scan-1187826853","full_name":"xaionaro-go/thermalmaster","url":"https://github.com/xaionaro-go/thermalmaster","batch_id":"run-42149552878-1","decision":"curated","curated_id":"thermalmaster-case"},{"id":"scan-1188674070","full_name":"oyesanyf/OshoosiClaw","url":"https://github.com/oyesanyf/OshoosiClaw","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"detection-only","reason_en":"OshoosiClaw presents itself chiefly as an endpoint detection and response system for threat hunting and containment; its bundled REA mention is one component of that broader defense product.","reason_zh":"OshoosiClaw 的主要产品是用于威胁狩猎和处置的端点检测响应系统；REA 只是其众多防御组件之一。","evidence_url":"https://github.com/oyesanyf/OshoosiClaw/blob/dcb98dd35de982df6dba7aab2e686868d1e42bec/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1188886746","full_name":"sudohakan/CheatEngine-MCP-Bridge","url":"https://github.com/sudohakan/CheatEngine-MCP-Bridge","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"Although the bridge exposes analysis tools, its README explicitly promotes anti-cheat-safe breakpoints and stealth tracing below the operating system.","reason_zh":"该桥接器虽提供分析工具，但说明文档明确宣传规避反作弊检测的断点和操作系统以下的隐蔽跟踪。","evidence_url":"https://github.com/sudohakan/CheatEngine-MCP-Bridge/blob/70d2c383d5544f0240a04778c4c77098261a4b9d/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1190626771","full_name":"code-root/TikTokDeviceGenerator","url":"https://github.com/code-root/TikTokDeviceGenerator","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The GUI batch-generates signed TikTok device registrations and supports parallel requests and proxies, making account and device-identity automation its primary purpose.","reason_zh":"该图形工具批量生成带签名的 TikTok 设备注册请求，并支持并发与代理；其主要用途是自动化创建设备身份及账号关联。","evidence_url":"https://github.com/code-root/TikTokDeviceGenerator/blob/c9cff8120089c9d8b6d19b8e218dc3d089c2d2ad/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1192880800","full_name":"russlank/BinXray","url":"https://github.com/russlank/BinXray","batch_id":"run-42149552878-1","decision":"curated","curated_id":"bin-xray"},{"id":"scan-1193069935","full_name":"pseudo-r/Public-Sofascore-API","url":"https://github.com/pseudo-r/Public-Sofascore-API","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"upstream-unavailable","reason_en":"The repository pseudo-r/Public-Sofascore-API no longer resolves: the GraphQL lookup and a git clone both failed on 2026-11-06.","reason_zh":"仓库 pseudo-r/Public-Sofascore-API 已无法访问：2026-11-06 的 GraphQL 查询和 git clone 均失败。","evidence_url":"https://github.com/pseudo-r/Public-Sofascore-API/blob/a2893dfb733f55f1644d7b2b937bb5442f6dae22/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1193673354","full_name":"NellInc/Janus","url":"https://github.com/NellInc/Janus","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"general-application","reason_en":"Janus primarily translates Windows kernel drivers between NT and 9x; its proposed use as an analysis bench is secondary to driver compatibility.","reason_zh":"Janus 的主体是让 Windows NT 与 9x 驱动跨系统运行；文中提到的分析用途从属于驱动兼容功能。","evidence_url":"https://github.com/NellInc/Janus/blob/9cfacafac4e710333045503ab91370037a11ce52/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1200825186","full_name":"X-Abhishek-X/malware-deobfuscator","url":"https://github.com/X-Abhishek-X/malware-deobfuscator","batch_id":"run-42149552878-1","decision":"curated","curated_id":"malware-deobfuscator"},{"id":"scan-1201747827","full_name":"deavers/re-dojo","url":"https://github.com/deavers/re-dojo","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"RE:DOJO includes Cheat Engine tables for commercial games that alter resources, cooldowns, health and speed, making game cheating a substantive part of the repository.","reason_zh":"RE:DOJO 收录针对商业游戏的 Cheat Engine 表，可修改资源、冷却时间、生命值和速度；游戏作弊是仓库的重要内容。","evidence_url":"https://github.com/deavers/re-dojo/blob/ea0e56fb67a4e3c0e0e8c52ac6e8f8232930efad/Game_Hacking/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1201783870","full_name":"prizmatik666/codex_prizm_skills","url":"https://github.com/prizmatik666/codex_prizm_skills","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"no-real-content","reason_en":"codex_prizm_skills is a portable bundle of generic firmware-analysis instructions and report templates, without its own target findings or RE-specific analysis implementation.","reason_zh":"codex_prizm_skills 主要备份通用固件分析指令和报告模板，没有自身的目标调查结果或专门的逆向分析实现。","evidence_url":"https://github.com/prizmatik666/codex_prizm_skills/blob/84572f888594cf2f3412f4730aa53d4e561ff5d1/firmware-reverse-eng-skill/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1202397101","full_name":"SoftwareTree/JDX_ReverseEngineeringExample","url":"https://github.com/SoftwareTree/JDX_ReverseEngineeringExample","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"unrelated","reason_en":"JDX_ReverseEngineeringExample uses reverse engineering to mean generating Java ORM classes and mappings from a MySQL schema, outside program or protocol analysis.","reason_zh":"JDX_ReverseEngineeringExample 所称的逆向工程是根据 MySQL 数据库结构生成 Java ORM 类和映射，并非程序或协议分析。","evidence_url":"https://github.com/SoftwareTree/JDX_ReverseEngineeringExample/blob/68f86c39c8920175d940bbaafbbed5a266a36038/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1202751791","full_name":"c-not-around/pic-disasm","url":"https://github.com/c-not-around/pic-disasm","batch_id":"run-42119584443-1","decision":"curated","curated_id":"pic-disasm"},{"id":"scan-1202939257","full_name":"Sunil56224972/Mem-flow","url":"https://github.com/Sunil56224972/Mem-flow","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The guide's stated goal is changing Mount and Blade: Warband resources and character skills through memory edits, including avoiding anti-cheat detection.","reason_zh":"指南以修改《骑马与砍杀：战团》的金钱和角色能力为目标，并包含规避反作弊检测的内容。","evidence_url":"https://github.com/Sunil56224972/Mem-flow/blob/93a733b80d036185874623f6dc6f38966efaba7a/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1206330502","full_name":"bitalizer/pyflashkit","url":"https://github.com/bitalizer/pyflashkit","batch_id":"run-42119584443-1","decision":"curated","curated_id":"flashkit"},{"id":"scan-1207144793","full_name":"extxx/pixprobe","url":"https://github.com/extxx/pixprobe","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"forensics-only","reason_en":"Pixprobe examines photographs for metadata, visual matches and geographic clues; its reverse search does not analyse software or a protocol.","reason_zh":"Pixprobe 从照片提取元数据、查找相似图片并推测拍摄地点；其反向搜索不涉及软件或协议逆向。","evidence_url":"https://github.com/extxx/pixprobe/blob/1134cc7a6d3eefe2b6cd4808e678b7a8ea2c28b7/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1213847146","full_name":"MatheusTGP/TGPSound","url":"https://github.com/MatheusTGP/TGPSound","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"general-application","reason_en":"TGPSound is a terminal YouTube audio client using YouTubeExplode's reverse-engineered endpoints; it documents no original protocol investigation or findings.","reason_zh":"TGPSound 是使用 YouTubeExplode 已逆向接口的终端音频客户端，没有记录自身的协议调查或分析成果。","evidence_url":"https://github.com/MatheusTGP/TGPSound/blob/153c396b737cf26f2020081b47d0e1f8758f2b5f/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1216104887","full_name":"Opcodeffm/petkit-local","url":"https://github.com/Opcodeffm/petkit-local","batch_id":"run-42149552878-1","decision":"curated","curated_id":"petkit-local-case"},{"id":"scan-1217252855","full_name":"AppThreat/wasm-tools","url":"https://github.com/AppThreat/wasm-tools","batch_id":"run-42119584443-1","decision":"curated","curated_id":"appthreat-wasm-tools"},{"id":"scan-1218111717","full_name":"zz-protocol/icp_yanzhenma","url":"https://github.com/zz-protocol/icp_yanzhenma","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The implementation reconstructs a government lookup API chiefly to solve its slider CAPTCHA and generate the signatures needed to pass the access challenge.","reason_zh":"该实现还原政府备案查询接口，核心流程包括识别滑块验证码并生成通过访问挑战所需的签名，属于验证码规避工具。","evidence_url":"https://github.com/zz-protocol/icp_yanzhenma/blob/83ca858fb482113a1d14cecfb0ea39259d5ec7f2/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1218235045","full_name":"lza6/clawd-code","url":"https://github.com/lza6/clawd-code","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"general-application","reason_en":"Clawd Code is primarily a general coding-agent framework and desktop client; its reverse-engineering commands are one feature among broad development workflows.","reason_zh":"Clawd Code 主要是通用编程智能体框架和桌面客户端；逆向工具只是其众多开发流程功能之一。","evidence_url":"https://github.com/lza6/clawd-code/blob/c01f5e1af9870ef2346c229cdd830b02e315ef22/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1218884393","full_name":"HackersHouseOfficial/game-hacking-roadmap","url":"https://github.com/HackersHouseOfficial/game-hacking-roadmap","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The roadmap teaches Android game cheats such as coin and health edits, wallhacks, aimbots and protection bypass.","reason_zh":"该路线图教授 Android 游戏作弊，包括修改金币和生命值、透视、自瞄及绕过保护。","evidence_url":"https://github.com/HackersHouseOfficial/game-hacking-roadmap/blob/7a52862cec88aed28a0598439e3c0befc9a8e274/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1219361636","full_name":"abedegno/dos-mcp","url":"https://github.com/abedegno/dos-mcp","batch_id":"run-42149552878-1","decision":"curated","curated_id":"dos-mcp"},{"id":"scan-1219744485","full_name":"vt72983/HTB-DMCA-Transparency-Report","url":"https://github.com/vt72983/HTB-DMCA-Transparency-Report","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"unrelated","reason_en":"The repository's primary subject is a response to a Hack The Box copyright takedown; its challenge pages argue the legal dispute rather than teach reverse engineering.","reason_zh":"仓库主要回应 Hack The Box 的版权下架通知；各挑战页面侧重争议说明，而非逆向分析。","evidence_url":"https://github.com/vt72983/HTB-DMCA-Transparency-Report/blob/085f3d10a1234f5f6da86054818572ad8d52262e/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1223927374","full_name":"bitalizer/flashkit-studio","url":"https://github.com/bitalizer/flashkit-studio","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"development-tool","reason_en":"flashkit-studio is a PySide6 desktop interface around flashkit's existing SWF decompiler and analysis views, without a documented new analysis engine.","reason_zh":"flashkit-studio 是基于现有 flashkit 的 PySide6 桌面界面；文档没有说明新增分析引擎。","evidence_url":"https://github.com/bitalizer/flashkit-studio/blob/f60b25c332053663a0f1327e168d7bdd73226b66/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1224084966","full_name":"mnaberez/premium5","url":"https://github.com/mnaberez/premium5","batch_id":"run-42149552878-1","decision":"curated","curated_id":"premium5-radio-emulator"},{"id":"scan-1224904165","full_name":"NATTOMR/Android-Malware-Detector--My-Final-Year-Project-2026-","url":"https://github.com/NATTOMR/Android-Malware-Detector--My-Final-Year-Project-2026-","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"detection-only","reason_en":"The platform extracts APK features and behavior logs to classify malware with Random Forest and XGBoost; its stated outcome is a detection verdict.","reason_zh":"该平台提取 APK 特征和行为日志，用 Random Forest 与 XGBoost 给出恶意软件分类结果，主体是检测判定。","evidence_url":"https://github.com/NATTOMR/Android-Malware-Detector--My-Final-Year-Project-2026-/blob/28d0cbda7138539cc7731f473efca71dadd8d94e/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1226173345","full_name":"qusamulab/fuin","url":"https://github.com/qusamulab/fuin","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"protection-tool","reason_en":"fuin packs APKs by encrypting DEX, native libraries and assets and adding anti-tamper checks; its purpose is to resist static and runtime analysis.","reason_zh":"fuin 加密 APK 中的 DEX、原生库和资源，并加入防篡改检查，目的是阻碍静态及运行时分析。","evidence_url":"https://github.com/qusamulab/fuin/blob/f4e1536d785fbbc3984486d771386432a4aeb40e/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1226765751","full_name":"ShreehariA/vac","url":"https://github.com/ShreehariA/vac","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"unrelated","reason_en":"VAC uses “decompiler” for converting video frames into editable geometric animation code, a computer-vision task outside program reverse engineering.","reason_zh":"VAC 所称的“反编译”是把视频画面转成可编辑的几何动画代码，属于计算机视觉处理，而非程序逆向工程。","evidence_url":"https://github.com/ShreehariA/vac/blob/cace2f1be67a3988511cff994ce3f76da2ee5583/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1226948765","full_name":"Dynaevangelical2652/android-agent","url":"https://github.com/Dynaevangelical2652/android-agent","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"general-application","reason_en":"android-agent automates ordinary Android UI actions through ADB and a dashboard; its documentation presents no app, binary or protocol reverse-engineering work.","reason_zh":"android-agent 通过 ADB 和控制面板自动执行普通 Android 界面操作；文档没有呈现应用、二进制或协议逆向工作。","evidence_url":"https://github.com/Dynaevangelical2652/android-agent/blob/b6e61e96f64879d48de9bd522c0d3a644061b2ac/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1227392987","full_name":"packerlschupfer/nova-voyager_firmware","url":"https://github.com/packerlschupfer/nova-voyager_firmware","batch_id":"run-42149552878-1","decision":"hold","reason_code":"needs-maintainer-decision","reason_en":"The replacement firmware controls a drill press motor and safety inputs, including its E-Stop; publishing it as a curated case needs a maintainer decision about safety-critical firmware changes.","reason_zh":"该替代固件控制钻床电机及急停等安全输入；是否收录涉及安全关键设备的固件改动，需由维护者决定。","evidence_url":"https://github.com/packerlschupfer/nova-voyager_firmware/blob/ee8bf87e61300abf1df277f41b400383729a9e3a/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1228032366","full_name":"dwgx/CEGM","url":"https://github.com/dwgx/CEGM","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"CEGM is presented as a Cheat Engine layer for finding and changing single-player game memory, with MCP access and reversible writes serving that cheating workflow.","reason_zh":"CEGM 以 Cheat Engine 为基础查找并修改单机游戏内存；MCP 接口和可撤销写入服务于这一作弊流程。","evidence_url":"https://github.com/dwgx/CEGM/blob/d5d3517f1902a5edbb100dbe49f25bf9257f60f3/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1231003127","full_name":"ctala/skool-api-docs","url":"https://github.com/ctala/skool-api-docs","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"general-application","reason_en":"The repository documents and promotes a commercial Skool automation API, its integrations and pricing; it does not document an investigation of Skool's implementation.","reason_zh":"该仓库主要介绍商业化 Skool 自动化 API 的用法、集成及价格，没有记录对 Skool 实现的调查过程。","evidence_url":"https://github.com/ctala/skool-api-docs/blob/556a2283b652c519cc7ed8b3f68f9cb8d95dfdbe/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1233109442","full_name":"1392081456/ctf-notes","url":"https://github.com/1392081456/ctf-notes","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"general-security","reason_en":"ctf-notes describes a defensive security portfolio dominated by CTF exploitation, web attacks, forensics and CVE labs; reverse engineering is one chapter.","reason_zh":"ctf-notes 自述为防御安全研究作品集，主要涵盖 CTF 利用、Web 攻击、取证和 CVE 实验；逆向工程仅是其中一章。","evidence_url":"https://github.com/1392081456/ctf-notes/blob/dc425be3ef1e1cd46de1950c390b979663f9ff6c/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1235780721","full_name":"SpookyyQ/IPI-Stay-Fly-Driver","url":"https://github.com/SpookyyQ/IPI-Stay-Fly-Driver","batch_id":"run-42149552878-1","decision":"curated","curated_id":"ipi-stay-fly-driver-case"},{"id":"scan-1241345476","full_name":"coreprime/kbot","url":"https://github.com/coreprime/kbot","batch_id":"run-42149552878-1","decision":"curated","curated_id":"kbot"},{"id":"scan-1242879632","full_name":"DaviPires10/APK-Thumbnailer","url":"https://github.com/DaviPires10/APK-Thumbnailer","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"general-application","reason_en":"APK Thumbnailer parses APK resources solely to produce launcher-icon thumbnails for file managers; the source presents no app reverse-engineering or analysis workflow.","reason_zh":"APK Thumbnailer 解析 APK 资源是为了给文件管理器生成启动图标缩略图，文档没有将应用逆向或分析作为用途。","evidence_url":"https://github.com/DaviPires10/APK-Thumbnailer/blob/d5dfc70c31a3c509bd83c7c1f28cc49614d1e3f2/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1247717420","full_name":"superwilso/Cinder","url":"https://github.com/superwilso/Cinder","batch_id":"run-42149552878-1","decision":"hold","reason_code":"linking-policy","reason_en":"The installer documentation says its distributed executable carries Sony's own Windows updater, raising a proprietary-file redistribution question.","reason_zh":"安装文档称发布的可执行文件内含 Sony 官方 Windows 更新程序，涉及专有文件再分发问题。","evidence_url":"https://github.com/superwilso/Cinder/blob/de492aa35f2eab5adcf97cbea47ba314750d0417/install.md","reviewed_at":"2026-11-06"},{"id":"scan-1255871360","full_name":"forensicdave/reds-client","url":"https://github.com/forensicdave/reds-client","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"general-application","reason_en":"reds_client.py wraps the REDS malware-data API for searching and downloading existing results; it does not itself perform reverse engineering or analysis.","reason_zh":"reds_client.py 封装 REDS 恶意软件数据 API，用于检索和下载已有结果，自身没有实现逆向分析。","evidence_url":"https://github.com/forensicdave/reds-client/blob/1a25a68f5cb0706d138a89f83dc9b632dd67dad9/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1267750763","full_name":"momowangOUO/delta-force-map-system-reverse-study","url":"https://github.com/momowangOUO/delta-force-map-system-reverse-study","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"unrelated","reason_en":"The Delta Force study analyzes level-design choices in three maps, using reverse study to mean design critique rather than software or game reverse engineering.","reason_zh":"这份《三角洲行动》研究讨论三张地图的关卡设计；其中的“逆向拆解”是设计评论，并非对游戏软件的逆向工程。","evidence_url":"https://github.com/momowangOUO/delta-force-map-system-reverse-study/blob/33c844fcac6fa35502c0c73b8096e6c6d2875f6c/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1273955881","full_name":"nightwarelabz/kaiju","url":"https://github.com/nightwarelabz/kaiju","batch_id":"run-42149552878-1","decision":"curated","curated_id":"kaiju-re-framework"},{"id":"scan-1273983552","full_name":"ana-joker/antigravity-uncensored","url":"https://github.com/ana-joker/antigravity-uncensored","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The patcher is designed to neutralize AGY safety, phishing and consent controls and distributes a prepatched executable; those bypasses are its central purpose.","reason_zh":"该补丁工具以关闭 AGY 的安全、钓鱼检测和同意控制为主要用途，还提供预修改的可执行文件下载。","evidence_url":"https://github.com/ana-joker/antigravity-uncensored/blob/f768027433a49e2dba269dd4eef142aba1188c7c/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1274271007","full_name":"Mohammad-Nicke/KingPatcher","url":"https://github.com/Mohammad-Nicke/KingPatcher","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"King Patcher advertises activating paid game and app features and in-app purchases without payment, which is a payment-bypass tool.","reason_zh":"King Patcher 宣称可在不付款的情况下启用游戏和应用的付费功能及应用内购，属于付费绕过工具。","evidence_url":"https://github.com/Mohammad-Nicke/KingPatcher/blob/fe77a58358b1fac5781ac0e8cad97a107d797963/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1274300022","full_name":"weixiao33661/NHDD","url":"https://github.com/weixiao33661/NHDD","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"fork-or-mirror","reason_en":"This NHDD repository identifies Fruit-Guardians/NHDD as the project and directs users there for releases, indicating a copy rather than the original project.","reason_zh":"此 NHDD 仓库将 Fruit-Guardians/NHDD 标为项目地址，并引导用户前往该仓库下载版本，显示它是副本而非原项目。","evidence_url":"https://github.com/weixiao33661/NHDD/blob/c982c33eb2db80b339d077f301f9a290543f034b/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1274856308","full_name":"macronator/StonedAges","url":"https://github.com/macronator/StonedAges","batch_id":"run-42149552878-1","decision":"hold","reason_code":"linking-policy","reason_en":"Stoned Ages commits source recovered by decompiling the original game client binaries; publishing that recovered code needs a maintainer decision.","reason_zh":"Stoned Ages 仓库收录了从原游戏客户端二进制文件反编译得到的源码，是否收录需由维护者判断。","evidence_url":"https://github.com/macronator/StonedAges/blob/ce5eaf69e915a1f01d0773e9e9b55c7245b0b0a3/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1275050955","full_name":"PaulBayfield/Prisme","url":"https://github.com/PaulBayfield/Prisme","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"general-application","reason_en":"Prisme is primarily a self-hosted banking and budget dashboard; its use of a reconstructed LCL web API serves account synchronization within that application.","reason_zh":"Prisme 主要是自托管银行账户与预算面板；还原的 LCL 网页 API 用于应用内部的账户同步。","evidence_url":"https://github.com/PaulBayfield/Prisme/blob/55b4aaa9c1a0495475c28ed9a547a3f16df092fc/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1275267001","full_name":"HxT9/x64dbg_mcp","url":"https://github.com/HxT9/x64dbg_mcp","batch_id":"run-42149552878-1","decision":"curated","curated_id":"hxt9-x64dbg-mcp"},{"id":"scan-1275377931","full_name":"goldsrc-net/the-specialists","url":"https://github.com/goldsrc-net/the-specialists","batch_id":"run-42149552878-1","decision":"hold","reason_code":"linking-policy","reason_en":"reTS documents a substantial game-library reconstruction, but reference/ holds the original The Specialists binaries and derived artifacts, so linking needs maintainer review.","reason_zh":"reTS 对游戏库进行了有实质内容的重建，但 reference/ 收录了 The Specialists 的原始二进制文件及衍生材料，链接需维护者审议。","evidence_url":"https://github.com/goldsrc-net/the-specialists/blob/e82e40282a4da378b0902fc5d1ad471aea3b04ca/reference/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1275666667","full_name":"tsuyoi-w/DreadComp","url":"https://github.com/tsuyoi-w/DreadComp","batch_id":"run-42149552878-1","decision":"curated","curated_id":"dreadcomp-case"},{"id":"scan-1276192526","full_name":"NiceDayZc/okgram","url":"https://github.com/NiceDayZc/okgram","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"okgram centers on impersonating Instagram's Android client and avoiding login challenges, rate blocks, and session detection.","reason_zh":"okgram 以模拟 Instagram Android 客户端、规避登录挑战、操作限流和会话识别为主要功能。","evidence_url":"https://github.com/NiceDayZc/okgram/blob/6362c6ea461a53556870b222fb954e12793e2bcd/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1276250283","full_name":"gravitywalrusprovide/x64dbg-Assembly-Lens","url":"https://github.com/gravitywalrusprovide/x64dbg-Assembly-Lens","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"distribution-site","reason_en":"The repository contains only a README directing readers to an external download; its claimed scripts, setup utility and guide are absent from the file list.","reason_zh":"仓库只有 README，指向外部下载；文中宣称的脚本、安装程序和指南均不在文件列表中。","evidence_url":"https://github.com/gravitywalrusprovide/x64dbg-Assembly-Lens/blob/fb581f2ba7bd01f1a27084b3173a092252091867/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1276295845","full_name":"Stastyle/ScanAlign","url":"https://github.com/Stastyle/ScanAlign","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"unrelated","reason_en":"ScanAlign processes 3D scans for CAD alignment; its use of reverse engineering concerns physical-part modeling, not software, firmware, protocol, or device analysis.","reason_zh":"ScanAlign 将三维扫描网格对齐以便导入 CAD；这里的“逆向”指实体零件建模，并非软件、固件、协议或设备分析。","evidence_url":"https://github.com/Stastyle/ScanAlign/blob/6cb10ce6496e8fe19a2a0f94a51eaa0fa0e34009/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1276542994","full_name":"andrewseago/d3200-ble-note-downloader","url":"https://github.com/andrewseago/d3200-ble-note-downloader","batch_id":"run-42149552878-1","decision":"curated","curated_id":"soundcore-d3200-ble-case"},{"id":"scan-1276671391","full_name":"leabergero/k1pro-opendeck-suite","url":"https://github.com/leabergero/k1pro-opendeck-suite","batch_id":"run-42149552878-1","decision":"curated","curated_id":"k1-pro-opendeck-suite-case"},{"id":"scan-1276892578","full_name":"jdexorg/jrunas","url":"https://github.com/jdexorg/jrunas","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"development-tool","reason_en":"jrunas runs commands in an installed Android app's UID and SELinux context on rooted devices, but its documentation presents no analysis or instrumentation capability.","reason_zh":"jrunas 可在已 root 设备上以已安装 Android 应用的 UID 和 SELinux 上下文运行命令，但文档没有说明分析或插桩功能。","evidence_url":"https://github.com/jdexorg/jrunas/blob/0597a4b1af67e258ad786c1d0e48641649630a74/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1277227509","full_name":"gvbytes/srm-secure-browser-vulnerabilities","url":"https://github.com/gvbytes/srm-secure-browser-vulnerabilities","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The SRM Secure Browser repository centers on scripts to extract exam answers, disable proctoring and submit a perfect score.","reason_zh":"该仓库的脚本用于提取考试答案、停止监考并自动提交满分成绩。","evidence_url":"https://github.com/gvbytes/srm-secure-browser-vulnerabilities/blob/be19fb3127b4d7d2753c04f90b46c0f159aaf05e/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1277490080","full_name":"RDTUTORIAL/GhostUSB","url":"https://github.com/RDTUTORIAL/GhostUSB","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"general-security","reason_en":"GhostUSB is a USB-delivered exploitation and command-and-control framework with AMSI bypass, payloads and anti-forensics; it does not analyze a reverse-engineering target.","reason_zh":"GhostUSB 是通过 USB 键盘仿真投递利用载荷并接入控制端的安全测试框架，还包含 AMSI 绕过和反取证功能；项目没有逆向分析对象。","evidence_url":"https://github.com/RDTUTORIAL/GhostUSB/blob/b211d762bedbb71418a72596f1f64883deeabffd/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1277505566","full_name":"GottZ/open-PicPak","url":"https://github.com/GottZ/open-PicPak","batch_id":"run-42149552878-1","decision":"curated","curated_id":"open-picpak-case"},{"id":"scan-1277526617","full_name":"dallanwagz/idotmatrix-ha","url":"https://github.com/dallanwagz/idotmatrix-ha","batch_id":"run-42149552878-1","decision":"curated","curated_id":"idotmatrix-ha-case"},{"id":"scan-1277677094","full_name":"AnthonyDavidAdams/substack-api-reference","url":"https://github.com/AnthonyDavidAdams/substack-api-reference","batch_id":"run-42149552878-1","decision":"curated","curated_id":"substack-api-reference"},{"id":"scan-1277815108","full_name":"leolovenet/Zygisk-FridaGadget","url":"https://github.com/leolovenet/Zygisk-FridaGadget","batch_id":"run-42149552878-1","decision":"curated","curated_id":"zygisk-fridagadget"},{"id":"scan-1278111205","full_name":"xiaomaozjj666/web-crawler","url":"https://github.com/xiaomaozjj666/web-crawler","batch_id":"run-42149552878-1","decision":"curated","curated_id":"web-crawler-reverse-agent"},{"id":"scan-1278445933","full_name":"AnonAmit/swiggy-detection-bypass","url":"https://github.com/AnonAmit/swiggy-detection-bypass","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The Frida script is presented as bypassing Swiggy security checks and rotating device identifiers to evade account-attempt restrictions.","reason_zh":"该 Frida 脚本用于绕过 Swiggy 的安全检查，并轮换设备标识以规避账户尝试次数限制。","evidence_url":"https://github.com/AnonAmit/swiggy-detection-bypass/blob/ded75708d95546578392b34c30aa4978b3b915fa/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1278515965","full_name":"Amsozzer1/AMS","url":"https://github.com/Amsozzer1/AMS","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"general-application","reason_en":"AMS-X is a filament-swap automation system for Bambu printers using local MQTT and sliced 3MF jobs; its documented research supports the app rather than analyzing a proprietary interface.","reason_zh":"AMS-X 是利用本地 MQTT 和切片 3MF 作业管理 Bambu 打印机换料的自动化系统；所述研究服务于应用实现，并非以专有接口分析为主体。","evidence_url":"https://github.com/Amsozzer1/AMS/blob/9e9d33891a7708e17a44290cb3cfc26ec8e55eef/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1278537372","full_name":"vs-sr-dev/hyperscan-homebrew","url":"https://github.com/vs-sr-dev/hyperscan-homebrew","batch_id":"run-42149552878-1","decision":"curated","curated_id":"hyperscan-homebrew"},{"id":"scan-1279838566","full_name":"aasb13/mope-io","url":"https://github.com/aasb13/mope-io","batch_id":"run-42149552878-1","decision":"hold","reason_code":"linking-policy","reason_en":"The WebSocket packet investigation has substantive parsers, but the repository also commits deobfuscated game code and numerous downloaded mope.io assets.","reason_zh":"该项目有实质性的 WebSocket 数据包解析代码，但仓库同时收录了解混淆游戏代码和大量下载的 mope.io 素材，需维护者裁定链接政策。","evidence_url":"https://github.com/aasb13/mope-io/blob/e8992da0da000950c7950e33a1049f2c88362a10/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1280232434","full_name":"wesmar/ForceIO","url":"https://github.com/wesmar/ForceIO","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"ForceIO's central function is bypassing Windows Defender's WdFilter protection to delete or move protected files, despite its accompanying driver analysis.","reason_zh":"ForceIO 的核心功能是绕过 Windows Defender 的 WdFilter 保护以删除或移动受保护文件；附带的驱动分析不改变这一用途。","evidence_url":"https://github.com/wesmar/ForceIO/blob/148b11717d3c8ac940ff06ceef95e6647fa33abc/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1280301165","full_name":"sf0rzin/CVE-2025-61155","url":"https://github.com/sf0rzin/CVE-2025-61155","batch_id":"run-42149552878-1","decision":"hold","reason_code":"linking-policy","reason_en":"The GameDriverX64.sys teardown is substantive, but its technical analysis publishes decompiler output lifted from a commercial anti-cheat driver, requiring a maintainer decision.","reason_zh":"GameDriverX64.sys 的技术分析具有实质内容，但文档刊载了从商业反作弊驱动提取的反编译输出，需要维护者裁定收录政策。","evidence_url":"https://github.com/sf0rzin/CVE-2025-61155/blob/ac10932dae75315cc83304df0d209e54d1675222/docs/01-technical-analysis.md","reviewed_at":"2026-11-06"},{"id":"scan-1280578978","full_name":"muki01/NFS_Most_Wanted_Telemetry_Dashboard","url":"https://github.com/muki01/NFS_Most_Wanted_Telemetry_Dashboard","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"general-application","reason_en":"The repository's product is a Need for Speed telemetry display that reads known process offsets; it provides no analysis method or findings about the game.","reason_zh":"仓库的主要产品是读取既定进程偏移量的《极品飞车》遥测仪表盘，没有提供游戏分析方法或研究发现。","evidence_url":"https://github.com/muki01/NFS_Most_Wanted_Telemetry_Dashboard/blob/4ab54a75c677b231bbaacd3f880a0c3b2f0bad07/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1280580934","full_name":"muki01/Game_Memory_Hacking_Tutorial","url":"https://github.com/muki01/Game_Memory_Hacking_Tutorial","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The tutorial's scripts attach to named games and freeze health, ammunition and other values to implement trainers and cheats.","reason_zh":"该教程的脚本附加到具体游戏进程，锁定生命值、弹药等数值，主要用于制作修改器和作弊功能。","evidence_url":"https://github.com/muki01/Game_Memory_Hacking_Tutorial/blob/54144566001cbac997af8de1f4d03dd725701fcf/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1280633238","full_name":"grosa787/dell-controlvault2-fingerprint-linux","url":"https://github.com/grosa787/dell-controlvault2-fingerprint-linux","batch_id":"run-42149552878-1","decision":"curated","curated_id":"dell-controlvault2-fingerprint-linux-case"},{"id":"scan-1280979073","full_name":"mir-ashiq/antling-api","url":"https://github.com/mir-ashiq/antling-api","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"general-application","reason_en":"The README documents a chat API proxy and SDK adapters, but gives no traffic analysis, protocol findings, or reconstruction method beyond listing routes and headers.","reason_zh":"README 主要说明聊天 API 代理和 SDK 适配器，只列出路由与请求头，没有提供流量分析、协议发现或重建方法。","evidence_url":"https://github.com/mir-ashiq/antling-api/blob/eb56857cccc1eb8f60c9ca32cbbb02abe5658e00/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1281512304","full_name":"iamschmuck/MyTestStudentX-.MTF-Decoder","url":"https://github.com/iamschmuck/MyTestStudentX-.MTF-Decoder","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The decoder's stated output includes the correct answers from encrypted MyTestX test files, making it an answer-extraction tool for assessments.","reason_zh":"该解码器明确输出加密 MyTestX 测试文件中的正确答案，属于从测验中提取答案的工具。","evidence_url":"https://github.com/iamschmuck/MyTestStudentX-.MTF-Decoder/blob/f86984416e977c8fe13531543ac46c762c34c32f/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1281918927","full_name":"mikel-btw/epson-l3110-driver","url":"https://github.com/mikel-btw/epson-l3110-driver","batch_id":"run-42149552878-1","decision":"curated","curated_id":"epson-l3110-driver-case"},{"id":"scan-1282007993","full_name":"Fyfar/ms5-wifi-microscope","url":"https://github.com/Fyfar/ms5-wifi-microscope","batch_id":"run-42149552878-1","decision":"curated","curated_id":"ms5-wifi-microscope-case"},{"id":"scan-1282277342","full_name":"Newmcpe/RakClient","url":"https://github.com/Newmcpe/RakClient","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"RakClient's main product is a scripted SA-MP bot for live multiplayer servers, including automation and movement designed to appear as a real player.","reason_zh":"RakClient 的主要产品是用于在线 SA-MP 服务器的脚本机器人，包含自动化行为和模拟真人玩家的移动。","evidence_url":"https://github.com/Newmcpe/RakClient/blob/6ef94b502d4a3bec3f21c318ced731a0131276f4/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1282437809","full_name":"nazarhktwitch/dobreprogramy-extractor","url":"https://github.com/nazarhktwitch/dobreprogramy-extractor","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"general-application","reason_en":"The tool retrieves an installer product URL from known static values, a filename version and CDN XML; it does not inspect the installer executable.","reason_zh":"该工具用已知常量、文件名版本和 CDN XML 获取下载地址，并不实际分析安装程序可执行文件。","evidence_url":"https://github.com/nazarhktwitch/dobreprogramy-extractor/blob/19e6472f5b4ca037bd6d8e9373f2c1fb1176f67f/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1282489487","full_name":"tobiasbrummer/lux-lat-long-log","url":"https://github.com/tobiasbrummer/lux-lat-long-log","batch_id":"run-42149552878-1","decision":"curated","curated_id":"lux-lat-long-log-case"},{"id":"scan-1283215168","full_name":"Ikreb1/mtg-arena-collection-export","url":"https://github.com/Ikreb1/mtg-arena-collection-export","batch_id":"run-42149552878-1","decision":"curated","curated_id":"mtg-arena-collection-export-case"},{"id":"scan-1283377819","full_name":"sKuhLight/monix","url":"https://github.com/sKuhLight/monix","batch_id":"run-42149552878-1","decision":"curated","curated_id":"monix-audient-id-case"},{"id":"scan-1283687895","full_name":"mchardysam/magene-l308-taillight","url":"https://github.com/mchardysam/magene-l308-taillight","batch_id":"run-42149552878-1","decision":"curated","curated_id":"magene-l308-taillight-case"},{"id":"scan-1284175374","full_name":"kwik-gms2/kwik","url":"https://github.com/kwik-gms2/kwik","batch_id":"run-42149552878-1","decision":"hold","reason_code":"capability-unclear","reason_en":"kwik describes exporting and building GameMaker games, but the runtime required by its own build workflow is absent from the repository file list.","reason_zh":"kwik 描述了导出并构建 GameMaker 游戏的流程，但其构建步骤所需的 runtime 目录未出现在文件清单中。","evidence_url":"https://github.com/kwik-gms2/kwik/blob/0ad5d53fc3851b53830e89e2dc672f7df6f51eeb/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1284543500","full_name":"Senko74/Void-Client","url":"https://github.com/Senko74/Void-Client","batch_id":"run-42149552878-1","decision":"curated","curated_id":"void-client-case"},{"id":"scan-1285402906","full_name":"Janczykkkko/xbloom-ble","url":"https://github.com/Janczykkkko/xbloom-ble","batch_id":"run-42149552878-1","decision":"curated","curated_id":"xbloom-ble-case"},{"id":"scan-1285497181","full_name":"gusleig/ajazz-ak820-pro-mac","url":"https://github.com/gusleig/ajazz-ak820-pro-mac","batch_id":"run-42149552878-1","decision":"curated","curated_id":"ajazz-ak820-pro-mac-case"},{"id":"scan-1285543755","full_name":"dataterminals/grb-modding-knowledgebase","url":"https://github.com/dataterminals/grb-modding-knowledgebase","batch_id":"run-42149552878-1","decision":"curated","curated_id":"grb-modding-knowledgebase"},{"id":"scan-1285758695","full_name":"Dave-Agent/monty-on-the-run","url":"https://github.com/Dave-Agent/monty-on-the-run","batch_id":"run-42149552878-1","decision":"hold","reason_code":"linking-policy","reason_en":"Monty on the Run reconstructs the full game but commits its graphics, screenshots, and playable soundtrack and effects recordings in an offline handbook.","reason_zh":"Monty on the Run 重建了完整游戏，但离线手册提交了游戏画面、图形及可播放的原版音乐和音效录音，需要维护者判断。","evidence_url":"https://github.com/Dave-Agent/monty-on-the-run/blob/1bcf408b85455d858f9d7d01e7083e941f437013/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1286241973","full_name":"seuros/intel_ma","url":"https://github.com/seuros/intel_ma","batch_id":"run-42149552878-1","decision":"curated","curated_id":"intel-ma"},{"id":"scan-1286305214","full_name":"Onevium/ditto","url":"https://github.com/Onevium/ditto","batch_id":"run-42149552878-1","decision":"hold","reason_code":"capability-unclear","reason_en":"Ditto claims implemented website recovery and comparison scripts, but package.json calls the scripts placeholders; their actual behavior remains unclear from the repository.","reason_zh":"Ditto 宣称网站源码恢复和比对脚本已实现，但 package.json 又称这些脚本为占位内容；现有材料无法确认实际功能。","evidence_url":"https://github.com/Onevium/ditto/blob/3afee97222963126d0ba2fb2b1b9ee915b748882/package.json","reviewed_at":"2026-11-06"},{"id":"scan-1287011762","full_name":"Evanyuan-builder/wechat-4.1.10-macos-key","url":"https://github.com/Evanyuan-builder/wechat-4.1.10-macos-key","batch_id":"run-42149552878-1","decision":"curated","curated_id":"wechat-4-1-10-macos-key-case"},{"id":"scan-1287013519","full_name":"CreativeInquiry/GameTrak-Liberation","url":"https://github.com/CreativeInquiry/GameTrak-Liberation","batch_id":"run-42149552878-1","decision":"curated","curated_id":"gametrak-liberation-case"},{"id":"scan-1287226334","full_name":"kronhait/cooper-hunter-ac-esphome","url":"https://github.com/kronhait/cooper-hunter-ac-esphome","batch_id":"run-42149552878-1","decision":"curated","curated_id":"cooper-hunter-ac-protocol-case"},{"id":"scan-1287354764","full_name":"DarkAngel-0x0/pwntemplate","url":"https://github.com/DarkAngel-0x0/pwntemplate","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"general-security","reason_en":"pwntemplate primarily assesses exploit viability and generates payloads for pwn challenges; its binary inspection serves exploit development.","reason_zh":"pwntemplate 主要判断漏洞利用手法是否可行，并为 pwn 题生成攻击载荷；二进制检查服务于漏洞利用开发。","evidence_url":"https://github.com/DarkAngel-0x0/pwntemplate/blob/5950fc36380073042fa678664ebe8999c4a62479/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1288671896","full_name":"The-Libre-Project/Weave","url":"https://github.com/The-Libre-Project/Weave","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"general-application","reason_en":"Weave is chiefly a Rust Windows compatibility runtime for Linux; behavioral references inform its API implementation, but it does not present reverse engineering as its primary work.","reason_zh":"Weave 主要是面向 Linux 的 Rust Windows 兼容层；行为参考用于实现 API，项目本身并非以逆向分析为主。","evidence_url":"https://github.com/The-Libre-Project/Weave/blob/93abf0a95598a26a7796dfa07c315df9ec0347cc/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1288693472","full_name":"000nico/tango-packer","url":"https://github.com/000nico/tango-packer","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"protection-tool","reason_en":"Tango Packer encrypts Windows PE code, injects a runtime decryption stub, and adds anti-debugging measures; its primary function is executable protection.","reason_zh":"Tango Packer 加密 Windows PE 代码、注入运行时解密桩，并加入反调试措施，主要用途是保护可执行文件。","evidence_url":"https://github.com/000nico/tango-packer/blob/f29a965a35511ce643a753f4848f157306ce2b95/README.MD","reviewed_at":"2026-11-06"},{"id":"scan-1289076149","full_name":"SoulByte07/Reverse-Engineering-Report","url":"https://github.com/SoulByte07/Reverse-Engineering-Report","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"general-security","reason_en":"The TradeIQ Academy work is a product and security audit centered on UX, authentication findings, performance and API observations, rather than reverse engineering.","reason_zh":"TradeIQ Academy 仓库以产品与安全审计为主，重点是体验、认证问题、性能和 API 观察，而非逆向工程。","evidence_url":"https://github.com/SoulByte07/Reverse-Engineering-Report/blob/947b71b09d0740e233b99fd9cd8055a11b85b706/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1289167630","full_name":"slyavanin/csharp-bin-decompiler","url":"https://github.com/slyavanin/csharp-bin-decompiler","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"development-tool","reason_en":"The application is a Tkinter GUI for existing ilspycmd commands, with option discovery and process controls but no documented decompilation analysis of its own.","reason_zh":"该应用是现有 ilspycmd 命令的 Tkinter 图形外壳，提供选项识别和进程控制，没有记录自身的反编译分析能力。","evidence_url":"https://github.com/slyavanin/csharp-bin-decompiler/blob/b3b1a82cb4ef2e9d7f278d08759533eed39a2e4f/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1289541633","full_name":"volodarskij/yandex-station-local-streaming","url":"https://github.com/volodarskij/yandex-station-local-streaming","batch_id":"run-42149552878-1","decision":"curated","curated_id":"yandex-station-local-streaming"},{"id":"scan-1290308751","full_name":"SanyaSho/JackSDK","url":"https://github.com/SanyaSho/JackSDK","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"general-application","reason_en":"JackSDK primarily provides headers and examples for extending the J.A.C.K. level editor; the documented reverse-engineered editor functions are incidental to plugin development.","reason_zh":"JackSDK 主要提供扩展 J.A.C.K. 关卡编辑器的头文件和插件示例；文中提到的逆向所得编辑器函数只是插件开发的一部分。","evidence_url":"https://github.com/SanyaSho/JackSDK/blob/1a9525968f46b54419d718c447cecb7012959673/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1291002676","full_name":"Isno-Open/OpenXtraflame","url":"https://github.com/Isno-Open/OpenXtraflame","batch_id":"run-42149552878-1","decision":"hold","reason_code":"linking-policy","reason_en":"OpenXtraflame documents substantial firmware and stove-protocol analysis, but it also commits a CA certificate extracted from the vendor's firmware dump.","reason_zh":"OpenXtraflame 记录了较完整的固件和炉具协议分析，但仓库还提交了从厂商固件转储中提取的 CA 证书，需要维护者判断。","evidence_url":"https://github.com/Isno-Open/OpenXtraflame/blob/40909b29b8a8339ed0aaac60ee7e877a6cbf78a7/docs/CLOUD_REVERSE_NOTES.md","reviewed_at":"2026-11-06"},{"id":"scan-1291249362","full_name":"TotalKommando/psp-media-toolkit","url":"https://github.com/TotalKommando/psp-media-toolkit","batch_id":"run-42149552878-1","decision":"curated","curated_id":"psp-media-slopkit"},{"id":"scan-1291293755","full_name":"hitchhikr/thexder","url":"https://github.com/hitchhikr/thexder","batch_id":"run-42149552878-1","decision":"hold","reason_code":"linking-policy","reason_en":"The Thexder disassembly is in scope, but the repository includes game pictures, maps, music and samples that the author says are bundled into the executable.","reason_zh":"Thexder 反汇编属于收录范围，但仓库包含游戏图片、地图、音乐和音效，作者还说明这些素材已嵌入可执行文件。","evidence_url":"https://github.com/hitchhikr/thexder/blob/aef88dd28c366025bb5ece394f9264edcd88b09e/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1291410190","full_name":"bo2themax/Siriously","url":"https://github.com/bo2themax/Siriously","batch_id":"run-42149552878-1","decision":"curated","curated_id":"siriously-writing-tools-case"},{"id":"scan-1291452424","full_name":"boykopovar/sqlce","url":"https://github.com/boykopovar/sqlce","batch_id":"run-42149552878-1","decision":"curated","curated_id":"sqlce"},{"id":"scan-1291686859","full_name":"yezhwi/framework-distillation","url":"https://github.com/yezhwi/framework-distillation","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"no-real-content","reason_en":"framework-distillation is an agent skill of prompts, checklists and output templates for studying open-source architecture, with no target findings or RE-specific tooling.","reason_zh":"framework-distillation 是由提示词、检查清单和输出模板组成的开源框架架构分析技能，没有具体目标发现或专用逆向工具。","evidence_url":"https://github.com/yezhwi/framework-distillation/blob/61604e393e347c566d2f91bd4d4491b117098e20/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1292259320","full_name":"penguinflamingo46153-alt/Penguin-Injectable-Ghost-Client","url":"https://github.com/penguinflamingo46153-alt/Penguin-Injectable-Ghost-Client","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The Minecraft client implements KillAura, automatic clicking, anti-knockback, and behavior intended to avoid anti-cheat checks.","reason_zh":"该 Minecraft 客户端实现 KillAura、自动点击和防击退等功能，并以避开反作弊检查为目标。","evidence_url":"https://github.com/penguinflamingo46153-alt/Penguin-Injectable-Ghost-Client/blob/3c4bed1d560b1746cf0cb91b211032c02239a877/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1292438658","full_name":"TetraSsky/DualRip","url":"https://github.com/TetraSsky/DualRip","batch_id":"run-42149552878-1","decision":"curated","curated_id":"dualrip"},{"id":"scan-1292529170","full_name":"claygorman/aw5d-linux","url":"https://github.com/claygorman/aw5d-linux","batch_id":"run-42149552878-1","decision":"curated","curated_id":"aw5d-linux-case"},{"id":"scan-1292684962","full_name":"aspann/advfs-fuse","url":"https://github.com/aspann/advfs-fuse","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"forensics-only","reason_en":"advfs-fuse focuses on mounting AdvFS disk images, listing files and recovering deleted entries for forensic use; it does not present format reverse engineering as its work.","reason_zh":"advfs-fuse 主要用于挂载 AdvFS 磁盘镜像、列出文件和恢复已删除目录项，定位是文件系统取证工具。","evidence_url":"https://github.com/aspann/advfs-fuse/blob/328fb34e692a9f6409d127c13e11643137a80d5d/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1292991123","full_name":"byte271/mirrorframe","url":"https://github.com/byte271/mirrorframe","batch_id":"run-42149552878-1","decision":"curated","curated_id":"mirrorframe"},{"id":"scan-1293010399","full_name":"itsVentie/whitepapers","url":"https://github.com/itsVentie/whitepapers","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"forensics-only","reason_en":"The archive's firmware item concerns UEFI NVRAM and SPI flash carving within a broad DFIR research archive, rather than a focused RE resource.","reason_zh":"该档案库中的固件条目属于 UEFI NVRAM 与 SPI 闪存取证，整个仓库以广泛的 DFIR 研究记录为主。","evidence_url":"https://github.com/itsVentie/whitepapers/blob/0c4ac54acdb293093e82e649a2ecb09ba658000d/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1293033649","full_name":"edouard-claude/codetospec","url":"https://github.com/edouard-claude/codetospec","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"unrelated","reason_en":"codetospec extracts business rules and requirements from source repositories for software rewrites; its subject is requirements recovery, not reverse engineering of a target.","reason_zh":"codetospec 从源码仓库提取业务规则和需求，供软件重写使用；其主题是需求梳理，而非对目标程序开展逆向分析。","evidence_url":"https://github.com/edouard-claude/codetospec/blob/e1164e32b3be6831bb4c08dea31aa1f724e6c356/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1294320945","full_name":"GlassOnTin/openmc3000","url":"https://github.com/GlassOnTin/openmc3000","batch_id":"run-42149552878-1","decision":"hold","reason_code":"needs-maintainer-decision","reason_en":"OpenMC3000 reconstructs the charger's USB-HID control interface, but it can start lithium-cell charging and the source reports the device accepts unsafe parameters.","reason_zh":"openMC3000 重建充电器的 USB-HID 控制接口，但它能启动锂电池充电，且资料指出设备会接受不安全的参数，需要维护者判断。","evidence_url":"https://github.com/GlassOnTin/openmc3000/blob/333f20273c9bc7b928928e26c212b0a85b6aea25/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1294483137","full_name":"FlashZ/adb-mcp","url":"https://github.com/FlashZ/adb-mcp","batch_id":"run-42149552878-1","decision":"curated","curated_id":"adb-mcp"},{"id":"scan-1294590692","full_name":"honow48-tech/CodeBread","url":"https://github.com/honow48-tech/CodeBread","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"development-tool","reason_en":"CodeBread maps source files, functions, routes, and database tables for codebase navigation; its static decoding is a feature of a general developer visualizer.","reason_zh":"CodeBread 为开发者绘制源码文件、函数、路由和数据库表的关系图；静态解码只是通用代码可视化工具的一项功能。","evidence_url":"https://github.com/honow48-tech/CodeBread/blob/e636bf5d3fb2e17e7c647a08d63762aa679252f5/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1294821737","full_name":"ckenkuo/fanqie-cdp-downloader","url":"https://github.com/ckenkuo/fanqie-cdp-downloader","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"general-application","reason_en":"The project's main function is bulk downloading novel text through a logged-in browser; its PUA mapping serves that downloader rather than an RE investigation.","reason_zh":"项目主要通过已登录浏览器批量下载小说正文；PUA 字体映射是下载流程的一环，而非独立逆向研究。","evidence_url":"https://github.com/ckenkuo/fanqie-cdp-downloader/blob/210999105c1973076488d9127e594369c4cb321a/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1294881239","full_name":"Nico-Tech-Shenzhen/hacking-the-xbox-ja","url":"https://github.com/Nico-Tech-Shenzhen/hacking-the-xbox-ja","batch_id":"run-42149552878-1","decision":"curated","curated_id":"hacking-the-xbox-ja"},{"id":"scan-1295591515","full_name":"cable729/inkterop","url":"https://github.com/cable729/inkterop","batch_id":"run-42149552878-1","decision":"curated","curated_id":"inkterop"},{"id":"scan-1295843676","full_name":"chawasit/rewindpix-tools","url":"https://github.com/chawasit/rewindpix-tools","batch_id":"run-42149552878-1","decision":"hold","reason_code":"linking-policy","reason_en":"The reverse-engineered camera client includes dozens of LUT images and describes bundled official preview thumbnails, requiring a decision on redistributed target media.","reason_zh":"该逆向相机客户端随仓库提供数十张 LUT 图像，并说明包含官方预览缩略图；目标素材的再分发需要维护者裁定。","evidence_url":"https://github.com/chawasit/rewindpix-tools/blob/b9452afe82657a0fdf1652327bac8ef5430c57ef/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1296432366","full_name":"666mille/MyJBxHeadsetControl","url":"https://github.com/666mille/MyJBxHeadsetControl","batch_id":"run-42149552878-1","decision":"curated","curated_id":"myjbxheadsetcontrol-case"},{"id":"scan-1297361144","full_name":"oniondas/Luna","url":"https://github.com/oniondas/Luna","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"general-application","reason_en":"Luna routes requests among AI subscription CLIs and apps through an OpenAI-compatible gateway; it documents no reverse-engineering analysis.","reason_zh":"Luna 通过兼容 OpenAI 的网关转发 AI 订阅应用与 CLI 请求，没有记录逆向分析工作。","evidence_url":"https://github.com/oniondas/Luna/blob/043ad23e79882976d05a82d53bd7d0fd49e08623/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1297893192","full_name":"ajsb85/sprdflash-rs","url":"https://github.com/ajsb85/sprdflash-rs","batch_id":"run-42149552878-1","decision":"curated","curated_id":"sprdflash-rs"},{"id":"scan-1298370541","full_name":"Xernary/CVE-2026-82539","url":"https://github.com/Xernary/CVE-2026-82539","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"general-security","reason_en":"The TOTOLINK A720R README is a vulnerability advisory focused on a CGI buffer overflow and redirected execution, without a broader RE investigation.","reason_zh":"TOTOLINK A720R 的 README 主要是 CGI 缓冲区溢出与执行流劫持的漏洞公告，未展开更广泛的逆向研究。","evidence_url":"https://github.com/Xernary/CVE-2026-82539/blob/0a93b5ee78d9591a4ba76b6a713bcd41e11286bd/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1298948755","full_name":"time-attack/OpenPigeon","url":"https://github.com/time-attack/OpenPigeon","batch_id":"run-42149552878-1","decision":"curated","curated_id":"openpigeon-case"},{"id":"scan-1298974655","full_name":"albertovillaosorno/shar","url":"https://github.com/albertovillaosorno/shar","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"upstream-unavailable","reason_en":"The repository albertovillaosorno/shar no longer resolves: the GraphQL lookup and a git clone both failed on 2026-11-06.","reason_zh":"仓库 albertovillaosorno/shar 已无法访问：2026-11-06 的 GraphQL 查询和 git clone 均失败。","evidence_url":"https://github.com/albertovillaosorno/shar/blob/e89d0593b64428670b708f026384b18d1987fe2f/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1299883928","full_name":"codengine/DasErbe","url":"https://github.com/codengine/DasErbe","batch_id":"run-42149552878-1","decision":"hold","reason_code":"linking-policy","reason_en":"DasErbe documents a reverse-engineered C# port, but the repository commits the original DOS executable, game data and graphics assets.","reason_zh":"DasErbe 记录了逆向开发的 C# 移植版，但仓库同时提交原版 DOS 可执行文件、游戏数据和图像资源，需由维护者判断链接政策。","evidence_url":"https://github.com/codengine/DasErbe/blob/a01b339816618d594d77a24360c49c7cd477eb74/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1300474397","full_name":"ShoelessTim/RazerStream","url":"https://github.com/ShoelessTim/RazerStream","batch_id":"run-42149552878-1","decision":"curated","curated_id":"razerstream-case"},{"id":"scan-1301168019","full_name":"krishnaparmar3412-cyber/morphe-ai","url":"https://github.com/krishnaparmar3412-cyber/morphe-ai","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"distribution-site","reason_en":"The README advertises a downloadable APK patching application, but the file list contains a ZIP and setup script rather than the claimed analysis or patching source.","reason_zh":"README 宣传可下载的 APK 修改程序，但文件列表只有 ZIP 和安装脚本，没有所称分析或补丁程序的源码。","evidence_url":"https://github.com/krishnaparmar3412-cyber/morphe-ai/blob/ecd7347ce1ec3230b0c5160452cfcbc1170f81b2/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1301426325","full_name":"exbyte-dev/zltrouter","url":"https://github.com/exbyte-dev/zltrouter","batch_id":"run-42149552878-1","decision":"curated","curated_id":"zltrouter-case"},{"id":"scan-1301646975","full_name":"RetroAtlas/OddworldMap","url":"https://github.com/RetroAtlas/OddworldMap","batch_id":"run-42149552878-1","decision":"hold","reason_code":"linking-policy","reason_en":"Oddworld Map documents detailed disc-format extraction, but it also says generated camera artwork and sprite sheets are committed to the repository.","reason_zh":"Oddworld Map 详细记录了游戏光盘格式的提取方法，但仓库也提交了生成的镜头画面和精灵图集，需要维护者判断链接政策。","evidence_url":"https://github.com/RetroAtlas/OddworldMap/blob/085a10ae877818d08d163fb7e2c1c82ca9ea520a/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1301742675","full_name":"ltlly/ltlly","url":"https://github.com/ltlly/ltlly","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"personal-profile","reason_en":"The ltlly repository is an author profile linking to separate reverse-engineering projects; it contains no tool, findings, or course content of its own.","reason_zh":"ltlly 仓库是个人简介和其他逆向项目的索引，本仓库没有独立工具、研究发现或课程内容。","evidence_url":"https://github.com/ltlly/ltlly/blob/8d21f890ffcb65b9658150f3eddc3eed998d8430/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1301809877","full_name":"code-root/tiktok-deep-scraper","url":"https://github.com/code-root/tiktok-deep-scraper","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"general-application","reason_en":"The TikTok repository is a follower crawler that extracts bio phone numbers and classifies leads; request signing supports scraping, with no documented protocol investigation.","reason_zh":"该 TikTok 项目主要爬取关注者、提取简介中的电话号码并分类潜在客户；请求签名服务于抓取，没有记录协议调查。","evidence_url":"https://github.com/code-root/tiktok-deep-scraper/blob/71b41b67f88f85f6d40016a6d6ffb689ce7d2fa5/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1301954959","full_name":"ThatCrispyToast/claude-rc-api","url":"https://github.com/ThatCrispyToast/claude-rc-api","batch_id":"run-42149552878-1","decision":"curated","curated_id":"claude-rc-api-case"},{"id":"scan-1302065160","full_name":"gaelic-ghost/spelunking","url":"https://github.com/gaelic-ghost/spelunking","batch_id":"run-42149552878-1","decision":"curated","curated_id":"spelunking"},{"id":"scan-1302182060","full_name":"Ukine9999/b2b","url":"https://github.com/Ukine9999/b2b","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"protection-tool","reason_en":"b2b uses PDB-guided PE rewriting to transform and obfuscate Windows binaries; its primary output is protected executables.","reason_zh":"b2b 借助 PDB 重写 Windows PE 文件，核心用途是转换和混淆二进制程序。","evidence_url":"https://github.com/Ukine9999/b2b/blob/32e6006de11de7a4ec514a0ff083eb92587f27dd/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1302366862","full_name":"AndrewDemsDS/hisense-w41h1","url":"https://github.com/AndrewDemsDS/hisense-w41h1","batch_id":"run-42149552878-1","decision":"curated","curated_id":"hisense-aeh-w41h1-local-control-case"},{"id":"scan-1303027094","full_name":"7ucg/whatsapp-docs","url":"https://github.com/7ucg/whatsapp-docs","batch_id":"run-42149552878-1","decision":"curated","curated_id":"whatsapp-docs"},{"id":"scan-1303142816","full_name":"at0m-b0mb/Hermes-FlipperZero","url":"https://github.com/at0m-b0mb/Hermes-FlipperZero","batch_id":"run-42149552878-1","decision":"curated","curated_id":"hermes-flipperzero"},{"id":"scan-1304146130","full_name":"earthsworth/wMatcher","url":"https://github.com/earthsworth/wMatcher","batch_id":"run-42149552878-1","decision":"curated","curated_id":"wmatcher"},{"id":"scan-1304296495","full_name":"bitemydusto/YGO-PoC-Toolset","url":"https://github.com/bitemydusto/YGO-PoC-Toolset","batch_id":"run-42149552878-1","decision":"curated","curated_id":"ygo-poc-toolset"},{"id":"scan-1305750315","full_name":"dennisonbertram/website-to-cli","url":"https://github.com/dennisonbertram/website-to-cli","batch_id":"run-42149552878-1","decision":"curated","curated_id":"website-to-cli"},{"id":"scan-1305756328","full_name":"zhameersheraz/cfg-visualizer","url":"https://github.com/zhameersheraz/cfg-visualizer","batch_id":"run-42119584443-1","decision":"curated","curated_id":"cfg-visualizer"},{"id":"scan-1306101767","full_name":"noidex0/fh6-model-tools","url":"https://github.com/noidex0/fh6-model-tools","batch_id":"run-42149552878-1","decision":"curated","curated_id":"fh6-model-tools"},{"id":"scan-1307776318","full_name":"Hyper-Solutions/hermes-scraper","url":"https://github.com/Hyper-Solutions/hermes-scraper","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"general-application","reason_en":"The Go project collects Hermès catalog data through its JSON API; its documented purpose is scraping products rather than analysing the site or its protocol.","reason_zh":"该 Go 项目通过 Hermès 的 JSON API 抓取商品目录，主要用途是采集商品数据，未提供网站或协议分析成果。","evidence_url":"https://github.com/Hyper-Solutions/hermes-scraper/blob/374490095de2f9bb5e0ad0ee852789a32fb55897/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1308271634","full_name":"Parker-Fawcett/rebuild-dossier","url":"https://github.com/Parker-Fawcett/rebuild-dossier","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"unrelated","reason_en":"Rebuild Dossier extracts routes and contracts from an existing app to generate a rebuild specification and tests; its use of reverse engineering refers to requirements discovery.","reason_zh":"Rebuild Dossier 从现有应用提取路由和契约，生成重建规格与测试；这里的逆向工程指需求梳理，而非程序分析或目标重建。","evidence_url":"https://github.com/Parker-Fawcett/rebuild-dossier/blob/7e67b999e5b99d8d206ea4dae415baa774c95dad/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1308441631","full_name":"digows/cosmo","url":"https://github.com/digows/cosmo","batch_id":"run-42149552878-1","decision":"curated","curated_id":"cosmo-native-port-case"},{"id":"scan-1309014335","full_name":"AboveColin/tuya-mobile","url":"https://github.com/AboveColin/tuya-mobile","batch_id":"run-42149552878-1","decision":"curated","curated_id":"tuya-mobile-security-layer-case"},{"id":"scan-1310073777","full_name":"LambdaEd1th/ed1ths-pvz-toolkit","url":"https://github.com/LambdaEd1th/ed1ths-pvz-toolkit","batch_id":"run-42149552878-1","decision":"curated","curated_id":"ed1ths-pvz-toolkit"},{"id":"scan-1310363550","full_name":"Picachuchu69/msi-mystic-light-b860-x870-linux","url":"https://github.com/Picachuchu69/msi-mystic-light-b860-x870-linux","batch_id":"run-42149552878-1","decision":"curated","curated_id":"msi-mystic-light-b860-x870-linux-case"},{"id":"scan-1310833917","full_name":"lachlanmcalpine/colmi-ring","url":"https://github.com/lachlanmcalpine/colmi-ring","batch_id":"run-42201075883-1","decision":"hold","reason_code":"linking-policy","reason_en":"The Colmi R02 research includes substantive firmware analysis, but the repository commits complete byte-patched firmware images derived from the vendor image.","reason_zh":"Colmi R02 项目包含实际的固件分析，但仓库也提交了由厂商固件改造而成的完整二进制映像，需先作收录政策判断。","evidence_url":"https://github.com/lachlanmcalpine/colmi-ring/blob/4a0aa9debd6a8117203f5e3ed393a1d994f78e29/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1311051794","full_name":"ALXGtech/alxgtech-mafia1-mods","url":"https://github.com/ALXGtech/alxgtech-mafia1-mods","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"game-mod-no-re","reason_en":"The repository's published subject is installing force feedback, camera and shifter mods for Mafia; the documentation does not establish an RE investigation as its main work.","reason_zh":"仓库主要提供《Mafia》的力反馈、视角和排挡杆模组安装工具；仓库资料不足以把逆向调查视为项目主体。","evidence_url":"https://github.com/ALXGtech/alxgtech-mafia1-mods/blob/4a13de0ef78ae11527755d0644fe0565dc32ef36/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1311174204","full_name":"fmontes/linkcam","url":"https://github.com/fmontes/linkcam","batch_id":"run-42149552878-1","decision":"curated","curated_id":"linkcam-case"},{"id":"scan-1311213086","full_name":"RaphaelCaputo2/shark-k86-mac","url":"https://github.com/RaphaelCaputo2/shark-k86-mac","batch_id":"run-42149552878-1","decision":"curated","curated_id":"shark-k86-mac-case"},{"id":"scan-1311313470","full_name":"experienceds/dota2-offset-dumper","url":"https://github.com/experienceds/dota2-offset-dumper","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The Dota 2 dumper exports live player, entity-list and view-matrix offsets for reuse by external consumers, making game memory manipulation its practical focus.","reason_zh":"该 Dota 2 工具导出实时玩家、实体列表和视图矩阵偏移，供外部程序直接使用，实际用途集中在游戏内存操纵。","evidence_url":"https://github.com/experienceds/dota2-offset-dumper/blob/68ad6cde33897c14e0ace0e1974a8daaae18b50b/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1311320453","full_name":"prevotai/colmena","url":"https://github.com/prevotai/colmena","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"security-testing","reason_en":"Prevot's published artifact is a signed receipt and evidence for reproducing a known firmware CVE, with no firmware reverse-engineering method or findings presented.","reason_zh":"Prevot 发布的是已知固件 CVE 复现的签名凭证及证据，没有呈现固件逆向方法或研究发现。","evidence_url":"https://github.com/prevotai/colmena/blob/66b5cdb560dfc2fa607bd96665c82f7f051cb6fc/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1311391240","full_name":"dspl1236/PCM-Explorer","url":"https://github.com/dspl1236/PCM-Explorer","batch_id":"run-42149552878-1","decision":"curated","curated_id":"pcm-explorer"},{"id":"scan-1311496124","full_name":"hereioz/Aegis64","url":"https://github.com/hereioz/Aegis64","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"protection-tool","reason_en":"Aegis64's main purpose is to virtualize selected x86-64 instructions into custom bytecode and inject a VM to obscure program logic.","reason_zh":"Aegis64 的主要用途是把选定的 x86-64 指令转换为自定义字节码，并注入虚拟机以遮蔽程序逻辑。","evidence_url":"https://github.com/hereioz/Aegis64/blob/2799e01e8a3820a5e0db9e3a9983a2412e740e66/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1311862862","full_name":"nktkt/tasm-rs","url":"https://github.com/nktkt/tasm-rs","batch_id":"run-42119584443-1","decision":"curated","curated_id":"tasm-rs"},{"id":"scan-1311905600","full_name":"slastra/printrow","url":"https://github.com/slastra/printrow","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"general-application","reason_en":"printrow is primarily a browser label designer and printer client; its protocol research and core protocol libraries are identified as separate projects.","reason_zh":"printrow 的主体是浏览器标签设计与打印应用；文档将协议逆向成果及核心协议库指向其他项目。","evidence_url":"https://github.com/slastra/printrow/blob/6c42ad64e98711239510ca93731df9a2bc42cd0e/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1311952618","full_name":"athousanddetails/penbridge","url":"https://github.com/athousanddetails/penbridge","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"general-application","reason_en":"PenBridge is a macOS library converter that uses format work from crate-digger and libdjinterop; its own stated purpose is managing a dual-player USB drive.","reason_zh":"PenBridge 是管理双平台 USB 音乐盘的 macOS 曲库转换应用；格式知识明确来自 crate-digger 与 libdjinterop。","evidence_url":"https://github.com/athousanddetails/penbridge/blob/7db9dc9b3350f56a8fd52a950665f827b04b90f0/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1312129262","full_name":"AboveColin/fitdays","url":"https://github.com/AboveColin/fitdays","batch_id":"run-42149552878-1","decision":"curated","curated_id":"fitdays-protocol-case"},{"id":"scan-1312162302","full_name":"0iroN/trvision","url":"https://github.com/0iroN/trvision","batch_id":"run-42149552878-1","decision":"curated","curated_id":"trvision-case"},{"id":"scan-1312973587","full_name":"N0zoM1z0/touhou-solver-th08","url":"https://github.com/N0zoM1z0/touhou-solver-th08","batch_id":"run-42149552878-1","decision":"hold","reason_code":"linking-policy","reason_en":"Touhou Solver has substantial native game analysis, but the file list includes decoded TH08 stage, player, and script files derived from the commercial game.","reason_zh":"Touhou Solver 包含大量游戏原生行为分析，但文件列表也显示仓库提交了从商业游戏 TH08 解码得到的关卡、角色和脚本文件，需维护者裁定。","evidence_url":"https://github.com/N0zoM1z0/touhou-solver-th08/blob/b7584558a15b2f45eabd31fcee7ff347a5479831/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1313079263","full_name":"MarkShawn2020/macos-swift-binary-research","url":"https://github.com/MarkShawn2020/macos-swift-binary-research","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The Mole research and scripts patch license checks so a trial installation displays License Active and unlocks paid functionality.","reason_zh":"Mole 研究文档和脚本修改许可证校验，使试用安装显示 License Active 并放行付费功能，属于许可证绕过。","evidence_url":"https://github.com/MarkShawn2020/macos-swift-binary-research/blob/f3f116a5387fc63278c3abef9ac7c8722ee6cf0f/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1313310717","full_name":"Wdestroier/sogen_dart","url":"https://github.com/Wdestroier/sogen_dart","batch_id":"run-42149552878-1","decision":"curated","curated_id":"sogen-dart-bindings"},{"id":"scan-1313320038","full_name":"Enigma-Labs-Technology/pocket-client","url":"https://github.com/Enigma-Labs-Technology/pocket-client","batch_id":"run-42149552878-1","decision":"curated","curated_id":"pocket-client-case"},{"id":"scan-1313986189","full_name":"ss26367098/rofllens","url":"https://github.com/ss26367098/rofllens","batch_id":"run-42149552878-1","decision":"curated","curated_id":"rofllens"},{"id":"scan-1314268665","full_name":"hxreborn/ddg-tenor-bridge","url":"https://github.com/hxreborn/ddg-tenor-bridge","batch_id":"run-42149552878-1","decision":"curated","curated_id":"ddg-tenor-bridge-case"},{"id":"scan-1314283634","full_name":"RigZeeel/KeyAxis","url":"https://github.com/RigZeeel/KeyAxis","batch_id":"run-42149552878-1","decision":"curated","curated_id":"keyaxis-keyboard-hid-case"},{"id":"scan-1314365190","full_name":"LucasSKrewer/kenshi-modkit","url":"https://github.com/LucasSKrewer/kenshi-modkit","batch_id":"run-42149552878-1","decision":"curated","curated_id":"kenshi-modkit"},{"id":"scan-1314449700","full_name":"Xeon-Phi-Revival-Project/xeon-phi-revival","url":"https://github.com/Xeon-Phi-Revival-Project/xeon-phi-revival","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"general-application","reason_en":"Xeon Phi Revival's main deliverable is a revived Linux environment and toolchain for Knights Corner hardware; its research notes support that engineering work.","reason_zh":"Xeon Phi Revival 的主要产物是面向 Knights Corner 硬件的 Linux 环境与工具链，研究记录服务于这项工程。","evidence_url":"https://github.com/Xeon-Phi-Revival-Project/xeon-phi-revival/blob/93fbec32fd8792e7d82eb2d15de749da7bd64fd8/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1314494002","full_name":"ericboehs/aosmith-water-heater","url":"https://github.com/ericboehs/aosmith-water-heater","batch_id":"run-42149552878-1","decision":"curated","curated_id":"aosmith-water-heater-case"},{"id":"scan-1314572475","full_name":"brendangooden/j2208-band-tools","url":"https://github.com/brendangooden/j2208-band-tools","batch_id":"run-42149552878-1","decision":"curated","curated_id":"j2208-band-tools-case"},{"id":"scan-1314672439","full_name":"tarikcampos/MPC-Sample-Toolkit","url":"https://github.com/tarikcampos/MPC-Sample-Toolkit","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"general-application","reason_en":"MPCTK primarily creates and edits Akai MPC Sample music projects; its XPJ reader supports that application, while the source presents no reverse-engineering investigation.","reason_zh":"MPCTK 的主要用途是创建和编辑 Akai MPC Sample 音乐工程；XPJ 读取功能服务于该应用，资料没有呈现逆向研究。","evidence_url":"https://github.com/tarikcampos/MPC-Sample-Toolkit/blob/12f58e69f809ccb0c125ea6e2b82ca5ac5b60197/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1314813263","full_name":"SudoSaturn/eufy-local-ha","url":"https://github.com/SudoSaturn/eufy-local-ha","batch_id":"run-42149552878-1","decision":"curated","curated_id":"eufy-local-ha-case"},{"id":"scan-1315526781","full_name":"Wasabules/OpenPeats","url":"https://github.com/Wasabules/OpenPeats","batch_id":"run-42149552878-1","decision":"curated","curated_id":"openpeats-case"},{"id":"scan-1315713083","full_name":"nekolife1984/specback","url":"https://github.com/nekolife1984/specback","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"unrelated","reason_en":"specback derives specification documents from existing source code for maintenance and onboarding; its reverse direction concerns software documentation, not target reverse engineering.","reason_zh":"specback 从现有源码生成维护和交接用规格文档；这里的“逆向”指由代码回推文档，不是对目标程序进行逆向分析。","evidence_url":"https://github.com/nekolife1984/specback/blob/2543821c2850f88418e5702775071ab848314c5e/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1315973954","full_name":"GOG1071/hongtai-panel","url":"https://github.com/GOG1071/hongtai-panel","batch_id":"run-42149552878-1","decision":"curated","curated_id":"hongtai-panel-case"},{"id":"scan-1316432976","full_name":"SergeyZh/emotion-control-ha","url":"https://github.com/SergeyZh/emotion-control-ha","batch_id":"run-42149552878-1","decision":"curated","curated_id":"emotion-control-ha-case"},{"id":"scan-1317175618","full_name":"deonspengler/akp02","url":"https://github.com/deonspengler/akp02","batch_id":"run-42149552878-1","decision":"curated","curated_id":"akp02-display-protocol-case"},{"id":"scan-1317272694","full_name":"malcorex/Real-World-Malware-Analysis","url":"https://github.com/malcorex/Real-World-Malware-Analysis","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"malware-samples","reason_en":"The README analyzes the SEPAH.hta downloader, but the repository also distributes the analyzed HTA malware sample under source/.","reason_zh":"README 分析了 SEPAH.hta 下载器，但仓库也在 source/ 目录中直接提供了该恶意 HTA 样本。","evidence_url":"https://github.com/malcorex/Real-World-Malware-Analysis/blob/36cd5f9f9dae103f34634f6c4c6295d9693e5d05/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1317302723","full_name":"den-frie-vilje/cupertino-files","url":"https://github.com/den-frie-vilje/cupertino-files","batch_id":"run-42149552878-1","decision":"curated","curated_id":"cupertino-files"},{"id":"scan-1317531754","full_name":"Arad883/Entropy-Spot-The-Malware","url":"https://github.com/Arad883/Entropy-Spot-The-Malware","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"detection-only","reason_en":"EntropyVision colors file blocks by Shannon entropy and assigns a risk verdict; it does not inspect program structure or explain executable behavior.","reason_zh":"EntropyVision 按香农熵为文件块着色并给出风险判断；它不分析程序结构或解释可执行文件行为。","evidence_url":"https://github.com/Arad883/Entropy-Spot-The-Malware/blob/f8585a6f73605fc78f2cd03db1d2996c9022e3a4/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1317725094","full_name":"siohaza/sumotori-dreams-re","url":"https://github.com/siohaza/sumotori-dreams-re","batch_id":"run-42149552878-1","decision":"hold","reason_code":"linking-policy","reason_en":"The codebase appears to reconstruct Sumotori Dreams, but it also commits game levels, textures, audio and artwork, requiring a maintainer decision on redistributed assets.","reason_zh":"代码库似乎重建了 Sumotori Dreams，但也提交了游戏关卡、贴图、音频和美术资源，是否收录需要维护者判断。","evidence_url":"https://github.com/siohaza/sumotori-dreams-re/blob/b4c39c8eb6459604d89b64b306d4c580714b27a9/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1317848529","full_name":"vk-candpython/efildr","url":"https://github.com/vk-candpython/efildr","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"protection-tool","reason_en":"EFILDR compresses and encrypts EFI payloads for hidden in-memory execution and offers anti-analysis features; it protects binaries rather than analysing them.","reason_zh":"EFILDR 压缩、加密 EFI 载荷并在内存中隐蔽执行，还提供反分析功能；其用途是保护载荷，而非分析二进制。","evidence_url":"https://github.com/vk-candpython/efildr/blob/7e265792764c8b01a90bc0701a1ef25bfd1bd559/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1318150325","full_name":"Markthegamer108/RAVage","url":"https://github.com/Markthegamer108/RAVage","batch_id":"run-42149552878-1","decision":"hold","reason_code":"linking-policy","reason_en":"RAVage documents substantive firmware analysis, but the repository commits a 4,096-byte key table extracted from the proprietary tiptoi firmware update.","reason_zh":"RAVage 的固件分析内容充分，但仓库提交了从 tiptoi 专有固件更新中提取的 4096 字节密钥表，需维护者判断。","evidence_url":"https://github.com/Markthegamer108/RAVage/blob/67be8907135e4809f469283691388455999abe16/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1318195177","full_name":"Asphaltian/OpenRBX","url":"https://github.com/Asphaltian/OpenRBX","batch_id":"run-42149552878-1","decision":"hold","reason_code":"linking-policy","reason_en":"OpenRBX documents matching decompilation of 2007 Roblox, but its file list includes the source tree of a named commercial Codejock component library.","reason_zh":"OpenRBX 记录了对 2007 年 Roblox 的匹配反编译，但文件列表含有具名商业组件库 Codejock 的源码树，需维护者判断收录。","evidence_url":"https://github.com/Asphaltian/OpenRBX/blob/97571c20c67bd7552d200fe7f9902c7483ceac6f/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1318746355","full_name":"zeljkovranjes/l4d2-director-system-research","url":"https://github.com/zeljkovranjes/l4d2-director-system-research","batch_id":"run-42149552878-1","decision":"curated","curated_id":"l4d2-director-research-case"},{"id":"scan-1318760294","full_name":"akn-cybersec/windows-internals-security","url":"https://github.com/akn-cybersec/windows-internals-security","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"general-security","reason_en":"The 13-chapter guide teaches Windows architecture, authentication and endpoint defense; it does not present reverse-engineering instruction or findings as its subject.","reason_zh":"这份 13 章指南讲解 Windows 架构、身份认证和终端防护，主体并非逆向工程教学或研究成果。","evidence_url":"https://github.com/akn-cybersec/windows-internals-security/blob/cae4c3220de0c1c837ad5411cf1a144b9ddfba8b/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1318761791","full_name":"zeljkovranjes/aio-twobrains-system-research","url":"https://github.com/zeljkovranjes/aio-twobrains-system-research","batch_id":"run-42201075883-1","decision":"hold","reason_code":"linking-policy","reason_en":"The Alien: Isolation AI research contains detailed binary and runtime findings but also commits 26 proprietary behavior XML files and 13 configuration BML files.","reason_zh":"《Alien: Isolation》AI 研究包含详尽的二进制与运行时发现，但仓库也提交了 26 份专有行为 XML 和 13 份配置 BML 文件。","evidence_url":"https://github.com/zeljkovranjes/aio-twobrains-system-research/blob/873d4a4731db34ca91dfe762a4f288e19fc44061/README.MD","reviewed_at":"2026-11-06"},{"id":"scan-1318785844","full_name":"binathesnowyowl/ExtremeInjectorREd","url":"https://github.com/binathesnowyowl/ExtremeInjectorREd","batch_id":"run-42149552878-1","decision":"hold","reason_code":"linking-policy","reason_en":"ExtremeInjectorREd commits reconstructed source from a third-party proprietary injector, so reuse of the recovered program needs a maintainer decision.","reason_zh":"ExtremeInjectorREd 提交了第三方专有注入器的重建源码，收录这类恢复代码需要维护者裁定。","evidence_url":"https://github.com/binathesnowyowl/ExtremeInjectorREd/blob/6c6b8e7ebdc2a4de96bb10ee87cc8e90a029b858/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1319328356","full_name":"Izero/msp-csv-format","url":"https://github.com/Izero/msp-csv-format","batch_id":"run-42149552878-1","decision":"curated","curated_id":"msp-csv-format-case"},{"id":"scan-1319557406","full_name":"deanthecoder/MechRewired","url":"https://github.com/deanthecoder/MechRewired","batch_id":"run-42149552878-1","decision":"curated","curated_id":"mechrewired-mechwarrior-2-case"},{"id":"scan-1319717423","full_name":"Nipanii/youtube-ask-unlock","url":"https://github.com/Nipanii/youtube-ask-unlock","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The userscript's main function is restoring YouTube's region-gated Ask feature by injecting a captured button payload into watch responses.","reason_zh":"该用户脚本的主要用途是向观看页响应注入捕获的按钮数据，恢复 YouTube 按地区限制的 Ask 功能。","evidence_url":"https://github.com/Nipanii/youtube-ask-unlock/blob/67b8be1d58171688a45eb39ac1e03918c8a7a2eb/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1319920470","full_name":"niazlv/nrf52-eink-price-tag","url":"https://github.com/niazlv/nrf52-eink-price-tag","batch_id":"run-42149552878-1","decision":"curated","curated_id":"nrf52-eink-price-tag-case"},{"id":"scan-1320369668","full_name":"Geovane2dd/Ajazzy","url":"https://github.com/Geovane2dd/Ajazzy","batch_id":"run-42149552878-1","decision":"hold","reason_code":"linking-policy","reason_en":"Ajazzy documents a reconstructed mouse HID protocol, but its GUI commits product photos extracted from the vendor's Windows driver.","reason_zh":"Ajazzy 记录了重建的鼠标 HID 协议，但其图形界面提交了从厂商 Windows 驱动中提取的产品图片，需由维护者判断。","evidence_url":"https://github.com/Geovane2dd/Ajazzy/blob/369316d40f4652e7857174fc0700065815db0501/gui/images/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1320776346","full_name":"SHAJON-404/iOS-TikTok-SSL-Pinning-Bypass","url":"https://github.com/SHAJON-404/iOS-TikTok-SSL-Pinning-Bypass","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"distribution-site","reason_en":"The repository offers modified TikTok IPA downloads and setup directions, while its file list contains only Markdown and images, with no patch source or analysis.","reason_zh":"该仓库提供修改版 TikTok IPA 的下载与安装说明；文件列表只有 Markdown 和图片，没有补丁源码或分析成果。","evidence_url":"https://github.com/SHAJON-404/iOS-TikTok-SSL-Pinning-Bypass/blob/a5352c1afb9f88d2ef2caccab01ff55f6cb93f6c/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1322231543","full_name":"AzureFlow/xcancel-challenge","url":"https://github.com/AzureFlow/xcancel-challenge","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The solver's stated function is to pass XCancel's antibot gate by computing proof-of-work and submitting an encrypted browser fingerprint.","reason_zh":"该程序的明确用途是计算工作量证明并提交加密浏览器指纹，以通过 XCancel 的反机器人关卡。","evidence_url":"https://github.com/AzureFlow/xcancel-challenge/blob/953ed2f9b94d939490ffa28653da03e65de24416/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1322258980","full_name":"objevovat/fairplay-sap-core-airplay2-sender-authentication-handshake","url":"https://github.com/objevovat/fairplay-sap-core-airplay2-sender-authentication-handshake","batch_id":"run-42201075883-1","decision":"hold","reason_code":"linking-policy","reason_en":"The FairPlay SAP implementation contains Apple-derived white-box tables, so its publication of recovered proprietary data needs a maintainer linking decision.","reason_zh":"FairPlay SAP 实现包含从 Apple 程序恢复的白盒查找表，所发布的专有衍生数据需要维护者判断收录政策。","evidence_url":"https://github.com/objevovat/fairplay-sap-core-airplay2-sender-authentication-handshake/blob/370f9db2e26b21b4a710bdba5d51012c1239e736/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1322642731","full_name":"blaineam/benro-polaris-firmware-patcher","url":"https://github.com/blaineam/benro-polaris-firmware-patcher","batch_id":"run-42149552878-1","decision":"curated","curated_id":"benro-polaris-firmware-patcher-case"},{"id":"scan-1323441051","full_name":"aspctt/scvk","url":"https://github.com/aspctt/scvk","batch_id":"run-42149552878-1","decision":"curated","curated_id":"scvk-case"},{"id":"scan-1323966285","full_name":"mustafajaved304/CryptoTraceX","url":"https://github.com/mustafajaved304/CryptoTraceX","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"forensics-only","reason_en":"CryptoTraceX hashes files, extracts indicators and investigates wallets, while its dynamic behavior is simulated and no executable analysis is documented.","reason_zh":"CryptoTraceX 侧重文件哈希、威胁指标提取和钱包调查；其动态行为仅为模拟，文档未展示可执行文件分析。","evidence_url":"https://github.com/mustafajaved304/CryptoTraceX/blob/a92334cac7c440ecdeb02529a652fce6bb7bc318/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1324311597","full_name":"Lightning-13/rk-m75","url":"https://github.com/Lightning-13/rk-m75","batch_id":"run-42149552878-1","decision":"curated","curated_id":"rk-m75-case"},{"id":"scan-1324668306","full_name":"MikeWuPing/UEFI_Salamander","url":"https://github.com/MikeWuPing/UEFI_Salamander","batch_id":"run-42149552878-1","decision":"curated","curated_id":"salamander-uefi-case"},{"id":"scan-1325596948","full_name":"jaenster/d2mac-linux","url":"https://github.com/jaenster/d2mac-linux","batch_id":"run-42149552878-1","decision":"curated","curated_id":"d2mac-linux-case"},{"id":"scan-1326278593","full_name":"dbhavsar76/revanced-patches","url":"https://github.com/dbhavsar76/revanced-patches","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"These personal ReVanced patches remove video ads from the ZEE5 and SonyLIV streaming apps, so the deliverable circumvents those services' ad delivery.","reason_zh":"这些个人 ReVanced 补丁用于去除 ZEE5 和 SonyLIV 流媒体应用的视频广告，交付物的作用是规避这些服务的广告投放。","evidence_url":"https://github.com/dbhavsar76/revanced-patches/blob/6bc75292d834389afba0f2a4b03fb446d6b5cf26/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1326317476","full_name":"salmanmallah/packerscope","url":"https://github.com/salmanmallah/packerscope","batch_id":"run-42149552878-1","decision":"curated","curated_id":"packerscope"},{"id":"scan-1327005427","full_name":"consenting-hemogenesis659/Android-SSL-Pinning-Bypass","url":"https://github.com/consenting-hemogenesis659/Android-SSL-Pinning-Bypass","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"distribution-site","reason_en":"The README is a consumer download guide that links back to its own repository and the repository commits an opaque ZIP under docs/, the pattern of repackaged download repositories.","reason_zh":"README 是面向普通用户的下载指引，链接只指回仓库自身，并在 docs/ 下提交了内容不透明的 ZIP，属于转包下载仓库的典型形式。","evidence_url":"https://github.com/consenting-hemogenesis659/Android-SSL-Pinning-Bypass/blob/d5d18b40fc1a1eda9da52ce1354e21efe42d1aa8/docs/INSTAGRAM-ANALYSIS.md","reviewed_at":"2026-11-06"},{"id":"scan-1328916072","full_name":"NkAntony777/baiduwangpan-cli","url":"https://github.com/NkAntony777/baiduwangpan-cli","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"general-application","reason_en":"baiduwangpan-cli is chiefly a Baidu Netdisk file-management CLI and MCP service; its group API research supports that app rather than forming the project's primary subject.","reason_zh":"baiduwangpan-cli 主要是百度网盘文件管理 CLI 和 MCP 服务；群聊 API 逆向笔记服务于该应用，并非项目主体。","evidence_url":"https://github.com/NkAntony777/baiduwangpan-cli/blob/ccdacc553f4df591bd9fe77b97693847fde6e75c/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1329263718","full_name":"maximilianoide/sin-punishment-recompiled","url":"https://github.com/maximilianoide/sin-punishment-recompiled","batch_id":"run-42149552878-1","decision":"curated","curated_id":"sin-punishment-recompiled-case"},{"id":"scan-1329375371","full_name":"codypendant/aciq-minisplit-protocol","url":"https://github.com/codypendant/aciq-minisplit-protocol","batch_id":"run-42149552878-1","decision":"curated","curated_id":"aciq-minisplit-protocol-case"},{"id":"scan-1329562404","full_name":"jadgpanzer/CTF-Reverse-Dataset","url":"https://github.com/jadgpanzer/CTF-Reverse-Dataset","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"distribution-site","reason_en":"CTF Reverse Dataset is a repository of redistributed challenge files and executables arranged by event and problem, without its own reverse-engineering analysis.","reason_zh":"CTF Reverse Dataset 按赛事与题目存放大量转载的挑战文件和可执行程序，本仓库没有独立逆向分析成果。","evidence_url":"https://github.com/jadgpanzer/CTF-Reverse-Dataset/blob/654d875459b7756f8b20334c823537f4c33b343d/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1329668956","full_name":"andkorzh/FPGA-DENDY-SE","url":"https://github.com/andkorzh/FPGA-DENDY-SE","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"general-application","reason_en":"FPGA-DENDY-SE describes an FPGA game-console design and its video and audio outputs, without documenting analysis of an original console or a reconstruction method.","reason_zh":"FPGA-DENDY-SE 介绍 FPGA 游戏机设计及音视频输出，没有记录对原始主机的分析或还原方法。","evidence_url":"https://github.com/andkorzh/FPGA-DENDY-SE/blob/f1543f8cc7808ef89fb370d9fa523d8ec4598a42/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1330739787","full_name":"Enkerli/rnd-companion","url":"https://github.com/Enkerli/rnd-companion","batch_id":"run-42149552878-1","decision":"curated","curated_id":"rnd-companion-case"},{"id":"scan-1331007692","full_name":"lingxiaoyiyu-hub/open-secagent-marketplace","url":"https://github.com/lingxiaoyiyu-hub/open-secagent-marketplace","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"fork-or-mirror","reason_en":"Open SecAgent Marketplace wraps bethington/ghidra-mcp as its Ghidra bridge and groups it with agent skills and security plugins, without a documented original RE analyser.","reason_zh":"Open SecAgent Marketplace 将 bethington/ghidra-mcp 封装为 Ghidra 桥接插件，并汇集智能体技能和安全插件，未记载独立开发的逆向分析器。","evidence_url":"https://github.com/lingxiaoyiyu-hub/open-secagent-marketplace/blob/ca402b790619aa2415bcceadbd7cb3032f658c8f/plugins/ghidra-mcp-plugin/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1331553108","full_name":"hamodywe/imprint","url":"https://github.com/hamodywe/imprint","batch_id":"run-42149552878-1","decision":"curated","curated_id":"imprint-pe-triage"},{"id":"scan-1331577387","full_name":"saltyboosack-blip/Spider-Man-2-PS2-Recomp","url":"https://github.com/saltyboosack-blip/Spider-Man-2-PS2-Recomp","batch_id":"run-42149552878-1","decision":"curated","curated_id":"spider-man-2-ps2-recomp-case"},{"id":"scan-1331897397","full_name":"N0zoM1z0/th07","url":"https://github.com/N0zoM1z0/th07","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"duplicate-curated","reason_en":"This repository builds on the already curated some100/th07 reconstruction of the same TH07 1.00b source, adding matching corrections to that project.","reason_zh":"该仓库基于已收录的 some100/th07，继续修正同一《东方妖妖梦》1.00b 源码重建的匹配结果。","evidence_url":"https://github.com/N0zoM1z0/th07/blob/666428992b9545dd5791f2de5cbed66f78442854/README.md","reviewed_at":"2026-11-06","duplicate_of":"th07-decomp-case"},{"id":"scan-1332149520","full_name":"StyuDEV/ffxii-tza-tools","url":"https://github.com/StyuDEV/ffxii-tza-tools","batch_id":"run-42149552878-1","decision":"curated","curated_id":"ffxii-tza-tools"},{"id":"scan-1332201778","full_name":"infinition/sims-package2glb","url":"https://github.com/infinition/sims-package2glb","batch_id":"run-42149552878-1","decision":"curated","curated_id":"sims-package2glb"},{"id":"scan-1332391725","full_name":"tmolavi/geo-scope","url":"https://github.com/tmolavi/geo-scope","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"unrelated","reason_en":"GEO-Scope measures how AI answer engines mention and cite commercial entities; its own documentation explicitly removes algorithm reverse-engineering claims.","reason_zh":"GEO-Scope 衡量 AI 问答系统对商业实体的提及和引用；项目文档还明确移除了算法逆向工程方面的表述。","evidence_url":"https://github.com/tmolavi/geo-scope/blob/8907d9181e6f8d5c3831021cf528382194d1f710/DOCUMENTATION_ALIGNMENT_REPORT.md","reviewed_at":"2026-11-06"},{"id":"scan-1333204783","full_name":"Yuki13929/cursor2api","url":"https://github.com/Yuki13929/cursor2api","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"general-application","reason_en":"cursor2api's deliverable is an Anthropic and OpenAI-compatible gateway to models on a signed-in Cursor account.","reason_zh":"cursor2api 的交付物是把已登录 Cursor 账号的模型接入 Anthropic 和 OpenAI 兼容接口的网关。","evidence_url":"https://github.com/Yuki13929/cursor2api/blob/ebd29e0f9377a56f0b609683b9927cd75d18173f/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1333433866","full_name":"jfabienke/xgecu-pro","url":"https://github.com/jfabienke/xgecu-pro","batch_id":"run-42149552878-1","decision":"hold","reason_code":"linking-policy","reason_en":"xgecu-pro contains substantial programmer protocol analysis and a Rust driver, but also commits binary ROM dumps and FPGA bitstreams.","reason_zh":"xgecu-pro 包含扎实的编程器协议分析及 Rust 驱动，但仓库也提交了二进制 ROM 转储和 FPGA 位流，需维护者判断。","evidence_url":"https://github.com/jfabienke/xgecu-pro/blob/32c2bac89bf2ac2f238fe554ec3818f23117ce6a/dumps/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1333555548","full_name":"maks421400-lgtm/Walksnail-Ascent-VRX-UART","url":"https://github.com/maks421400-lgtm/Walksnail-Ascent-VRX-UART","batch_id":"run-42149552878-1","decision":"curated","curated_id":"walksnail-ascent-vrx-uart"},{"id":"scan-1334261469","full_name":"chrischall/opencode-copilot-plugin","url":"https://github.com/chrischall/opencode-copilot-plugin","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The deliverable exposes Microsoft 365 Copilot through an OpenAI-compatible proxy and trims agent requests to bypass the service's Disengaged filter and account throttling.","reason_zh":"该项目通过 OpenAI 兼容代理提供 Microsoft 365 Copilot，并裁剪智能体请求以绕过服务的 Disengaged 过滤及账号限流。","evidence_url":"https://github.com/chrischall/opencode-copilot-plugin/blob/b737b21ed4723218214bf1b561758c467febd0f5/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1334387650","full_name":"Asaiuta/reverse-workbench-skill","url":"https://github.com/Asaiuta/reverse-workbench-skill","batch_id":"run-42149552878-1","decision":"curated","curated_id":"reverse-workbench-skill"},{"id":"scan-1334586337","full_name":"kreycai/vc64_240p","url":"https://github.com/kreycai/vc64_240p","batch_id":"run-42149552878-1","decision":"curated","curated_id":"vc64-240p"},{"id":"scan-1334610703","full_name":"JuanCrakYT/RtG-Format","url":"https://github.com/JuanCrakYT/RtG-Format","batch_id":"run-42149552878-1","decision":"curated","curated_id":"rtg-format"},{"id":"scan-1335227115","full_name":"Guillain-RDCDE/HAP-Revival","url":"https://github.com/Guillain-RDCDE/HAP-Revival","batch_id":"run-42149552878-1","decision":"hold","reason_code":"linking-policy","reason_en":"HAP-Revival documents Sony player protocols and hardware, but its manuals directory also mirrors four Sony service and help-guide PDFs, requiring a linking decision.","reason_zh":"HAP-Revival 记录了 Sony 播放器协议与硬件研究，但仓库也镜像了四份 Sony 维修手册和帮助指南 PDF，需决定能否收录。","evidence_url":"https://github.com/Guillain-RDCDE/HAP-Revival/blob/01fcb8ac710c9919c3317d9bdb4dbb57c9aaeae8/docs/manuals/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1335355579","full_name":"wqzhellohhwy/so-rev-mcp","url":"https://github.com/wqzhellohhwy/so-rev-mcp","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"fork-or-mirror","reason_en":"The README says so-rev-mcp retains libnetcomm-rev-mcp's core algorithms and tool schemas while changing target-specific values into parameters.","reason_zh":"README 说明 so-rev-mcp 保留 libnetcomm-rev-mcp 的核心算法与工具 schema，主要将目标相关数值改为参数。","evidence_url":"https://github.com/wqzhellohhwy/so-rev-mcp/blob/8b4eff3fac2f4701a12946cd5ad0c2bfd72c4395/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1335586840","full_name":"AllobatesZaparo/malware-analysis","url":"https://github.com/AllobatesZaparo/malware-analysis","batch_id":"run-42149552878-1","decision":"curated","curated_id":"fl-studio-stealer-analysis-case"},{"id":"scan-1335653452","full_name":"Tejasva-Maurya/CodeAssist","url":"https://github.com/Tejasva-Maurya/CodeAssist","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"unrelated","reason_en":"CodeAssist extracts source-code structure to generate architecture documents, business requirements, and Agile backlogs; its subject is software documentation.","reason_zh":"CodeAssist 从代码库提取结构，用于生成架构文档、业务需求和敏捷待办事项，主题是软件文档自动化。","evidence_url":"https://github.com/Tejasva-Maurya/CodeAssist/blob/1f68eacc4c5ca84b4792929e0eb438c86f503509/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1336187388","full_name":"woutersteegers/reolink-unifi-protect","url":"https://github.com/woutersteegers/reolink-unifi-protect","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"fork-or-mirror","reason_en":"This repository credits the protocol and camera-bridge additions to the andy83-projects fork of keshavdv/unifi-cam-proxy rather than documenting original work by this copy.","reason_zh":"该仓库将协议研究和摄像头桥接功能归于 keshavdv/unifi-cam-proxy 的 andy83-projects 分支，未说明此副本有独立成果。","evidence_url":"https://github.com/woutersteegers/reolink-unifi-protect/blob/42dda7cebf748d9ec31849d9341ad3e30b29f02d/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1336686337","full_name":"carmine-bin/tempotec-v3-blaze-mod","url":"https://github.com/carmine-bin/tempotec-v3-blaze-mod","batch_id":"run-42149552878-1","decision":"hold","reason_code":"linking-policy","reason_en":"The TempoTec firmware investigation includes original tools and findings, but the repository also commits imported HiBy-style artwork and firmware-derived interface assets.","reason_zh":"TempoTec 固件研究包含原创工具和分析成果，但仓库也提交了移植的 HiBy 风格美术资源及源于固件的界面素材。","evidence_url":"https://github.com/carmine-bin/tempotec-v3-blaze-mod/blob/e9960e5b83b4038cf6a9eb2993d2ce482cd5a012/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1338686923","full_name":"HengboLee/product-reverse-engineering-skill","url":"https://github.com/HengboLee/product-reverse-engineering-skill","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"unrelated","reason_en":"The skill reconstructs a product's user journey and architecture from pages and screenshots, rather than analyzing software internals or an original program.","reason_zh":"该 Skill 根据页面和截图梳理产品用户旅程与架构，研究对象不是软件内部实现或原程序行为。","evidence_url":"https://github.com/HengboLee/product-reverse-engineering-skill/blob/63a3ad29457bdff5f5918e27edbfcf38b9907575/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1338756242","full_name":"nico-la-distro/pcap-incident-investigation","url":"https://github.com/nico-la-distro/pcap-incident-investigation","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"forensics-only","reason_en":"The repository frames malware inspection as one stage of a PCAP incident investigation whose stated outputs are IOCs, impact assessment and detection rules.","reason_zh":"仓库将恶意软件检查作为 PCAP 事件调查的一环，明确以失陷指标、影响评估和检测规则为主要产出。","evidence_url":"https://github.com/nico-la-distro/pcap-incident-investigation/blob/f1f4c7159dc5de60db6baf9f970d17a118510580/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1338776968","full_name":"GiannisTDM/parrot-bebop2-rf-lab","url":"https://github.com/GiannisTDM/parrot-bebop2-rf-lab","batch_id":"run-42149552878-1","decision":"hold","reason_code":"needs-maintainer-decision","reason_en":"The radio research is substantive, but its tool stages higher transmit-power settings on a drone and controller that the author says may exceed regional EIRP limits.","reason_zh":"该无线电研究有实质内容，但工具会为无人机及控制器写入更高发射功率设置；作者也指出可能超过当地 EIRP 限值，需维护者裁定。","evidence_url":"https://github.com/GiannisTDM/parrot-bebop2-rf-lab/blob/5fbdb38619778fc15c6073ac035fc218f999e0e0/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1338905826","full_name":"andrew-mauricio/Conan-Api","url":"https://github.com/andrew-mauricio/Conan-Api","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"game-mod-no-re","reason_en":"Conan-Api's primary deliverable is a server-side plugin framework for changing Conan Exiles server behavior; runtime reflection serves plugin calls rather than analysis.","reason_zh":"Conan-Api 的主要用途是扩展 Conan Exiles 私人服务器功能；运行时反射用于插件调用，材料没有将其作为游戏分析工具。","evidence_url":"https://github.com/andrew-mauricio/Conan-Api/blob/764878005bbd64a1fca5f57548bba9d24b4679e3/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1338967192","full_name":"zombiegirlcz/elf_loader","url":"https://github.com/zombiegirlcz/elf_loader","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"general-application","reason_en":"elf_loader primarily runs glibc Linux programs on Android through its own ELF loader and proot-compatible environment; executable analysis is incidental.","reason_zh":"elf_loader 的主要用途是在 Android 上加载并运行 glibc Linux 程序，提供兼容 proot 的环境；可执行文件分析只是附带功能。","evidence_url":"https://github.com/zombiegirlcz/elf_loader/blob/5b5a9431fae0580a1ed229cb54a19da818b87728/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1339266131","full_name":"jyuwaaw/mindnode-mcp","url":"https://github.com/jyuwaaw/mindnode-mcp","batch_id":"run-42186805426-1","decision":"curated","curated_id":"mindnode-mcp"},{"id":"scan-1339535839","full_name":"tirodz/CMF-Ringtone-Tool","url":"https://github.com/tirodz/CMF-Ringtone-Tool","batch_id":"run-42149552878-1","decision":"hold","reason_code":"linking-policy","reason_en":"The ACT codec research and tooling are substantive, but the file list includes stock ringtone WAV and ACT files derived from the watch and SDK.","reason_zh":"ACT 编解码研究及工具具有实质内容，但仓库文件列表包含来自手表和 SDK 的原版铃声 WAV 与 ACT 文件，需审定再分发问题。","evidence_url":"https://github.com/tirodz/CMF-Ringtone-Tool/blob/6e867e18f7984df694a2a0e75a08c78c5c06603c/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1339859045","full_name":"jawadasghar471600-dot/wi-fi-fortress-auditor","url":"https://github.com/jawadasghar471600-dot/wi-fi-fortress-auditor","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"no-real-content","reason_en":"SentinelDrift describes a Wi-Fi audit application, but the file list contains only a README, web assets and workflow files, with none of the claimed core modules.","reason_zh":"SentinelDrift 的 README 描述无线网络审计应用，但文件列表只有说明、网页素材和工作流，没有文中声称的核心模块。","evidence_url":"https://github.com/jawadasghar471600-dot/wi-fi-fortress-auditor/blob/237a2d4676538bad811885b25b1845e6baac5483/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1339939408","full_name":"echoparallex/Nauz-Binary-Detective","url":"https://github.com/echoparallex/Nauz-Binary-Detective","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"no-real-content","reason_en":"The README claims a C++ analysis engine, signatures and test corpus, while the six-file repository contains no engine source or signature database.","reason_zh":"README 声称具备 C++ 分析引擎、特征库和测试语料，但六个仓库文件中没有引擎源码或特征数据库。","evidence_url":"https://github.com/echoparallex/Nauz-Binary-Detective/blob/10dfb82191c0fe909d697cfae20b51edd41ef6cb/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1339940532","full_name":"Jay-hue-cd/x64dbg-format-detector","url":"https://github.com/Jay-hue-cd/x64dbg-format-detector","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"no-real-content","reason_en":"TraceForge claims a binary-analysis plugin and signature engine, but the repository contains an HTML page and images, with no plugin source or signature data.","reason_zh":"TraceForge 宣称提供二进制分析插件和签名引擎，但仓库只有网页与图片，没有插件源码或签名数据。","evidence_url":"https://github.com/Jay-hue-cd/x64dbg-format-detector/blob/ee017273e8b5c4b246b9efc8fd39f1de58b64c71/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1340069492","full_name":"dimer47/PocketPrinter5890","url":"https://github.com/dimer47/PocketPrinter5890","batch_id":"run-42149552878-1","decision":"curated","curated_id":"pocketprinter5890-case"},{"id":"scan-1340314376","full_name":"Kyraws/inactive-reset","url":"https://github.com/Kyraws/inactive-reset","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"Inactive Reset is a Le Mans Ultimate practice tool for teleporting a car, changing tyre state and altering practice rules.","reason_zh":"Inactive Reset 是《勒芒终极赛》的练习工具，可传送车辆、调整轮胎状态并修改练习规则。","evidence_url":"https://github.com/Kyraws/inactive-reset/blob/b5e1fbf25106b1c29f73f931c00447823a91af0d/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1340380491","full_name":"ludapao675-debug/toutiao-news-feed-crawl","url":"https://github.com/ludapao675-debug/toutiao-news-feed-crawl","batch_id":"run-42149552878-1","decision":"hold","reason_code":"linking-policy","reason_en":"The documented Toutiao client analysis is substantive, but the repository commits raw ByteDance JavaScript files used to reproduce its signatures.","reason_zh":"项目对今日头条客户端的分析有实质内容，但仓库收录了用于复现签名的字节跳动原始 JavaScript 文件，需维护者判断。","evidence_url":"https://github.com/ludapao675-debug/toutiao-news-feed-crawl/blob/3af87c981f12131ec123b691f594437a2efb499e/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1340872200","full_name":"SaigyoujYuyuko/touhou-engine","url":"https://github.com/SaigyoujYuyuko/touhou-engine","batch_id":"run-42149552878-1","decision":"curated","curated_id":"touhou-engine-case"},{"id":"scan-1341098525","full_name":"CtxtArc/malware-analysis","url":"https://github.com/CtxtArc/malware-analysis","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"malware-samples","reason_en":"The repository contains analysis reports, but it also commits live malware payloads, executable samples, and decompiled malware source across its sample folders.","reason_zh":"仓库虽有分析报告，但各样本目录同时提交了可运行恶意载荷、可执行样本和反编译后的恶意代码。","evidence_url":"https://github.com/CtxtArc/malware-analysis/blob/5804402c2e6b74430f07a672b88356d73ac9fa5b/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1341478042","full_name":"Akoi89/prosecutors-path","url":"https://github.com/Akoi89/prosecutors-path","batch_id":"run-42149552878-1","decision":"hold","reason_code":"linking-policy","reason_en":"The port has detailed script-command analysis and build tools, but it also commits six close-up pictures from the commercial game, requiring a maintainer decision.","reason_zh":"该移植项目有详细的脚本命令分析和构建工具，但也提交了商业游戏中的六张特写图片，需要维护者决定能否收录。","evidence_url":"https://github.com/Akoi89/prosecutors-path/blob/fa1a18cd49f30301c4c6f29bae0e2430280a9648/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1341625749","full_name":"Loong0x00/rtx-5090-high-voltage-low-clock","url":"https://github.com/Loong0x00/rtx-5090-high-voltage-low-clock","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"upstream-unavailable","reason_en":"The repository Loong0x00/rtx-5090-high-voltage-low-clock no longer resolves: the GraphQL lookup and a git clone both failed on 2026-11-06.","reason_zh":"仓库 Loong0x00/rtx-5090-high-voltage-low-clock 已无法访问：2026-11-06 的 GraphQL 查询和 git clone 均失败。","evidence_url":"https://github.com/Loong0x00/rtx-5090-high-voltage-low-clock/blob/0d5822e4b9c00082a5245b46247cd4d3b056c5ec/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1342231034","full_name":"elasticjava/viture-v2","url":"https://github.com/elasticjava/viture-v2","batch_id":"run-42149552878-1","decision":"curated","curated_id":"viture-v2-case"},{"id":"scan-1342311442","full_name":"nathanbrittin/BikeStation","url":"https://github.com/nathanbrittin/BikeStation","batch_id":"run-42149552878-1","decision":"curated","curated_id":"bikestation-case"},{"id":"scan-1342534830","full_name":"lwtw123456/flutter-win64-re","url":"https://github.com/lwtw123456/flutter-win64-re","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The project's concrete Reqable and Rive patches unlock subscription features and paid export for free users, placing its principal work in licence evasion.","reason_zh":"项目中的 Reqable 和 Rive 补丁让用户绕过订阅限制并免费导出付费格式，主要成果属于许可限制规避。","evidence_url":"https://github.com/lwtw123456/flutter-win64-re/blob/cdec8dea81100bc2e807a0af1cfe21acebc91734/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1343361067","full_name":"nmhuei/ctf-toolkit","url":"https://github.com/nmhuei/ctf-toolkit","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"general-security","reason_en":"CTF Toolkit manages contest challenges, containers, flags and automated solving; its documented features do not center on reverse engineering.","reason_zh":"CTF Toolkit 主要管理竞赛题目、容器、Flag 和自动解题；文档没有将逆向分析作为核心功能。","evidence_url":"https://github.com/nmhuei/ctf-toolkit/blob/6ea1cd6725216d1c5ac66e207b15dfa894fb0495/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1343372517","full_name":"AhmedTheNetCoder/Padlet-Like-Bot","url":"https://github.com/AhmedTheNetCoder/Padlet-Like-Bot","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"Padlet Reaction Engine reproduces Padlet's private reaction request to place multiple reactions concurrently, making the working tool an engagement-abuse bot.","reason_zh":"Padlet Reaction Engine 复现 Padlet 的内部表态请求，并可并发批量添加表态，实际工具属于互动量滥用机器人。","evidence_url":"https://github.com/AhmedTheNetCoder/Padlet-Like-Bot/blob/41f24d7abcc5a1c0bd1cec022846fd4a52fda7b1/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1343729779","full_name":"blessed0x/x3vu","url":"https://github.com/blessed0x/x3vu","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"personal-profile","reason_en":"x3vu is a personal manifesto and portfolio linking to separate iOS tools; its files are mainly generated profile cards rather than an RE project.","reason_zh":"x3vu 是个人宣言与作品展示页，链接到独立的 iOS 工具；仓库文件主要是生成的个人资料卡片。","evidence_url":"https://github.com/blessed0x/x3vu/blob/63d4d43c6b8d5649c5d4e398f1885f51d69abc57/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1344190973","full_name":"Sigfrodr/libfprint-goodixtls","url":"https://github.com/Sigfrodr/libfprint-goodixtls","batch_id":"run-42149552878-1","decision":"curated","curated_id":"libfprint-goodixtls-case"},{"id":"scan-1345013280","full_name":"egormagurin/EldenRingMap","url":"https://github.com/egormagurin/EldenRingMap","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"general-application","reason_en":"Elden Ring Live Map is primarily a play companion; its save-format and archive investigations support map generation and progress tracking rather than being its primary subject.","reason_zh":"Elden Ring Live Map 主要是游戏辅助地图；存档格式和资源档案研究用于生成地图及追踪进度，并非项目主旨。","evidence_url":"https://github.com/egormagurin/EldenRingMap/blob/48f42e570ada1dd28717d7ce56aaeb92ee14521b/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1345028968","full_name":"eliel9012/grsimwrite-mac","url":"https://github.com/eliel9012/grsimwrite-mac","batch_id":"run-42149552878-1","decision":"curated","curated_id":"grsimwrite-mac-case"},{"id":"scan-1345662229","full_name":"000nico/kdemulator","url":"https://github.com/000nico/kdemulator","batch_id":"run-42149552878-1","decision":"curated","curated_id":"kdemulator"},{"id":"scan-1346045968","full_name":"aklto/PyEilik","url":"https://github.com/aklto/PyEilik","batch_id":"run-42149552878-1","decision":"curated","curated_id":"pyeilik-case"},{"id":"scan-1346706671","full_name":"JordiRigau/hp-prime-kit","url":"https://github.com/JordiRigau/hp-prime-kit","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"development-tool","reason_en":"hp-prime-kit primarily documents HP Prime programming and supplies a linter, interpreter and package builder; its decoded formats support that development workflow.","reason_zh":"hp-prime-kit 的主体是 HP Prime 编程参考资料，以及用于编写、检查和打包程序的工具；格式解读服务于这一开发流程。","evidence_url":"https://github.com/JordiRigau/hp-prime-kit/blob/7581215282b7a90d13718ca761b4ce55aa7e8c20/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1347788818","full_name":"SHAJON-404/frida-server","url":"https://github.com/SHAJON-404/frida-server","batch_id":"run-42149552878-1","decision":"exclude","reason_code":"development-tool","reason_en":"This package automates downloading, checking, and starting an existing frida-server on Android; it supplies no instrumentation or analysis capability of its own.","reason_zh":"该工具包自动下载、校验并启动现有的 Android frida-server，自身没有提供插桩或分析功能。","evidence_url":"https://github.com/SHAJON-404/frida-server/blob/f65752462518864f3eb9a4157dff1fece1074e41/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1348856243","full_name":"dmanresa-saes/surface-ipu6-cameras","url":"https://github.com/dmanresa-saes/surface-ipu6-cameras","batch_id":"run-42149552878-1","decision":"hold","reason_code":"linking-policy","reason_en":"The Surface camera project publishes tuning YAML derived from Microsoft's OEM .aiqb calibration files; a maintainer must assess those derived proprietary data files.","reason_zh":"Surface 相机项目发布了从 Microsoft OEM .aiqb 校准文件推导的调校 YAML；这类衍生专有数据是否适合收录需由维护者判断。","evidence_url":"https://github.com/dmanresa-saes/surface-ipu6-cameras/blob/7a03f7c88f7122c790fdb34a4ac440c2ca4f612a/config/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1348973193","full_name":"Belik1982/esp32-makita-xgt-bms-reader","url":"https://github.com/Belik1982/esp32-makita-xgt-bms-reader","batch_id":"run-42149552878-1","decision":"hold","reason_code":"needs-maintainer-decision","reason_en":"The ESP32 tool implements a Makita battery lockout reset, which can clear a fault flag without fixing the underlying cell condition; this needs a maintainer decision.","reason_zh":"该 ESP32 工具可重置 Makita 电池锁定标志，但故障电芯状况不会随之修复；是否收录需要维护者判断。","evidence_url":"https://github.com/Belik1982/esp32-makita-xgt-bms-reader/blob/2bc7dfc6fdd92039d6dfd37fbe1384af87cc1f50/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1349420480","full_name":"cluster2600/porscheparts","url":"https://github.com/cluster2600/porscheparts","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"unrelated","reason_en":"porscheparts studies physical Porsche 911 components through CAD design and simulation, outside the catalog's software, firmware, protocol, and device-analysis scope.","reason_zh":"porscheparts 使用 CAD 与仿真研究保时捷 911 的实体零件，主题不属于软件、固件、协议或设备逆向分析范围。","evidence_url":"https://github.com/cluster2600/porscheparts/blob/579fc9c8ddf9f8d632935e6b75bc00d4273fe6c1/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1351200810","full_name":"yuanfangdeshanlaoou/ctf-writeups","url":"https://github.com/yuanfangdeshanlaoou/ctf-writeups","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"general-security","reason_en":"This COMPFEST write-up bundle mainly covers mixed CTF cryptography, forensics and blockchain challenges alongside one reverse challenge.","reason_zh":"这组 COMPFEST 解题记录混合了密码学、取证和区块链题目，逆向题仅是其中一项，整体属于综合 CTF 内容。","evidence_url":"https://github.com/yuanfangdeshanlaoou/ctf-writeups/blob/f03aa96bb7be49260f358ed8668327cbc5679288/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1351257830","full_name":"TiaMEOWS/ransomforensics","url":"https://github.com/TiaMEOWS/ransomforensics","batch_id":"run-42119584443-1","decision":"hold","reason_code":"linking-policy","reason_en":"ransomforensics implements a Conti footer parser, but the README says that format was documented from leaked locker source, which requires a maintainer decision.","reason_zh":"ransomforensics 实现了 Conti 文件尾解析器，但说明文件称其格式依据泄露的加密器源码整理，需由维护者判断是否收录。","evidence_url":"https://github.com/TiaMEOWS/ransomforensics/blob/a535bff7d0d5205e5922d512a2153df43fb9d049/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1351471900","full_name":"elchrysaki/social-app-teardown","url":"https://github.com/elchrysaki/social-app-teardown","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"unrelated","reason_en":"social-app-teardown is a product, UX and marketing study of social platforms based on observation and published sources, without technical RE or a reconstructed service.","reason_zh":"social-app-teardown 依据观察和公开资料研究社交平台的产品、交互与营销，没有技术逆向分析或服务重建。","evidence_url":"https://github.com/elchrysaki/social-app-teardown/blob/07c8373e98f8cc2848ee70a5d75a0f961dcbfe2d/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1351574648","full_name":"glizzykingdreko/botdeflector-bypass","url":"https://github.com/glizzykingdreko/botdeflector-bypass","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The scripts are designed to solve BotDeflector challenges and pass Queue-it waiting-room checks, making access-control evasion their primary purpose.","reason_zh":"这些脚本以解答 BotDeflector 挑战、通过 Queue-it 等候室检查为主要用途，属于访问控制规避。","evidence_url":"https://github.com/glizzykingdreko/botdeflector-bypass/blob/a81cc107aabd4ac1873baa102ba4eb1d3fec5a17/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1351687703","full_name":"JeanExtreme002/Picklock","url":"https://github.com/JeanExtreme002/Picklock","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"general-application","reason_en":"Picklock is a terminal interface to PyMemoryEditor, which performs every memory read, write, scan and pointer walk.","reason_zh":"Picklock 是 PyMemoryEditor 的终端界面；内存读取、写入、扫描和指针遍历均由后者完成。","evidence_url":"https://github.com/JeanExtreme002/Picklock/blob/172b3d1c45bc8115ca91074d00e51fe22433fec5/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1351736434","full_name":"cageyluck/GhidraDecompilerPNGExporter","url":"https://github.com/cageyluck/GhidraDecompilerPNGExporter","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"development-tool","reason_en":"The script renders Ghidra's existing decompiler text as PNG files and a CSV log; it adds an export convenience rather than a new analysis capability.","reason_zh":"该脚本将 Ghidra 已生成的反编译文本渲染为 PNG，并写出 CSV 日志，主要提供导出便利，没有新增分析能力。","evidence_url":"https://github.com/cageyluck/GhidraDecompilerPNGExporter/blob/285c1482f0d5d1bb7cef2d0b2779e5a828d567ba/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1351993174","full_name":"Akoi89/tgaa-3ds-english-patch","url":"https://github.com/Akoi89/tgaa-3ds-english-patch","batch_id":"run-42119584443-1","decision":"hold","reason_code":"linking-policy","reason_en":"The 3DS patch includes executable research, but its release distributes installable updates and DLC carrying Capcom English text, voices and art.","reason_zh":"该 3DS 补丁包含可执行文件研究，但发布包提供含 Capcom 英文文本、配音与美术内容的可安装更新及 DLC，需维护者审定链接政策。","evidence_url":"https://github.com/Akoi89/tgaa-3ds-english-patch/blob/9539f67edc31d29e9ff9f895d857feebe8e88beb/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1353986402","full_name":"ParallelNode/hashwho","url":"https://github.com/ParallelNode/hashwho","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"general-security","reason_en":"hashwho identifies password-hash strings and prints hashcat or John cracking commands; it does not analyze software or reconstruct a target.","reason_zh":"hashwho 识别口令哈希字符串并生成 hashcat 或 John 破解命令，不以软件逆向或目标重建为主要内容。","evidence_url":"https://github.com/ParallelNode/hashwho/blob/ac1c72d5e8c1da0e82fdef6377966f3a5424ebe2/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1355034080","full_name":"reshot2005/import-export-analyzer","url":"https://github.com/reshot2005/import-export-analyzer","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"no-real-content","reason_en":"Although its README promises import and export analysis, the methodology identifies the implementation as a template that only hashes files.","reason_zh":"项目首页声称分析导入导出 API，但方法文档明确说明现有实现只是计算文件哈希的模板。","evidence_url":"https://github.com/reshot2005/import-export-analyzer/blob/2a18c43fcb53c67c065f17ec5f9fa079aa25c020/docs/methodology.md","reviewed_at":"2026-11-06"},{"id":"scan-1355039725","full_name":"reshot2005/string-intelligence-analyzer","url":"https://github.com/reshot2005/string-intelligence-analyzer","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"no-real-content","reason_en":"The methodology identifies the shipped implementation as a template that only hashes one file, contradicting the README's string classification claims.","reason_zh":"方法文档说明现有实现只是对单个文件计算哈希的模板，与首页宣称的字符串提取分类不符。","evidence_url":"https://github.com/reshot2005/string-intelligence-analyzer/blob/dcf640f9d50046ffefc9e176a5f92ff554c22ac2/docs/methodology.md","reviewed_at":"2026-11-06"},{"id":"scan-1355086577","full_name":"pjthulin/hardsid4u","url":"https://github.com/pjthulin/hardsid4u","batch_id":"run-42119584443-1","decision":"curated","curated_id":"hardsid4u-case"},{"id":"scan-1355482837","full_name":"mikasaw/wvmp","url":"https://github.com/mikasaw/wvmp","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"protection-tool","reason_en":"WVmp's primary function is to virtualize and protect marked regions of Windows PE executables, with anti-debug and encryption passes; its analysis serves that protection pipeline.","reason_zh":"WVmp 的主要用途是将 Windows PE 程序中的标记区域虚拟化并加以保护，还包含反调试和加密步骤；分析阶段服务于保护流程。","evidence_url":"https://github.com/mikasaw/wvmp/blob/5c924a8d01ebc0e16d2e76ed2e63ebecef4722a3/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1355886789","full_name":"Smkh4x/SanLibre","url":"https://github.com/Smkh4x/SanLibre","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"no-real-content","reason_en":"SanLibre claims a GTA San Andreas port, but the sole project source opens an SDL window and handles input without game loading or reconstruction.","reason_zh":"SanLibre 声称移植 GTA San Andreas，但唯一的项目源码只创建 SDL 窗口并处理输入，没有游戏加载或重建内容。","evidence_url":"https://github.com/Smkh4x/SanLibre/blob/bb5fe9e70b44b8da7afe511b2c6a695d1476d34c/src/main.cpp","reviewed_at":"2026-11-06"},{"id":"scan-1356477328","full_name":"franzenzenhofer/chrome-tab-group-cleaner","url":"https://github.com/franzenzenhofer/chrome-tab-group-cleaner","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"general-application","reason_en":"chrome-tab-group-cleaner is a bulk deletion utility for saved browser groups; its profile-format findings support that application rather than a primary RE investigation.","reason_zh":"chrome-tab-group-cleaner 的主要用途是批量删除浏览器已保存标签组；配置文件格式研究服务于这项日常清理功能。","evidence_url":"https://github.com/franzenzenhofer/chrome-tab-group-cleaner/blob/3f9d94af3b150583777af27795225e29852a5f80/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1357121826","full_name":"TLcmmmm/hermes-unrestricted","url":"https://github.com/TLcmmmm/hermes-unrestricted","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"unrelated","reason_en":"Hermes Unrestricted modifies agent approvals, filtering and model-provider setup; its reverse-engineering language appears only in a general persona file.","reason_zh":"Hermes Unrestricted 修改智能体审批、过滤和模型接入；逆向工程只出现在通用角色设定中，并非项目功能。","evidence_url":"https://github.com/TLcmmmm/hermes-unrestricted/blob/732a888712b21240b7bee3ec7a2bb8a8728a3043/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1358254111","full_name":"1837620622/ck-pi-extension","url":"https://github.com/1837620622/ck-pi-extension","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"no-real-content","reason_en":"The monorepo's reverse-engineering item injects a pentest or reverse-workflow directive into Pi; its other packages provide status, model routing and retry utilities.","reason_zh":"仓库中与逆向相关的 Pi Redkit 仅注入渗透或逆向工作指令；其余包提供状态栏、模型路由和重试功能。","evidence_url":"https://github.com/1837620622/ck-pi-extension/blob/139785991c0a351af987ab30c8f99c6b43c5bbda/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1358334456","full_name":"Gpiovesana/baseus-presenter-linux","url":"https://github.com/Gpiovesana/baseus-presenter-linux","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"general-application","reason_en":"The repository is primarily a Linux presenter application; it mentions reverse-mapped buttons but provides no separate protocol findings or analysis subject.","reason_zh":"仓库主要是 Linux 演示器应用；虽提到按键经逆向映射，但未提供独立的协议研究或分析内容。","evidence_url":"https://github.com/Gpiovesana/baseus-presenter-linux/blob/0c4baf1e9d0a1be570160ecba07e1d762f074b81/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1360030229","full_name":"official-Arvind/redmi-note-12-pro-5g-ruby","url":"https://github.com/official-Arvind/redmi-note-12-pro-5g-ruby","batch_id":"run-42201075883-1","decision":"hold","reason_code":"linking-policy","reason_en":"The Redmi Note 12 Pro repository publishes a reverse-engineering reference alongside extracted firmware artifacts, APKs, and decompiled Joyose source that require a linking decision.","reason_zh":"Redmi Note 12 Pro 仓库在逆向研究文档之外，还收录提取的固件资料、APK 和 Joyose 反编译源码，需先确定收录链接政策。","evidence_url":"https://github.com/official-Arvind/redmi-note-12-pro-5g-ruby/blob/5955ecac70ab0ffcc0805b402d2ae8613397659d/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1360145462","full_name":"nckirik/legacy-autopsy","url":"https://github.com/nckirik/legacy-autopsy","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"unrelated","reason_en":"Legacy Autopsy documents an agent protocol for recovering architecture and specifications from legacy source repositories, rather than analysing shipped software or protocols.","reason_zh":"Legacy Autopsy 设计的是从遗留源码仓库整理架构与规格的智能体流程，主题不涉及已发布程序或通信协议的逆向分析。","evidence_url":"https://github.com/nckirik/legacy-autopsy/blob/2cb49077fb0c8f549c90fbb44efebd1e614fc084/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1361566282","full_name":"feliksyasnopolski/nevedoma-zverushka","url":"https://github.com/feliksyasnopolski/nevedoma-zverushka","batch_id":"run-42119584443-1","decision":"hold","reason_code":"linking-policy","reason_en":"The device-enablement work has substantial code and documentation, but the repository includes captured Lenovo init files, including one marked Confidential and Restricted.","reason_zh":"设备适配项目有大量代码和文档，但仓库收录了从 Lenovo 设备提取的 init 文件，其中一份带有“Confidential and Restricted”限制声明。","evidence_url":"https://github.com/feliksyasnopolski/nevedoma-zverushka/blob/118bf0b66dd99b2456676473f566b1e9aa283f7f/vendor/init-corpus/PROVENANCE.md","reviewed_at":"2026-11-06"},{"id":"scan-1361668998","full_name":"rootkiller6788/PromptLens","url":"https://github.com/rootkiller6788/PromptLens","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"unrelated","reason_en":"PromptLens estimates image and video generation prompts through vision analysis; its use of reverse engineering concerns media prompts rather than software or systems.","reason_zh":"PromptLens 通过视觉分析推测图片和视频的生成提示词；这里的“逆向”针对媒体提示词，并非软件或系统。","evidence_url":"https://github.com/rootkiller6788/PromptLens/blob/5b32f4858c67fd10f7d222fb45b1d0cbfec50d80/README.en.md","reviewed_at":"2026-11-06"},{"id":"scan-1361724713","full_name":"kyryl-bogach/spark-mail-linux","url":"https://github.com/kyryl-bogach/spark-mail-linux","batch_id":"run-42119584443-1","decision":"curated","curated_id":"spark-mail-linux-case"},{"id":"scan-1361763939","full_name":"verzic/sb-ae9","url":"https://github.com/verzic/sb-ae9","batch_id":"run-42119584443-1","decision":"curated","curated_id":"sb-ae9-case"},{"id":"scan-1362089104","full_name":"lwtw123456/CTF-NetA-Hack","url":"https://github.com/lwtw123456/CTF-NetA-Hack","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The stated outcome is unlocking all CTF-NetA features by changing runtime license checks and replacing its launcher, making it a license-circumvention project.","reason_zh":"项目以运行时修改许可证检查并替换启动器来解锁 CTF-NetA 全部功能，核心成果属于绕过软件授权。","evidence_url":"https://github.com/lwtw123456/CTF-NetA-Hack/blob/b2717f62b21e8e780a12cfeedc7765ccb20bff01/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1362556931","full_name":"Gui-Tora/dmc-recomp","url":"https://github.com/Gui-Tora/dmc-recomp","batch_id":"run-42119584443-1","decision":"curated","curated_id":"dmc-recomp-case"},{"id":"scan-1363387163","full_name":"5h4d0wn1k/exploitcraft","url":"https://github.com/5h4d0wn1k/exploitcraft","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"general-security","reason_en":"exploitcraft is an offline binary-exploitation lab centered on vulnerable fixtures, crash offsets, ROP chains, PoC payloads and fuzzing rather than reverse engineering.","reason_zh":"exploitcraft 是围绕自制漏洞样本、崩溃偏移、ROP 链、PoC 载荷和模糊测试的离线漏洞利用实验室，主线并非逆向分析。","evidence_url":"https://github.com/5h4d0wn1k/exploitcraft/blob/b2a12302beab0f1490627b0a92317d04a4ff0ad4/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1363428506","full_name":"beyond-entity/beyond-entity","url":"https://github.com/beyond-entity/beyond-entity","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"unrelated","reason_en":"Beyond Entity models software architecture and data lineage from existing source code; its documented reverse-engineering sense is architecture recovery for development.","reason_zh":"Beyond Entity 从现有源码整理架构与数据血缘；文档中的“逆向”指面向开发的软件架构恢复，不属于此目录的逆向主题。","evidence_url":"https://github.com/beyond-entity/beyond-entity/blob/924f389cede69af503c25020e02d3440ef43f5b3/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1363584540","full_name":"wiskiw/audi-mlb-evo-lin","url":"https://github.com/wiskiw/audi-mlb-evo-lin","batch_id":"run-42119584443-1","decision":"hold","reason_code":"linking-policy","reason_en":"The Audi LIN protocol notes have substantive bus findings, but the repository also reproduces a vendor service-document excerpt and product photo.","reason_zh":"Audi LIN 协议笔记有具体总线研究成果，但仓库也复制了厂商维修资料节选和产品照片，需维护者决定是否链接。","evidence_url":"https://github.com/wiskiw/audi-mlb-evo-lin/blob/caecab317cf84fb5c018f0b9859687a533ff0a0b/e791-switch-panel/res/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1365278106","full_name":"3r4y/dfsdk","url":"https://github.com/3r4y/dfsdk","batch_id":"run-42119584443-1","decision":"curated","curated_id":"dfsdk"},{"id":"scan-1366381145","full_name":"Damianjiang/ZCode-Android","url":"https://github.com/Damianjiang/ZCode-Android","batch_id":"run-42119584443-1","decision":"curated","curated_id":"zcode-android-case"},{"id":"scan-1366588910","full_name":"Probler-Yt/MacroPad","url":"https://github.com/Probler-Yt/MacroPad","batch_id":"run-42119584443-1","decision":"curated","curated_id":"macropad-usb-protocol-case"},{"id":"scan-1367149449","full_name":"dnhkng/open-rknpu","url":"https://github.com/dnhkng/open-rknpu","batch_id":"run-42119584443-1","decision":"curated","curated_id":"open-rknpu-case"},{"id":"scan-1367416878","full_name":"duderosier/Gen3Remake","url":"https://github.com/duderosier/Gen3Remake","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"game-promotion-page","reason_en":"Gen 3 Remake describes a Pokémon Emerald engine and links downloadable bytecode, but the repository contains screenshots and a mod ZIP rather than engine source or research.","reason_zh":"Gen 3 Remake 宣传读取《宝可梦 绿宝石》ROM 的引擎及字节码下载，但仓库只有截图和模组 ZIP，没有引擎源码或研究材料。","evidence_url":"https://github.com/duderosier/Gen3Remake/blob/4c720df41334e76cd9c639a9feed04129fde6d17/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1368271315","full_name":"k4nz1er/k4nz1er","url":"https://github.com/k4nz1er/k4nz1er","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"personal-profile","reason_en":"The sole README is a GitHub profile describing the author's skills and interests; it contains no reverse-engineering project or research content.","reason_zh":"唯一的 README 是介绍技能和研究兴趣的 GitHub 个人简介，没有逆向工程项目或研究内容。","evidence_url":"https://github.com/k4nz1er/k4nz1er/blob/92ef7f2747b3a14fb44ee63fe94b2302bf703b12/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1368401702","full_name":"Eyeing0721/deepseek-apk-tts-unlock","url":"https://github.com/Eyeing0721/deepseek-apk-tts-unlock","batch_id":"run-42119584443-1","decision":"hold","reason_code":"linking-policy","reason_en":"The repository contains reproducible smali analysis and patch scripts, but its release distributes a modified, re-signed copy of the commercial DeepSeek Android APK.","reason_zh":"仓库有可复现的 smali 分析和补丁脚本，但 Release 分发了商业版 DeepSeek Android APK 的修改重签名副本。","evidence_url":"https://github.com/Eyeing0721/deepseek-apk-tts-unlock/blob/08db6ea0c3723e5a0b593d5dd701093687fd7caf/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1368974276","full_name":"danielcamposramos/sony-bravia-linux","url":"https://github.com/danielcamposramos/sony-bravia-linux","batch_id":"run-42119584443-1","decision":"curated","curated_id":"sony-bravia-linux-case"},{"id":"scan-1370092653","full_name":"yporoc/ChaosZeroNightmare-Toolkit-Extra","url":"https://github.com/yporoc/ChaosZeroNightmare-Toolkit-Extra","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"game-mod-no-re","reason_en":"The community-maintained Chaos Zero Nightmare toolkit patches localization and game speed; its README gives patch mechanics but no reverse-engineering investigation.","reason_zh":"这份社区维护的 Chaos Zero Nightmare 工具修改本地化和游戏速度；README 说明补丁机制，但没有展示逆向调查成果。","evidence_url":"https://github.com/yporoc/ChaosZeroNightmare-Toolkit-Extra/blob/c3f9edb3190a9af2a7789a2e10b2dff5d3ca6e20/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1370307009","full_name":"B00H0O/Recap-V3","url":"https://github.com/B00H0O/Recap-V3","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"Recap-V3 mints reCAPTCHA tokens for arbitrary target sites and rotates browser profiles and proxy IPs to preserve high scores, making bot-check evasion its purpose.","reason_zh":"Recap-V3 为任意目标站点生成 reCAPTCHA 令牌，并轮换浏览器配置及代理 IP 以维持高评分，核心用途是规避机器人检测。","evidence_url":"https://github.com/B00H0O/Recap-V3/blob/aa33afb544430eba55a59e7222539f7a7a48a745/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1370424197","full_name":"romangobb/nothing-buds-windows","url":"https://github.com/romangobb/nothing-buds-windows","batch_id":"run-42119584443-1","decision":"hold","reason_code":"linking-policy","reason_en":"The earbud protocol client is in scope, but the repository bundles product renders and a typeface taken from the official Nothing app.","reason_zh":"这款耳机协议客户端符合收录范围，但仓库打包了取自 Nothing 官方应用的产品图片和字体，需维护者判断。","evidence_url":"https://github.com/romangobb/nothing-buds-windows/blob/c75ef96227d05707be535eb433cb1d60dd367c1a/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1370783102","full_name":"macintog/t2-platform-research","url":"https://github.com/macintog/t2-platform-research","batch_id":"run-42119584443-1","decision":"curated","curated_id":"t2-platform-research"},{"id":"scan-1371123570","full_name":"ejfkdev/avdroot","url":"https://github.com/ejfkdev/avdroot","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"development-tool","reason_en":"avdroot patches Android emulator ramdisks to obtain Magisk root and set up interception trust; its main subject is emulator configuration rather than analysis.","reason_zh":"avdroot 的主要功能是修改 Android 模拟器 ramdisk 以取得 Magisk root，并配置拦截证书信任；项目主体是模拟器环境管理。","evidence_url":"https://github.com/ejfkdev/avdroot/blob/ae39a7bf688e5ae25a24b514b9af11724b96c5db/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1371827223","full_name":"anoblekman/t2can-roaming","url":"https://github.com/anoblekman/t2can-roaming","batch_id":"run-42119584443-1","decision":"hold","reason_code":"needs-maintainer-decision","reason_en":"The firmware modifies Tesla driver-assistance CAN traffic, including hands-on monitoring and a regional Summon limit; the source reports a braking-related safety incident.","reason_zh":"该固件修改 Tesla 驾驶辅助 CAN 流量，涉及握方向盘监测和 Summon 地区限制；文档还报告了与制动有关的安全异常，需维护者判断。","evidence_url":"https://github.com/anoblekman/t2can-roaming/blob/0bbbee60e2158af730a335f73f5dc4e2c5ea8b79/README.en.md","reviewed_at":"2026-11-06"},{"id":"scan-1372654720","full_name":"SGCYB/cybersecurity-research-toolbox","url":"https://github.com/SGCYB/cybersecurity-research-toolbox","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"general-security","reason_en":"Cybersecurity Research Toolbox is a broad security directory; reverse engineering is one subsection among sixteen covering OSINT, DFIR, testing and other fields.","reason_zh":"Cybersecurity Research Toolbox 是综合安全资源目录；逆向工程只是十六个板块之一，其余还覆盖 OSINT、取证和安全测试等领域。","evidence_url":"https://github.com/SGCYB/cybersecurity-research-toolbox/blob/16b455ca1ad2ee4bdc9972ea2f2fcfb71ceb1a31/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1373110115","full_name":"emsyscode/lc75826-sony-cdx-a250","url":"https://github.com/emsyscode/lc75826-sony-cdx-a250","batch_id":"run-42119584443-1","decision":"curated","curated_id":"lc75826-sony-cdx-a250-case"},{"id":"scan-1373184495","full_name":"agstrc/wazeology","url":"https://github.com/agstrc/wazeology","batch_id":"run-42119584443-1","decision":"hold","reason_code":"linking-policy","reason_en":"Wazeology independently documents the Kawasaki Bluetooth protocol, but its published installer is said to contain modified Waze program code and a derived app manifest.","reason_zh":"wazeology 记录了独立分析的 Kawasaki 蓝牙协议，但材料说明发布的安装包含有修改过的 Waze 程序代码和应用清单，需维护者判断。","evidence_url":"https://github.com/agstrc/wazeology/blob/76a130e1210c5d0b3a5e233acb24402f75d6c951/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1373210231","full_name":"SantiagoPuertas/pokemon-ldn-trade","url":"https://github.com/SantiagoPuertas/pokemon-ldn-trade","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"general-application","reason_en":"The repository adds a local interface, Pokémon file generation and setup scripts around tornadus/frlg-ldn-trade; its own README says it does not reimplement the trade stack.","reason_zh":"仓库围绕 tornadus/frlg-ldn-trade 增加本地界面、宝可梦文件生成和安装脚本；README 明言自身不重新实现交换协议栈。","evidence_url":"https://github.com/SantiagoPuertas/pokemon-ldn-trade/blob/3bfa142c554a16874a4caf8ef7c2e0ed7b78415b/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1373850332","full_name":"1nc0gn30/payload-entropy-studio","url":"https://github.com/1nc0gn30/payload-entropy-studio","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"general-security","reason_en":"Payload & Entropy Studio centers on attack-payload classification, shellcode heuristics and WAF rule generation rather than reverse engineering a target.","reason_zh":"Payload & Entropy Studio 主要分类攻击载荷、识别 shellcode 特征并生成 WAF 规则，主体是安全检测。","evidence_url":"https://github.com/1nc0gn30/payload-entropy-studio/blob/27d5fbd07ef008604599a7b9837aa6c7349a490f/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1375437289","full_name":"vinaynayak2007/pe-analyzer","url":"https://github.com/vinaynayak2007/pe-analyzer","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"no-real-content","reason_en":"The PE analyser's implementation and tests are private; this repository contains showcase text, images and sample reports, but none of the described tool code.","reason_zh":"PE 分析器的实现和测试均未公开；仓库只有展示文字、图片与示例报告，没有所述工具代码。","evidence_url":"https://github.com/vinaynayak2007/pe-analyzer/blob/311aa9f0ffebe6f1a26d238b17dd4726dddf92f9/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1376327027","full_name":"sumanrox/mimic","url":"https://github.com/sumanrox/mimic","batch_id":"run-42119584443-1","decision":"hold","reason_code":"linking-policy","reason_en":"MIMIC has website measurement and reconstruction scripts, but its workflow mirrors fetched site assets, including 3D files, so asset reuse needs a maintainer decision.","reason_zh":"MIMIC 提供网站测量与重建脚本，但工作流程会复制抓取到的站点素材，包括三维文件，素材再利用需维护者判断。","evidence_url":"https://github.com/sumanrox/mimic/blob/a2e1f6c3316bf10b6e94e8898981d6fef768e670/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1377528005","full_name":"FarhamAghdasi/sheypoor-mcp","url":"https://github.com/FarhamAghdasi/sheypoor-mcp","batch_id":"run-42119584443-1","decision":"curated","curated_id":"sheypoor-mcp-case"},{"id":"scan-1378706957","full_name":"desperado0044/xiaomi-scooter-link","url":"https://github.com/desperado0044/xiaomi-scooter-link","batch_id":"run-42119584443-1","decision":"curated","curated_id":"scooter-link-case"},{"id":"scan-1378827076","full_name":"Kryx7z/Conglomerate-Cs2","url":"https://github.com/Kryx7z/Conglomerate-Cs2","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"Conglomerate is a Counter-Strike 2 cheat whose documented workflow injects its DLL into the game; its hooking and offsets serve that purpose.","reason_zh":"Conglomerate 是《Counter-Strike 2》作弊程序，文档指导将 DLL 注入游戏；钩子和偏移量服务于作弊功能。","evidence_url":"https://github.com/Kryx7z/Conglomerate-Cs2/blob/762485abb4173f67104f51599cf382fc3fc4b413/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1379360000","full_name":"lespre/lifeafter-toolkit","url":"https://github.com/lespre/lifeafter-toolkit","batch_id":"run-42119584443-1","decision":"hold","reason_code":"linking-policy","reason_en":"The toolkit analyzes LifeAfter game packages, but the repository also commits extracted wiki data and images derived from the game client.","reason_zh":"工具链用于分析《明日之后》客户端包，但仓库还收录由游戏客户端提取的图鉴数据和图片，需审查收录政策。","evidence_url":"https://github.com/lespre/lifeafter-toolkit/blob/7211635a10b88d0e3c2f3db0b5c707237ce3815a/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1381268152","full_name":"Zhengyuuuui/autoclaw2api","url":"https://github.com/Zhengyuuuui/autoclaw2api","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"autoclaw2api exposes a commercial sandbox through an OpenAI API, pools accounts and routes around the desktop client's signing mechanism and upstream account limits.","reason_zh":"autoclaw2api 将商业沙箱接成 OpenAI 接口，使用账号池，并通过桌面客户端代理绕过签名链及上游账号限制。","evidence_url":"https://github.com/Zhengyuuuui/autoclaw2api/blob/d1204d08c75532b659f4a4dae199167f72db313e/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1384014051","full_name":"prox0959/ProxNet","url":"https://github.com/prox0959/ProxNet","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"detection-only","reason_en":"ProxNet scans local devices and flags network threats; its documented work is monitoring and detection rather than reverse engineering.","reason_zh":"ProxNet 扫描局域网设备并提示可疑端口或 ARP 欺骗，文档所述功能属于网络监测与威胁检测。","evidence_url":"https://github.com/prox0959/ProxNet/blob/54773fe9e4e5488324cabdfdfbf3eed434663066/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1384261004","full_name":"prox0959/GhostUSB","url":"https://github.com/prox0959/GhostUSB","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"forensics-only","reason_en":"GhostUSB extracts Windows USBSTOR registry artifacts into a device timeline and JSON report; it performs forensic inventory rather than reverse engineering.","reason_zh":"GhostUSB 从 Windows USBSTOR 注册表提取设备时间线和 JSON 报告，属于取证清单工具。","evidence_url":"https://github.com/prox0959/GhostUSB/blob/04f0577a1901e54a8d505b9e313c5f4c00d5cf95/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1384261467","full_name":"prox0959/ShadowTrace","url":"https://github.com/prox0959/ShadowTrace","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"forensics-only","reason_en":"ShadowTrace extracts Windows UserAssist and RunMRU execution artifacts into a DFIR timeline; it does not document analysis of a program or protocol.","reason_zh":"ShadowTrace 将 Windows UserAssist 和 RunMRU 执行痕迹整理为数字取证时间线，未记录对程序或协议的逆向分析。","evidence_url":"https://github.com/prox0959/ShadowTrace/blob/22a9a96093ceb974752b90860ca582bf42c990c2/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1385493768","full_name":"D1se0/hacknexus","url":"https://github.com/D1se0/hacknexus","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"general-security","reason_en":"HackNexus is a broad browser-based offensive and defensive security toolbox; its listed reverse-engineering functions are incidental to that wider scope.","reason_zh":"HackNexus 是覆盖攻防、取证、密码学和网络测试的浏览器安全工具箱，逆向相关功能只是其中一部分。","evidence_url":"https://github.com/D1se0/hacknexus/blob/02719e271d7282377872726987462738f246bc3e/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1386490952","full_name":"lumirth/stickwalker","url":"https://github.com/lumirth/stickwalker","batch_id":"run-42119584443-1","decision":"curated","curated_id":"stickwalker-case"},{"id":"scan-1386512748","full_name":"AbdelmonemAwad/os-xgs-npu","url":"https://github.com/AbdelmonemAwad/os-xgs-npu","batch_id":"run-42119584443-1","decision":"curated","curated_id":"os-xgs-npu-case"},{"id":"scan-1387331248","full_name":"jvspier/dabplayplus","url":"https://github.com/jvspier/dabplayplus","batch_id":"run-42119584443-1","decision":"curated","curated_id":"dabplayplus-case"},{"id":"scan-1388001190","full_name":"Guillain-RDCDE/OpenJooki","url":"https://github.com/Guillain-RDCDE/OpenJooki","batch_id":"run-42119584443-1","decision":"curated","curated_id":"openjooki-jooki2-case"},{"id":"scan-1388181421","full_name":"geepot/ghidra-c6000","url":"https://github.com/geepot/ghidra-c6000","batch_id":"run-42119584443-1","decision":"curated","curated_id":"ghidra-c6000"},{"id":"scan-1388586839","full_name":"HeathHowren/hookscan","url":"https://github.com/HeathHowren/hookscan","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"detection-only","reason_en":"hookscan primarily detects integrity changes in running Windows processes, reporting modified code and import or export slots as findings.","reason_zh":"hookscan 主要检查运行中 Windows 进程的完整性，把代码及导入、导出表的改动报告为检测结果。","evidence_url":"https://github.com/HeathHowren/hookscan/blob/696721021a8243a1430d89ca59aa62f80cad20eb/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1389596322","full_name":"TaiMaBenJi/taima-skills","url":"https://github.com/TaiMaBenJi/taima-skills","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"general-security","reason_en":"taima-skills is a broad agent-skill library spanning security, AI, CTF and development; reverse-engineering skills are one part of its mixed catalog.","reason_zh":"taima-skills 是横跨安全、AI、CTF 和开发的智能体技能库，逆向技能只是其中一个板块。","evidence_url":"https://github.com/TaiMaBenJi/taima-skills/blob/713bd05db5b5163278251301daffc53b7231abde/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1390735456","full_name":"4evy/raycast","url":"https://github.com/4evy/raycast","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"general-application","reason_en":"Raycast provides local database configuration, profiles, aliases, themes, and AI settings; its documentation presents a configuration utility rather than reverse-engineering analysis.","reason_zh":"Raycast 项目提供本地数据库配置、用户档案、别名、主题和 AI 设置管理，文档将其定位为配置工具，而非逆向分析项目。","evidence_url":"https://github.com/4evy/raycast/blob/058604c25dd13ea6c3d09b6569df6984d534c2dc/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1391322658","full_name":"OpenLF2/OpenLF2","url":"https://github.com/OpenLF2/OpenLF2","batch_id":"run-42119584443-1","decision":"curated","curated_id":"openlf2-case"},{"id":"scan-1393264610","full_name":"apimartwp/nano-banana-reverse-api-es","url":"https://github.com/apimartwp/nano-banana-reverse-api-es","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"general-application","reason_en":"The repository documents prices and request examples for a third-party image API; its reverse-engineering label refers only to a vendor route suffix.","reason_zh":"仓库主要介绍第三方图像 API 的价格和调用示例；所谓逆向仅指服务商使用的路由后缀。","evidence_url":"https://github.com/apimartwp/nano-banana-reverse-api-es/blob/7bd4daf62800f2853eed8290387bc0df12010c28/DISCLAIMER.md","reviewed_at":"2026-11-06"},{"id":"scan-1393270436","full_name":"apimartrkg3agz/nano-banana-reverse-api-ru","url":"https://github.com/apimartrkg3agz/nano-banana-reverse-api-ru","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"general-application","reason_en":"The Nano Banana repository documents an APIMart image-generation route, billing, and request examples; it reports no analysis of the service or protocol.","reason_zh":"Nano Banana 仓库介绍 APIMart 图像生成接口、计费和调用示例，没有对服务或协议进行逆向分析。","evidence_url":"https://github.com/apimartrkg3agz/nano-banana-reverse-api-ru/blob/45f174e29160cf03b871eb38fe70d6ffc7f407d8/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1393271188","full_name":"apimartows0gtnwi/reverse-engineered-api-fr","url":"https://github.com/apimartows0gtnwi/reverse-engineered-api-fr","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"general-application","reason_en":"The README documents APIMart video-generation routes, pricing and prompts; it makes no claim of original reverse-engineering work.","reason_zh":"README 介绍 APIMart 视频生成接口、价格和提示词，没有记录仓库自身进行的逆向研究。","evidence_url":"https://github.com/apimartows0gtnwi/reverse-engineered-api-fr/blob/bc400950dedcc9d3dbce06651fae6e424098f886/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1393273056","full_name":"apimartez/reverse-engineered-api-cn","url":"https://github.com/apimartez/reverse-engineered-api-cn","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"unrelated","reason_en":"The README provides Wan image-generation prompts, prices and APIMart API examples; its reverse-engineered label refers only to a vendor route suffix.","reason_zh":"README 提供 Wan 图像生成提示词、价格和 APIMart API 示例；“逆向”只指厂商路由名称的后缀。","evidence_url":"https://github.com/apimartez/reverse-engineered-api-cn/blob/4bee7225f32bc864842213390e5604d439968c51/DISCLAIMER.md","reviewed_at":"2026-11-06"},{"id":"scan-1393274553","full_name":"apimartg/reverse-engineered-api-es","url":"https://github.com/apimartg/reverse-engineered-api-es","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"general-application","reason_en":"The repository documents APIMart's Kling video API routes, prices and billing; its reverse-engineered label is a vendor route term.","reason_zh":"仓库介绍 APIMart 的 Kling 视频 API 路由、价格和计费；其中“逆向”只是供应商的路由标签。","evidence_url":"https://github.com/apimartg/reverse-engineered-api-es/blob/0ac6ccdc80d027f34d9df44822ebdff1160fe3cd/DISCLAIMER.md","reviewed_at":"2026-11-06"},{"id":"scan-1393275295","full_name":"apimartows0gtnwi/reverse-engineered-api-id","url":"https://github.com/apimartows0gtnwi/reverse-engineered-api-id","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"general-application","reason_en":"Despite its repository name, the pages contain Qwen-Image prompt recipes, APIMart pricing and API examples, with no reverse-engineering work.","reason_zh":"尽管仓库名称含有逆向字样，页面实际是 Qwen-Image 提示词示例、APIMart 价格和 API 调用说明，没有逆向研究内容。","evidence_url":"https://github.com/apimartows0gtnwi/reverse-engineered-api-id/blob/43f74598f3af702f2bfdb4aa247c92880f89bc45/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1393277264","full_name":"apimartwn9o/reverse-engineered-gateway-pt","url":"https://github.com/apimartwn9o/reverse-engineered-gateway-pt","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"general-application","reason_en":"The repository documents APIMart video-generation API routes, billing and prices; its own disclaimer says the reverse-engineered label comes from the vendor.","reason_zh":"该仓库介绍 APIMart 视频生成 API 的接口、计费和价格；其免责声明说明“逆向”只是服务商使用的路线标签。","evidence_url":"https://github.com/apimartwn9o/reverse-engineered-gateway-pt/blob/b1063476cb30ae7f12081729125f80d3c9e245b6/DISCLAIMER.md","reviewed_at":"2026-11-06"},{"id":"scan-1393279898","full_name":"apimartj2w3mg/reverse-engineered-gateway-cn","url":"https://github.com/apimartj2w3mg/reverse-engineered-gateway-cn","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"general-application","reason_en":"The repository documents an API aggregator, prices and gateway requests; its reverse-engineered label identifies upstream routes rather than presenting protocol research.","reason_zh":"仓库介绍 API 聚合网关、价格和调用方式；“逆向”只用于区分上游路由，没有提供协议研究。","evidence_url":"https://github.com/apimartj2w3mg/reverse-engineered-gateway-cn/blob/2d9abdaf5893939a60b87c2a77923bc02ada4a85/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1393284911","full_name":"apimartij8jf/reverse-proxy-api-ja","url":"https://github.com/apimartij8jf/reverse-proxy-api-ja","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"general-application","reason_en":"The repository gives MiniMax H3 API examples and APIMart pricing; its disclaimer says reverse-engineered is merely a vendor route label.","reason_zh":"仓库提供 MiniMax H3 的 APIMart 调用示例和价格信息；免责声明说明“逆向”只是供应商的路由标签。","evidence_url":"https://github.com/apimartij8jf/reverse-proxy-api-ja/blob/63348820b427b05e4f94c5db7059ae01499cb745/DISCLAIMER.md","reviewed_at":"2026-11-06"},{"id":"scan-1393290752","full_name":"apimartkv1qavpa/unofficial-api-gateway-es","url":"https://github.com/apimartkv1qavpa/unofficial-api-gateway-es","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"general-application","reason_en":"The repository documents GPT Image 1 prompts, APIMart API calls and prices; its source provides no analysis or reconstruction of an API.","reason_zh":"仓库内容是 GPT Image 1 提示词、APIMart 接口调用和价格说明，没有提供接口分析或还原成果。","evidence_url":"https://github.com/apimartkv1qavpa/unofficial-api-gateway-es/blob/86f42812b0b1e94fbfe2de28ed51590abe3e8a5b/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1393290788","full_name":"apimartir6r9r721/unofficial-api-gateway-cn","url":"https://github.com/apimartir6r9r721/unofficial-api-gateway-cn","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"general-application","reason_en":"The repository documents APIMart video-generation routes, pricing, and sample requests; its reverse-engineering label does not describe repository analysis.","reason_zh":"该仓库介绍 APIMart 视频生成接口、价格和调用示例；所谓“逆向”只是上游路由标签，并无仓库自身的逆向研究。","evidence_url":"https://github.com/apimartir6r9r721/unofficial-api-gateway-cn/blob/b193aa02251d1a506c4a4c81249b33bbc8d2f8ca/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1394864420","full_name":"denisdp2/disasm.local","url":"https://github.com/denisdp2/disasm.local","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"general-application","reason_en":"The browser page wraps bundled Keystone and Capstone WebAssembly ports with editable panels and a byte map; it documents no original analysis method.","reason_zh":"这个浏览器页面用可编辑面板和字节映射包装现成的 Keystone、Capstone WebAssembly 移植版，未记录独立分析方法。","evidence_url":"https://github.com/denisdp2/disasm.local/blob/71fdd06fbe5e92ba006c5c5c1c265c8564a57b7f/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1396746958","full_name":"hu847266h/scene-unlock-toolkit","url":"https://github.com/hu847266h/scene-unlock-toolkit","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The LSPosed module and daemon patch explicitly rewrite Scene's expired membership verdict into a successful activation.","reason_zh":"该 LSPosed 模块和守护进程补丁会把 Scene 会员过期裁决改写成激活成功，以绕过授权检查。","evidence_url":"https://github.com/hu847266h/scene-unlock-toolkit/blob/d7cc5211c09af691dcfd4b0076be91f3ce9d573d/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1398671633","full_name":"klattalytic-converter/Sonic-X-Treme-Boss-Engine-Reverse-Engineering","url":"https://github.com/klattalytic-converter/Sonic-X-Treme-Boss-Engine-Reverse-Engineering","batch_id":"run-42201075883-1","decision":"hold","reason_code":"linking-policy","reason_en":"The Sonic X-Treme restoration contains decompiled functions alongside a mounted prototype build and a directory of official textures, requiring a maintainer decision.","reason_zh":"Sonic X-Treme 引擎复原仓库同时收录反编译函数、原型版本内容和标为官方的纹理，需由维护者判断收录边界。","evidence_url":"https://github.com/klattalytic-converter/Sonic-X-Treme-Boss-Engine-Reverse-Engineering/blob/9be20a92a6f083ad3f76037c25327f326097ec20/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1399579523","full_name":"TheWWWorm/CursedLands","url":"https://github.com/TheWWWorm/CursedLands","batch_id":"run-42119584443-1","decision":"curated","curated_id":"cursed-lands-case"},{"id":"scan-1400681239","full_name":"at0m-b0mb/ctf-toolkit","url":"https://github.com/at0m-b0mb/ctf-toolkit","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"general-security","reason_en":"The project is a broad CTF arsenal spanning exploitation, forensics, OSINT and defence; its small binary-triage section is one part of that security toolkit.","reason_zh":"项目是涵盖漏洞利用、取证、OSINT 和攻防的综合 CTF 工具箱；二进制逆向工具只是其中一个小模块。","evidence_url":"https://github.com/at0m-b0mb/ctf-toolkit/blob/e8a7bda41919ed8e43e04e0e7234bd2730f606de/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1402299404","full_name":"aapplle/op13-battery-unlock","url":"https://github.com/aapplle/op13-battery-unlock","batch_id":"run-42119584443-1","decision":"hold","reason_code":"needs-maintainer-decision","reason_en":"The OnePlus 13 module lowers battery shutdown voltage and changes the fuel gauge's empty point; modifying these battery protection thresholds needs a maintainer decision.","reason_zh":"该 OnePlus 13 模块下调电池关机电压并修改电量计零电量阈值；涉及电池保护阈值的改动需要维护者判断。","evidence_url":"https://github.com/aapplle/op13-battery-unlock/blob/ab12a94fdf04a4955bdcd0707a76ef8d919f3409/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1402908490","full_name":"mahdamin/esp-idf-injection-ng","url":"https://github.com/mahdamin/esp-idf-injection-ng","batch_id":"run-42119584443-1","decision":"curated","curated_id":"esp-idf-injection-ng"},{"id":"scan-1403426226","full_name":"LinkTroisUn/DELTARUNE-3DS","url":"https://github.com/LinkTroisUn/DELTARUNE-3DS","batch_id":"run-42119584443-1","decision":"hold","reason_code":"linking-policy","reason_en":"The DELTARUNE port has no source in the repository; distribution relies on release-hosted xdelta patches derived from the commercial game's data.win files.","reason_zh":"仓库未提供 DELTARUNE 移植版源码，发布方式依赖由商业游戏 data.win 文件生成的 xdelta 补丁，需维护者判断。","evidence_url":"https://github.com/LinkTroisUn/DELTARUNE-3DS/blob/12343016672ff36270257cc99d672d5e4e0a4a59/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1405863631","full_name":"Chronosishere/makd","url":"https://github.com/Chronosishere/makd","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"no-real-content","reason_en":"The repository has only two short placeholder READMEs; the advertised malware research papers and analysis are absent from the file list.","reason_zh":"仓库只有两份极短的占位 README；文件清单中没有所宣传的恶意软件研究论文或分析内容。","evidence_url":"https://github.com/Chronosishere/makd/blob/a0fdda7142fa44e51fe2884cd796f7fd22a73e4b/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1406141508","full_name":"DenisSergeevitch/simcity3000-gta-mode","url":"https://github.com/DenisSergeevitch/simcity3000-gta-mode","batch_id":"run-42119584443-1","decision":"curated","curated_id":"simcity-3000-gta-mode-case"},{"id":"scan-1408584503","full_name":"LemonHaze420/shenmue","url":"https://github.com/LemonHaze420/shenmue","batch_id":"run-42110758337-1","decision":"hold","reason_code":"linking-policy","reason_en":"The repository publishes C/C++ code derived from a completed decompilation of commercial Shenmue executables; inclusion of that recovered code needs a maintainer decision.","reason_zh":"仓库发布了源自商业游戏《莎木》可执行文件反编译工作的 C/C++ 代码，收录这类恢复源码需要维护者决定。","evidence_url":"https://github.com/LemonHaze420/shenmue/blob/21781b7d6c00c240300a5274a7691df19e888a6b/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1408789425","full_name":"autod3structeur/Larvanex","url":"https://github.com/autod3structeur/Larvanex","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"detection-only","reason_en":"Larvanex recursively unpacks suspicious files but uses those results to score, classify and quarantine threats; detection is its stated primary purpose.","reason_zh":"Larvanex 会递归解包可疑文件，但其主要用途是据此评分、判定并隔离威胁，属于检测工具。","evidence_url":"https://github.com/autod3structeur/Larvanex/blob/ba59cf33cd7a6673ffeece5765af9b62617eb4e1/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1409357118","full_name":"bshea-1/pwn","url":"https://github.com/bshea-1/pwn","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"general-security","reason_en":"The 47 guides form a broad cybersecurity curriculum; reverse-engineering introduction and deeper analysis are two guides within much wider exploitation and web-security coverage.","reason_zh":"这 47 篇指南构成综合网络安全课程，逆向工程入门和进阶仅是漏洞利用、Web 安全等众多主题中的两篇。","evidence_url":"https://github.com/bshea-1/pwn/blob/fa0824570c4da8f6bf3894bd7941e6d303337263/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1409503081","full_name":"manifoldor/jumper-replica","url":"https://github.com/manifoldor/jumper-replica","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"unrelated","reason_en":"Jumper Replica recovers mechanical CAD geometry and print-fit references for a robot, outside the catalog's software, firmware and protocol reverse-engineering scope.","reason_zh":"Jumper Replica 研究机器人机械几何模型和打印试装资料，不属于软件、固件或通信协议逆向范围。","evidence_url":"https://github.com/manifoldor/jumper-replica/blob/c2a2ffeb74917117fae337445826a76a7fb93fa7/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1410265446","full_name":"47PADO47/nfs-mw","url":"https://github.com/47PADO47/nfs-mw","batch_id":"run-42119584443-1","decision":"curated","curated_id":"nfs-mw-case"},{"id":"scan-1410386277","full_name":"awake-devel/pkg-to-anyps5","url":"https://github.com/awake-devel/pkg-to-anyps5","batch_id":"run-42119584443-1","decision":"curated","curated_id":"pkg-to-anyps5"},{"id":"scan-1411256786","full_name":"r0main-f/G2fresh","url":"https://github.com/r0main-f/G2fresh","batch_id":"run-42201075883-1","decision":"hold","reason_code":"linking-policy","reason_en":"G2fresh documents a Ghidra-based rewrite of the Nord Modular G2 editor, but its checked-in panel layouts come from the original editor and need a maintainer linking decision.","reason_zh":"G2fresh 记录了基于 Ghidra 分析重写 Nord Modular G2 编辑器的过程，但仓库收录了从原版编辑器提取的面板布局，需维护者判断收录政策。","evidence_url":"https://github.com/r0main-f/G2fresh/blob/86c8bae18289398678ce44e0c5809b8cdfec1e4b/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1411398043","full_name":"lex0m/lexin","url":"https://github.com/lex0m/lexin","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"lexin is a WeChat modification module whose advertised features include changing step counts, bypassing scan restrictions and concealing its entry point.","reason_zh":"lexin 是微信功能修改模块，宣传的功能包括修改步数、解除扫码限制和隐藏模块入口。","evidence_url":"https://github.com/lex0m/lexin/blob/853b0dc049c2668108a8a944a436e089c3bf3040/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1411910244","full_name":"Reid-n0rc/FT-710_Firmware","url":"https://github.com/Reid-n0rc/FT-710_Firmware","batch_id":"run-42119584443-1","decision":"hold","reason_code":"linking-policy","reason_en":"The FT-710 analysis contains extensive committed decompiled output from commercial radio firmware, so its inclusion needs a maintainer linking decision.","reason_zh":"FT-710 研究仓库提交了大量商业电台固件的反编译输出，是否收录需要维护者决定。","evidence_url":"https://github.com/Reid-n0rc/FT-710_Firmware/blob/b3df09634b5969449a62f7a0960de838c82bf36e/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1412600099","full_name":"aix567/Necropsy","url":"https://github.com/aix567/Necropsy","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"security-testing","reason_en":"Necropsy scores the exploitability of existing Windows crash dumps; its documented subject is crash triage rather than reverse engineering.","reason_zh":"Necropsy 对已有的 Windows 崩溃转储评估可利用性，主要用于崩溃分级，而非逆向分析。","evidence_url":"https://github.com/aix567/Necropsy/blob/b942d8b905ef4d246054cc7b603c3aea749efc0d/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1412932022","full_name":"xutongxue233/crazywaterword","url":"https://github.com/xutongxue233/crazywaterword","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"upstream-unavailable","reason_en":"The repository xutongxue233/crazywaterword no longer resolves: the GraphQL lookup and a git clone both failed on 2026-11-06.","reason_zh":"仓库 xutongxue233/crazywaterword 已无法访问：2026-11-06 的 GraphQL 查询和 git clone 均失败。","evidence_url":"https://github.com/xutongxue233/crazywaterword/blob/4c848414567f8219e9e6fa73283f078d39c25459/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1413120877","full_name":"1mikew/mst2-altscreen-carplay","url":"https://github.com/1mikew/mst2-altscreen-carplay","batch_id":"run-42119584443-1","decision":"hold","reason_code":"needs-maintainer-decision","reason_en":"The project documents substantial head-unit reverse engineering, but deployment alters an in-vehicle navigation display and can render the head unit unusable.","reason_zh":"项目有充分的车机逆向分析资料，但部署会改动车辆导航显示，文档也说明实验可能使车机无法使用，需维护者决定。","evidence_url":"https://github.com/1mikew/mst2-altscreen-carplay/blob/7fc7adb87e9ccdf7b13f0c4629b3e9f9f5bba5bb/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1413496602","full_name":"BruBread/ProjectorRoot","url":"https://github.com/BruBread/ProjectorRoot","batch_id":"run-42201075883-1","decision":"hold","reason_code":"linking-policy","reason_en":"ProjectorRoot documents firmware and bootloader analysis, but the repository also commits vendor-derived boot, U-Boot, trust, and other firmware dumps under backups/.","reason_zh":"ProjectorRoot 记录了固件和引导程序分析，但 backups/ 目录也提交了原厂 boot、U-Boot、trust 等固件转储，需先决定链接政策。","evidence_url":"https://github.com/BruBread/ProjectorRoot/blob/59d3e41287da1db045f78bc9c84deb9f87e497ca/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1413529578","full_name":"Jakey-Jakey/questpad","url":"https://github.com/Jakey-Jakey/questpad","batch_id":"run-42119584443-1","decision":"curated","curated_id":"questpad-case"},{"id":"scan-1413700852","full_name":"maya-thorne/dotnet-packer-forensics","url":"https://github.com/maya-thorne/dotnet-packer-forensics","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"Although it includes .NET unpacking and analysis, the CLI also advertises hardware-lock bypass and synthetic perpetual licence generation.","reason_zh":"虽然项目包含 .NET 解包和分析功能，但命令行还明确提供硬件锁绕过与永久许可证伪造功能。","evidence_url":"https://github.com/maya-thorne/dotnet-packer-forensics/blob/9250224004908062762c311ca4886b1197d26b6a/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1414542949","full_name":"ubis/OSIRIS","url":"https://github.com/ubis/OSIRIS","batch_id":"run-42119584443-1","decision":"curated","curated_id":"osiris-onkyo-receiver-case"},{"id":"scan-1414866146","full_name":"ThisFreakDoesntExist/ThisFirmwareDoesNotExist","url":"https://github.com/ThisFreakDoesntExist/ThisFirmwareDoesNotExist","batch_id":"run-42119584443-1","decision":"curated","curated_id":"thisfirmwaredoesnotexist"},{"id":"scan-1414961954","full_name":"MetaMikuAI/Cpp2CS","url":"https://github.com/MetaMikuAI/Cpp2CS","batch_id":"run-42119584443-1","decision":"curated","curated_id":"cpp2cs"},{"id":"scan-1415824764","full_name":"nrempel/pokelinux","url":"https://github.com/nrempel/pokelinux","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"general-application","reason_en":"Pokélinux develops a mobile Linux phone system and native services; the repository describes VM implementation work without a reverse-engineering subject.","reason_zh":"Pokélinux 主要开发手机 Linux 系统和原生服务；仓库资料介绍的是虚拟机中的实现进展，没有明确的逆向工程对象。","evidence_url":"https://github.com/nrempel/pokelinux/blob/282778ed6e76c29683e0f6f5f6d202d0bab9e419/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1416171928","full_name":"0xKuraishY/arsenal","url":"https://github.com/0xKuraishY/arsenal","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"general-security","reason_en":"Arsenal is primarily a broad cybersecurity guide collection spanning defense, pentesting, risk, identity and internals; reverse engineering is one section among them.","reason_zh":"Arsenal 主要是涵盖防御、渗透、风险、身份和系统内部机制的综合网络安全指南，逆向工程只是其中一个栏目。","evidence_url":"https://github.com/0xKuraishY/arsenal/blob/e9f5c696a117194a033a6bee176e70569eccaa1b/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1418759471","full_name":"JaredCabot/hp-34420a-manuals","url":"https://github.com/JaredCabot/hp-34420a-manuals","batch_id":"run-42119584443-1","decision":"hold","reason_code":"linking-policy","reason_en":"The 34420A repository redistributes manufacturer manuals, schematics and three firmware ROM images, requiring a maintainer decision before linking.","reason_zh":"34420A 仓库重新发布厂商手册、电路图及三份固件 ROM 镜像，是否收录链接需要维护者裁定。","evidence_url":"https://github.com/JaredCabot/hp-34420a-manuals/blob/ae8352581f60d789adec790b42ee5f1e7c2f4e90/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1418995621","full_name":"Krish9800/malware-signature-analyzer","url":"https://github.com/Krish9800/malware-signature-analyzer","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"detection-only","reason_en":"Its PE parsing, entropy and hashes feed YARA matching, threat scoring and malware classification rather than a reverse-engineering investigation.","reason_zh":"该工具的 PE 解析、熵值和哈希结果主要用于 YARA 匹配、威胁评分及恶意软件判定。","evidence_url":"https://github.com/Krish9800/malware-signature-analyzer/blob/cc750686c07c17101955482f99c482a7d7e4add1/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1419766325","full_name":"OptoCloud/OpenMotherVR","url":"https://github.com/OptoCloud/OpenMotherVR","batch_id":"run-42201075883-1","decision":"hold","reason_code":"linking-policy","reason_en":"OpenMotherVR ships a DLL reconstruction that its author says is fully derived from decompiled MotherVR code, requiring a maintainer decision before linking.","reason_zh":"OpenMotherVR 发布了 DLL 重建代码，作者明确称其完全源自对 MotherVR 的反编译代码；是否收录需由维护者决定。","evidence_url":"https://github.com/OptoCloud/OpenMotherVR/blob/65c9eec6bee462e0e954889dacb8ae4313b881d1/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1419813293","full_name":"gzimbric/ps5-hv-bypass-porting","url":"https://github.com/gzimbric/ps5-hv-bypass-porting","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The repository's porting workflow is directed at bypassing the PS5 hypervisor across firmware releases.","reason_zh":"该仓库的移植流程以在不同 PS5 固件版本上绕过虚拟机监控程序为目标。","evidence_url":"https://github.com/gzimbric/ps5-hv-bypass-porting/blob/0a7f263d5cc4bb91984d0b00d68daaa0561a4542/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1420047294","full_name":"blackpineapple114514/tsn-auto-run","url":"https://github.com/blackpineapple114514/tsn-auto-run","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The tool generates plausible campus-running GPS tracks and automated face check-ins for upload, with notes on avoiding server cheating flags.","reason_zh":"该工具生成看似合格的校园跑 GPS 轨迹并自动完成人脸打卡上传，文档还记录了规避服务器作弊标记的调整。","evidence_url":"https://github.com/blackpineapple114514/tsn-auto-run/blob/27b68cbb69c5d8af74b040c68e1283ee9ba50d04/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1420280788","full_name":"zheedevVn/Rea-Unlock","url":"https://github.com/zheedevVn/Rea-Unlock","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"fork-or-mirror","reason_en":"Rea-Unlock identifies itself in its licence as based on morluto's original REA source, so it is a derivative of the already curated upstream project.","reason_zh":"Rea-Unlock 的许可证明确说明其基于 morluto 的原始 REA 源码，属于已收录上游项目的衍生版本。","evidence_url":"https://github.com/zheedevVn/Rea-Unlock/blob/4ae379dfe621af4bdb50a59fb643b67441317117/LICENSE","reviewed_at":"2026-11-06"},{"id":"scan-1420890881","full_name":"leanhminh2104/locketlam","url":"https://github.com/leanhminh2104/locketlam","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"general-application","reason_en":"LocketLam is chiefly a Python client for account, feed, media and chat operations; its reverse-engineered label is not accompanied by an investigation or protocol findings.","reason_zh":"LocketLam 主要提供账号、动态、媒体和聊天的 Python 客户端接口；虽自称逆向成果，却未给出逆向过程或协议研究成果。","evidence_url":"https://github.com/leanhminh2104/locketlam/blob/1cc48f80a3ad59e1ecbecacbd5358af6f03b55b5/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1421075513","full_name":"khalleb/honda-civic-headunit","url":"https://github.com/khalleb/honda-civic-headunit","batch_id":"run-42119584443-1","decision":"hold","reason_code":"needs-maintainer-decision","reason_en":"The documented reverse-engineering work patches an in-car warning screen on a head unit that also supplies the rear-view camera, creating a vehicle-safety decision.","reason_zh":"该项目通过逆向分析修改车机安全提示，而同一车机还承担倒车影像功能，涉及车辆安全，需维护者决定。","evidence_url":"https://github.com/khalleb/honda-civic-headunit/blob/bd950efd7443ec9decb6dbea4959693652886217/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1421280542","full_name":"RayenGader/malware-analysis-cerber","url":"https://github.com/RayenGader/malware-analysis-cerber","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"forensics-only","reason_en":"The Cerber account identifies a sample and records host files, registry changes and detection indicators, without a substantive finding about its internal code or protocol.","reason_zh":"Cerber 报告侧重样本识别、主机文件与注册表变化及检测指标，没有对程序内部代码或通信协议提出具体分析结果。","evidence_url":"https://github.com/RayenGader/malware-analysis-cerber/blob/e0d5fcb1cef03134f791b6870745bb8c2b8525fb/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1421634374","full_name":"2951461586/CodeArts2API","url":"https://github.com/2951461586/CodeArts2API","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"CodeArts2API turns a logged-in commercial model service into OpenAI and Anthropic endpoints and recommends pooling accounts when the upstream three-session limit is reached.","reason_zh":"CodeArts2API 将已登录的商业模型服务转为 OpenAI、Anthropic 接口，并建议用账号池应对上游每账号三个会话的限制。","evidence_url":"https://github.com/2951461586/CodeArts2API/blob/c11aa7bba77d148ed04dec2c6a67b74cb8732293/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1421678061","full_name":"Charelene/FH2MP","url":"https://github.com/Charelene/FH2MP","batch_id":"run-42119584443-1","decision":"curated","curated_id":"fh2mp-case"},{"id":"scan-1421804808","full_name":"masterflai/pmca-re-reloaded","url":"https://github.com/masterflai/pmca-re-reloaded","batch_id":"run-42119584443-1","decision":"curated","curated_id":"pmca-re-reloaded"},{"id":"scan-1422213403","full_name":"ishandutta2007/Awesome-Cybersecurity-Training-Reverse-Engineering","url":"https://github.com/ishandutta2007/Awesome-Cybersecurity-Training-Reverse-Engineering","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"general-security","reason_en":"The list centers on cybersecurity training and hosted cyber ranges; reverse-engineering tools are one section of a broader security catalog.","reason_zh":"该清单主要汇集网络安全培训平台和靶场，逆向工具只是其中一个栏目。","evidence_url":"https://github.com/ishandutta2007/Awesome-Cybersecurity-Training-Reverse-Engineering/blob/a7635062da10d4e436428980cbdb427a224cebaf/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1422944904","full_name":"opendevicedb/opendevicedb","url":"https://github.com/opendevicedb/opendevicedb","batch_id":"run-42119584443-1","decision":"curated","curated_id":"opendevicedb"},{"id":"scan-1423169574","full_name":"ripleyXLR8/atlantis-native","url":"https://github.com/ripleyXLR8/atlantis-native","batch_id":"run-42119584443-1","decision":"curated","curated_id":"atlantis-native-case"},{"id":"scan-1423186275","full_name":"eklavya2201/breakinggood","url":"https://github.com/eklavya2201/breakinggood","batch_id":"run-42119584443-1","decision":"curated","curated_id":"breakinggood"},{"id":"scan-1423507338","full_name":"rubenthampy890-del/qemu-rtd2841","url":"https://github.com/rubenthampy890-del/qemu-rtd2841","batch_id":"run-42119584443-1","decision":"curated","curated_id":"qemu-rtd2841"},{"id":"scan-1423974228","full_name":"VAHPEM/rust-deobf","url":"https://github.com/VAHPEM/rust-deobf","batch_id":"run-42110758337-1","decision":"curated","curated_id":"rust-deobf"},{"id":"scan-1424045681","full_name":"ankushKun/sh23ds","url":"https://github.com/ankushKun/sh23ds","batch_id":"run-42119584443-1","decision":"curated","curated_id":"sh23ds-case"},{"id":"scan-1424121419","full_name":"whiteshape/gpt-topup-teardown","url":"https://github.com/whiteshape/gpt-topup-teardown","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"Although it includes a storefront teardown, the runnable implementation automates ChatGPT subscription top-ups using account sessions, regional pricing, and card-pool payment flows.","reason_zh":"虽然仓库包含代充平台拆解报告，可运行代码仍自动化处理账号 Session、区域定价及卡池付款的 ChatGPT 订阅代充流程。","evidence_url":"https://github.com/whiteshape/gpt-topup-teardown/blob/761ac459cff6cfa1d3ac5ae01fcdf0360e4abcbc/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1424260876","full_name":"BlaMacfly/ArchCore","url":"https://github.com/BlaMacfly/ArchCore","batch_id":"run-42201075883-1","decision":"hold","reason_code":"linking-policy","reason_en":"ArchCore documents a REA-assisted reconstruction of ArchLord servers, but its bundled Episode 8 server tables and server map need a maintainer linking decision.","reason_zh":"ArchCore 记录了借助 REA 重建 ArchLord 服务器的过程，但仓库附带 Episode 8 服务器数据表和地图，需要维护者判断收录政策。","evidence_url":"https://github.com/BlaMacfly/ArchCore/blob/b84b67a8d0f95df28c47cb3722f6c6004ca313e3/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1424464498","full_name":"dansugc/reverse-engineer-marketing","url":"https://github.com/dansugc/reverse-engineer-marketing","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"unrelated","reason_en":"REM studies companies' advertising, search presence, and customer funnels; its stated inspiration from REA does not make marketing analysis a reverse-engineering target.","reason_zh":"REM 分析企业广告、搜索曝光和获客漏斗；虽然提到受 REA 启发，研究对象仍是营销活动。","evidence_url":"https://github.com/dansugc/reverse-engineer-marketing/blob/5b78198b2578997412853ab0858b10670fa74984/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1431875339","full_name":"John-UNOwen/mfg-decomp","url":"https://github.com/John-UNOwen/mfg-decomp","batch_id":"run-42201075883-1","decision":"hold","reason_code":"linking-policy","reason_en":"mfg-decomp contains recovered C# decompiled from the commercial Mahjong Fight Girl client, so publishing a catalog entry needs a maintainer decision.","reason_zh":"mfg-decomp 收录了从商业游戏 Mahjong Fight Girl 客户端反编译得到的 C# 源码，是否收录需要维护者决定。","evidence_url":"https://github.com/John-UNOwen/mfg-decomp/blob/cc0e401ae408c8ac2d8bcf0a131729ce3a50a306/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1432385338","full_name":"DBC1349/hackios-mi10ultra","url":"https://github.com/DBC1349/hackios-mi10ultra","batch_id":"run-42186805426-1","decision":"hold","reason_code":"linking-policy","reason_en":"The Xiaomi Mi 10 Ultra port includes original platform work, but its package notes list firmware extracted from a phone alongside prebuilt images, requiring a maintainer decision.","reason_zh":"小米 10 至尊纪念版移植包含原创平台代码，但交付包说明列出了从手机提取的固件和预编译镜像，需由维护者判断收录链接。","evidence_url":"https://github.com/DBC1349/hackios-mi10ultra/blob/f81b29c4253080770a16cd83c606f42fd1631299/mi10ultra/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1434511903","full_name":"j3lte/dell3115cn-centre","url":"https://github.com/j3lte/dell3115cn-centre","batch_id":"run-42201075883-1","decision":"hold","reason_code":"linking-policy","reason_en":"The Dell 3115cn project documents a recovered USB scan protocol and Linux client, but its protocol notes identify decompiled Dell driver sources under re/decomp/.","reason_zh":"Dell 3115cn 项目记录了还原的 USB 扫描协议并实现 Linux 客户端，但协议文档指出 re/decomp/ 下有 Dell 驱动的反编译源码，需确定收录政策。","evidence_url":"https://github.com/j3lte/dell3115cn-centre/blob/bf074d58d99152f795cb1660667870550ea01d8d/docs/PROTOCOL.md","reviewed_at":"2026-11-06"},{"id":"scan-1434542369","full_name":"lza6/notrack-2api-app","url":"https://github.com/lza6/notrack-2api-app","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"general-application","reason_en":"DuckFlow 2API is an operational duck.ai gateway with proxy pools and a desktop shell; its README documents no reverse-engineering analysis or findings.","reason_zh":"DuckFlow 2API 主要提供 duck.ai 网关、代理出口池和桌面程序；项目文档没有给出逆向分析过程或发现。","evidence_url":"https://github.com/lza6/notrack-2api-app/blob/4ce981ecadef42f8c51279d34f1d1d925533cea6/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1434569738","full_name":"smartworldarafath/REA_Skill","url":"https://github.com/smartworldarafath/REA_Skill","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"fork-or-mirror","reason_en":"REA_Skill bundles and adapts existing skills and projects, including the official morluto/rea skill, rather than presenting an original reverse-engineering tool or findings.","reason_zh":"REA_Skill 汇集并改编已有技能与项目，包括 morluto/rea 的官方技能，没有提供独立的逆向工具或研究结果。","evidence_url":"https://github.com/smartworldarafath/REA_Skill/blob/6642a0c74e0a7c3c98c823e2746d29c9cedbc7d0/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1434611263","full_name":"FNKG9527/fiil-ldac-unlock","url":"https://github.com/FNKG9527/fiil-ldac-unlock","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"fiil-ldac-unlock supplies activation-code substitutes, a fake server, and APK patching to bypass the vendor's LDAC licence activation path.","reason_zh":"fiil-ldac-unlock 提供替代激活码、假服务器和 APK 修改方案，用于绕过厂商的 LDAC 许可激活流程。","evidence_url":"https://github.com/FNKG9527/fiil-ldac-unlock/blob/243b52d849701899d37799db981e6626e39bb5ab/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1434629495","full_name":"Henrique1601/open-trainer-engine","url":"https://github.com/Henrique1601/open-trainer-engine","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"Open Trainer Engine is designed to create and run single-player game cheats through memory scanning and patch injection.","reason_zh":"Open Trainer Engine 的用途是通过内存扫描和补丁注入创建、运行单机游戏作弊功能。","evidence_url":"https://github.com/Henrique1601/open-trainer-engine/blob/ba780e4e79fedb4c83a019c6a08ca1dd4694ff08/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1434640074","full_name":"roloVibes/php2shell","url":"https://github.com/roloVibes/php2shell","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"security-testing","reason_en":"PHP2SHELL centers on a remote PHP vulnerability scanner and exploit proof of concept; its source-diff notes support that security-testing workflow.","reason_zh":"PHP2SHELL 的主体是远程 PHP 漏洞扫描器和利用概念验证，源码差异分析主要服务于该安全测试流程。","evidence_url":"https://github.com/roloVibes/php2shell/blob/b2beb0234cf668fca27d084b64c1148d67360f90/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1434663578","full_name":"sibest19/esphome-dea-netlink","url":"https://github.com/sibest19/esphome-dea-netlink","batch_id":"run-42201075883-1","decision":"hold","reason_code":"needs-maintainer-decision","reason_en":"The component sends open, close and stop commands to physical gate panels over a reconstructed bus protocol; the author says real-hardware operation remains untested.","reason_zh":"该组件通过重建的总线协议向实体门机发送开、关、停指令，而作者明确表示尚未在真实设备上测试，需由维护者决定是否收录。","evidence_url":"https://github.com/sibest19/esphome-dea-netlink/blob/24d3fd9b30523dfec949228c70d41a34fd5f2cb2/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1434724238","full_name":"yangwei251003/rea-local","url":"https://github.com/yangwei251003/rea-local","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"no-real-content","reason_en":"rea-local is a Markdown entry workflow that routes agents to separately installed REA tools and contains no analysis engine, target findings or RE-specific tooling of its own.","reason_zh":"rea-local 只是将智能体引导至另行配置的 REA 工具的 Markdown 入口，没有自有分析引擎、目标研究结果或逆向工具。","evidence_url":"https://github.com/yangwei251003/rea-local/blob/f7feecd45ef98f9cea80e72b1417082ef56bad1b/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1434731722","full_name":"ffxiv-tc-port/Dynamis","url":"https://github.com/ffxiv-tc-port/Dynamis","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"fork-or-mirror","reason_en":"This Dynamis repository identifies itself as a Taiwan port of Exter-N/Dynamis and lists localization and fixes to that upstream tool.","reason_zh":"该 Dynamis 仓库自述为 Exter-N/Dynamis 的台服移植版，列出的改动主要是繁体中文界面及适配修复。","evidence_url":"https://github.com/ffxiv-tc-port/Dynamis/blob/17f12c29429495b2a779660649cdd921376efed0/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1434794255","full_name":"Snaken/CSharpPython","url":"https://github.com/Snaken/CSharpPython","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"general-application","reason_en":"CSharpPython implements an embeddable scripting language and bytecode VM for Unity and .NET hosts, with no documented analysis of existing software.","reason_zh":"CSharpPython 是供 Unity 和 .NET 程序嵌入的脚本语言及字节码虚拟机，没有描述对现有软件的逆向分析。","evidence_url":"https://github.com/Snaken/CSharpPython/blob/b26675bce34bb81289a46eb134ab4c70f590b846/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1434830702","full_name":"lza6/config.rotech.dev-2api-app","url":"https://github.com/lza6/config.rotech.dev-2api-app","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The OpenChat analysis publishes working authentication and encryption bypass details alongside a gateway and repeated-call tests for the live service.","reason_zh":"OpenChat 项目公开可用于绕过在线服务鉴权与加密检查的细节，并附有网关和连续调用测试。","evidence_url":"https://github.com/lza6/config.rotech.dev-2api-app/blob/cfab9cf2a84886e2affc1997fede301cac4821a7/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1434889218","full_name":"Milordick/unisoc-tool-rs","url":"https://github.com/Milordick/unisoc-tool-rs","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"general-application","reason_en":"unisoc-tool-rs is chiefly a device servicing and flashing utility; its reverse-engineering claim explains implementation provenance rather than an analysis feature.","reason_zh":"unisoc-tool-rs 主要用于设备维护和刷机；逆向工程只被用来说明实现来源，而非工具提供的分析功能。","evidence_url":"https://github.com/Milordick/unisoc-tool-rs/blob/32ec08dab1a868a8018d2e4ed1a6378d27b7e210/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1434956350","full_name":"lza6/Imagerator-2API-APP","url":"https://github.com/lza6/Imagerator-2API-APP","batch_id":"run-42201075883-1","decision":"hold","reason_code":"linking-policy","reason_en":"The Imagerator investigation commits decompiled Java files from a third-party APK, requiring a maintainer decision despite its documented API findings.","reason_zh":"Imagerator 调查记录了 API 发现，但仓库提交了第三方 APK 的反编译 Java 文件，收录链接需由维护者决定。","evidence_url":"https://github.com/lza6/Imagerator-2API-APP/blob/53912d5ef15f276fa4305e600c807710101fb182/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1434967551","full_name":"lza6/imagenai-2api-app","url":"https://github.com/lza6/imagenai-2api-app","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"imagenai-2api-app builds a gateway around fresh device fingerprints to bypass the service's per-device generation limit.","reason_zh":"imagenai-2api-app 通过为每次请求生成新设备指纹来绕过服务的单设备生成额度，网关以规避限额为核心功能。","evidence_url":"https://github.com/lza6/imagenai-2api-app/blob/5483207cd4603a7228495c224d5137662da608d4/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1435012049","full_name":"Ordi94/bblit","url":"https://github.com/Ordi94/bblit","batch_id":"run-42201075883-1","decision":"hold","reason_code":"linking-policy","reason_en":"bblit is a substantive Bugs Bunny: Lost in Time decompilation, but it commits Psy-Q SDK headers copied unchanged from an external archive.","reason_zh":"bblit 对 Bugs Bunny: Lost in Time 的反编译有实质内容，但仓库收录了从外部存档原样复制的 Psy-Q SDK 头文件，需决定链接政策。","evidence_url":"https://github.com/Ordi94/bblit/blob/c0d80ce532b57851aafc98ba0cd33748d5c27d4f/include/psyq/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1435052199","full_name":"LevXddd/roadmap","url":"https://github.com/LevXddd/roadmap","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"personal-profile","reason_en":"Learning Roadmap is one person's checkbox plan and links for future C, reverse-engineering, and firmware study, without original lessons or findings.","reason_zh":"Learning Roadmap 是个人学习清单和资源链接，规划未来学习 C、逆向工程与固件安全，没有原创课程或研究发现。","evidence_url":"https://github.com/LevXddd/roadmap/blob/514d732f53ee180fae71a094a2d72b60405d8035/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1435052277","full_name":"LevXddd/c-playground","url":"https://github.com/LevXddd/c-playground","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"general-programming-tutorial","reason_en":"c-playground is primarily C practice with one starter program; its disassembly exercise inspects the compiler output of that practice code.","reason_zh":"c-playground 主要用于 C 语言练习，现有程序只有入门示例；反汇编练习查看的是这些练习代码的编译结果。","evidence_url":"https://github.com/LevXddd/c-playground/blob/5faed11fe714738dffdef4191fd0784dfadb0918/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1435054677","full_name":"LevXddd/writeups","url":"https://github.com/LevXddd/writeups","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"no-real-content","reason_en":"The writeups repository has a placeholder index and folder templates, but no completed crackme analysis, CTF write-up, or substantive concept notes.","reason_zh":"writeups 仓库只有占位索引和目录模板，没有已完成的 crackme 分析、CTF 题解或实质性的概念笔记。","evidence_url":"https://github.com/LevXddd/writeups/blob/63b5838b3d0b343dfc83554670f1a8b8bac57ce4/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1435057683","full_name":"guidiguidi/twitter-graphql-client","url":"https://github.com/guidiguidi/twitter-graphql-client","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"general-application","reason_en":"The Python client uses session cookies to call Twitter/X endpoints and scrape replies, but documents no investigation of the client or API protocol.","reason_zh":"该 Python 客户端用会话 Cookie 调用 Twitter/X 接口并抓取回复，没有记录客户端或接口协议的逆向分析。","evidence_url":"https://github.com/guidiguidi/twitter-graphql-client/blob/3121f34f2d2c0df43a9189c07ab11677654496b4/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1435063527","full_name":"lza6/Zyro-VPN-patchMethod","url":"https://github.com/lza6/Zyro-VPN-patchMethod","batch_id":"run-42201075883-1","decision":"hold","reason_code":"linking-policy","reason_en":"The investigation documents a substantive APK unpacking method, but the repository also includes recovered DEX and extensive decompiled Dart output from the target app.","reason_zh":"该研究详细记录 APK 脱壳方法，但仓库还收录目标应用恢复出的 DEX 和大量 Dart 反编译输出，需维护者判断收录政策。","evidence_url":"https://github.com/lza6/Zyro-VPN-patchMethod/blob/3fe0134d9f888fe8e6923fac598e0bc995b3ee48/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1435070767","full_name":"IamDanteDev/FNFTOK2026Demo-SourceCode","url":"https://github.com/IamDanteDev/FNFTOK2026Demo-SourceCode","batch_id":"run-42201075883-1","decision":"hold","reason_code":"linking-policy","reason_en":"The Godot reconstruction commits recovered GDScript, bytecode, songs, sprites and other original game assets, and offers its data pack as a release download.","reason_zh":"该 Godot 重建仓库提交了恢复的 GDScript、字节码、歌曲、图片等原游戏资源，并通过 Release 提供数据包，需先作收录政策判断。","evidence_url":"https://github.com/IamDanteDev/FNFTOK2026Demo-SourceCode/blob/56416c6dcfb45b4eccc4b1234278671642a7d83f/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1435074908","full_name":"lza6/rotech.dev-2api-app","url":"https://github.com/lza6/rotech.dev-2api-app","batch_id":"run-42201075883-1","decision":"hold","reason_code":"linking-policy","reason_en":"The OpenChat investigation documents protocol and native-library analysis, but it also commits decrypted third-party role and prompt assets.","reason_zh":"OpenChat 项目记录了协议和原生库分析，同时提交了解密后的第三方角色与提示词资源，需作转载政策决定。","evidence_url":"https://github.com/lza6/rotech.dev-2api-app/blob/ade6f47206d5b067b0b6bf1ca0541c170a323da1/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1435076974","full_name":"lza6/mengjing-2api-app","url":"https://github.com/lza6/mengjing-2api-app","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"mengjing-2api-app automates fresh account registration to replenish free image-generation credits after analyzing a cracked Android app.","reason_zh":"mengjing-2api-app 在分析破解版 Android 应用后，自动注册新账号以补充免费生成额度，核心用途是规避用量限制。","evidence_url":"https://github.com/lza6/mengjing-2api-app/blob/1f87eec61f83b1d720c19e9dcf90df1d3a9bfe7a/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1435079934","full_name":"lza6/Dreamerland-2api-app","url":"https://github.com/lza6/Dreamerland-2api-app","batch_id":"run-42201075883-1","decision":"hold","reason_code":"linking-policy","reason_en":"Dreamerland-2api-app documents app and web-client protocol analysis but commits a copied, minified website bundle as gallery_main.js.","reason_zh":"Dreamerland-2api-app 记录了应用及网页客户端的协议分析，但仓库提交了复制的压缩版网站脚本 gallery_main.js，需决定是否可以链接。","evidence_url":"https://github.com/lza6/Dreamerland-2api-app/blob/c555c4e6464b61f62b113f4ba9dd99822d257005/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1435086120","full_name":"lza6/nano-banana-trip","url":"https://github.com/lza6/nano-banana-trip","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"Nano Banana Trip publishes recovered service credentials and a gateway that uses them to bypass the app's account and payment controls.","reason_zh":"Nano Banana Trip 公布从应用还原的服务凭据，并提供绕过应用账号与付费控制的网关。","evidence_url":"https://github.com/lza6/nano-banana-trip/blob/e78acd6a6d93bfe691a9ec4cbd272c2285787db3/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1435111395","full_name":"lza6/Photoroom-2API-APP","url":"https://github.com/lza6/Photoroom-2API-APP","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"Photoroom 2API reconstructs authentication from a cracked APK and uses the app's certificate identity to access upstream services through a proxy gateway.","reason_zh":"Photoroom 2API 从破解 APK 提取鉴权信息，并借用应用证书身份通过代理网关访问上游服务，属于身份与访问限制规避。","evidence_url":"https://github.com/lza6/Photoroom-2API-APP/blob/0d00c2497d61173a08821e1e2417e4aef1e6410c/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1435118471","full_name":"harshgounder/ai-web-arsenal","url":"https://github.com/harshgounder/ai-web-arsenal","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"general-security","reason_en":"ai-web-arsenal is chiefly a web attack-surface and security-testing inventory; its configured REA MCP entry is one supporting tool, not the project's subject.","reason_zh":"ai-web-arsenal 主要整理 Web 攻击面和安全测试流程；REA MCP 配置只是辅助工具之一，并非项目主体。","evidence_url":"https://github.com/harshgounder/ai-web-arsenal/blob/eb73b1f98c55ebcdaf134d7109bbed4b3da81f7e/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1435119183","full_name":"JUTZUGC/anyps5-deploy-guide","url":"https://github.com/JUTZUGC/anyps5-deploy-guide","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"fork-or-mirror","reason_en":"The guide repackages deployment instructions and binaries for boykopovar/AnyPS5; its local MCP server only serves the guide's copied project information.","reason_zh":"该指南整理 boykopovar/AnyPS5 的部署步骤和发布文件；附带的 MCP 服务仅查询指南内容，没有新增逆向分析。","evidence_url":"https://github.com/JUTZUGC/anyps5-deploy-guide/blob/c2504df37ff5ee2274e234f2e7df244244fdff09/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1435127515","full_name":"lza6/t2v-staging.aritek.app-2api","url":"https://github.com/lza6/t2v-staging.aritek.app-2api","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The project provides a bridge that fabricates device identities to obtain new guest accounts and bypass the service's per-device generation quotas.","reason_zh":"该项目提供通过伪造设备标识反复获取访客账号、绕过服务按设备设置的生成额度的桥接工具。","evidence_url":"https://github.com/lza6/t2v-staging.aritek.app-2api/blob/b6ac2ba7fbcac0743693171e2f38eda31639b011/v1.9.3/QUICKSTART.md","reviewed_at":"2026-11-06"},{"id":"scan-1435151157","full_name":"krallenas/altered-space-gb-cn","url":"https://github.com/krallenas/altered-space-gb-cn","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"game-mod-no-re","reason_en":"altered-space-gb-cn is a Chinese translation build pipeline for an original Game Boy ROM; its documentation describes patch layout and verification, not an investigation of the game.","reason_zh":"altered-space-gb-cn 是从原版 Game Boy ROM 生成中文汉化版的构建流程；文档说明补丁布局与校验，未记录对游戏的逆向分析。","evidence_url":"https://github.com/krallenas/altered-space-gb-cn/blob/c126b93bfc4aad42db716aa7a18e553f368450f7/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1435170054","full_name":"sennett-lau/re-gvs-gvzg","url":"https://github.com/sennett-lau/re-gvs-gvzg","batch_id":"run-42186805426-1","decision":"hold","reason_code":"linking-policy","reason_en":"The browser-port research is substantial, but the repository commits a large C++ translation of the commercial game's executable and a prebuilt web package.","reason_zh":"项目有完整的浏览器移植研究，但仓库提交了商业游戏可执行文件的大量 C++ 转译代码和预构建网页包，需由维护者决定收录方式。","evidence_url":"https://github.com/sennett-lau/re-gvs-gvzg/blob/d438577da024591ac457037427b53a3d9bfa9b04/generated/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1435180271","full_name":"Samoe97/ACGC-Desktop","url":"https://github.com/Samoe97/ACGC-Desktop","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"game-mod-no-re","reason_en":"ACGC Desktop identifies itself as a fork of the already cataloged PC port and adds a wallpaper mode; its own README documents no new reverse-engineering work.","reason_zh":"ACGC Desktop 自述为已收录 PC 移植版的分叉，新增的是桌面壁纸模式；其 README 未记录新的逆向工作。","evidence_url":"https://github.com/Samoe97/ACGC-Desktop/blob/8cc63273e1374ffa33d56d3e28f7d384494aa129/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1435182494","full_name":"dougchansan/ns2-savekit","url":"https://github.com/dougchansan/ns2-savekit","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"ns2-savekit uses an exploit session to change Switch 2 game saves and retarget an Artemis save so the game executes injected Lua.","reason_zh":"ns2-savekit 依赖利用会话修改 Switch 2 游戏存档，并重定向 Artemis 存档以执行注入的 Lua 代码。","evidence_url":"https://github.com/dougchansan/ns2-savekit/blob/700814ff37fa8f11f12e77b65dc8a33d421e8dd1/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1435253106","full_name":"Zoezo01/q2-pod-zh","url":"https://github.com/Zoezo01/q2-pod-zh","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"fork-or-mirror","reason_en":"Q2 Pod 简体中文版 explicitly carries DiamondBond/q2-pod's firmware patch and most code, adding a Chinese localization and personal features to that existing project.","reason_zh":"Q2 Pod 简体中文版明确沿用 DiamondBond/q2-pod 的固件补丁和绝大部分代码，在已有项目上加入汉化与个人功能。","evidence_url":"https://github.com/Zoezo01/q2-pod-zh/blob/d7dd12d9316c078b7ad3a9781ecf79bb1d89e3bf/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1435303718","full_name":"JUTZUGC/ghidra-deploy-guide","url":"https://github.com/JUTZUGC/ghidra-deploy-guide","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"development-tool","reason_en":"The guide and MCP server automate Ghidra installation and retrieve deployment instructions; they expose no Ghidra analysis operations.","reason_zh":"该指南及 MCP 服务用于部署 Ghidra 和查询安装说明，没有提供 Ghidra 分析操作。","evidence_url":"https://github.com/JUTZUGC/ghidra-deploy-guide/blob/0f2454e54dd0162aa215715591e8b970c82ee787/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1435393249","full_name":"RevokeTrace/revoketrace","url":"https://github.com/RevokeTrace/revoketrace","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-application","reason_en":"RevokeTrace forecasts effects of Stellar issuer authorization changes from ledger snapshots; its protocol research supports that application rather than analyzing an unknown protocol.","reason_zh":"RevokeTrace 根据账本快照预测 Stellar 发行方授权变更的影响；协议资料服务于该应用，并非对未知协议开展逆向分析。","evidence_url":"https://github.com/RevokeTrace/revoketrace/blob/e09c5c78ad32c315e51110e9f35b2827b4a50381/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1435424366","full_name":"gouthwut/PORT","url":"https://github.com/gouthwut/PORT","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-application","reason_en":"PORT is a Windows catalog and download manager for other developers' ports and decompilations; it performs no analysis or reconstruction itself.","reason_zh":"PORT 是展示并下载其他开发者移植及反编译项目的 Windows 应用，自身不执行分析或重建。","evidence_url":"https://github.com/gouthwut/PORT/blob/6d7a9521201ab4defa6c6ebf1d96ab8c77fa6fb9/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1435446003","full_name":"LeonNagant/GFLFC-decryption-toolkit","url":"https://github.com/LeonNagant/GFLFC-decryption-toolkit","batch_id":"run-42186805426-1","decision":"hold","reason_code":"linking-policy","reason_en":"The toolkit documents UnityFS and FlatBuffers analysis, but its README links to archives of raw and decrypted game resources; a maintainer must decide whether to link it.","reason_zh":"工具包记录 UnityFS 和 FlatBuffers 格式分析，但 README 链接了原始及解密后的游戏资源存档，是否收录需维护者裁定。","evidence_url":"https://github.com/LeonNagant/GFLFC-decryption-toolkit/blob/7f964012b3ef8437ddaab0effd8beb8924f4b266/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1435458925","full_name":"2458090042-gif/kaidouyin-web","url":"https://github.com/2458090042-gif/kaidouyin-web","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-application","reason_en":"The Chrome CDP program automates Douyin playback quality, fullscreen and window behavior; the page observations support those features rather than an RE investigation.","reason_zh":"该 CDP 程序用于自动调整抖音网页画质、全屏和窗口行为；页面观察服务于这些功能，并非独立的逆向研究。","evidence_url":"https://github.com/2458090042-gif/kaidouyin-web/blob/ef4ba82ad0ba749c6a9a325a3c1b11f107dc1c11/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1435508233","full_name":"rohan-fast-code/bankshield-humangate","url":"https://github.com/rohan-fast-code/bankshield-humangate","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"protection-tool","reason_en":"BankShield HumanGate is a banking access gate and agent restriction system; its RE references describe a threat it seeks to block, not analysis it performs.","reason_zh":"BankShield HumanGate 是银行访问门禁和智能体权限限制系统；其逆向工程内容用于描述防护对象，项目本身不执行逆向分析。","evidence_url":"https://github.com/rohan-fast-code/bankshield-humangate/blob/91153f7ccf3931330f6553bd7deb9e0033a6d656/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1435510105","full_name":"karimbel/wzt-showcase","url":"https://github.com/karimbel/wzt-showcase","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"no-real-content","reason_en":"WZT's showcase says its code is private and the repository contains only a presentation and screenshots, without protocol traces, implementation or detailed findings.","reason_zh":"WZT 展示页说明源码不公开；仓库只有项目介绍和截图，没有协议抓包、实现代码或具体研究结果。","evidence_url":"https://github.com/karimbel/wzt-showcase/blob/e1172581e4c26d7ab920239efe43c586ea5e0b4b/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1435511779","full_name":"huxuezha/chaoxing-toolkit","url":"https://github.com/huxuezha/chaoxing-toolkit","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"Chaoxing Toolkit automates course quiz submission and reports video progress without playback, including analysis of signing and rate controls for that purpose.","reason_zh":"chaoxing-toolkit 自动提交课程测验，并在不播放视频的情况下上报进度；其签名和限流分析服务于这一用途。","evidence_url":"https://github.com/huxuezha/chaoxing-toolkit/blob/bc59b99905ef479c45e10801540f1a9108717719/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1435513267","full_name":"porasnagar/iNA","url":"https://github.com/porasnagar/iNA","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"general-application","reason_en":"iNA is an Android accessory-control app and simulator; its protocol implementation is documented, but the repository presents no reverse-engineering investigation.","reason_zh":"iNA 主要是 Android 配件控制应用与模拟器；虽然描述了协议实现，现有材料没有记录逆向分析过程或发现。","evidence_url":"https://github.com/porasnagar/iNA/blob/8a7db0620bae635403929a34b19e9b23cdf5ce68/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1435534642","full_name":"danielcadev/voicemod-wine-compat","url":"https://github.com/danielcadev/voicemod-wine-compat","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"upstream-unavailable","reason_en":"The repository danielcadev/voicemod-wine-compat no longer resolves: the GraphQL lookup and a git clone both failed on 2026-11-06.","reason_zh":"仓库 danielcadev/voicemod-wine-compat 已无法访问：2026-11-06 的 GraphQL 查询和 git clone 均失败。","evidence_url":"https://github.com/danielcadev/voicemod-wine-compat/blob/25a4758c7cf9c40f67c583c20b776b611560847f/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1435540190","full_name":"FedoraV3/il2cpp-asi-template","url":"https://github.com/FedoraV3/il2cpp-asi-template","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"game-mod-no-re","reason_en":"The repository is a Unity IL2CPP mod template that fixes symbol lookup for an existing bridge; it documents no game analysis or recovered findings.","reason_zh":"仓库是 Unity IL2CPP 游戏模组模板，解决现有桥接库的符号查找问题；未记录游戏逆向分析或研究成果。","evidence_url":"https://github.com/FedoraV3/il2cpp-asi-template/blob/5fcf2515098139546301e2188316cae61be23f58/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1435565722","full_name":"Kevnomas/crash-titans-psp-port","url":"https://github.com/Kevnomas/crash-titans-psp-port","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"game-promotion-page","reason_en":"The Crash of the Titans README claims a PSP recompilation and native port, but the repository contains only that page and three screenshots, with no source or build files.","reason_zh":"Crash of the Titans 的 README 声称已有 PSP 重编译和原生移植，但仓库只有说明页及三张截图，没有源码或构建文件。","evidence_url":"https://github.com/Kevnomas/crash-titans-psp-port/blob/b2d8af374636c25f4e36af4065e3263554d8ec78/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1435583511","full_name":"LevXddd/fwtriage","url":"https://github.com/LevXddd/fwtriage","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"no-real-content","reason_en":"fwtriage lists only planned file-type, strings and entropy checks; its file list has no implementation and usage is marked coming soon.","reason_zh":"fwtriage 只列出计划中的文件类型、字符串和熵检查；文件列表没有实现代码，用法也标为即将推出。","evidence_url":"https://github.com/LevXddd/fwtriage/blob/2d89d62228627204b5a3ecbd5da22c599effb0b4/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1435589705","full_name":"hypersenseindia/hypersense-memory-analyzer","url":"https://github.com/hypersenseindia/hypersense-memory-analyzer","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"upstream-unavailable","reason_en":"The repository hypersenseindia/hypersense-memory-analyzer no longer resolves: the GraphQL lookup and a git clone both failed on 2026-11-06.","reason_zh":"仓库 hypersenseindia/hypersense-memory-analyzer 已无法访问：2026-11-06 的 GraphQL 查询和 git clone 均失败。","evidence_url":"https://github.com/hypersenseindia/hypersense-memory-analyzer/blob/c01b8a67fdeb3404c742b5dd477bfd2ff82b4527/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1435613344","full_name":"RusticStack/hydra-re-showcase","url":"https://github.com/RusticStack/hydra-re-showcase","batch_id":"run-42186805426-1","decision":"exclude","reason_code":"no-real-content","reason_en":"The repository is a website showcase intake with one project card and a generated index, not a substantive set of reverse-engineering findings or resources.","reason_zh":"仓库用于接收网站展示卡片，现有内容仅一条项目记录和生成索引，缺少实质性的逆向成果或资源整理。","evidence_url":"https://github.com/RusticStack/hydra-re-showcase/blob/70fa98c8db08fcb24c80c9ba56bb20ce85bbb070/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1435628456","full_name":"jkfran/stadiacast","url":"https://github.com/jkfran/stadiacast","batch_id":"run-42186805426-1","decision":"curated","curated_id":"stadiacast-case"},{"id":"scan-1435669285","full_name":"hoangphi01/hy300ultra-h726-allinone","url":"https://github.com/hoangphi01/hy300ultra-h726-allinone","batch_id":"run-42186805426-1","decision":"hold","reason_code":"linking-policy","reason_en":"The H726 investigation is substantial, but the README links mirrored stock firmware and rooted images, which requires a maintainer linking decision.","reason_zh":"H726 项目有充分的逆向调查内容，但首页链接了镜像的原厂固件和已 root 镜像，需维护者决定能否收录。","evidence_url":"https://github.com/hoangphi01/hy300ultra-h726-allinone/blob/15ee12df7664760ea6f0ac19dd16e1b517be3225/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1435672023","full_name":"wnsrn3436/re-jw2-trk-resolution-settings","url":"https://github.com/wnsrn3436/re-jw2-trk-resolution-settings","batch_id":"run-42186805426-1","decision":"hold","reason_code":"linking-policy","reason_en":"The repository documents analyzed game addresses, but its release instructions say it bundles and copies a modified The Ranker executable, requiring a maintainer linking decision.","reason_zh":"仓库记录了游戏地址分析，但发行说明称下载包附带并复制改过的《The Ranker》可执行文件，需由维护者决定是否收录。","evidence_url":"https://github.com/wnsrn3436/re-jw2-trk-resolution-settings/blob/3da57dfccc9789b6bfeb9a688efee98cc9308e86/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1435692854","full_name":"gomgom-40/mttl-w01-reverse-engineering","url":"https://github.com/gomgom-40/mttl-w01-reverse-engineering","batch_id":"run-42186805426-1","decision":"hold","reason_code":"linking-policy","reason_en":"The protocol study is substantial, but the repository commits a stock MTTL-W01 firmware image that its NOTICE identifies as owned by the vendor.","reason_zh":"协议研究内容充实，但仓库提交了 MTTL-W01 原厂固件映像；NOTICE 明确称该文件归厂商所有。","evidence_url":"https://github.com/gomgom-40/mttl-w01-reverse-engineering/blob/5406a04b1a7137c1738231d3874d707fe1425feb/NOTICE.md","reviewed_at":"2026-11-06"},{"id":"scan-1435702343","full_name":"lza6/blackhole-vpn-APP","url":"https://github.com/lza6/blackhole-vpn-APP","batch_id":"run-42186805426-1","decision":"hold","reason_code":"linking-policy","reason_en":"The repository commits decrypted DEX archives and a patched DEX from the analysed VPN app, alongside its reverse-engineering report.","reason_zh":"仓库在逆向报告之外，还提交了所分析 VPN 应用的解密 DEX 压缩包和修改后的 DEX，需要维护者判断。","evidence_url":"https://github.com/lza6/blackhole-vpn-APP/blob/30598646b6cde38c56256dfde2f1abdaa6f7dea4/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1435833569","full_name":"lza6/NSFWLover-2api","url":"https://github.com/lza6/NSFWLover-2api","batch_id":"run-42119584443-1","decision":"hold","reason_code":"linking-policy","reason_en":"NSFWLover-2api contains copied, obfuscated Next.js bundles and a full HAR capture from its target website, so linking needs maintainer review.","reason_zh":"NSFWLover-2api 收录了目标网站的混淆 Next.js 构建文件及完整 HAR 抓包，链接政策需由维护者审核。","evidence_url":"https://github.com/lza6/NSFWLover-2api/blob/c63f81d6e50624f1b6f82a1727fed7bf89a4b621/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1435843592","full_name":"Anti-Anti-Anit/th06-arm64","url":"https://github.com/Anti-Anti-Anit/th06-arm64","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"upstream-unavailable","reason_en":"The repository Anti-Anti-Anit/th06-arm64 no longer resolves: the GraphQL lookup and a git clone both failed on 2026-11-06.","reason_zh":"仓库 Anti-Anti-Anit/th06-arm64 已无法访问：2026-11-06 的 GraphQL 查询和 git clone 均失败。","evidence_url":"https://github.com/Anti-Anti-Anit/th06-arm64/blob/6d777a039cf649b79e40d6787186eccd40a67d5c/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1435845547","full_name":"lza6/perchance-2api","url":"https://github.com/lza6/perchance-2api","batch_id":"run-42119584443-1","decision":"hold","reason_code":"linking-policy","reason_en":"The protocol analysis is substantive, but the repository commits captured Perchance, Cloudflare and third-party webpage source snapshots whose redistribution needs a maintainer decision.","reason_zh":"协议分析内容具体，但仓库收录了 Perchance、Cloudflare 及第三方网页源码快照，转载这些文件需要维护者裁定。","evidence_url":"https://github.com/lza6/perchance-2api/blob/7b4bc00d8de148f0e11e09f7843042fbfe2ced78/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1435951391","full_name":"orrpunk-art/virtual-mpc-sample","url":"https://github.com/orrpunk-art/virtual-mpc-sample","batch_id":"run-42119584443-1","decision":"curated","curated_id":"virtual-mpc-sample-case"},{"id":"scan-1435961537","full_name":"lza6/Zyra-2api-app","url":"https://github.com/lza6/Zyra-2api-app","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The Zyra gateway republishes a hard-coded service key and emphasizes high-volume use without rate limits, making unauthorized quota and access evasion central to the project.","reason_zh":"Zyra 网关公开硬编码服务密钥，并突出无速率限制的大量调用；规避服务访问与配额控制是项目的核心用途。","evidence_url":"https://github.com/lza6/Zyra-2api-app/blob/6ca10dd23ccc91059b04fe4b6127c021afc4151b/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1435973801","full_name":"lza6/VPN.lat-APK-2api","url":"https://github.com/lza6/VPN.lat-APK-2api","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The repository aims to harvest VPN.lat node configurations for a proxy pool and gives a route around the service's geographic access restriction.","reason_zh":"该仓库以获取 VPN.lat 节点配置并接入代理池为目标，提供了绕过服务地区访问限制的获取路线。","evidence_url":"https://github.com/lza6/VPN.lat-APK-2api/blob/81a28d1366e36ce1cd897bf93de40831b98e7bc2/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1435976774","full_name":"lza6/imggen81-app-2api","url":"https://github.com/lza6/imggen81-app-2api","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The PhotoFlux project extracts embedded service secrets and includes a Frida hook for bypassing pairip licence checks, placing evasion at the center of the work.","reason_zh":"PhotoFlux 项目提取内置服务密钥，并附带绕过 pairip 许可校验的 Frida hook，规避限制是其主要内容。","evidence_url":"https://github.com/lza6/imggen81-app-2api/blob/cfa5fdf44bd6c9c219365e5223a231b5cbf86301/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1435980626","full_name":"lza6/Begamob-app-2api","url":"https://github.com/lza6/Begamob-app-2api","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The Begamob analysis turns a hardcoded app signing key into an authentication-bypassing API gateway and stresses unrestricted access to the service.","reason_zh":"该 Begamob 分析利用应用内硬编码签名密钥构建绕过正常鉴权的 API 网关，并以服务访问限制为压测重点。","evidence_url":"https://github.com/lza6/Begamob-app-2api/blob/27717ade31380f016b7740b2e3d4529d76d61413/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1435982931","full_name":"lza6/searchai-app-2api","url":"https://github.com/lza6/searchai-app-2api","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"Although it documents app-protocol analysis, the demo uses a modded SearchAI APK and emphasizes bypassing the VIP payment gate to call paid search functions.","reason_zh":"项目虽记录应用协议分析，但演示基于修改版 SearchAI APK，并着重说明绕过 VIP 付费限制调用搜索功能。","evidence_url":"https://github.com/lza6/searchai-app-2api/blob/154ffd7f45b57a6280b4d2b2ffa3f39e9e35f465/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1436003757","full_name":"Jinb101/hongguo_destop","url":"https://github.com/Jinb101/hongguo_destop","batch_id":"run-42119584443-1","decision":"hold","reason_code":"linking-policy","reason_en":"The REA-assisted Hongguo rebuild commits a captured original frontend snapshot and original backend source beside its new interface.","reason_zh":"这项借助 REA 完成的红果桌面端重构，在新界面旁提交了抓取的原版前端快照和原版后端源码，需维护者判断。","evidence_url":"https://github.com/Jinb101/hongguo_destop/blob/62a29aa811f767bd5bb97260f9986601c0cb0cb9/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1436014209","full_name":"Monsdevo/infamous2-ios","url":"https://github.com/Monsdevo/infamous2-ios","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"game-promotion-page","reason_en":"The repository presents an inFAMOUS 2 iOS progress showcase with screenshots but explicitly publishes no implementation, build or game data.","reason_zh":"该仓库是 inFAMOUS 2 iOS 移植的进展展示，只有说明和截图，并明确没有公开实现代码或构建产物。","evidence_url":"https://github.com/Monsdevo/infamous2-ios/blob/270ba54d51378ed2aa250c6ddab55540a2b6e1b8/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1436014472","full_name":"lza6/Seekee-app-2api","url":"https://github.com/lza6/Seekee-app-2api","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The deliverable exposes Seekee's anonymous image service through an OpenAI-compatible gateway and documents retrying with a new device fingerprint after contention.","reason_zh":"该项目将 Seekee 的匿名图像服务接成 OpenAI 兼容网关，并指导在请求受限后更换设备指纹重试，属于规避服务限制的网关。","evidence_url":"https://github.com/lza6/Seekee-app-2api/blob/075fbea60a276af418f58b8b3ae28610774f0b85/docs/NEW-API-INTEGRATION.md","reviewed_at":"2026-11-06"},{"id":"scan-1436024335","full_name":"Mwrnk/desktop-melee","url":"https://github.com/Mwrnk/desktop-melee","batch_id":"run-42119584443-1","decision":"hold","reason_code":"linking-policy","reason_en":"Desktop Melee commits decompiled Super Smash Bros. Melee game code that its own legal section identifies as unlicensed Nintendo code.","reason_zh":"Desktop Melee 仓库提交了《Super Smash Bros. Melee》的反编译游戏代码，其法律说明明确指出这些 Nintendo 代码没有获得许可证。","evidence_url":"https://github.com/Mwrnk/desktop-melee/blob/5d1953f2600db3f2ac808ded5ce6d7b82ad73334/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1436045734","full_name":"KaidenM34/BO1PortedBrowserMods","url":"https://github.com/KaidenM34/BO1PortedBrowserMods","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"bo1fun's primary deliverable is a Black Ops Zombies mod menu with god mode, infinite ammunition and other gameplay cheats.","reason_zh":"bo1fun 的主要产物是《黑色行动》僵尸模式作弊菜单，提供无敌、无限弹药等玩法修改。","evidence_url":"https://github.com/KaidenM34/BO1PortedBrowserMods/blob/d1b3df18e08b415c2a05cfc7a31446259445332f/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1436157066","full_name":"WATF-F/anti-afk-media-controller","url":"https://github.com/WATF-F/anti-afk-media-controller","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The script spoofs page visibility and intercepts media controls to conceal an inactive tab from websites and defeat their pause behavior.","reason_zh":"脚本伪造页面可见状态并拦截媒体控制，使网站无法察觉标签页失活，从而绕过自动暂停。","evidence_url":"https://github.com/WATF-F/anti-afk-media-controller/blob/1ba924e06013b8b5dd0d91c7c016a0dfb1de4fb1/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1436172198","full_name":"youli-naixu/opple-mt428-local","url":"https://github.com/youli-naixu/opple-mt428-local","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"general-application","reason_en":"OPPLE MT428 Local is a lamp-control client built on earlier local-control implementations; the repository does not document its own protocol reconstruction.","reason_zh":"OPPLE MT428 Local 是基于既有本地控制实现的台灯客户端；文档没有展示其自行还原协议的过程或发现。","evidence_url":"https://github.com/youli-naixu/opple-mt428-local/blob/7b358978365d3e8e91e06c5531b4c6d5dcb40957/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1436174070","full_name":"lza6/Alura-AI-APP-2api","url":"https://github.com/lza6/Alura-AI-APP-2api","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The Alura AI report turns keys extracted from a modified APK into a service proxy and publishes live-key usage and load tests against the provider's account.","reason_zh":"Alura AI 报告把修改版 APK 中提取的密钥用于服务代理，并记录使用开发者账号密钥进行调用和压测，属于凭据滥用。","evidence_url":"https://github.com/lza6/Alura-AI-APP-2api/blob/47c308f076d46acc76ae409d05cadee9bba1d6a5/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1436213777","full_name":"HAKORADev/RAWR","url":"https://github.com/HAKORADev/RAWR","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"RAWR removes game distribution and trial wrappers, including code that patches a purchase check and changes trial registration state.","reason_zh":"RAWR 移除游戏发行与试玩封装；项目记录了修改购买检查和试玩注册状态的功能。","evidence_url":"https://github.com/HAKORADev/RAWR/blob/5287022c37075bbcd2f842a78e0e0c97d6b3924f/CHANGELOG.md","reviewed_at":"2026-11-06"},{"id":"scan-1436222113","full_name":"lza6/ai.fusion.character.merge-2api-app","url":"https://github.com/lza6/ai.fusion.character.merge-2api-app","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The APK investigation is packaged into a gateway that rotates arbitrary device IDs to obtain fresh guest allowances and bypass per-device free quotas.","reason_zh":"该 APK 分析的交付物会自动更换任意设备 ID，以反复获取访客额度并规避按设备计算的免费配额。","evidence_url":"https://github.com/lza6/ai.fusion.character.merge-2api-app/blob/cb0c43fb492dd59e89812f8b2d5ecaf63c20ce64/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1436228549","full_name":"lza6/Chat-Smith-APP-2api","url":"https://github.com/lza6/Chat-Smith-APP-2api","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The Chat Smith gateway is built around obtaining free JWTs with arbitrary device IDs and bypassing the service's AppCheck path.","reason_zh":"Chat Smith 网关以任意设备 ID 获取免费 JWT，并利用绕过 AppCheck 的接口调用第三方服务，属于规避服务限制。","evidence_url":"https://github.com/lza6/Chat-Smith-APP-2api/blob/4a29125587ad2e8e281c06203bc0b51518ec5a0c/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1436244567","full_name":"johannhartmann/n1x-npu-linux","url":"https://github.com/johannhartmann/n1x-npu-linux","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"general-application","reason_en":"The repository presents a Linux NPU driver, compiler and ONNX runtime for executing models; it does not describe reverse engineering as the work's subject.","reason_zh":"仓库资料展示的是用于运行模型的 Linux NPU 驱动、编译器和 ONNX 运行时，没有把逆向工程作为项目研究对象。","evidence_url":"https://github.com/johannhartmann/n1x-npu-linux/blob/1eef8d5b7c1a9b710c5cee611b39902c2a9f6ff5/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1436247315","full_name":"lza6/Privify-VPN-APP-2api","url":"https://github.com/lza6/Privify-VPN-APP-2api","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"Privify-VPN-APP-2api harvests VPN credentials and node configurations and documents using them as an outbound proxy pool.","reason_zh":"Privify-VPN-APP-2api 收集 VPN 凭证和节点配置，并说明如何把这些节点用作出站代理池。","evidence_url":"https://github.com/lza6/Privify-VPN-APP-2api/blob/7cc6a6b7cd9a68a57f37d0383044c229c0c12e7f/docs/NEWAPI_INTEGRATION.md","reviewed_at":"2026-11-06"},{"id":"scan-1436250012","full_name":"lza6/ZeroPing-APP-2api","url":"https://github.com/lza6/ZeroPing-APP-2api","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The ZeroPing report publishes harvested VPN node credentials and runnable configurations, with instructions to feed those nodes into another proxy service.","reason_zh":"ZeroPing 报告公开了收集来的 VPN 节点凭据和可运行配置，并说明如何接入另一代理服务，属于凭据及服务滥用。","evidence_url":"https://github.com/lza6/ZeroPing-APP-2api/blob/e31a2e23464da87c02ce6058c636d64805889e46/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1436262518","full_name":"lza6/VPN-Super-Unlimited-Proxy","url":"https://github.com/lza6/VPN-Super-Unlimited-Proxy","batch_id":"run-42119584443-1","decision":"hold","reason_code":"needs-maintainer-decision","reason_en":"The app and protocol investigation is substantive, but the repository also publishes decrypted VPN node records and credentials for company-owned servers.","reason_zh":"该仓库有具体的应用与协议研究成果，但同时公开了厂商服务器的解密节点记录和凭证，需要维护者判断。","evidence_url":"https://github.com/lza6/VPN-Super-Unlimited-Proxy/blob/4f5f8ac5beac6ffc0ebc094ff63d292973004cbe/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1436265563","full_name":"sklinderton/seguridad-sistemas-digitales","url":"https://github.com/sklinderton/seguridad-sistemas-digitales","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"general-security","reason_en":"The repository is a mixed digital-security course portfolio; one WannaCry static-analysis lab sits beside scanning, honeypot, XSS and access-control work.","reason_zh":"仓库汇集数字安全课程作业；WannaCry 静态分析只是其中一项，其他内容涉及扫描、蜜罐、XSS 和访问控制。","evidence_url":"https://github.com/sklinderton/seguridad-sistemas-digitales/blob/4aa357eb18bf1c766461899096438f5b7596008f/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1436272015","full_name":"lza6/VPN.lat","url":"https://github.com/lza6/VPN.lat","batch_id":"run-42119584443-1","decision":"hold","reason_code":"needs-maintainer-decision","reason_en":"The study reconstructs VPN.lat's app-level token and request signing while another supplied guide proposes feeding vendor nodes into a proxy pool despite a conflicting compliance assessment.","reason_zh":"研究还原了 VPN.lat 的应用令牌和请求签名，但另一份指南又提出将厂商节点接入代理池，与仓库合规评估相冲突，需维护者裁定。","evidence_url":"https://github.com/lza6/VPN.lat/blob/7959cd0792d25add2206593409a0e4f3802898c6/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1436328959","full_name":"xiangchi7/darksoulsiii-1.15.0-boss-ai","url":"https://github.com/xiangchi7/darksoulsiii-1.15.0-boss-ai","batch_id":"run-42119584443-1","decision":"hold","reason_code":"linking-policy","reason_en":"The repository consists of decompiled Lua AI copied from the commercial Dark Souls III release, and its notice identifies the scripts as game-owned data.","reason_zh":"仓库主体是从商业游戏《黑暗之魂 III》提取并反编译的 Lua AI 脚本；NOTICE 明确指出这些脚本属于游戏权利方。","evidence_url":"https://github.com/xiangchi7/darksoulsiii-1.15.0-boss-ai/blob/ea2573b88574cdb3b31f992853b5df7bad437a09/NOTICE.md","reviewed_at":"2026-11-06"},{"id":"scan-1436336611","full_name":"payidaramelles-sys/BonkMentor","url":"https://github.com/payidaramelles-sys/BonkMentor","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"game-mod-no-re","reason_en":"BonkMentor is a compiled Megabonk choice-advice mod with no source or documented game analysis; the repository holds a package and promotional files.","reason_zh":"BonkMentor 是已编译的 Megabonk 选择建议模组，没有源码或游戏分析记录；仓库只提供安装包和介绍文件。","evidence_url":"https://github.com/payidaramelles-sys/BonkMentor/blob/2a824893ddab9a2875fa2c7ac410afa3b14ce121/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1436346432","full_name":"JHOpenDev/youdao-wordcard-eink","url":"https://github.com/JHOpenDev/youdao-wordcard-eink","batch_id":"run-42119584443-1","decision":"hold","reason_code":"linking-policy","reason_en":"The Youdao M3 protocol study is substantial, but the repository includes libjl_auth.so and states that authentication tables were taken from that proprietary library.","reason_zh":"有道 M3 协议研究内容充分，但仓库含 libjl_auth.so，并说明认证表取自该专有库；是否收录需维护者判断。","evidence_url":"https://github.com/JHOpenDev/youdao-wordcard-eink/blob/8e75a65f79b832933e23c6e6c75ad7c094ac84ff/docs/protocol.md","reviewed_at":"2026-11-06"},{"id":"scan-1436389695","full_name":"skw-1337/devil-inside-plus","url":"https://github.com/skw-1337/devil-inside-plus","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The Devil Inside launcher patches the game's executable to skip its CD check loop, which places the project within the catalog's DRM and licence crack exclusion.","reason_zh":"Devil Inside Plus 会修补游戏可执行文件以跳过光盘检查，因此属于目录排除的 DRM 或许可校验破解项目。","evidence_url":"https://github.com/skw-1337/devil-inside-plus/blob/0843f9ecd7b788b14a3a37ef45d2a67b96603157/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1436466574","full_name":"slitvin12/SR2-CreatorToolkit","url":"https://github.com/slitvin12/SR2-CreatorToolkit","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"Creator Toolkit is a Slime Rancher 2 mod centered on spawning items, changing resources, invulnerability and other gameplay cheats, with no documented reverse-engineering investigation.","reason_zh":"Creator Toolkit 是《Slime Rancher 2》的游戏模组，主要提供刷物品、改资源、无敌等作弊功能，文档没有呈现逆向研究。","evidence_url":"https://github.com/slitvin12/SR2-CreatorToolkit/blob/1da79b9f3a256f45a07df8953d3173d613cbce85/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1436467915","full_name":"VictorCV-DAM/ha-peripheral-light-ambilight","url":"https://github.com/VictorCV-DAM/ha-peripheral-light-ambilight","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"general-application","reason_en":"The project’s primary deliverable is an ESP32 and Home Assistant ambient-light bridge; its WS2811 sniffing serves that automation feature.","reason_zh":"项目的主要成果是 ESP32 与 Home Assistant 氛围灯桥接功能，读取 WS2811 信号只是实现该自动化功能的一环。","evidence_url":"https://github.com/VictorCV-DAM/ha-peripheral-light-ambilight/blob/ce5e5a868566c922fbc5aca4eb79881ce991e359/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1436529734","full_name":"Asaad-E/belmonts-curse-master-optimizer","url":"https://github.com/Asaad-E/belmonts-curse-master-optimizer","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"game-mod-no-re","reason_en":"Belmont's Curse Master Optimizer is a configurable performance mod; the README describes gameplay and rendering fixes but no original reverse-engineering investigation or findings.","reason_zh":"Belmont's Curse Master Optimizer 是可配置的性能模组；README 介绍游戏运行和渲染修复，却没有记录原创逆向调查或分析发现。","evidence_url":"https://github.com/Asaad-E/belmonts-curse-master-optimizer/blob/1af9c38e478e0c7886f6b8b101820660b14dc03d/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1436538100","full_name":"dansleboby/memento-controller","url":"https://github.com/dansleboby/memento-controller","batch_id":"run-42119584443-1","decision":"hold","reason_code":"linking-policy","reason_en":"The controller implements a documented reverse-engineered frame protocol, but its firmware archive links redistributed Memento firmware packages and the official Windows installer.","reason_zh":"控制器实现了有文档记录的逆向协议，但同仓库的固件归档链接了重新分发的 Memento 固件包及官方 Windows 安装程序，需维护者裁定。","evidence_url":"https://github.com/dansleboby/memento-controller/blob/327b206e6120e3e0c2becee56f68932543263f45/firmware/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1436553287","full_name":"yml582484-collab/douyin-nowm","url":"https://github.com/yml582484-collab/douyin-nowm","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"general-application","reason_en":"douyin-nowm is a video and image downloader that parses share pages and proxies media; it documents no reverse-engineering investigation.","reason_zh":"douyin-nowm 是解析分享页并代理媒体下载的视频、图集工具，没有记录以逆向分析为主体的调查。","evidence_url":"https://github.com/yml582484-collab/douyin-nowm/blob/69b6da91dee09b9f551a6bed6da635e8401b0e24/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1436565590","full_name":"AndreasKarageorgos/Code-Protection-for-Unity","url":"https://github.com/AndreasKarageorgos/Code-Protection-for-Unity","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"protection-tool","reason_en":"Code Protection for Unity obfuscates strings, adds junk code, checks integrity and encrypts IL2CPP metadata to impede reverse engineering.","reason_zh":"Code Protection for Unity 通过字符串混淆、注入冗余代码、完整性检查及 IL2CPP 元数据加密来阻碍逆向分析。","evidence_url":"https://github.com/AndreasKarageorgos/Code-Protection-for-Unity/blob/344f5857d7f8969aac7513d9aabcac1ec8a0accd/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1436610654","full_name":"Hoshino486/Hoshino486","url":"https://github.com/Hoshino486/Hoshino486","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"personal-profile","reason_en":"This is a profile README introducing the author's interests, blog and other repositories; the file list contains no reverse-engineering project in this repository.","reason_zh":"这是介绍作者兴趣、博客和其他仓库的个人主页 README；本仓库文件清单中没有逆向工程项目内容。","evidence_url":"https://github.com/Hoshino486/Hoshino486/blob/52bb397b008311e188500f9e233af2cc438306c5/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1436619186","full_name":"Catnip202X/pentest-engineer-anything","url":"https://github.com/Catnip202X/pentest-engineer-anything","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"general-security","reason_en":"PEA's primary workflow is pentesting and vulnerability reporting; REA is listed as an optional external route, while the repository's own skills mainly cover red-team work.","reason_zh":"PEA 的主线是渗透测试和漏洞报告；REA 仅作为可选外部接入项，仓库自有技能也主要服务于红队流程。","evidence_url":"https://github.com/Catnip202X/pentest-engineer-anything/blob/77395a859ada34387bf357975d5d546bb1876ec1/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1436658975","full_name":"epsilonH-eps/dsh-tts-bridge-wechatagent-bridge","url":"https://github.com/epsilonH-eps/dsh-tts-bridge-wechatagent-bridge","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"general-application","reason_en":"The project primarily sends synthesized speech as WeChat voice messages; its hook and Frida paths serve that application feature.","reason_zh":"项目的主要用途是把合成语音发送为微信语音消息；hook 和 Frida 只是实现该应用功能的发送路径。","evidence_url":"https://github.com/epsilonH-eps/dsh-tts-bridge-wechatagent-bridge/blob/9855e6edded2d91f67d8a29204573c3a835746f9/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1436703412","full_name":"survivallog-mods/QuickAction","url":"https://github.com/survivallog-mods/QuickAction","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"game-mod-no-re","reason_en":"QuickAction changes Survival Log action durations through an in-memory configuration table; its documentation presents a gameplay mod rather than an RE investigation.","reason_zh":"QuickAction 通过修改《生存日志》内存中的动作配置表缩短耗时；文档主要介绍游戏模组，没有形成独立逆向研究。","evidence_url":"https://github.com/survivallog-mods/QuickAction/blob/9e0fba5c8abc458e3d97da290c38ea8c74f8ada6/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1436717553","full_name":"survivallog-mods/BackpackExpand","url":"https://github.com/survivallog-mods/BackpackExpand","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"general-application","reason_en":"BackpackExpand is primarily a Survival Log capacity mod; the documented disassembly findings explain its memory edits but do not make the mod an analysis resource.","reason_zh":"BackpackExpand 的主体是《生存日志》背包扩容模组；文档中的反汇编发现用于解释内存改写，并未形成以分析为主题的资源。","evidence_url":"https://github.com/survivallog-mods/BackpackExpand/blob/41705b338b4a8078d8a395c5f1a7dd7270cdd2d2/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1436717807","full_name":"survivallog-mods/CabinetSize","url":"https://github.com/survivallog-mods/CabinetSize","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"general-application","reason_en":"CabinetSize primarily changes Survival Log storage capacity; its reverse-engineering findings support the mod but are not the project's primary deliverable.","reason_zh":"CabinetSize 的主要成果是调整《生存日志》柜子容量；逆向记录用于实现模组，并非仓库的主要交付内容。","evidence_url":"https://github.com/survivallog-mods/CabinetSize/blob/b8dbad5979b0d8e25dde33139f3bb6cf54c10271/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1436724926","full_name":"survivallog-mods/FridgeChill","url":"https://github.com/survivallog-mods/FridgeChill","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"game-mod-no-re","reason_en":"FridgeChill is a Survival Log gameplay plugin that changes refrigerator preservation values; the shared reverse-engineering notes support the mod but are not its primary subject.","reason_zh":"FridgeChill 的主要内容是调整《生存日志》冰箱保鲜数值的玩法插件；共享逆向笔记只为模组实现提供依据。","evidence_url":"https://github.com/survivallog-mods/FridgeChill/blob/f8cf0b66249d79bd859b6f9899660762559aa5ae/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1436725185","full_name":"survivallog-mods/CabinetEverywhere","url":"https://github.com/survivallog-mods/CabinetEverywhere","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"general-application","reason_en":"CabinetEverywhere is chiefly a Survival Log convenience mod that adds storage tabs and material access; the reverse-engineering notes support the mod rather than form its subject.","reason_zh":"CabinetEverywhere 主要是为《生存日志》增加储物柜页签和取料功能的便利模组；逆向笔记用于支持模组实现。","evidence_url":"https://github.com/survivallog-mods/CabinetEverywhere/blob/77855d656c4937fafe05e31fd8781c5676a58941/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1436725449","full_name":"survivallog-mods/CabinetBurden","url":"https://github.com/survivallog-mods/CabinetBurden","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"game-mod-no-re","reason_en":"CabinetBurden changes storage weight limits in Survival Log; its main purpose is a gameplay mod rather than an investigation or reconstruction.","reason_zh":"CabinetBurden 为《生存日志》的储物家具解除负重限制，主体是玩法修改，而非逆向调查或重建。","evidence_url":"https://github.com/survivallog-mods/CabinetBurden/blob/64002f60ca6570c1b62f650e555b43c28f308c0d/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1436725726","full_name":"survivallog-mods/UnlockHub","url":"https://github.com/survivallog-mods/UnlockHub","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"game-mod-no-re","reason_en":"UnlockHub changes Survival Log character unlocks and drone-trade restocking; its documentation presents a gameplay mod, not reverse-engineering findings as the project's subject.","reason_zh":"UnlockHub 修改《生存日志》的角色解锁和无人机商店补货；项目文档以游戏玩法模组为主，而非逆向分析成果。","evidence_url":"https://github.com/survivallog-mods/UnlockHub/blob/2422ab29132729c37aec0bcd7986eea79b72c891/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1436725998","full_name":"survivallog-mods/RobotSpeed","url":"https://github.com/survivallog-mods/RobotSpeed","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"game-mod-no-re","reason_en":"RobotSpeed primarily changes Survival Log robot speed, charging and cargo values; its README documents mod behavior rather than an analysis of the game.","reason_zh":"RobotSpeed 主要调整《生存日志》机器人的速度、充电和货舱数值；项目说明聚焦模组效果，而非游戏逆向研究。","evidence_url":"https://github.com/survivallog-mods/RobotSpeed/blob/25d9c51b984b104cb2551a48344b782046f05476/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1436726258","full_name":"survivallog-mods/ModCenter","url":"https://github.com/survivallog-mods/ModCenter","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"game-mod-no-re","reason_en":"ModCenter is an in-game manager for Survival Log mods and their configuration files; its own documentation does not present reverse engineering as its subject.","reason_zh":"ModCenter 是《生存日志》的游戏内模组配置管理器，项目文档未将逆向分析作为其主题。","evidence_url":"https://github.com/survivallog-mods/ModCenter/blob/cb8ac7e5f6ff65a0789b154135be3ba7cb3450d8/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1436726546","full_name":"survivallog-mods/EndlessGuard","url":"https://github.com/survivallog-mods/EndlessGuard","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"game-mod-no-re","reason_en":"EndlessGuard adds Survival Log fall prevention, new plans, defense upgrades and an arrow tower; its principal deliverable is a gameplay mod.","reason_zh":"EndlessGuard 为《生存日志》增加防沦陷、新规划、防御设备升级和箭塔；主要成果是玩法模组。","evidence_url":"https://github.com/survivallog-mods/EndlessGuard/blob/c24823893751be28427c638d8b7d2de3922a5e29/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1436726815","full_name":"survivallog-mods/PlanPick","url":"https://github.com/survivallog-mods/PlanPick","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"game-mod-no-re","reason_en":"PlanPick changes Survival Log's plan-selection and purchase interface; its own project description presents a gameplay mod, without an analysis or reconstruction deliverable.","reason_zh":"PlanPick 修改《生存日志》的规划选择与购买界面；项目主体是玩法模组，没有提供独立的逆向分析或重建成果。","evidence_url":"https://github.com/survivallog-mods/PlanPick/blob/fe7bc062e533aa16b6ac6029fffd2dd515e1c617/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1436727126","full_name":"survivallog-mods/PreDisasterSpeed","url":"https://github.com/survivallog-mods/PreDisasterSpeed","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"game-mod-no-re","reason_en":"PreDisasterSpeed is a Survival Log speed-control mod; its main documentation describes UI injection and use of the game's existing speed interface.","reason_zh":"PreDisasterSpeed 是《生存日志》的倍速模组，主文档介绍的是界面注入及调用游戏现有变速接口。","evidence_url":"https://github.com/survivallog-mods/PreDisasterSpeed/blob/9faf15790861bc2928a62f991e7135558c82c1cc/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1436727442","full_name":"survivallog-mods/survivallog-mods","url":"https://github.com/survivallog-mods/survivallog-mods","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"general-application","reason_en":"The repository is chiefly a release hub and source tree for Survival Log gameplay mods; its disassembly notes support mod implementation rather than a standalone analysis entry.","reason_zh":"该仓库主要汇集《生存日志》玩法模组及发布入口；其中反汇编笔记服务于模组实现，并非独立的分析项目。","evidence_url":"https://github.com/survivallog-mods/survivallog-mods/blob/cb05a26fc692f300b4c1dc07cd33b1d7bcc4c59d/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1436751544","full_name":"valerisn/Project-Lazarus","url":"https://github.com/valerisn/Project-Lazarus","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"general-application","reason_en":"Project Lazarus primarily delivers a game mod loader and gameplay fixes; its metadata lookup and untried method tracer support that modding workflow.","reason_zh":"Project Lazarus 的主要交付物是游戏模组加载器和玩法修复；元数据查询及尚未在游戏中运行的方法跟踪器服务于模组开发。","evidence_url":"https://github.com/valerisn/Project-Lazarus/blob/44008801633d04e4726697a7f81fa42c41653624/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1436781997","full_name":"lza6/AI-ImageRator-APP-2api","url":"https://github.com/lza6/AI-ImageRator-APP-2api","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The OpenAI-compatible image gateway removes a server-applied watermark and recommends multiple exit IPs to scale around anonymous limits, despite its protocol analysis.","reason_zh":"该 OpenAI 兼容生图网关提供去除服务端水印的功能，并建议用多个出口 IP 扩容以绕开匿名额度限制，虽附有协议分析，仍应排除。","evidence_url":"https://github.com/lza6/AI-ImageRator-APP-2api/blob/331668619f8d62c88fbc4186eafc23bd1ca9d973/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1436795675","full_name":"xqpsec/dsh-jailbreak","url":"https://github.com/xqpsec/dsh-jailbreak","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"dsh-jailbreak rewrites model requests to reduce refusals, including a documented AMSI bypass example; its reverse-engineering references are use cases for that evasion.","reason_zh":"dsh-jailbreak 通过改写模型请求降低拒答率，还展示了 AMSI 绕过示例；逆向工程只是其规避机制的应用场景。","evidence_url":"https://github.com/xqpsec/dsh-jailbreak/blob/160f71995d9ef8d6762f79766a93782ce2452590/README.en.md","reviewed_at":"2026-11-06"},{"id":"scan-1436809100","full_name":"lza6/Cloudi-AI-APP-2api","url":"https://github.com/lza6/Cloudi-AI-APP-2api","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"Cloudi-AI-APP-2api automates access to another service's device registration, quota and rewarded-ad endpoints through recovered client authentication.","reason_zh":"Cloudi-AI-APP-2api 利用还原的客户端认证，自动调用第三方服务的设备注册、配额和广告奖励接口。","evidence_url":"https://github.com/lza6/Cloudi-AI-APP-2api/blob/754add44fc0a103678cd87663317fc5714e8b315/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1436815111","full_name":"scoutjaguarstill/moon-sweepers-mod-loader-compatibility","url":"https://github.com/scoutjaguarstill/moon-sweepers-mod-loader-compatibility","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"distribution-site","reason_en":"The page mainly directs users to a release ZIP whose executable is a renamed WinGUp copy unrelated to Moon Sweepers analysis or repair.","reason_zh":"该页面主要引导下载发行包，而其中的可执行文件是改名的 WinGUp，与 Moon Sweepers 的分析或修复无关。","evidence_url":"https://github.com/scoutjaguarstill/moon-sweepers-mod-loader-compatibility/blob/743996a69de5e6ced0be06ffcd8e36cb60a6b74b/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1436833937","full_name":"c-poet/patch-assistant-go","url":"https://github.com/c-poet/patch-assistant-go","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"development-tool","reason_en":"PatchAssistant2J primarily patches JAR applications; its class preview invokes bundled Fernflower within an editing and packaging interface.","reason_zh":"PatchAssistant2J 主要用于给 JAR 应用打补丁；类文件预览只是编辑与重打包界面中对内置 Fernflower 的调用。","evidence_url":"https://github.com/c-poet/patch-assistant-go/blob/1270872a2f6dc70409425004a69150cd0fea82bd/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1436837993","full_name":"SupperCraft5000/MoonSweepers-BeltTiers","url":"https://github.com/SupperCraft5000/MoonSweepers-BeltTiers","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"game-mod-no-re","reason_en":"Belt Tiers is a Moon Sweepers mod adding conveyor and machine tiers; its code inspection supports the mod rather than documenting a reconstruction.","reason_zh":"Belt Tiers 为 Moon Sweepers 增加传送带和机器等级；文中的游戏代码检查服务于模组功能，没有形成重建研究。","evidence_url":"https://github.com/SupperCraft5000/MoonSweepers-BeltTiers/blob/ecd8432fef15aeb12c7c43a825a4efb19959ba83/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1436849486","full_name":"zhj625/ios-re-lab","url":"https://github.com/zhj625/ios-re-lab","batch_id":"run-42110758337-1","decision":"hold","reason_code":"linking-policy","reason_en":"The iOS investigation includes REA-assisted analysis, but its README says modified iBox IPA builds are published as release assets, requiring a redistribution decision.","reason_zh":"该 iOS 研究记录了 REA 辅助分析，但 README 称修改后的 iBox IPA 已作为 Release 资产发布，需维护者判断其再分发问题。","evidence_url":"https://github.com/zhj625/ios-re-lab/blob/b0bd6030732c5f153aa5efe373c701784455f383/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1436855156","full_name":"mizazhaider-ceh/apk-security-pipeline","url":"https://github.com/mizazhaider-ceh/apk-security-pipeline","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"security-testing","reason_en":"APK Security Pipeline primarily scores Android apps for vulnerable settings and code patterns; its decompilation and Frida stages serve vulnerability scanning.","reason_zh":"APK Security Pipeline 主要按危险配置和代码模式为 Android 应用打分；反编译和 Frida 阶段服务于漏洞扫描。","evidence_url":"https://github.com/mizazhaider-ceh/apk-security-pipeline/blob/87d7021826a682e5bdb0bab1a2b721ca8ea34778/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1436876621","full_name":"opastorello/ic82dump-opcodes","url":"https://github.com/opastorello/ic82dump-opcodes","batch_id":"run-42110758337-1","decision":"hold","reason_code":"linking-policy","reason_en":"The opcode dumper documents substantial ionCube loader analysis, but the repository says it bundles the proprietary ionCube loader DLL, requiring a maintainer decision.","reason_zh":"项目详细记录了 ionCube Loader 的分析与操作码导出方法，但仓库称随附专有的加载器 DLL，需由维护者决定是否收录。","evidence_url":"https://github.com/opastorello/ic82dump-opcodes/blob/02209e8570e4ce45a669d2a80de9a83deb15ab97/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1436877133","full_name":"Stijnus/dsh-rev-eng","url":"https://github.com/Stijnus/dsh-rev-eng","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"fork-or-mirror","reason_en":"The RE offering repackages morluto/rea's skill and optional MCP server for DeepSeek Harness; the added bundle also carries BAMA app-building skills.","reason_zh":"其逆向工程部分是将 morluto/rea 的技能及可选 MCP 服务打包供 DeepSeek Harness 使用，另附 BAMA 的应用开发技能。","evidence_url":"https://github.com/Stijnus/dsh-rev-eng/blob/ef0b92ff36803b5063138df93db75a330fa599cf/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1436893504","full_name":"Albasha0x0/scoop-corvus","url":"https://github.com/Albasha0x0/scoop-corvus","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"distribution-site","reason_en":"This repository is a Scoop bucket that provides installation commands and a package manifest for Corvus, without its own RE tooling or findings.","reason_zh":"该仓库是 Corvus 的 Scoop 安装源，只提供安装命令和软件包清单，没有自身的逆向工具或研究内容。","evidence_url":"https://github.com/Albasha0x0/scoop-corvus/blob/ae9958ef08c1743a6c49cb0b710ea189c300a8ab/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1436893647","full_name":"Albasha0x0/homebrew-corvus","url":"https://github.com/Albasha0x0/homebrew-corvus","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"distribution-site","reason_en":"homebrew-corvus contains only a Homebrew formula and installation instructions for Corvus; no Corvus analysis or MCP implementation is present in this repository.","reason_zh":"homebrew-corvus 只存放 Corvus 的 Homebrew 配方和安装说明，仓库本身没有分析功能或 MCP 服务实现。","evidence_url":"https://github.com/Albasha0x0/homebrew-corvus/blob/c6ce0dba230247e18a5b342649c3faa074144eb0/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1436920390","full_name":"owenisas/claude-chrome-bridge","url":"https://github.com/owenisas/claude-chrome-bridge","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The bridge patches Claude in Chrome to skip account authentication and disable its hosted URL-category safeguard, making access-control evasion central to the project.","reason_zh":"该桥接程序通过修改 Claude in Chrome 跳过账号认证并关闭托管的 URL 分类防护，绕过访问控制是项目核心。","evidence_url":"https://github.com/owenisas/claude-chrome-bridge/blob/f18e39c335ce21588058c07c2e890bb776d4e15f/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1436952260","full_name":"EnzoGrn/the-last-village-html5","url":"https://github.com/EnzoGrn/the-last-village-html5","batch_id":"run-42110758337-1","decision":"hold","reason_code":"linking-policy","reason_en":"The Last Village port documents ActionScript bytecode translation, but the repository also commits hundreds of extracted game images and audio files plus the original SWF.","reason_zh":"《The Last Village》移植记录了 ActionScript 字节码转译，但仓库同时提交数百个提取的游戏图像、音频文件及原始 SWF，需审核收录链接。","evidence_url":"https://github.com/EnzoGrn/the-last-village-html5/blob/dfb79b3cae42111cfaf4c22ed61e55e496e244d1/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1436952518","full_name":"keaidang/TYH831T-S9-Bootloader-Root","url":"https://github.com/keaidang/TYH831T-S9-Bootloader-Root","batch_id":"run-42110758337-1","decision":"hold","reason_code":"linking-policy","reason_en":"The bootloader analysis is substantive, but the repository directs users to a release bundle that its NOTICE says includes third-party files, including a proprietary UNISOC DLL.","reason_zh":"该仓库的引导程序分析有实质内容，但它引导用户下载完整发布包，而 NOTICE 说明其中包含第三方文件，包括专有的 UNISOC DLL，需维护者裁定。","evidence_url":"https://github.com/keaidang/TYH831T-S9-Bootloader-Root/blob/38133e9ac13b513a78626fc5213d6d9e5e6bac07/NOTICE.md","reviewed_at":"2026-11-06"},{"id":"scan-1437110155","full_name":"Aayush-Kadam/blackbox-twin","url":"https://github.com/Aayush-Kadam/blackbox-twin","batch_id":"run-42110758337-1","decision":"hold","reason_code":"target-unsupported","reason_en":"BlackBox Twin has substantive behavioral reconstruction tooling, but its documented support is confined to owned synthetic fixtures and does not establish a catalog target.","reason_zh":"BlackBox Twin 提供了实质性的黑盒行为重建工具，但文档所支持的对象仅为自有合成样例，尚无法确定目录所需的目标类型。","evidence_url":"https://github.com/Aayush-Kadam/blackbox-twin/blob/48248a04df8e30f6028b57d39f3bb7db7255e937/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1437191625","full_name":"Henrique1601/HackerCraft","url":"https://github.com/Henrique1601/HackerCraft","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"general-application","reason_en":"HackerCraft supplies a Next.js application, but its README only gives standard development and deployment instructions and documents no reverse-engineering work.","reason_zh":"HackerCraft 有 Next.js 应用代码，但 README 只有常规开发与部署说明，没有记录逆向分析内容。","evidence_url":"https://github.com/Henrique1601/HackerCraft/blob/f812f19c86b0573518eecab348781a9305197d27/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1437226155","full_name":"joppe2001/bf-private-server","url":"https://github.com/joppe2001/bf-private-server","batch_id":"run-42110758337-1","decision":"curated","curated_id":"bf-private-server-case"},{"id":"scan-1437264360","full_name":"puribaba007/mega-hub-skill","url":"https://github.com/puribaba007/mega-hub-skill","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"no-real-content","reason_en":"Mega Hub is a general skill router and catalog; its reverse-engineering section is generic workflow guidance without dedicated RE tooling, target findings or original analysis.","reason_zh":"Mega Hub 是通用技能路由器和工具目录；其中的逆向工程部分只是流程指导，没有专用逆向工具、目标发现或原创分析。","evidence_url":"https://github.com/puribaba007/mega-hub-skill/blob/8f53a550d910889ab22269c813dc73c9adc8f92a/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1437300167","full_name":"jakubwarzecha00/clickwill","url":"https://github.com/jakubwarzecha00/clickwill","batch_id":"run-42110758337-1","decision":"curated","curated_id":"clickwill-case"},{"id":"scan-1437321237","full_name":"AldySan/USBUtils_src","url":"https://github.com/AldySan/USBUtils_src","batch_id":"run-42110758337-1","decision":"hold","reason_code":"linking-policy","reason_en":"USBUtils documents reverse engineering of the original USBUtil binary, but its file list and README show bundled original support data, including PS2LOAD.ELF and IOPRP images.","reason_zh":"USBUtils 记录了对原版 USBUtil 可执行文件的逆向，但文件清单和 README 显示仓库随附原工具数据，包括 PS2LOAD.ELF 与 IOPRP 镜像。","evidence_url":"https://github.com/AldySan/USBUtils_src/blob/fbc580ea8a88533c13c0d3de0fb940cc8e6b0320/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1437345178","full_name":"lza6/SuperVPN_Pro-APP-","url":"https://github.com/lza6/SuperVPN_Pro-APP-","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The SuperVPN repository centers on forging registration details and harvesting the operator's production proxy credentials for a local proxy pool.","reason_zh":"该仓库以伪造 SuperVPN 注册信息、批量获取运营方生产代理凭证并组成代理池为主要用途。","evidence_url":"https://github.com/lza6/SuperVPN_Pro-APP-/blob/26752e97be62f1da0e1fb97cb05a9b838df8c8e0/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1437360729","full_name":"Reid-n0rc/FTX-1_Firmware","url":"https://github.com/Reid-n0rc/FTX-1_Firmware","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"no-real-content","reason_en":"The FTX-1 firmware project says no image has been decoded and its task board remains entirely pending; only template tools and plans are present.","reason_zh":"FTX-1 固件项目明确表示尚未解码任何镜像，任务表仍全为待办；现有内容是模板工具和研究计划。","evidence_url":"https://github.com/Reid-n0rc/FTX-1_Firmware/blob/38f3ed906e9c4fb5b9f16114eb7c44f37d42beda/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1437365363","full_name":"Reid-n0rc/TM-D710_Firmware","url":"https://github.com/Reid-n0rc/TM-D710_Firmware","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"no-real-content","reason_en":"The TM-D710 investigation has not decoded any firmware; the repository contains a task board and reused Ghidra helpers but no target findings.","reason_zh":"TM-D710 固件尚未解码；仓库现有任务安排和沿用的 Ghidra 辅助脚本，没有针对该设备的分析成果。","evidence_url":"https://github.com/Reid-n0rc/TM-D710_Firmware/blob/7fe84f7ef17d53036b0ba9806e79dcda6d9877a0/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1437384822","full_name":"Isax820/IsaxRoles","url":"https://github.com/Isax820/IsaxRoles","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"game-mod-no-re","reason_en":"IsaxRoles adds playable roles to Among Us through existing modding tools, with no documented analysis or reconstruction of the game.","reason_zh":"IsaxRoles 借助现有模组工具为 Among Us 增加角色，文档没有游戏逆向分析或重建内容。","evidence_url":"https://github.com/Isax820/IsaxRoles/blob/e4573120db4129e448c6bd0b263b4f562d735457/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1437401591","full_name":"blueicx/NikoZ8S","url":"https://github.com/blueicx/NikoZ8S","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"no-real-content","reason_en":"NikoZ8S describes planned Nikon Z8 firmware analysis and patch boundaries, but the listed files contain only project documents and no analysis scripts or findings.","reason_zh":"NikoZ8S 描述了计划开展的 Nikon Z8 固件分析与补丁边界，但文件清单只有项目说明，没有分析脚本或具体研究结果。","evidence_url":"https://github.com/blueicx/NikoZ8S/blob/479ff07f2f62ba19caf6f254c0aff18333dab573/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1437402556","full_name":"marlloncps/flavio-autoplayer","url":"https://github.com/marlloncps/flavio-autoplayer","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"Flávio Autoplayer's deliverable is a bot that plays Cadê o Flávio? and changes its speed and weapon behavior, despite its documented REA-assisted code study.","reason_zh":"Flávio Autoplayer 的主要成果是自动游玩《Cadê o Flávio?》并修改速度和武器行为的扩展，虽记录了借助 REA 分析游戏代码的过程。","evidence_url":"https://github.com/marlloncps/flavio-autoplayer/blob/30e9ef40f2e68240ce9102e692ce4441ccf745da/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1437427318","full_name":"NADER-CY/nexora-engine","url":"https://github.com/NADER-CY/nexora-engine","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"fork-or-mirror","reason_en":"NEXORA ENGINE identifies itself as developed from morluto/rea, retaining REA's inherited engine and bridges under new branding; the upstream project is the original.","reason_zh":"NEXORA ENGINE 明确说明其引擎继承自 morluto/rea，并沿用大量 REA 桥接代码；原始项目是 morluto/rea。","evidence_url":"https://github.com/NADER-CY/nexora-engine/blob/9a2387635cd5de083bd050e24c11ee6dade9d177/UPSTREAM_README.md","reviewed_at":"2026-11-06"},{"id":"scan-1437527046","full_name":"lza6/Pawxy-VPN-APK-2api","url":"https://github.com/lza6/Pawxy-VPN-APK-2api","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The project targets bulk issuance of Pawxy VPN credentials, including premium nodes the author says the server does not check, for conversion into a proxy pool.","reason_zh":"该项目主要批量申请 Pawxy VPN 凭据，包括作者称服务端未校验的高级节点，并计划将其转为代理池。","evidence_url":"https://github.com/lza6/Pawxy-VPN-APK-2api/blob/7d772b6a2e27cc44f68af19ffbf02b3ea495ca21/docs/NEWAPI_INTEGRATION.md","reviewed_at":"2026-11-06"},{"id":"scan-1437535952","full_name":"lza6/IndonesiaVPN-APP-2api","url":"https://github.com/lza6/IndonesiaVPN-APP-2api","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"IndonesiaVPN-APP-2api centers on harvesting a commercial VPN service's embedded private-key configurations and operating them as a proxy pool.","reason_zh":"IndonesiaVPN-APP-2api 主要批量获取商业 VPN 服务下发的含私钥配置，并将其运行成代理池，属于凭据滥用工具。","evidence_url":"https://github.com/lza6/IndonesiaVPN-APP-2api/blob/370943872b77e99ffe3f90354e8ae8ccdbd36caf/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1437564110","full_name":"lza6/Russia-VPN-APP","url":"https://github.com/lza6/Russia-VPN-APP","batch_id":"run-42110758337-1","decision":"hold","reason_code":"needs-maintainer-decision","reason_en":"The APK investigation is substantive, but its tools harvest VPN configurations containing private keys and convert the recovered nodes into proxy endpoints despite acknowledging an authorization gap.","reason_zh":"APK 分析有实质内容，但工具会批量获取含私钥的 VPN 配置并转为代理出口；作者也承认取得凭证不等于获得使用授权，需要维护者裁定。","evidence_url":"https://github.com/lza6/Russia-VPN-APP/blob/4c8043ee0ed3cd7c0d6b9b3898c56ba9f7edb9dc/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1437565808","full_name":"godly-raam/LedgerProbe","url":"https://github.com/godly-raam/LedgerProbe","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"security-testing","reason_en":"LedgerProbe primarily scans API authorization, race conditions, and mobile attestation for security flaws; its Frida hooks support testing rather than reverse-engineering analysis.","reason_zh":"LedgerProbe 主要扫描 API 授权、竞态条件和移动端证明机制中的安全缺陷；Frida 钩子服务于安全测试，而非逆向分析。","evidence_url":"https://github.com/godly-raam/LedgerProbe/blob/366ce83febc0d47b4bfe8b216fb33e1fe6998bf3/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1437582798","full_name":"petrkyncl/bazos-iphone","url":"https://github.com/petrkyncl/bazos-iphone","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"general-application","reason_en":"The repository's main product scores Bazoš iPhone listings against buy-back prices; decompilation documents how its supporting API client was built.","reason_zh":"仓库的主要成果是为 Bazoš 上的 iPhone 商品估算回收利润；Android 应用反编译只用于建立其数据接口。","evidence_url":"https://github.com/petrkyncl/bazos-iphone/blob/7ba084ee69b89e30acdefa4f1ab5ea1377f5d35d/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1437595893","full_name":"w0ldan/exoproc","url":"https://github.com/w0ldan/exoproc","batch_id":"run-42110758337-1","decision":"curated","curated_id":"exoproc"},{"id":"scan-1437622972","full_name":"lza6/Bangladesh-VPN-APP-2api","url":"https://github.com/lza6/Bangladesh-VPN-APP-2api","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"Although it documents APK and API analysis, the project harvests third-party VPN configurations and shared credentials to build a rotating proxy pool.","reason_zh":"项目虽记录 APK 和接口分析，但主要批量获取第三方 VPN 配置与共享凭据，并将其部署成轮换代理池。","evidence_url":"https://github.com/lza6/Bangladesh-VPN-APP-2api/blob/9abf3970ad975dcb0215ca8e146823e86c2cb5ca/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1437633189","full_name":"lza6/Fast-VPN-Pro-APK-Reverse","url":"https://github.com/lza6/Fast-VPN-Pro-APK-Reverse","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"Although it documents APK and protocol analysis, the repository's toolchain harvests a VPN provider's unauthenticated paid nodes into a proxy pool.","reason_zh":"仓库虽记录 APK 和协议分析，但其工具链会批量获取 VPN 服务商未经鉴权的付费节点并组成代理池。","evidence_url":"https://github.com/lza6/Fast-VPN-Pro-APK-Reverse/blob/f8afe59a979508a1721a9d9289636a62bc97f6ef/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1437638316","full_name":"lza6/Q-AI-Chatbot-Assistant-APP-2api","url":"https://github.com/lza6/Q-AI-Chatbot-Assistant-APP-2api","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The gateway uses a static token extracted from a third-party APK to access another party's inference service outside its app.","reason_zh":"该网关要求从第三方 APK 提取静态令牌，再脱离原 App 调用他人的推理服务，属于凭证滥用用途。","evidence_url":"https://github.com/lza6/Q-AI-Chatbot-Assistant-APP-2api/blob/ef25921bda3eb2090f36b6b699e8e22c5f706283/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1437650358","full_name":"jankais3r/Frida-Server_RootHide_arm64e","url":"https://github.com/jankais3r/Frida-Server_RootHide_arm64e","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"distribution-site","reason_en":"This repository only provides a script and workflow that fetch and build upstream frida-server releases for arm64e iOS; it adds no original analysis capability.","reason_zh":"仓库仅用脚本和工作流拉取并构建上游 frida-server 的 arm64e iOS 版本，没有新增分析能力。","evidence_url":"https://github.com/jankais3r/Frida-Server_RootHide_arm64e/blob/e23b5026a096b91b11097f64004efa220ffd9763/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1437658632","full_name":"lza6/HaloVPN-APK-2api","url":"https://github.com/lza6/HaloVPN-APK-2api","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The HaloVPN work extracts service node credentials and builds a proxy pool from the operator's infrastructure; its own compliance note identifies unauthorized production use.","reason_zh":"HaloVPN 项目提取服务节点凭证并组建代理池；其合规说明也指出，将运营商节点接入自有生产服务缺乏授权。","evidence_url":"https://github.com/lza6/HaloVPN-APK-2api/blob/3cd0289945feddfd1b330b555c3b2d91ae07e179/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1437662075","full_name":"lza6/Cap-VPN-APP","url":"https://github.com/lza6/Cap-VPN-APP","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The project uses a repackaged premium VPN APK to harvest commercial proxy-node credentials and deploy them as a proxy pool, including a premium endpoint altered to bypass access controls.","reason_zh":"该项目利用重打包的高级版 VPN APK 收集商业代理节点凭证并部署代理池，文档还描述了改写高级端点参数以取得完整节点列表。","evidence_url":"https://github.com/lza6/Cap-VPN-APP/blob/f80ced7e312776f19fef85a3d59516cae716bf3e/docs/REVERSE_REPORT.md","reviewed_at":"2026-11-06"},{"id":"scan-1437663037","full_name":"MooPuu/droid-recomp","url":"https://github.com/MooPuu/droid-recomp","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"general-application","reason_en":"DroidRecomp is a web and Android catalog and launcher for existing game recompilations, source ports and emulators; it documents no analysis or reconstruction of its own.","reason_zh":"DroidRecomp 是面向现有游戏重编译版、源码移植版和模拟器的网页与 Android 目录及启动器，项目自身没有分析或重建内容。","evidence_url":"https://github.com/MooPuu/droid-recomp/blob/2fcc5e4f18b28a74b0c5d536b2a11157ecced649/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1437664914","full_name":"lza6/RAJ-Tunnel-VPN-APK-RE","url":"https://github.com/lza6/RAJ-Tunnel-VPN-APK-RE","batch_id":"run-42110758337-1","decision":"hold","reason_code":"linking-policy","reason_en":"The APK investigation has substantial decryption tools and findings, but the repository also commits 1,078 recovered application strings and annotated disassembly from the commercial target.","reason_zh":"该 APK 研究包含实质性的解密工具和分析结果，但仓库还提交了目标商业应用的 1,078 条恢复字符串及带注释的反汇编，需维护者裁定。","evidence_url":"https://github.com/lza6/RAJ-Tunnel-VPN-APK-RE/blob/6cf8a4af132965a1c0ee233878ef39d43cec425c/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1437665161","full_name":"lza6/Channel-AI-APP-2api","url":"https://github.com/lza6/Channel-AI-APP-2api","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The Channel gateway automates no-SMS guest account creation and expands an account pool to increase upstream concurrency, making account abuse central to the project.","reason_zh":"Channel 网关自动创建免短信游客账号，并扩张账号池以提高上游并发量，账号滥用功能构成项目核心。","evidence_url":"https://github.com/lza6/Channel-AI-APP-2api/blob/32bc199e91ea893fa6da69e186d6a2b2b6a2bba2/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1437665925","full_name":"lza6/ChatAI-3524-2api","url":"https://github.com/lza6/ChatAI-3524-2api","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"ChatAI-3524-2api reconstructs an APK's authentication and explicitly uses a hardcoded signing key to access paid models without membership.","reason_zh":"ChatAI-3524-2api 还原 APK 鉴权流程，并明确利用硬编码签名密钥，在未购买会员的情况下调用付费模型。","evidence_url":"https://github.com/lza6/ChatAI-3524-2api/blob/10609960fe28e96ca702a8df8c0cc37cab8236f9/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1437668723","full_name":"lza6/Shuttle-VPN-APP-2api","url":"https://github.com/lza6/Shuttle-VPN-APP-2api","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The implemented pipeline decrypts credentials for another party's commercial VPN servers and turns them into a SOCKS5 proxy pool.","reason_zh":"仓库实现了解密第三方商业 VPN 服务器凭证并将其接入 SOCKS5 代理池的流水线，属于凭证滥用用途。","evidence_url":"https://github.com/lza6/Shuttle-VPN-APP-2api/blob/7e182517e2f838243ccc14f2ce4d53c30efc9c1f/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1437696061","full_name":"Elfonius/defi-protocol-analysis","url":"https://github.com/Elfonius/defi-protocol-analysis","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"unrelated","reason_en":"Here protocol means a DeFi investment product; the skill guides financial diligence rather than software or communication-protocol reverse engineering.","reason_zh":"这里的“协议”指 DeFi 投资项目；该技能指导金融尽调，不涉及软件或通信协议逆向。","evidence_url":"https://github.com/Elfonius/defi-protocol-analysis/blob/017a6f36ec2e1a7e962e9e1a395e67fd8f6e8615/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1437696245","full_name":"lza6/High-Tech-VPN-APK-Reverse","url":"https://github.com/lza6/High-Tech-VPN-APK-Reverse","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The High Tech VPN tools decrypt a provider's live node credentials and prepare them for a proxy pool despite the source acknowledging that access may lack authorization.","reason_zh":"该工具解密服务商实时下发的节点凭证并导出代理池；文中也承认取得凭证不等于获准使用。","evidence_url":"https://github.com/lza6/High-Tech-VPN-APK-Reverse/blob/4b9382e1516da0de83e0f3becdfbac38891b7081/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1437697607","full_name":"cff-explorer-ntcore/cff-explorer","url":"https://github.com/cff-explorer-ntcore/cff-explorer","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"fork-or-mirror","reason_en":"The repository brands retained PE-bear source as Cff Explorer, while its own notes identify the retained code and borrowed source material rather than an original tool.","reason_zh":"该仓库把保留的 PE-bear 源码包装成 Cff Explorer；其文档也承认沿用了现有源码材料，缺乏独立工具的依据。","evidence_url":"https://github.com/cff-explorer-ntcore/cff-explorer/blob/63c6330ce9a72185dc3c6f632c61f71e4cdbb35f/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1437700778","full_name":"lza6/Aloha-VPN-APK-RE","url":"https://github.com/lza6/Aloha-VPN-APK-RE","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"Although it contains APK analysis, the stated follow-on objective is extracting VPN credentials to assemble a usable pool of the operator's nodes without authorization.","reason_zh":"仓库虽有 APK 分析，但后续目标是提取 VPN 凭证并组建可用的运营方节点池；来源自身指出取得凭证也不等于获得使用授权。","evidence_url":"https://github.com/lza6/Aloha-VPN-APK-RE/blob/1dd10b2d20111a90a6e3e18d13b3a3f2eca160ba/docs/NEWAPI_INTEGRATION.md","reviewed_at":"2026-11-06"},{"id":"scan-1437716263","full_name":"lza6/Monet-APP-2api","url":"https://github.com/lza6/Monet-APP-2api","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The repository builds an OpenAI-compatible gateway for Monet image generation and describes harvesting App Check tokens from an integrity-passing device to enable real mode.","reason_zh":"仓库构建兼容 OpenAI 的 Monet 生图网关，并描述从通过完整性检查的设备提取 App Check 令牌以启用真实模式。","evidence_url":"https://github.com/lza6/Monet-APP-2api/blob/4b24162926ba0a579bf79595ff31ef8f63c7f539/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1437720816","full_name":"lza6/Psiphon-Pro-APK-Reverse","url":"https://github.com/lza6/Psiphon-Pro-APK-Reverse","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The Psiphon Pro repository extracts service nodes and gives deployment steps for using its tunnels as a new-api proxy pool, while acknowledging that such use violates the service terms.","reason_zh":"Psiphon Pro 项目提取服务节点，并给出将隧道接入 new-api 代理池的部署步骤，同时承认这种用法违反服务条款。","evidence_url":"https://github.com/lza6/Psiphon-Pro-APK-Reverse/blob/00d07ea7e0b2bd1b963c00b3d6fae77175c1b9a0/docs/NEWAPI_INTEGRATION.md","reviewed_at":"2026-11-06"},{"id":"scan-1437730686","full_name":"Mohamed-Moslem-Allouch/Days-Gone-SDK","url":"https://github.com/Mohamed-Moslem-Allouch/Days-Gone-SDK","batch_id":"run-42110758337-1","decision":"hold","reason_code":"linking-policy","reason_en":"The repository commits a runtime reflection dump and generated SDK declarations from the commercial game Days Gone, requiring a maintainer decision on derived proprietary output.","reason_zh":"仓库收录从商业游戏《Days Gone》运行时提取的反射转储及生成的 SDK 声明，衍生专有内容的收录需维护者裁定。","evidence_url":"https://github.com/Mohamed-Moslem-Allouch/Days-Gone-SDK/blob/1d7305afb747940f9c97ac8196ca39fdf1662d01/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1437740030","full_name":"lza6/AI-ChatBot-APP-2api","url":"https://github.com/lza6/AI-ChatBot-APP-2api","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The gateway reconstructs a third-party chat service's token issuance and exposes access through an OpenAI-compatible API using arbitrary device IDs.","reason_zh":"该网关还原第三方聊天服务的令牌签发流程，并用任意设备 ID 获取访问权限，再封装为 OpenAI 兼容接口。","evidence_url":"https://github.com/lza6/AI-ChatBot-APP-2api/blob/3e9143464c014b5e2ec14a64836ead6e802556c3/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1437744194","full_name":"lza6/ASL-Tunnel-VPN-APK-Reverse","url":"https://github.com/lza6/ASL-Tunnel-VPN-APK-Reverse","batch_id":"run-42110758337-1","decision":"hold","reason_code":"needs-maintainer-decision","reason_en":"The APK investigation has substantive encryption findings, but its central workflow harvests third-party VPN nodes and credentials for a proxy pool, requiring a maintainer decision.","reason_zh":"该 APK 研究有实质性的加密分析成果，但核心流程会采集第三方 VPN 节点和凭证并组建代理池，需维护者判断是否收录。","evidence_url":"https://github.com/lza6/ASL-Tunnel-VPN-APK-Reverse/blob/c3fe8a3c3283d283451e23b32a0db2e7d1538dc0/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1437745046","full_name":"lza6/Jolt-VPN-APK-Reverse","url":"https://github.com/lza6/Jolt-VPN-APK-Reverse","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The Jolt VPN investigation includes scripts to harvest third-party VPN credentials and operate the resulting nodes as a proxy pool.","reason_zh":"Jolt VPN 项目除逆向报告外，还提供收集第三方 VPN 凭据并将其节点接入代理池的脚本。","evidence_url":"https://github.com/lza6/Jolt-VPN-APK-Reverse/blob/5d8174d31f1d779fc89e1ff827bd025b5402d736/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1437757317","full_name":"lza6/VPN-US-APK-Reverse","url":"https://github.com/lza6/VPN-US-APK-Reverse","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The VPN US tools harvest the operator's node pool and attempt to use its proxy credentials, despite the report's warning that those nodes are not authorized for production use.","reason_zh":"VPN US 工具会采集运营方节点并尝试使用其代理凭证；报告自身也指出这些节点不能获准接入生产代理池。","evidence_url":"https://github.com/lza6/VPN-US-APK-Reverse/blob/3762034b218125ad53be052ca35aca38dd008830/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1437757927","full_name":"ricardoguaca/ARE","url":"https://github.com/ricardoguaca/ARE","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"unrelated","reason_en":"ARE measures cuts, color, audio and animation in reference videos for audiovisual reconstruction, outside the catalog's software and device scope.","reason_zh":"ARE 测量参考视频的剪辑、色彩、音频和动画以供视听内容重建，不属于软件或设备逆向工程范围。","evidence_url":"https://github.com/ricardoguaca/ARE/blob/48af12cab22bb4c5b054da2c04d531e45ef6f2c1/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1437758620","full_name":"julianu37/AI-Companions-Aska","url":"https://github.com/julianu37/AI-Companions-Aska","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"general-application","reason_en":"The primary deliverable is an ASKA companion mod for chat and planned orders; the RE notes support its development rather than constitute its main subject.","reason_zh":"仓库的主要成果是 ASKA 同伴聊天模组及后续指令功能；逆向笔记服务于模组开发，并非项目主体。","evidence_url":"https://github.com/julianu37/AI-Companions-Aska/blob/85e288802941115d86a965c6954b8857e2476cc2/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1437785282","full_name":"BearingMe/trace","url":"https://github.com/BearingMe/trace","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"no-real-content","reason_en":"Trace is a reusable investigation template; its experiment, findings, source, script, and test directories contain only placeholders and no target research or RE tooling.","reason_zh":"Trace 提供调查流程模板，但实验、发现、源码、脚本和测试目录均只有占位文件，没有具体目标研究或逆向工具。","evidence_url":"https://github.com/BearingMe/trace/blob/bfd12a708439654ce755b10b7abf72ce5658b415/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1437804389","full_name":"winston950213/winston950213.github.io","url":"https://github.com/winston950213/winston950213.github.io","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"personal-profile","reason_en":"The repository is a personal Hexo blog and article migration; reverse-engineering posts are one topic among its general notes.","reason_zh":"这是个人 Hexo 博客及文章迁移仓库；逆向文章只是多种技术笔记中的一类。","evidence_url":"https://github.com/winston950213/winston950213.github.io/blob/b741c9894eded1947051884ec4846171b80e368f/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1437811452","full_name":"cid-moosa/prodiscover","url":"https://github.com/cid-moosa/prodiscover","batch_id":"run-42110758337-1","decision":"hold","reason_code":"linking-policy","reason_en":"ProDiscover describes rebuilding a commercial forensic suite from PE resources and manuals, and the repository contains many extracted-looking original UI images.","reason_zh":"ProDiscover 称依据商业取证软件的 PE 资源和手册重建程序，仓库又包含大量疑似提取的原版界面图片，需要维护者判断。","evidence_url":"https://github.com/cid-moosa/prodiscover/blob/72f94b6dbcd784c7077637c65d604733f2b1e9aa/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1437931969","full_name":"thecybermind/test_gh","url":"https://github.com/thecybermind/test_gh","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"game-mod-no-re","reason_en":"Test_GH is described only as a work-in-progress Golf With Your Friends test plugin, with no documented reverse engineering.","reason_zh":"Test_GH 仅被描述为开发中的《Golf With Your Friends》测试插件，没有记录逆向分析。","evidence_url":"https://github.com/thecybermind/test_gh/blob/3ab7273e9003c04993a7266c1c1f5f54fb4d8cf3/readme.md","reviewed_at":"2026-11-06"},{"id":"scan-1437976412","full_name":"MuChuan328/mcp-and-skills-pack","url":"https://github.com/MuChuan328/mcp-and-skills-pack","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"no-real-content","reason_en":"The pack provides placeholder MCP configurations and generic skill lists for existing tools, but no server implementation, target findings or RE-specific capability of its own.","reason_zh":"该包只提供现有工具的 MCP 占位配置和通用技能清单，没有服务器实现、目标研究结果或自身的逆向分析能力。","evidence_url":"https://github.com/MuChuan328/mcp-and-skills-pack/blob/1f3aa214e1924a873bab907c8b8d75182d63b740/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1438019001","full_name":"Aetherx86/rea","url":"https://github.com/Aetherx86/rea","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"fork-or-mirror","reason_en":"The repository presents REA as its own project, but its package metadata identifies morluto/rea as the upstream repository and MCP identity.","reason_zh":"该仓库以 REA 项目自居，但 package.json 将 morluto/rea 标为源码仓库，并沿用其 MCP 标识。","evidence_url":"https://github.com/Aetherx86/rea/blob/6f756763ee455e2a04d16c76f97f3d66487a22eb/package.json","reviewed_at":"2026-11-06"},{"id":"scan-1438030142","full_name":"miaolink/HongguoFullscreen","url":"https://github.com/miaolink/HongguoFullscreen","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"general-application","reason_en":"HongguoFullscreen is a rooted Android viewing aid that switches Hongguo to landscape full screen and skips prompts; no RE findings are documented.","reason_zh":"HongguoFullscreen 是 Root 安卓设备上的横屏全屏和提示跳过工具，文档没有记录逆向分析成果。","evidence_url":"https://github.com/miaolink/HongguoFullscreen/blob/09c1e854ecfc94aee415ba500473d8ca81ebfbbd/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1438049152","full_name":"SUNYT772/RE-Workstation","url":"https://github.com/SUNYT772/RE-Workstation","batch_id":"run-42110758337-1","decision":"curated","curated_id":"re-workstation"},{"id":"scan-1438075014","full_name":"vikrant-project/antigravity-api","url":"https://github.com/vikrant-project/antigravity-api","batch_id":"run-42110758337-1","decision":"hold","reason_code":"needs-maintainer-decision","reason_en":"The report describes extracting Google's OAuth client credentials from a proprietary CLI and using them to bypass that client for direct backend access, requiring maintainer review.","reason_zh":"研究报告称从专有 CLI 提取 Google OAuth 客户端凭据，并据此绕过该客户端直连后端；这一用途需要维护者裁定。","evidence_url":"https://github.com/vikrant-project/antigravity-api/blob/3f9b0bdc2a1b5f8ad1d48347f8aa78a821ca748b/REVERSE_ENGINEERING.md","reviewed_at":"2026-11-06"},{"id":"scan-1438107039","full_name":"Aetherx86/VMP_DEVIRT","url":"https://github.com/Aetherx86/VMP_DEVIRT","batch_id":"run-42110758337-1","decision":"hold","reason_code":"linking-policy","reason_en":"The devirtualization research is in scope, but the repository includes VMProtect SDK shared libraries and protected sample binaries whose redistribution status needs review.","reason_zh":"该去虚拟化研究符合范围，但仓库包含 VMProtect SDK 共享库和受保护样本二进制，需审查这些文件的再分发情况。","evidence_url":"https://github.com/Aetherx86/VMP_DEVIRT/blob/fe3acf2a900e3f103de40bf97b4a1bbcb0dcd549/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1438131047","full_name":"aryankansal31/moon-sweepers-crew-autopilot","url":"https://github.com/aryankansal31/moon-sweepers-crew-autopilot","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The Moon Sweepers repository's main product is a trainer that changes game speed, automates play and modifies in-game rewards.","reason_zh":"该仓库的主要成果是 Moon Sweepers 修改器，用于调整游戏速度、自动游玩并改变游戏内收益。","evidence_url":"https://github.com/aryankansal31/moon-sweepers-crew-autopilot/blob/a2d14ce4421ae4f1b014b5a0ed0cef4dd4fff6cc/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1438148966","full_name":"Moriarty21B/ReaSnow-Studio-Mod","url":"https://github.com/Moriarty21B/ReaSnow-Studio-Mod","batch_id":"run-42110758337-1","decision":"hold","reason_code":"linking-policy","reason_en":"ReaSnow Studio Mod includes QML resources that its README says were decompiled from a proprietary baseline APK, requiring a maintainer decision on redistribution.","reason_zh":"ReaSnow Studio Mod 收录了其说明文件明确称从原版 APK 反编译取得的 QML 资源，是否适合收录需由维护者判断。","evidence_url":"https://github.com/Moriarty21B/ReaSnow-Studio-Mod/blob/49d2d8d2c5e73eb2e01211c52aea7d9e5df48da5/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1438353706","full_name":"SanyaSho/JackSDK_SDK","url":"https://github.com/SanyaSho/JackSDK_SDK","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"general-application","reason_en":"The repository supplies headers and build instructions for J.A.C.K. editor plugins; its source does not document analysis of the editor or another target.","reason_zh":"仓库提供 J.A.C.K. 编辑器插件的头文件和构建说明，没有记录对编辑器或其他目标的逆向分析。","evidence_url":"https://github.com/SanyaSho/JackSDK_SDK/blob/b7141e36e785b15ee658fbb0a3b34dee5b1e3dfe/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1438371309","full_name":"yuchuangyi/pojia-workbuddy-win","url":"https://github.com/yuchuangyi/pojia-workbuddy-win","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"pojia-workbuddy-win installs changes to WorkBuddy's prompt and policy loading paths, while its probe categories include cracking, malware evasion and other restricted requests.","reason_zh":"pojia-workbuddy-win 改写 WorkBuddy 的提示词与策略装载位置，探针还涵盖破解、恶意代码免杀等受限请求，属于规避用途。","evidence_url":"https://github.com/yuchuangyi/pojia-workbuddy-win/blob/6dae9503bbf02df87f9833a39837b97e9aba2365/REVIEW.md","reviewed_at":"2026-11-06"},{"id":"scan-1438379437","full_name":"lc655254/water-valve-ble","url":"https://github.com/lc655254/water-valve-ble","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The water-valve client intentionally reports zero usage to settle metered sessions at no charge, making billing evasion central to its operation.","reason_zh":"该水阀客户端以零用量上报结算实际放水会话，使规避计费成为核心功能。","evidence_url":"https://github.com/lc655254/water-valve-ble/blob/8be396b7319018cbd12ce57f7adac2a82772f85b/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1438386389","full_name":"Skysbed/ps4-windows-games","url":"https://github.com/Skysbed/ps4-windows-games","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"general-application","reason_en":"PCPS4 ports Wine to a jailbroken PS4 as a compatibility runtime; the source documents porting and boot progress, not reverse engineering.","reason_zh":"PCPS4 将 Wine 移植到已破解的 PS4，目标是运行 Windows 游戏；文档记录的是兼容层移植和启动进度。","evidence_url":"https://github.com/Skysbed/ps4-windows-games/blob/8e56d7b539ccc3bd63d0bb0bce23046a20e92b55/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1438472531","full_name":"glasses666/macos27-external-touch","url":"https://github.com/glasses666/macos27-external-touch","batch_id":"run-42110758337-1","decision":"hold","reason_code":"target-unsupported","reason_en":"The macOS 27 study documents HID digitizer tests and WindowServer behavior, but its subject is OS service behavior rather than a supported device, firmware or binary target.","reason_zh":"这项 macOS 27 调查记录了 HID 触控设备测试和 WindowServer 的行为，但研究对象是操作系统服务机制，现有目标标签均不适用。","evidence_url":"https://github.com/glasses666/macos27-external-touch/blob/c3189b811582365f79c929f3a4c67cbdd109286d/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1438479107","full_name":"shizan52/Viewdesk","url":"https://github.com/shizan52/Viewdesk","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"general-application","reason_en":"Viewdesk's main product is a desktop console for buying and tracking TikTok views; captured web requests serve that ordinary ordering workflow.","reason_zh":"Viewdesk 的主要用途是购买和跟踪 TikTok 浏览量的桌面控制台；其网站请求分析服务于日常下单流程。","evidence_url":"https://github.com/shizan52/Viewdesk/blob/f8f1a9ac5c7993d6bed74c055501450f8a4da5e0/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1438511981","full_name":"wilcz3kk/IronCommander","url":"https://github.com/wilcz3kk/IronCommander","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"IronCommander is chiefly a Hearts of Iron IV trainer that changes resources and game rules and includes a Steam achievements bypass.","reason_zh":"IronCommander 的主体是《钢铁雄心 IV》修改器，用来改动资源和游戏规则，并包含 Steam 成就绕过功能。","evidence_url":"https://github.com/wilcz3kk/IronCommander/blob/ed7a1b0db2c50ed6f47a9bb252c84326d7717531/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1438512249","full_name":"lza6/imggen84-app-2api","url":"https://github.com/lza6/imggen84-app-2api","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The PhotoFlux repository extracts embedded service secrets and supplies a gateway that reuses the app's HMAC credentials for direct access to image-generation services.","reason_zh":"该 PhotoFlux 仓库提取应用内置服务密钥，并提供复用 HMAC 凭据直连图像生成服务的网关，属于凭据滥用工具。","evidence_url":"https://github.com/lza6/imggen84-app-2api/blob/2a1b07f5f0930bfb78c825394cb10a1900565709/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1438542878","full_name":"lza6/SnapClip-APP-2api","url":"https://github.com/lza6/SnapClip-APP-2api","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"Although it documents SnapClip's API, the gateway rotates new anonymous identities after each daily free quota is exhausted, making quota evasion a central feature.","reason_zh":"仓库虽记录了 SnapClip API，但网关会在每日免费额度耗尽后轮换新匿名身份；规避额度是其核心功能。","evidence_url":"https://github.com/lza6/SnapClip-APP-2api/blob/3188ded490a4b999bb76595112780cb9d6695755/docs/NEW-API-INTEGRATION.md","reviewed_at":"2026-11-06"},{"id":"scan-1438556700","full_name":"imjac0b/kidcue","url":"https://github.com/imjac0b/kidcue","batch_id":"run-42110758337-1","decision":"hold","reason_code":"linking-policy","reason_en":"Although the README describes CameraUI binary findings and a recreated background, the repository commits extracted Apple asset catalogs, animations, images and converted media.","reason_zh":"README 记录了 CameraUI 二进制中的配色发现及背景重建方法，但仓库同时提交了提取自 Apple 的资源目录、动画、图片和转换后的视频，需要维护者判断收录链接。","evidence_url":"https://github.com/imjac0b/kidcue/blob/99bca763b56386b9263e533d5812396f495a3fa5/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1438557984","full_name":"lza6/CreArt-APP-2api","url":"https://github.com/lza6/CreArt-APP-2api","batch_id":"run-42110758337-1","decision":"hold","reason_code":"linking-policy","reason_en":"The repository commits the commercial service's original integrity-blocked image as an asset, so redistribution of that service-generated file needs a maintainer decision.","reason_zh":"仓库将商业服务返回的原始完整性拦截图片作为素材提交；该服务生成文件的再分发需要维护者裁定。","evidence_url":"https://github.com/lza6/CreArt-APP-2api/blob/0b490fa18e2fa6f66ee4d3d3162428336b3b13f0/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1438558244","full_name":"MeowMuhMuhCow/sternenschweif","url":"https://github.com/MeowMuhMuhCow/sternenschweif","batch_id":"run-42110758337-1","decision":"hold","reason_code":"linking-policy","reason_en":"Sternenschweif documents a byte-identical reconstruction of a commercial game, but commits the reconstructed C/C++ and assembly output.","reason_zh":"Sternenschweif 记录了商业游戏的逐字节一致源码重建，但仓库直接提交了还原出的 C/C++ 和汇编代码，需维护者判断链接政策。","evidence_url":"https://github.com/MeowMuhMuhCow/sternenschweif/blob/a723f4affc9fa2878bff067cf837a3b1c7d57f25/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1438565819","full_name":"MeowMuhMuhCow/schicksalsklinge","url":"https://github.com/MeowMuhMuhCow/schicksalsklinge","batch_id":"run-42110758337-1","decision":"hold","reason_code":"linking-policy","reason_en":"The repository contains reconstructed source for a commercial game and committed files of its dialogue and game text, so inclusion needs a maintainer linking decision.","reason_zh":"仓库收录商业游戏的重建源码，并提交了对话和游戏文本文件，是否收录需要维护者决定。","evidence_url":"https://github.com/MeowMuhMuhCow/schicksalsklinge/blob/9ef8c114748e700f481e0fe81dfe37fc3ec0e32b/LIESMICH.md","reviewed_at":"2026-11-06"},{"id":"scan-1438583388","full_name":"ggorbi99-dev/aic8800-monitor-injection","url":"https://github.com/ggorbi99-dev/aic8800-monitor-injection","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"security-testing","reason_en":"The project's main deliverable is a Linux driver patch and scripts for Wi-Fi monitor mode and frame injection, including deauthentication tests.","reason_zh":"该项目主要交付 Linux 驱动补丁和脚本，以启用 Wi-Fi 监听及帧注入，并包含解除认证测试。","evidence_url":"https://github.com/ggorbi99-dev/aic8800-monitor-injection/blob/e6d5f89b1296db9c055b72753e3408167106597b/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1438585039","full_name":"konifer44/AmicaIN-Reverse-Engineering","url":"https://github.com/konifer44/AmicaIN-Reverse-Engineering","batch_id":"run-42110758337-1","decision":"hold","reason_code":"linking-policy","reason_en":"The AmicaIN research includes substantive app and oven communication findings, but the repository also commits thousands of extracted app images and XML files.","reason_zh":"AmicaIN 研究有实质性的应用与烤箱通信发现，但仓库同时提交了大量从应用中提取的图片和 XML 文件，需由维护者判断收录链接。","evidence_url":"https://github.com/konifer44/AmicaIN-Reverse-Engineering/blob/f545e8b3bd95454af92a0c7ab4fa293bbfb14b65/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1438585040","full_name":"lza6/Graphionica-APP-Reverse","url":"https://github.com/lza6/Graphionica-APP-Reverse","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"Although it documents app and API analysis, Graphionica-APP-Reverse centers premium-content harvesting and provides a downloader for protected assets.","reason_zh":"项目虽有应用与接口分析，但重点是获取 premium 素材，并提供批量下载这些内容的工具。","evidence_url":"https://github.com/lza6/Graphionica-APP-Reverse/blob/017a27eb013dbc7cbfb64790be9d1e7d56ca4d31/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1438585633","full_name":"lza6/OneSearch-2API-APP","url":"https://github.com/lza6/OneSearch-2API-APP","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The gateway reproduces a hard-coded APK signing key to mint login-free service tokens and documents proxy rotation around upstream rate limits.","reason_zh":"该网关复用 APK 内的硬编码签名密钥生成免登录令牌，并记录通过轮换代理出口规避上游限流的做法。","evidence_url":"https://github.com/lza6/OneSearch-2API-APP/blob/1cf3fda6b3c9f4f2a8fc5aec2ec2ead8635ee703/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1438589810","full_name":"lza6/Monet-300-APP-2api","url":"https://github.com/lza6/Monet-300-APP-2api","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The deliverable is an OpenAI-compatible gateway for Monet's commercial image service and documents supplying a device token to pass its App Check gate.","reason_zh":"该项目交付兼容 OpenAI 的 Monet 商业生图网关，并说明如何提供设备令牌以通过 App Check 完整性门禁。","evidence_url":"https://github.com/lza6/Monet-300-APP-2api/blob/160292cde83d449213058b6e4f0fc8b184aa3089/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1438591510","full_name":"lza6/AI-Seek-APP-2api","url":"https://github.com/lza6/AI-Seek-APP-2api","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"Its OpenAI-compatible gateway generates unlimited anonymous accounts and pools them to expose AI Seek's commercial chat service, despite documenting a subscription block.","reason_zh":"该项目虽记录了订阅拦截机制，但网关会批量生成匿名账号并组成账号池，以 OpenAI 兼容接口转接 AI Seek 的商业聊天服务。","evidence_url":"https://github.com/lza6/AI-Seek-APP-2api/blob/51227444d16a266f4d27eef7bc61a4d6369011cc/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1438599010","full_name":"PQMlmaoxd/wuwa-re-prj","url":"https://github.com/PQMlmaoxd/wuwa-re-prj","batch_id":"run-42110758337-1","decision":"hold","reason_code":"linking-policy","reason_en":"The Wuthering Waves research is substantive, but the repository explicitly includes game-derived recovered expressions and reconstructed source views.","reason_zh":"鸣潮玩法研究有实质分析，但仓库明确收录从商业游戏恢复的表达式及重建源码视图，需由维护者判断链接政策。","evidence_url":"https://github.com/PQMlmaoxd/wuwa-re-prj/blob/874186a140c36b0faece5846edfd67a23056a1d5/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1438600370","full_name":"lza6/AI-Cartoon-Pet-Video-APP-2api","url":"https://github.com/lza6/AI-Cartoon-Pet-Video-APP-2api","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The gateway pools regenerated device IDs to repeatedly obtain a third-party app's free allowances; its reverse-engineering report presents quota renewal as the enabling result.","reason_zh":"该网关通过批量生成并轮换 Device-Id 反复领取第三方应用的免费额度，逆向报告也将额度续领列为主要成果。","evidence_url":"https://github.com/lza6/AI-Cartoon-Pet-Video-APP-2api/blob/abf27eaee690e996e79f65dd306dd947c20b3ada/docs/REVERSE-REPORT.md","reviewed_at":"2026-11-06"},{"id":"scan-1438609226","full_name":"lza6/AI-Art-Generator-APP-2api","url":"https://github.com/lza6/AI-Art-Generator-APP-2api","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The protocol client reproduces the app's authentication material and pools fabricated device IDs to expand an upstream service quota.","reason_zh":"该协议客户端复用应用鉴权材料，并通过批量生成设备 ID 扩充上游服务额度，属于规避服务限制的用途。","evidence_url":"https://github.com/lza6/AI-Art-Generator-APP-2api/blob/acdd82f6aeced143f57179493fd992bbcfb4a06a/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1438610964","full_name":"lza6/Code-AI-332-APP-2api","url":"https://github.com/lza6/Code-AI-332-APP-2api","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"Although it contains an app protocol report, the gateway's central feature is minting anonymous identities to renew a third-party service's free quota.","reason_zh":"仓库虽有应用协议分析报告，但网关核心功能是批量创建匿名身份，以持续获取第三方服务的免费额度。","evidence_url":"https://github.com/lza6/Code-AI-332-APP-2api/blob/bab8b2845c41830145c1a266628ef0a9d434aef4/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1438610996","full_name":"lza6/DeepSeek-271-APP-2api","url":"https://github.com/lza6/DeepSeek-271-APP-2api","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"Alongside its APK analysis, the project builds a gateway around reconstructed proof-of-work and discusses account rotation and WAF fingerprint requirements.","reason_zh":"项目除 APK 分析外，还实现了绕开工作量证明限制的网关，并讨论账号池轮换及 WAF 指纹要求。","evidence_url":"https://github.com/lza6/DeepSeek-271-APP-2api/blob/025d8ecbf8697f8a62ec21fb5095b61bd3bf0177/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1438621496","full_name":"lza6/Chat-AI-gtchat-APP-2api","url":"https://github.com/lza6/Chat-AI-gtchat-APP-2api","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The gateway's central workflow exploits an upstream identity-check defect to create accounts automatically and manage an account pool for service access.","reason_zh":"该网关的核心流程利用上游身份校验缺陷自动创建账号，并通过账号池访问服务，属于账号滥用方向。","evidence_url":"https://github.com/lza6/Chat-AI-gtchat-APP-2api/blob/524131145cd68711a024e92cd049887369664e2d/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1438622003","full_name":"lza6/Fravix-AI-Photo-Generator-APP-2api","url":"https://github.com/lza6/Fravix-AI-Photo-Generator-APP-2api","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"Fravix's deliverable extracts shared signing values from Remote Config to call the generation backend directly; its report highlights bypass of the app's daily free-use counter.","reason_zh":"Fravix 的交付物从 Remote Config 获取共享签名参数以直连生成后端，报告还明确指出绕开应用每日免费次数计数。","evidence_url":"https://github.com/lza6/Fravix-AI-Photo-Generator-APP-2api/blob/99aa5e9fc6876ba9cf545f4bb8ede44bcf273fa7/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1438623594","full_name":"Rafawaldrigues/android-intent-attacks","url":"https://github.com/Rafawaldrigues/android-intent-attacks","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"general-security","reason_en":"The write-ups center on exploiting Android Intent vulnerabilities in CTF exercises; decompilation appears as a supporting step rather than their subject.","reason_zh":"这些笔记主要讲解如何利用 CTF 练习中的 Android Intent 漏洞；反编译只是寻找攻击入口的辅助步骤。","evidence_url":"https://github.com/Rafawaldrigues/android-intent-attacks/blob/84e64acc3af0d0128af72f08e62a713766fdfcab/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1438661890","full_name":"JuneYaooo/rea-video","url":"https://github.com/JuneYaooo/rea-video","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"unrelated","reason_en":"rea-video analyses how videos were filmed, generated and edited; its reverse-engineering language concerns media production rather than software or systems.","reason_zh":"rea-video 分析视频的拍摄、生成和剪辑方式；这里的“逆向”指内容制作流程，与软件或系统逆向无关。","evidence_url":"https://github.com/JuneYaooo/rea-video/blob/bc8f62879a09fe0daf03078246d639df5bdf19ed/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1438662432","full_name":"lza6/AI-Writer-APP-2api","url":"https://github.com/lza6/AI-Writer-APP-2api","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The AI Writer gateway reproduces a client-held signing secret and administrator JWT from an APK to call the upstream service outside its app, making credential bypass central.","reason_zh":"AI Writer 网关从 APK 提取客户端持有的签名密钥和管理员 JWT，以绕过原应用调用上游服务；凭据规避是其核心机制。","evidence_url":"https://github.com/lza6/AI-Writer-APP-2api/blob/973b00545b1e9c692e93aa0eacd9cf730409f74c/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1438663403","full_name":"lza6/Glovy-AI-Photo-Generator-2api","url":"https://github.com/lza6/Glovy-AI-Photo-Generator-2api","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The gateway obtains another app's active client key after Glovy's key was disabled and uses it to access the shared Apero service.","reason_zh":"Glovy 的客户端密钥停用后，该网关改取同厂其他应用的有效密钥访问 Apero 服务，属于凭据与访问控制规避。","evidence_url":"https://github.com/lza6/Glovy-AI-Photo-Generator-2api/blob/c309a9e6df43d70771fd475af2b568efe3b26642/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1438676866","full_name":"pav1388/byte-0-scope","url":"https://github.com/pav1388/byte-0-scope","batch_id":"run-42110758337-1","decision":"hold","reason_code":"target-unsupported","reason_en":"Byte-0-scope visualizes arbitrary file bytes and compares files, but the repository does not establish executable analysis or another supported target.","reason_zh":"Byte-0-scope 能将任意文件的字节可视化并比较差异，但现有材料没有说明它分析可执行文件或其他可支持的目标。","evidence_url":"https://github.com/pav1388/byte-0-scope/blob/b793eda7f9a07702a6c8705c438c4a96b04f2989/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1438694237","full_name":"EvyatarSasi/Reverse_Engineering","url":"https://github.com/EvyatarSasi/Reverse_Engineering","batch_id":"run-42110758337-1","decision":"hold","reason_code":"linking-policy","reason_en":"The repository includes substantive IDA analyses and reports, but it also commits patched Windows Minesweeper executables, requiring a linking-policy decision.","reason_zh":"仓库包含实质性的 IDA 分析和报告，同时收录了修改后的 Windows Minesweeper 可执行文件，需维护者裁定链接政策。","evidence_url":"https://github.com/EvyatarSasi/Reverse_Engineering/blob/f80e9e83f4a4d74eca735f7a8ac3adfe75dcbbd9/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1438734319","full_name":"MonkeyDLuffy13/cylab-academy-writeups","url":"https://github.com/MonkeyDLuffy13/cylab-academy-writeups","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"general-security","reason_en":"CyLab Academy Writeups covers six CTF categories, with reverse engineering one section of a broader security-challenge collection.","reason_zh":"CyLab Academy Writeups 涵盖六类 CTF 题目；逆向工程只是这套综合安全解题笔记中的一个板块。","evidence_url":"https://github.com/MonkeyDLuffy13/cylab-academy-writeups/blob/a96bfea557d68847eb1f7c069362db3a85a5e3d1/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1438769889","full_name":"fengye102/Gateway-Manager","url":"https://github.com/fengye102/Gateway-Manager","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"general-application","reason_en":"Gateway Manager's own description centers on a local AI API proxy, routing, prompt injection and observability; its claimed protocol inspiration does not make analysis its subject.","reason_zh":"Gateway Manager 的主体是本地 AI API 代理，提供路由、提示词注入和监控；协议借鉴只是背景，仓库没有以逆向分析为主要成果。","evidence_url":"https://github.com/fengye102/Gateway-Manager/blob/d3e49d7cfeda9e47a08ce68c81c983e29895a213/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1438896261","full_name":"emiluzelac/universal-reverse-engineering","url":"https://github.com/emiluzelac/universal-reverse-engineering","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"no-real-content","reason_en":"The skill supplies general investigation instructions, playbooks and small file helpers, but no target-specific findings or substantive reverse-engineering tool.","reason_zh":"该技能提供通用调查流程、操作手册和小型文件辅助脚本，没有针对具体目标的研究成果或专门的逆向工具。","evidence_url":"https://github.com/emiluzelac/universal-reverse-engineering/blob/a1de301cc679ace6aebabd0f9b19d071ea5bf940/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1438897110","full_name":"Mennogt/session-parity-kit","url":"https://github.com/Mennogt/session-parity-kit","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The main service automates Roblox account sign-ins with credential batches, proxies and challenge handling, making account access its operational purpose.","reason_zh":"该服务以批量凭据、代理和验证挑战处理来自动执行 Roblox 账户登录，主要用途是账户访问自动化。","evidence_url":"https://github.com/Mennogt/session-parity-kit/blob/8f9436a1081a7b160b1e306c6508562b5b7bc5b0/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1438921635","full_name":"EGKrb/fathom-headless","url":"https://github.com/EGKrb/fathom-headless","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"fork-or-mirror","reason_en":"Fathom headless is a command-line repackaging of the author's existing Fathom engine with a launcher and script templates; the analysis engine remains in Fathom.","reason_zh":"Fathom headless 将原有 Fathom 引擎重新打包为命令行版本，并添加启动脚本和模板；分析引擎仍来自 Fathom。","evidence_url":"https://github.com/EGKrb/fathom-headless/blob/ebf50fe94b0e3964ca5d4da4f24814b666008ec0/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1438998517","full_name":"lza6/Genie-APP-2api","url":"https://github.com/lza6/Genie-APP-2api","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"Although it includes APK protocol findings, Genie 2API's main workflow automatically creates and rotates anonymous accounts to bypass the service's daily per-account quota.","reason_zh":"Genie 2API 虽有 APK 协议分析，但主要流程会自动注册并轮换匿名账号，以绕过服务按账号设置的每日额度。","evidence_url":"https://github.com/lza6/Genie-APP-2api/blob/1eb7b5499b412649b8bd185032b3649e231e1df8/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1439003744","full_name":"lza6/Viddo-APK-Reverse","url":"https://github.com/lza6/Viddo-APK-Reverse","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The Viddo gateway and clients operationalize unauthenticated account creation, temporary credential requests and points-system abuse alongside the APK analysis.","reason_zh":"Viddo 项目虽记录了 APK 分析，但网关和客户端也实现了无鉴权建号、请求临时凭证及滥用积分接口的流程。","evidence_url":"https://github.com/lza6/Viddo-APK-Reverse/blob/f9d24ccc5a609801568bca00494f4c29123d674e/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1439006958","full_name":"lza6/Wonder-AI-Artist-APP-2api","url":"https://github.com/lza6/Wonder-AI-Artist-APP-2api","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The Wonder gateway reproduces a premium-status marker so image generation continues after credits reach zero, making account-limit evasion a central capability.","reason_zh":"Wonder 网关复现高级版标记，使积分归零后仍可出图；绕过账号额度限制是其核心能力之一。","evidence_url":"https://github.com/lza6/Wonder-AI-Artist-APP-2api/blob/64e8852183766ced0cbbdc10caf8baea3e1c91b6/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1439006981","full_name":"lza6/Sweet-AI-APP-2api","url":"https://github.com/lza6/Sweet-AI-APP-2api","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"general-application","reason_en":"The deliverable is an OpenAI-compatible gateway to Sweet AI's commercial chat service, which the author reports is currently unavailable, despite detailed APK and protocol analysis.","reason_zh":"项目虽详细分析 Sweet AI 的 APK 和通信协议，交付物仍是接入该商业聊天服务的 OpenAI 兼容网关；作者称上游目前不可用。","evidence_url":"https://github.com/lza6/Sweet-AI-APP-2api/blob/c6051482e1377113523791566145c40668f29c2b/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1439007691","full_name":"lza6/Amor-AI-APP-2api","url":"https://github.com/lza6/Amor-AI-APP-2api","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The OpenAI-compatible Amor AI gateway reproduces premium character prompts while explicitly omitting the app's daily message limit and subscription paywall.","reason_zh":"该 OpenAI 兼容网关复刻 Amor AI 的付费角色提示词，同时明确移除了应用的每日消息额度和订阅付费墙。","evidence_url":"https://github.com/lza6/Amor-AI-APP-2api/blob/b2334fca3b0a7e1e3aedae66a16f692187c72ddc/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1439009654","full_name":"4163/i-asset-extraction","url":"https://github.com/4163/i-asset-extraction","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"no-real-content","reason_en":"The repository provides an agent extraction workflow and gallery template, while its tools and workspace directories are empty and no target-specific findings are present.","reason_zh":"仓库只有智能体提取流程和画廊模板，工具及工作区目录为空，也没有针对具体目标的研究结果。","evidence_url":"https://github.com/4163/i-asset-extraction/blob/a728ae941917c9160e50129a5d75e0f862161204/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1439010512","full_name":"lza6/Animefy-APP-2api","url":"https://github.com/lza6/Animefy-APP-2api","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"Animefy 2API extracts an app signing secret and uses fabricated user IDs to access the service anonymously through an OpenAI-compatible gateway.","reason_zh":"Animefy 2API 提取应用签名密钥，以自造用户 ID 匿名调用服务，并封装成 OpenAI 兼容网关。","evidence_url":"https://github.com/lza6/Animefy-APP-2api/blob/625a3bbddb2818786def5be7a13b266315cb3492/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1439010632","full_name":"lza6/Ask-Me-Anything-2API-APP","url":"https://github.com/lza6/Ask-Me-Anything-2API-APP","batch_id":"run-42110758337-1","decision":"hold","reason_code":"linking-policy","reason_en":"The protocol investigation includes committed JADX-decompiled Java from the commercial Ask Me Anything APK, requiring a maintainer linking decision.","reason_zh":"该协议研究仓库收录了商业应用《Ask Me Anything》的 JADX 反编译 Java 文件，需要维护者裁定是否收录。","evidence_url":"https://github.com/lza6/Ask-Me-Anything-2API-APP/blob/f0d1f33b13f2a2ca931c767e797fc7ae3e93b229/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1439039400","full_name":"lza6/G-AI-APP-2api","url":"https://github.com/lza6/G-AI-APP-2api","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"Although it contains APK protocol analysis, the gateway rotates exit IPs to obtain fresh free quotas from the upstream AI service.","reason_zh":"仓库虽有 APK 协议分析，但网关会轮换出口 IP，以反复获取上游 AI 服务的免费额度。","evidence_url":"https://github.com/lza6/G-AI-APP-2api/blob/193f279cdf64367afb589a086a0a3f1c2f6180e5/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1439040165","full_name":"abhi245y/ola-dash-sdk","url":"https://github.com/abhi245y/ola-dash-sdk","batch_id":"run-42110758337-1","decision":"hold","reason_code":"needs-maintainer-decision","reason_en":"Ola Dash SDK replaces a scooter's stock dashboard and connects to its vehicle service; deployment on riding hardware needs a maintainer decision.","reason_zh":"Ola Dash SDK 替换电动踏板车原厂仪表界面并连接车辆服务，涉及骑行设备上的安全相关显示，需要维护者裁定。","evidence_url":"https://github.com/abhi245y/ola-dash-sdk/blob/7820f702a4312903734a35fd870646bcfbf24a40/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1439091689","full_name":"Cyberhex1/the-hook-up","url":"https://github.com/Cyberhex1/the-hook-up","batch_id":"run-42110758337-1","decision":"hold","reason_code":"linking-policy","reason_en":"The Hook-Up restoration documents ActionScript analysis and substantial fixes, but the repository includes original SWF, XML, music and other game assets.","reason_zh":"The Hook-Up 修复项目记录 ActionScript 分析和多项修复，但仓库同时收录原版 SWF、XML、音乐等游戏素材，需要维护者判断。","evidence_url":"https://github.com/Cyberhex1/the-hook-up/blob/ff28e46589a56ab29e7712c3f28ed96e1cea3df7/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1439106546","full_name":"hczr-dev/m-connect","url":"https://github.com/hczr-dev/m-connect","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"general-application","reason_en":"M-Connect is primarily a Migros API client, MCP server and dashboard for shopping and account data; its endpoint map supports those features.","reason_zh":"M-Connect 主要是查询 Migros 商品与账户数据的 API 客户端、MCP 服务和网页面板；端点清单服务于这些功能。","evidence_url":"https://github.com/hczr-dev/m-connect/blob/11bd197ea1c232107c45f21a9795311a1ff72518/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1439141271","full_name":"dekkaaa9/xRAR","url":"https://github.com/dekkaaa9/xRAR","batch_id":"run-42110758337-1","decision":"hold","reason_code":"linking-policy","reason_en":"xRAR documents a WinRAR 7.13 binary investigation but commits more than 100 icons it says were extracted from WinRAR resources.","reason_zh":"xRAR 记录了对 WinRAR 7.13 可执行文件的分析，但仓库也收录了其声明从 WinRAR 资源中提取的百余枚图标。","evidence_url":"https://github.com/dekkaaa9/xRAR/blob/a8b13c09f4c8144562e0ec4dee00235f37500492/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1439147099","full_name":"fanximing111/Reverse-Engineering-Assistant-Prompt","url":"https://github.com/fanximing111/Reverse-Engineering-Assistant-Prompt","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"no-real-content","reason_en":"ZETA CYBERLAB is a generic reverse-engineering system prompt; its two helpers only inspect PE/ELF headers and extract strings.","reason_zh":"ZETA CYBERLAB 主要是通用逆向工程系统提示词；两个附带脚本仅检查 PE/ELF 文件头和提取字符串。","evidence_url":"https://github.com/fanximing111/Reverse-Engineering-Assistant-Prompt/blob/cfb4e69b99a7303fe82c73628057328fda234f00/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1439194412","full_name":"TheMHD1/samsung-s95f-display-lab","url":"https://github.com/TheMHD1/samsung-s95f-display-lab","batch_id":"run-42110758337-1","decision":"hold","reason_code":"needs-maintainer-decision","reason_en":"The S95F research documents controller-RAM writes that suppress part of a panel fault check; its modification of the display's protection behavior needs maintainer review.","reason_zh":"S95F 研究记录了通过写入控制器 RAM 抑制部分面板故障检查的做法；涉及修改设备保护行为，需要维护者裁定。","evidence_url":"https://github.com/TheMHD1/samsung-s95f-display-lab/blob/76b80ab2e7a02efb4ce84b1a4a831a39d64a1b1b/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1439204311","full_name":"humbertogamez23/open-ppi-bridge","url":"https://github.com/humbertogamez23/open-ppi-bridge","batch_id":"run-42110758337-1","decision":"hold","reason_code":"needs-maintainer-decision","reason_en":"The PPI protocol reconstruction is substantial, but the repository also supplies remote RUN/STOP and flashing controls for a PLC used to operate an industrial gas burner.","reason_zh":"该项目有充分的 PPI 协议还原内容，但也提供用于工业燃气燃烧器 PLC 的远程 RUN/STOP 与刷写控制，需要维护者判断。","evidence_url":"https://github.com/humbertogamez23/open-ppi-bridge/blob/2e5446b3012c686874abf778bfd7814712f7ca22/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1439221216","full_name":"A-Hackers-Guide/iphone-duo-hardware-map","url":"https://github.com/A-Hackers-Guide/iphone-duo-hardware-map","batch_id":"run-42110758337-1","decision":"hold","reason_code":"linking-policy","reason_en":"The iPhone hardware map includes extensive generated listings of proprietary restore-image contents, including firmware strings and userland classes, requiring a maintainer linking decision.","reason_zh":"iPhone 硬件图谱收录了大量从专有恢复镜像生成的内容，包括固件字符串和用户态类清单，需要维护者判断链接政策。","evidence_url":"https://github.com/A-Hackers-Guide/iphone-duo-hardware-map/blob/a988004f8045ecf43abaefc7d443c9083bba3248/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1439250715","full_name":"rainyao15/rev-practice","url":"https://github.com/rainyao15/rev-practice","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"general-application","reason_en":"The bridge customizes the NetEase CloudMusic interface with Wallpaper Engine backgrounds; the documented CEF observations serve that customization rather than an RE investigation.","reason_zh":"该桥接程序把 Wallpaper Engine 壁纸放进网易云音乐界面；文中的 CEF 观察用于实现界面定制，并非项目的逆向研究主题。","evidence_url":"https://github.com/rainyao15/rev-practice/blob/6118bd5222c2ad050e1473a6fdbe21e03f67173f/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1439253853","full_name":"WhatsappWiki/whatsapp-server-demo","url":"https://github.com/WhatsappWiki/whatsapp-server-demo","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"general-application","reason_en":"WhatsApp Local Server implements a local protocol simulator and phone test setup, but its documentation does not establish original protocol reconstruction or findings.","reason_zh":"WhatsApp Local Server 提供本地协议模拟服务和手机测试接入流程，但文档未交代原创的协议逆向过程或研究发现。","evidence_url":"https://github.com/WhatsappWiki/whatsapp-server-demo/blob/1b5a8380c9ef275cef46c374454497994ca7c8f7/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1439332153","full_name":"Darktenebr01/DungeonWithinSaveEditor","url":"https://github.com/Darktenebr01/DungeonWithinSaveEditor","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The editor changes Dungeon Within resources, monster stats, abilities and unlocks in a game save, making game-state manipulation its primary purpose.","reason_zh":"该编辑器主要修改 Dungeon Within 存档中的资源、怪物属性、技能和解锁状态，属于游戏存档作弊工具。","evidence_url":"https://github.com/Darktenebr01/DungeonWithinSaveEditor/blob/413d85f3376f675e9ff39ee533136301b3fd48a4/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1439372145","full_name":"Nugwa628/d2-114d-codex","url":"https://github.com/Nugwa628/d2-114d-codex","batch_id":"run-42110758337-1","decision":"hold","reason_code":"linking-policy","reason_en":"The Diablo II archive contains original research and tooling, but it commits Ghidra decompiler output and full disassembly of the commercial Game.exe.","reason_zh":"该《Diablo II》档案包含原创研究与工具，但也提交了商业游戏 Game.exe 的 Ghidra 反编译输出和完整反汇编。","evidence_url":"https://github.com/Nugwa628/d2-114d-codex/blob/e4497e1d23b7923c4507e6d94b2c8ec14bc56065/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1439375808","full_name":"abhi245y/ola-dev-skill","url":"https://github.com/abhi245y/ola-dev-skill","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"fork-or-mirror","reason_en":"The skill packages guidance generated from Ola Dash SDK and Ola CAN Reference for other agent harnesses, without original RE findings.","reason_zh":"该技能把 Ola Dash SDK 与 Ola CAN Reference 的资料整理给不同智能体环境使用，没有自身的逆向研究结果。","evidence_url":"https://github.com/abhi245y/ola-dev-skill/blob/d5d30c2a726bc71213037c99b38c76aef5844128/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1439409088","full_name":"mulqizamzam/mulqi--reasll","url":"https://github.com/mulqizamzam/mulqi--reasll","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"fork-or-mirror","reason_en":"Mulqi ReaSLL ports Speedrunlab/reverse-engineer-anything-self-learning-loop into DeepSeek Harness and adds packaging and intake changes.","reason_zh":"Mulqi ReaSLL 将 Speedrunlab/reverse-engineer-anything-self-learning-loop 移植到 DeepSeek Harness，主要增加封装和入口流程调整。","evidence_url":"https://github.com/mulqizamzam/mulqi--reasll/blob/bf06fbe3f1e50f229246d104d1104544c50701b9/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1439451225","full_name":"letmefind/replica-skill-cursor-grok","url":"https://github.com/letmefind/replica-skill-cursor-grok","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"fork-or-mirror","reason_en":"The repository identifies itself as a Cursor and Grok Bot port of the Replica pack, reusing skill text and tools from the original project.","reason_zh":"仓库明确是将原版 Replica 技能包移植到 Cursor 和 Grok Bot，沿用原项目的技能文本与工具。","evidence_url":"https://github.com/letmefind/replica-skill-cursor-grok/blob/a10925043982a1772142cbd1a13267c760516d16/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1439462007","full_name":"Sandeep-Hipparagi/Skipper-UI","url":"https://github.com/Sandeep-Hipparagi/Skipper-UI","batch_id":"run-42110758337-1","decision":"hold","reason_code":"linking-policy","reason_en":"Skipper UI for Free republishes a paid component catalog with many local media assets, so its source and asset linking need a maintainer decision.","reason_zh":"Skipper UI for Free 重建付费组件目录并随仓库提供大量本地媒体资源，源码与素材的收录需维护者决定。","evidence_url":"https://github.com/Sandeep-Hipparagi/Skipper-UI/blob/aeb93f97bdaf7946580aa87651498f0b7928a210/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1439480775","full_name":"huangweiping6666/fm26-mcp","url":"https://github.com/huangweiping6666/fm26-mcp","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The FM Memory MCP Server locates player objects in a running game and exposes tools to change their attributes in memory, which is a game trainer workflow.","reason_zh":"FM Memory MCP Server 在运行中的游戏里定位球员对象，并提供修改内存属性的工具，属于游戏修改器工作流。","evidence_url":"https://github.com/huangweiping6666/fm26-mcp/blob/c68a891689a7f972424e4d8dcfb3e07d11d12fbc/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1439486550","full_name":"packing-box/binstat","url":"https://github.com/packing-box/binstat","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"detection-only","reason_en":"BinStat classifies PE and ELF executables as packed or unpacked; its stated purpose is detection rather than analysis of their code or behaviour.","reason_zh":"BinStat 对 PE 和 ELF 可执行文件进行加壳判定，文档所述功能是检测，并非分析程序代码或行为。","evidence_url":"https://github.com/packing-box/binstat/blob/86adb6c8310cfe1f36b2bf43cfc70cf51960c79d/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1439570577","full_name":"Stiven-Gjekaj/DLGEPlayer","url":"https://github.com/Stiven-Gjekaj/DLGEPlayer","batch_id":"run-42110758337-1","decision":"hold","reason_code":"linking-policy","reason_en":"DLGE Player reconstructs the games from a user's dump, but the repository lists assets/patch/en.dlpatch and says the English translation patch ships with the player; linking needs a maintainer decision.","reason_zh":"DLGE Player 从用户的游戏转储重建运行环境，但仓库列有 assets/patch/en.dlpatch，文档也称随播放器提供英文补丁；是否收录需维护者裁定。","evidence_url":"https://github.com/Stiven-Gjekaj/DLGEPlayer/blob/aa512a4b7f4a9a5e089759ba4093cfd30a698513/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1439571717","full_name":"qingyuanLee/mcp_create.skills","url":"https://github.com/qingyuanLee/mcp_create.skills","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"development-tool","reason_en":"mcp_create.skills is a general procedure and template set for building MCP servers; private-interface reconnaissance is one possible step, not its primary subject.","reason_zh":"mcp_create.skills 主要是构建 MCP 服务的通用流程与模板，私有接口侦察只是其中一种可选步骤。","evidence_url":"https://github.com/qingyuanLee/mcp_create.skills/blob/e19239e18138ea2ea6b5b92b38bc4771ff4c0115/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1439632126","full_name":"therudywolf/MS4X","url":"https://github.com/therudywolf/MS4X","batch_id":"run-42110758337-1","decision":"curated","curated_id":"ms4x"},{"id":"scan-1439659530","full_name":"berobloom/redcat-rrr-re","url":"https://github.com/berobloom/redcat-rrr-re","batch_id":"run-42110758337-1","decision":"hold","reason_code":"linking-policy","reason_en":"The DOS-game reconstruction is substantive, but the repository includes the original game's box-cover image, which the source attributes to MobyGames.","reason_zh":"这项 DOS 游戏重建有实质研究和代码，但仓库收录了原游戏盒封图，文档注明其取自 MobyGames，需由维护者判断收录政策。","evidence_url":"https://github.com/berobloom/redcat-rrr-re/blob/4549ef596ff12a42683dba2dfee7e1b9ec7ca709/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1439691765","full_name":"Eternal-Dash/Dashfile_Manager","url":"https://github.com/Eternal-Dash/Dashfile_Manager","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"general-application","reason_en":"DashFile is primarily an ADB-based Android device manager; its file viewers and AVB plugin support device management rather than a documented RE investigation.","reason_zh":"DashFile 主要通过 ADB 管理 Android 设备；文件查看器和 AVB 插件服务于设备操作，未构成有文档支撑的逆向研究。","evidence_url":"https://github.com/Eternal-Dash/Dashfile_Manager/blob/6dfe543076678587481403c280517c5774cec6b3/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1439692800","full_name":"rylaix/LYCOREIA","url":"https://github.com/rylaix/LYCOREIA","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"game-mod-no-re","reason_en":"Lycoreia primarily delivers a Slime Rancher 2 multiplayer mod; its game-behavior notes support fixes but do not make reverse engineering the project's main subject.","reason_zh":"Lycoreia 的主体是《Slime Rancher 2》多人联机模组；游戏行为笔记服务于模组修复，逆向分析并非项目主旨。","evidence_url":"https://github.com/rylaix/LYCOREIA/blob/da9af649b2d4f10a41bb6d4fc9c9ebfc4756249a/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1439698820","full_name":"igor3dprint-bit/IgorSurface","url":"https://github.com/igor3dprint-bit/IgorSurface","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"unrelated","reason_en":"IgorSurface converts 3D scans and meshes into editable CAD geometry; its use of reverse engineering concerns physical shape recovery.","reason_zh":"IgorSurface 将 3D 扫描和网格转换为可编辑 CAD 几何体，这里的逆向工程指实物形状复原。","evidence_url":"https://github.com/igor3dprint-bit/IgorSurface/blob/a2b56b96c43caef58a7e9f20aa7c72b219ae47f6/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1439764525","full_name":"l3r8yJ/eglot-jar-decompile","url":"https://github.com/l3r8yJ/eglot-jar-decompile","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"development-tool","reason_en":"The Emacs mode turns language-server jar links into readable dependency source by extracting entries or invoking existing decompilers; its purpose is editor navigation.","reason_zh":"该 Emacs 模式把语言服务器返回的 jar 链接转为可读的依赖源码，通过提取文件或调用现有反编译器实现编辑器跳转。","evidence_url":"https://github.com/l3r8yJ/eglot-jar-decompile/blob/686cb5fc5fa698e6f7eb3b98412561bd54e47129/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1439786673","full_name":"LeonKaarneem/hardtruck-mod-sdk","url":"https://github.com/LeonKaarneem/hardtruck-mod-sdk","batch_id":"run-42110758337-1","decision":"exclude","reason_code":"game-mod-no-re","reason_en":"Hard Truck Mod SDK supplies a modpack and PE patching workflow for 18 Wheels of Steel: Hard Truck, but its documentation does not present an analysis or reconstruction of the game.","reason_zh":"Hard Truck Mod SDK 提供《18 Wheels of Steel: Hard Truck》的模组包与 PE 补丁流程，但文档没有呈现对游戏的分析或重建。","evidence_url":"https://github.com/LeonKaarneem/hardtruck-mod-sdk/blob/c7bdbdbda63fd8e27bde87261c6e33047329d04f/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1439902537","full_name":"circerio/XC2-Recomp","url":"https://github.com/circerio/XC2-Recomp","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"no-real-content","reason_en":"XC2-Recomp claims a native recompilation, but its public tree contains only documentation and images, with no implementation or target analysis findings.","reason_zh":"XC2-Recomp 声称已完成原生重编译，但公开仓库只有说明和图片，没有实现代码或针对游戏的分析成果。","evidence_url":"https://github.com/circerio/XC2-Recomp/blob/8e4fc1ccac84ca69e749cc7c27dd9bd3b2ebc1c3/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1439909635","full_name":"detect-it-easy-software/detect-it-easy","url":"https://github.com/detect-it-easy-software/detect-it-easy","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"fork-or-mirror","reason_en":"The repository presents itself as Detect It Easy, but its listed Python tree is floss and its packaging and changelog identify pefile and pe-parse, indicating copied upstream projects.","reason_zh":"该仓库自称 Detect It Easy，但文件树是 floss，附带的打包配置和更新记录又分别指向 pefile 与 pe-parse，显示其内容来自其他项目。","evidence_url":"https://github.com/detect-it-easy-software/detect-it-easy/blob/623e643ed19539439fd41cf8c6fde975158e35e2/pyproject.toml","reviewed_at":"2026-11-06"},{"id":"scan-1439945018","full_name":"bipinkrish/sf2recomp","url":"https://github.com/bipinkrish/sf2recomp","batch_id":"run-42119584443-1","decision":"curated","curated_id":"sf2recomp-case"},{"id":"scan-1439954010","full_name":"dnspyex-debugger/dnspyex-net-decompiler","url":"https://github.com/dnspyex-debugger/dnspyex-net-decompiler","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"fork-or-mirror","reason_en":"The repository presents ILSpy's ICSharpCode.Decompiler source as a Dnspyex component; its file tree and license identify the upstream ILSpy decompiler team.","reason_zh":"仓库将 ILSpy 的 ICSharpCode.Decompiler 源码包装为 Dnspyex 组件；目录结构和许可证均指向原始 ILSpy 项目。","evidence_url":"https://github.com/dnspyex-debugger/dnspyex-net-decompiler/blob/493b8b895b9a2cf6114b52bfed7e560c42935c60/LICENSE","reviewed_at":"2026-11-06"},{"id":"scan-1439980423","full_name":"Visual-Customization-Tools/vct-core-libs","url":"https://github.com/Visual-Customization-Tools/vct-core-libs","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"no-real-content","reason_en":"VCT Core Libraries describes C++ modules and a CMake build, but the repository file list contains only a README, license and gitignore.","reason_zh":"VCT Core Libraries 声称包含 C++ 模块和 CMake 构建，但文件列表仅有 README、许可证及 gitignore。","evidence_url":"https://github.com/Visual-Customization-Tools/vct-core-libs/blob/16fc66b9e98a1462563297be56a34b68f7cf7a21/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1439984035","full_name":"Visual-Customization-Tools/vct-docs","url":"https://github.com/Visual-Customization-Tools/vct-docs","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"no-real-content","reason_en":"vct-docs advertises reverse-engineering notes and API references under docs/, but its file list contains only the README, LICENSE and .gitignore.","reason_zh":"vct-docs 宣称 docs/ 下有逆向笔记和 API 参考，但文件清单只有 README、LICENSE 和 .gitignore。","evidence_url":"https://github.com/Visual-Customization-Tools/vct-docs/blob/a01e35bae206c97d6c349473950b9c42f8f570d4/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1440062737","full_name":"Adolini1715/Concrete-Jungle-Decomp","url":"https://github.com/Adolini1715/Concrete-Jungle-Decomp","batch_id":"run-42119584443-1","decision":"hold","reason_code":"linking-policy","reason_en":"The repository commits reconstructed C++ from the commercial Xbox game and explicitly says that code carries no licence from the project, so linking needs a maintainer decision.","reason_zh":"仓库提交了商业 Xbox 游戏的重建 C++ 代码，并明确表示项目未授予这些代码的许可证，因此收录链接需维护者决定。","evidence_url":"https://github.com/Adolini1715/Concrete-Jungle-Decomp/blob/4e4ce60f11c2c074cad61f9672d17b434e71de53/NOTICE.md","reviewed_at":"2026-11-06"},{"id":"scan-1440067865","full_name":"moistman42069/RatchetAndClank-Quest-VR","url":"https://github.com/moistman42069/RatchetAndClank-Quest-VR","batch_id":"run-42119584443-1","decision":"exclude","reason_code":"game-mod-no-re","reason_en":"The Quest VR port rebuilds Rerac-vr features on OpenRAC's existing game port; its source credits those projects for the game knowledge and documents no original analysis.","reason_zh":"这款 Quest VR 移植版基于 OpenRAC 的现有游戏移植重做 Rerac-vr 功能，文档将游戏知识归功于上游项目，未记录自身的原始逆向分析。","evidence_url":"https://github.com/moistman42069/RatchetAndClank-Quest-VR/blob/13c1a0bc86406daa68f4dcbe8b95f0cbe7d8767e/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1440100236","full_name":"Soptik1290/Hasselblad-X1D-50c-Firmware-Toolkit","url":"https://github.com/Soptik1290/Hasselblad-X1D-50c-Firmware-Toolkit","batch_id":"run-42119584443-1","decision":"hold","reason_code":"linking-policy","reason_en":"The firmware toolkit includes extracted victory-gui QML, JavaScript, PNG assets, and original camera fonts from commercial firmware, requiring a maintainer decision before linking.","reason_zh":"该固件工具包收录了从商业相机固件提取的 victory-gui QML、JavaScript、PNG 资源及原始字体，收录链接需由维护者决定。","evidence_url":"https://github.com/Soptik1290/Hasselblad-X1D-50c-Firmware-Toolkit/blob/481a1e441efe6d84ecc83f26c8e5b3c03ea91a07/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1440129136","full_name":"JeanxPereira/Roadie","url":"https://github.com/JeanxPereira/Roadie","batch_id":"run-42119584443-1","decision":"hold","reason_code":"linking-policy","reason_en":"Roadie has substantial game-format analysis and decoders, but its source says committed README artwork uses Brütal Legend fonts and emblems, requiring a maintainer decision.","reason_zh":"Roadie 有详实的游戏格式分析和解码器，但材料说明仓库提交的 README 插图使用了《Brütal Legend》的字体与徽记，需由维护者判断。","evidence_url":"https://github.com/JeanxPereira/Roadie/blob/ed18f8b92ab27a1cdfd4fc65ad096a6059480aba/CLAUDE.md","reviewed_at":"2026-11-06"},{"id":"scan-1440177501","full_name":"nited-ai/Xiaomi-Smart-Cooking-Robot","url":"https://github.com/nited-ai/Xiaomi-Smart-Cooking-Robot","batch_id":"run-42161587295-1","decision":"hold","reason_code":"needs-maintainer-decision","reason_en":"The reconstructed UART controller can command a cooking appliance’s motor and heater, while the author reports limited physical validation; this control scope needs a maintainer decision.","reason_zh":"重建的 UART 控制器可向料理机电机和加热器发出指令，但作者说明实体测试范围有限；是否收录这类实体控制项目需维护者决定。","evidence_url":"https://github.com/nited-ai/Xiaomi-Smart-Cooking-Robot/blob/c2e3758625fa2efb295245006a86c0f9c4d6640c/docs/ARCHITECTURE.md","reviewed_at":"2026-11-06"},{"id":"scan-1440204924","full_name":"suffixing/apkscope","url":"https://github.com/suffixing/apkscope","batch_id":"run-42161587295-1","decision":"curated","curated_id":"apkscope"},{"id":"scan-1440273719","full_name":"junkx420/RecompHub","url":"https://github.com/junkx420/RecompHub","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"general-application","reason_en":"RecompHub installs, updates and launches other projects’ game ports; it does not itself analyze or reconstruct games.","reason_zh":"RecompHub 用于安装、更新和启动其他项目的游戏移植版，本身不分析或重建游戏。","evidence_url":"https://github.com/junkx420/RecompHub/blob/3718aa21e32f612bb5ca7c2970fd3c6da4527ac8/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1440276866","full_name":"skyehosting/PeopleOfNivalis","url":"https://github.com/skyehosting/PeopleOfNivalis","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"game-mod-no-re","reason_en":"People of Nivalis adds AI conversations, memories and voices to Nivalis Nights, while its documentation presents no reverse-engineering work.","reason_zh":"People of Nivalis 为 Nivalis Nights 增加智能体对话、记忆和语音功能，文档没有记录逆向分析工作。","evidence_url":"https://github.com/skyehosting/PeopleOfNivalis/blob/589012188b743bdf17a883733f69ea31015d402c/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1440279624","full_name":"RetrolariumLab/sonic1_src","url":"https://github.com/RetrolariumLab/sonic1_src","batch_id":"run-42161587295-1","decision":"hold","reason_code":"linking-policy","reason_en":"The fork commits hundreds of assembly files from Sonic Retro's commercial-game disassembly; its imported executable source needs a maintainer linking decision.","reason_zh":"该分支提交了大量源自 Sonic Retro 商业游戏反汇编的汇编文件；是否收录这些导入的游戏程序源码须由维护者决定。","evidence_url":"https://github.com/RetrolariumLab/sonic1_src/blob/5bc633c9904f7a21c4a9703a380b77d9da667674/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1440290961","full_name":"ilyaeis/crypto-quant-lab","url":"https://github.com/ilyaeis/crypto-quant-lab","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"general-application","reason_en":"Crypto Quant Lab's primary subject is cryptocurrency trading backtests; the bytecode recovery explains the provenance of its script rather than forming its main work.","reason_zh":"Crypto Quant Lab 的主体是加密货币交易策略回测；字节码恢复只是解释脚本来源，并非项目的主要研究内容。","evidence_url":"https://github.com/ilyaeis/crypto-quant-lab/blob/1ff93aa2cafdf8419f732c1e5b22a9b9239d65bd/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1440309628","full_name":"slavich33/songs-of-conquest-native-ios-tools","url":"https://github.com/slavich33/songs-of-conquest-native-ios-tools","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"development-tool","reason_en":"The published files repair and compile a locally supplied Unity project for iOS; the README provides no reverse-engineering findings from Songs of Conquest.","reason_zh":"公开文件用于修复和编译本地提供的 Unity 工程以适配 iOS；文档没有给出对 Songs of Conquest 的逆向分析成果。","evidence_url":"https://github.com/slavich33/songs-of-conquest-native-ios-tools/blob/47cc6f7a812a72f6d26509ff0ad1cb15bb0b8102/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1440310764","full_name":"niklasmarderx/revscope","url":"https://github.com/niklasmarderx/revscope","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"general-application","reason_en":"revscope is a browser dashboard around Ghidra's existing headless analysis, displaying exported decompilation and graphs without documenting a new analysis method.","reason_zh":"revscope 是围绕现有 Ghidra 无头分析结果的浏览器面板，展示反编译与调用图，没有记录新的分析方法。","evidence_url":"https://github.com/niklasmarderx/revscope/blob/9785bab87164ac70d1be276eb40bac26deaa8e14/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1440313898","full_name":"slavich33/native-game-ports","url":"https://github.com/slavich33/native-game-ports","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"personal-profile","reason_en":"This single-README repository is a directory of the owner's six game-port repositories and project boards, without its own code, investigation or findings.","reason_zh":"该仓库只有一份 README，用来索引作者的六个游戏移植仓库和项目看板，本身没有代码、调查记录或研究结果。","evidence_url":"https://github.com/slavich33/native-game-ports/blob/53f1d403f084613d01cb8e794888a20f069fc011/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1440329873","full_name":"0xd34db8/LF2-decomp","url":"https://github.com/0xd34db8/LF2-decomp","batch_id":"run-42161587295-1","decision":"hold","reason_code":"linking-policy","reason_en":"LF2-decomp commits raw Ghidra output and PE resources extracted from Little Fighter 2, including bitmap assets, requiring a maintainer decision on linking.","reason_zh":"LF2-decomp 提交了从 Little Fighter 2 提取的 Ghidra 原始输出和 PE 资源，其中含位图素材，是否收录需维护者决定。","evidence_url":"https://github.com/0xd34db8/LF2-decomp/blob/45da2caa30a3899374066285107c4034f7e74fc7/decompiled/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1440343003","full_name":"daniel-madrid-07/weeping-of-the-empire","url":"https://github.com/daniel-madrid-07/weeping-of-the-empire","batch_id":"run-42161587295-1","decision":"curated","curated_id":"weeping-of-the-empire-case"},{"id":"scan-1440353260","full_name":"skyehosting/NivalisSwitchboard","url":"https://github.com/skyehosting/NivalisSwitchboard","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"game-mod-no-re","reason_en":"Nivalis Switchboard is a BepInEx settings menu for Nivalis Nights mods, and its documentation describes configuration UI behavior without reverse-engineering findings.","reason_zh":"Nivalis Switchboard 是供 Nivalis Nights 模组使用的 BepInEx 设置菜单；文档只说明配置界面功能，没有逆向分析成果。","evidence_url":"https://github.com/skyehosting/NivalisSwitchboard/blob/a059c8e0c65d6dc28e7b1ab0c8b60746717c60b1/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1440359815","full_name":"burnsjakeb441/decompiling-expertise","url":"https://github.com/burnsjakeb441/decompiling-expertise","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"no-real-content","reason_en":"The study is still in lab setup and C foundations; its proposed atlas, extractor, reports and research are represented by placeholder directories rather than findings.","reason_zh":"项目仍处于实验环境搭建和 C 语言基础阶段；规划中的图谱、提取器、报告与研究目前只有占位目录。","evidence_url":"https://github.com/burnsjakeb441/decompiling-expertise/blob/327894273133f956572a573fcf949e600a12d73b/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1440404042","full_name":"wsuits6/p3-register-lab","url":"https://github.com/wsuits6/p3-register-lab","batch_id":"run-42161587295-1","decision":"hold","reason_code":"insufficient-docs","reason_en":"The repository contains a C source file, but its README is a TODO and supplies no explanation of the lab's analysis or use.","reason_zh":"仓库虽有 C 源文件，但 README 仍是待写占位内容，没有解释实验的分析方法或用法。","evidence_url":"https://github.com/wsuits6/p3-register-lab/blob/504b8d21fc168d257698dca7d0cc7e1499bb9f8c/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1440404198","full_name":"wsuits6/p4-call-return-lab","url":"https://github.com/wsuits6/p4-call-return-lab","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"no-real-content","reason_en":"The README is a TODO placeholder and the source, binary, notes and GDB-session directories contain only .gitkeep files.","reason_zh":"README 仍是待填写模板，源码、二进制、笔记和 GDB 会话目录也只有 .gitkeep 占位文件。","evidence_url":"https://github.com/wsuits6/p4-call-return-lab/blob/9857891b737d85f9dbac4a29dac3f07a3d772a0d/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1440404304","full_name":"wsuits6/p5-elf-lab","url":"https://github.com/wsuits6/p5-elf-lab","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"no-real-content","reason_en":"The README is a TODO, and the file list shows no analysis or findings; the C file alone does not establish a completed ELF lab.","reason_zh":"README 仍是待填写的占位文本，文件清单也没有分析成果；仅有一份 C 文件不足以构成 ELF 分析实验。","evidence_url":"https://github.com/wsuits6/p5-elf-lab/blob/e2e0cf37424dae51e444d195ee2c094756f3da35/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1440404435","full_name":"wsuits6/p6-mini-binary-inspector","url":"https://github.com/wsuits6/p6-mini-binary-inspector","batch_id":"run-42161587295-1","decision":"hold","reason_code":"insufficient-docs","reason_en":"A Python ELF inspector file exists, but the README is a TODO and does not explain its implemented inspection or usage.","reason_zh":"仓库有 Python ELF 检查脚本，但 README 仍是待写占位文本，未说明实际检查内容或用法。","evidence_url":"https://github.com/wsuits6/p6-mini-binary-inspector/blob/2ad80cc7735e65d88f7f20dae281e13cf6d8144e/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1440404580","full_name":"wsuits6/phase2-lab","url":"https://github.com/wsuits6/phase2-lab","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"general-programming-tutorial","reason_en":"The repository contains introductory registers, stack, ELF and syscall labs, while its README remains a placeholder without a reverse-engineering investigation.","reason_zh":"仓库主要是寄存器、栈、ELF 和系统调用入门练习，README 仍为占位文本，也未呈现逆向分析案例。","evidence_url":"https://github.com/wsuits6/phase2-lab/blob/b76dff669030ecc164644a61e1c670a83957634d/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1440406418","full_name":"guodongshang91-beep/ReverseKit","url":"https://github.com/guodongshang91-beep/ReverseKit","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"ReverseKit's integrated workflow centers on penetration testing and includes a PE module for locating and patching software licence checks.","reason_zh":"ReverseKit 的整体流程以渗透测试为主，并包含定位、修改软件授权校验的 PE 模块。","evidence_url":"https://github.com/guodongshang91-beep/ReverseKit/blob/a3c0faf969706ff4b3a6e54d74db33f6483836e0/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1440470441","full_name":"dankezo/antiRea","url":"https://github.com/dankezo/antiRea","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"protection-tool","reason_en":"antiRea provides server quotas, bot detection, canaries and watermarks to limit web-app extraction; its REA benchmark evaluates defensive controls.","reason_zh":"antiRea 提供服务器配额、机器人检测、诱饵和水印来限制网页数据提取；其 REA 基准测试用于评估防护措施。","evidence_url":"https://github.com/dankezo/antiRea/blob/fe045788090ca87e455786864c56b5097abaf285/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1440508635","full_name":"F4zzz/reversing-my-lg-tv","url":"https://github.com/F4zzz/reversing-my-lg-tv","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"general-application","reason_en":"The repository's main deliverables are TV rooting, privacy-blocking and ad-free YouTube guides; its findings support those procedures rather than form a focused RE resource.","reason_zh":"仓库主要提供电视 root、隐私屏蔽和免广告 YouTube 操作指南；分析记录用于支撑这些操作，并非独立的逆向资源。","evidence_url":"https://github.com/F4zzz/reversing-my-lg-tv/blob/a7b02c95909640f903074b21301074f8bfe2e816/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1440535263","full_name":"guysherman/tascam-us-2x2-4x4-control","url":"https://github.com/guysherman/tascam-us-2x2-4x4-control","batch_id":"run-42161587295-1","decision":"hold","reason_code":"linking-policy","reason_en":"The TASCAM USB protocol study is in scope, but the repository states that it commits an icon taken from the original proprietary application.","reason_zh":"TASCAM USB 协议研究符合主题，但项目说明仓库提交了原厂专有应用的图标，需要维护者裁定。","evidence_url":"https://github.com/guysherman/tascam-us-2x2-4x4-control/blob/af37cbc6b33037893aa78bf048731312d7222117/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1440607808","full_name":"dekkaaa9/pb-loader-toolkit","url":"https://github.com/dekkaaa9/pb-loader-toolkit","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The repository's stated purpose is a Point Blank ESP cheat with anti-cheat and paid-loader bypasses, supported by crack scripts and patched binaries.","reason_zh":"仓库明确用于 Point Blank 透视作弊，并绕过反作弊和付费加载器限制；其中还包含破解脚本与修改后的二进制文件。","evidence_url":"https://github.com/dekkaaa9/pb-loader-toolkit/blob/3210503285da7bce480fa6d3b9063899ec6dba7c/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1440620507","full_name":"SatanMerde/Morphy-Patches-Creator","url":"https://github.com/SatanMerde/Morphy-Patches-Creator","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"Although it names REA and Apktool integrations, the workbench centers on generating Android patches for subscription and entitlement bypasses.","reason_zh":"虽然仓库介绍了 REA 和 Apktool 集成，但其核心用途是生成绕过订阅及权益检查的 Android 补丁。","evidence_url":"https://github.com/SatanMerde/Morphy-Patches-Creator/blob/d05ec15a72d74ef970ba4f516d0cf28b36e3ecf7/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1440628296","full_name":"Prashithshetty/openrash-linux","url":"https://github.com/Prashithshetty/openrash-linux","batch_id":"run-42161587295-1","decision":"hold","reason_code":"linking-policy","reason_en":"OpenRash packages a third party's reconstructed Road Rash web engine together with original game art, soundtracks and FMV files, requiring a maintainer linking decision.","reason_zh":"OpenRash 打包了第三方重建的《Road Rash》网页引擎，还收录原版游戏美术、授权音乐和过场视频，需要维护者决定是否收录。","evidence_url":"https://github.com/Prashithshetty/openrash-linux/blob/720538a6b14770266de236144c3e4baa10129185/NOTICE.md","reviewed_at":"2026-11-06"},{"id":"scan-1440715091","full_name":"GLZ-gaoxiaoling/MoondropMirageHarmony","url":"https://github.com/GLZ-gaoxiaoling/MoondropMirageHarmony","batch_id":"run-42161587295-1","decision":"hold","reason_code":"linking-policy","reason_en":"MirageHarmony documents an earbud protocol and client, but PROTOCOL.md says it includes verbatim decompiled text from the commercial Android APK.","reason_zh":"MirageHarmony 记录耳机协议并实现客户端，但 PROTOCOL.md 表明其中含商业 Android APK 的反编译原文摘录，需审核。","evidence_url":"https://github.com/GLZ-gaoxiaoling/MoondropMirageHarmony/blob/c551fa154a0238d09338cce85b36d02a549a1037/PROTOCOL.md","reviewed_at":"2026-11-06"},{"id":"scan-1440737653","full_name":"c1t1zen1/MPC-Sample-Secrets","url":"https://github.com/c1t1zen1/MPC-Sample-Secrets","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"unrelated","reason_en":"MPC Sample Secrets is primarily a user guide to the Akai sampler's controls, shortcuts, settings, and effects; its hardware research page is ancillary.","reason_zh":"MPC Sample Secrets 主要是 Akai 采样器的按键、快捷操作、设置和效果器使用指南；硬件研究仅占其中一页。","evidence_url":"https://github.com/c1t1zen1/MPC-Sample-Secrets/blob/6c541e06901a527ba60ad8d552a31a2a59d6593c/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1440746193","full_name":"Finn763/KA13tool","url":"https://github.com/Finn763/KA13tool","batch_id":"run-42161587295-1","decision":"hold","reason_code":"linking-policy","reason_en":"KA13tool documents APK decompilation and a substantial HID client, but it also ships impulse-response images described as lifted from the vendor APK.","reason_zh":"KA13tool 记录了 APK 反编译及 HID 客户端实现，但仓库也收录了自称从厂商 APK 提取的脉冲响应图，需审核收录政策。","evidence_url":"https://github.com/Finn763/KA13tool/blob/d7a426ad6cb3a5bf1194fae97cc9a59fb3e5ba4a/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1440746477","full_name":"4B2A/codex-ghidra-headless","url":"https://github.com/4B2A/codex-ghidra-headless","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"no-real-content","reason_en":"The package consists of agent instructions and references for invoking an existing Ghidra command; it contains no RE-specific implementation, target findings or analysis output of its own.","reason_zh":"该包只有指导智能体调用现有 Ghidra 命令的说明和参考资料，没有自身的逆向实现、目标分析发现或分析产物。","evidence_url":"https://github.com/4B2A/codex-ghidra-headless/blob/5d66f271d318d1891a3349382bf1725f07895b2f/SKILL.md","reviewed_at":"2026-11-06"},{"id":"scan-1440757931","full_name":"saifullahshafin/ree","url":"https://github.com/saifullahshafin/ree","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"unrelated","reason_en":"REE measures YouTube video-editing styles and generates style packs; its stated reverse engineering concerns editing technique rather than software or protocols.","reason_zh":"REE 测量 YouTube 视频的剪辑风格并生成风格包；这里的“逆向”对象是剪辑手法，不是软件或协议。","evidence_url":"https://github.com/saifullahshafin/ree/blob/04f67cda41c0196cebac1e4a949ed73f24f3a5dd/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1440764442","full_name":"falorfrozen-cmd/dimraeth-wildwood-pact","url":"https://github.com/falorfrozen-cmd/dimraeth-wildwood-pact","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"Wildwood Pact is explicitly a Dimraeth cheat menu offering god mode, free purchases and skill points, with no analysis deliverable as its subject.","reason_zh":"Wildwood Pact 明确是一款 Dimraeth 作弊菜单，提供无敌、免费购买和技能点等功能，主体不是分析成果。","evidence_url":"https://github.com/falorfrozen-cmd/dimraeth-wildwood-pact/blob/8db31fd2e1ef7d4cc983a275c3cbf5d46bb39568/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1440869922","full_name":"HMAKT99/reashield","url":"https://github.com/HMAKT99/reashield","batch_id":"run-42161587295-1","decision":"exclude","reason_code":"protection-tool","reason_en":"REAShield's primary function is hardening shipped JavaScript, Electron and Python code against reverse engineering through relocation, sealing and obfuscation.","reason_zh":"REAShield 的主要功能是通过服务端迁移、加密封装和混淆保护已发布的 JavaScript、Electron 与 Python 代码，属于防逆向工具。","evidence_url":"https://github.com/HMAKT99/reashield/blob/2c2efff47326afb3aa27ad8f47d8dbc5fcdf5bfe/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1440896461","full_name":"vage88sg1/firetv-burton-activation","url":"https://github.com/vage88sg1/firetv-burton-activation","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"general-application","reason_en":"Fire TV Burton Activation primarily activates a disabled launcher interface through a device configuration patch; its workflow is not an analysis or reconstruction resource.","reason_zh":"Fire TV Burton Activation 的主要用途是修改设备配置以启用原厂启动器界面，提供的是激活与恢复流程，而非逆向分析或重建成果。","evidence_url":"https://github.com/vage88sg1/firetv-burton-activation/blob/54dca01304afba78b9b72bf56acc9dc529d7d067/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1440904719","full_name":"PeterRichardsonGolf/Halo-CE-Arena-Evolved","url":"https://github.com/PeterRichardsonGolf/Halo-CE-Arena-Evolved","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"distribution-site","reason_en":"Arena Evolved identifies this repository as its release and issue tracker; development and complete source are attached to releases rather than present in the tree.","reason_zh":"Arena Evolved 明确将此仓库用作发布和问题跟踪，开发及完整源码放在发行附件中，仓库树内没有项目源码。","evidence_url":"https://github.com/PeterRichardsonGolf/Halo-CE-Arena-Evolved/blob/dedd4c86003618e14c4a01f7aa86619787eb4512/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1440966418","full_name":"ComoEstaisAmigos/acrodea-vivid-runtime-drm","url":"https://github.com/ComoEstaisAmigos/acrodea-vivid-runtime-drm","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The VIVID Runtime project includes tools to recover content encryption keys, decrypt protected game content and forge device rights objects.","reason_zh":"VIVID Runtime 项目提供恢复内容加密密钥、解密受保护游戏内容及伪造设备权利对象的工具，属于 DRM 绕过。","evidence_url":"https://github.com/ComoEstaisAmigos/acrodea-vivid-runtime-drm/blob/2d6ad4fbcd979a81d025f189b9e9021fd5686a1c/tools/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1440970866","full_name":"foverse/site-extractor","url":"https://github.com/foverse/site-extractor","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"no-real-content","reason_en":"Site Extractor consists of instructions for an agent to crawl pages and list design tokens; it provides no RE-specific tool, target findings or implementation.","reason_zh":"Site Extractor 只有指导智能体抓取页面和整理设计变量的指令，没有专门的逆向工具、目标调查结果或实现代码。","evidence_url":"https://github.com/foverse/site-extractor/blob/3160f4666c490e23fa9befedb7a511bf39e20687/SKILL.md","reviewed_at":"2026-11-06"},{"id":"scan-1441041295","full_name":"oshuke/mymg","url":"https://github.com/oshuke/mymg","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"general-application","reason_en":"MYMG is a Flutter and Rust vehicle-control client whose private protocol values must be supplied by users; it publishes no reconstructed vendor protocol or analysis findings.","reason_zh":"MYMG 是 Flutter 与 Rust 编写的车控客户端，私有协议参数需用户自行填写；仓库未公布厂商协议重建结果或分析发现。","evidence_url":"https://github.com/oshuke/mymg/blob/eb94df6df75f49b9d22bcd0fed892546e44e3af1/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1441086158","full_name":"sheikhmehraann/X6871-iOS-Port","url":"https://github.com/sheikhmehraann/X6871-iOS-Port","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The iOS port explicitly injects an iCloud Activation Assistant bypass and disables code-signing enforcement as part of its deployment path.","reason_zh":"该 iOS 移植项目在部署流程中明确加入 iCloud 激活向导绕过和代码签名强制检查关闭功能。","evidence_url":"https://github.com/sheikhmehraann/X6871-iOS-Port/blob/2f363a9d45c96b86bb5bfff7d15ba58d76380938/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1441105716","full_name":"AdityaUmale/rea-brand","url":"https://github.com/AdityaUmale/rea-brand","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"unrelated","reason_en":"The skill studies creators' social-media growth and marketing tactics; its use of “reverse engineer” refers to personal-brand analysis.","reason_zh":"该技能分析创作者在社交平台上的增长和营销做法，“逆向工程”在此指个人品牌拆解。","evidence_url":"https://github.com/AdityaUmale/rea-brand/blob/add69c1929b4ff6edcd650a9a443db193121e337/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1441122706","full_name":"senolbasyigit/anticheat-lab","url":"https://github.com/senolbasyigit/anticheat-lab","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"security-testing","reason_en":"anticheat-lab scans a developer's own game memory for tamperable values and proposes defenses; its main function is security testing, with no documented code or format reconstruction.","reason_zh":"anticheat-lab 扫描开发者自有游戏进程中的可篡改数值并提出防护建议，主要用于安全测试，没有记录代码或格式重建。","evidence_url":"https://github.com/senolbasyigit/anticheat-lab/blob/f4fdc8ec759560e494801700d294e843898f2225/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1441124748","full_name":"TweenzY-Y/Commandos2-ModernPatch","url":"https://github.com/TweenzY-Y/Commandos2-ModernPatch","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"game-mod-no-re","reason_en":"Commandos2-ModernPatch changes rendering, resolution and bugs through runtime hooks, but its published subject is a gameplay patch rather than reverse-engineering analysis.","reason_zh":"Commandos2-ModernPatch 通过运行时钩子改善帧率、分辨率和游戏故障，仓库主体是补丁而非逆向分析成果。","evidence_url":"https://github.com/TweenzY-Y/Commandos2-ModernPatch/blob/470385347a4105e525f716321cae8be80230bcd2/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1441126029","full_name":"hyl320/AI_Edge","url":"https://github.com/hyl320/AI_Edge","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"no-real-content","reason_en":"AI_Edge is a general agent feasibility skill; its King of Fighters example is an investigation plan without ROM artifacts, reproducible traces, or findings.","reason_zh":"AI_Edge 是通用的智能体可行性评估技能；拳皇示例仅提出调查步骤，没有 ROM 实物、可复现记录或逆向发现。","evidence_url":"https://github.com/hyl320/AI_Edge/blob/e1b2de970b64e30a4551dc6f897553ed1bf43400/references/kof97-rom.md","reviewed_at":"2026-11-06"},{"id":"scan-1441156989","full_name":"SQU4NCH/ios-pentest-setup","url":"https://github.com/SQU4NCH/ios-pentest-setup","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"general-security","reason_en":"ios-pentest-setup provisions jailbroken iPhones and host machines with existing pentest tools and USB tunnels; it provides no original reverse-engineering analysis.","reason_zh":"ios-pentest-setup 为越狱 iPhone 和电脑安装现有渗透测试工具及 USB 隧道，没有提供独立逆向分析成果。","evidence_url":"https://github.com/SQU4NCH/ios-pentest-setup/blob/1b73afe08f2a60fcf22b247e66b055dc8bf16d03/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1441182696","full_name":"Melvin2306/hy310-projector-evidence","url":"https://github.com/Melvin2306/hy310-projector-evidence","batch_id":"run-42201075883-1","decision":"hold","reason_code":"linking-policy","reason_en":"The HY310 research includes substantial traffic and APK analysis, but the repository also commits hundreds of decompiled vendor Java files.","reason_zh":"HY310 项目有完整的流量和 APK 分析，但仓库同时提交了数百个由厂商应用反编译得到的 Java 文件，需要处理转载政策问题。","evidence_url":"https://github.com/Melvin2306/hy310-projector-evidence/blob/c9c719d58d87487b6e5e97c139330d9d6af1e8fb/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1441193885","full_name":"Roshaan291/dvd-mavlink-injection","url":"https://github.com/Roshaan291/dvd-mavlink-injection","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"general-security","reason_en":"DVD MAVLink Injection primarily demonstrates an unauthenticated flight-mode attack in a vulnerable drone lab; binary inspection supports that security finding.","reason_zh":"DVD MAVLink Injection 主要展示在脆弱无人机实验环境中未经认证地切换飞行模式；二进制分析用于解释该安全问题。","evidence_url":"https://github.com/Roshaan291/dvd-mavlink-injection/blob/63967224760c195762dfd0aefa54020df9e430e5/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1441200960","full_name":"Drujnv/MKS","url":"https://github.com/Drujnv/MKS","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"unrelated","reason_en":"MKS presents itself primarily as a research laboratory for a book on consciousness, sleep and environment; its sensor-protocol work is a supporting activity.","reason_zh":"MKS 的主体是围绕意识、睡眠与环境主题书籍开展的研究实验室，传感器协议研究服务于该主题。","evidence_url":"https://github.com/Drujnv/MKS/blob/60a959decda41f0a534898b2e574429ca297d307/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1441223280","full_name":"Fanxingkeming/p1-studio","url":"https://github.com/Fanxingkeming/p1-studio","batch_id":"run-42201075883-1","decision":"hold","reason_code":"linking-policy","reason_en":"p1-studio documents an independently tested mouse protocol, but the repository also commits manufacturer-owned product images that require a linking decision.","reason_zh":"p1-studio 记录了经设备测试的鼠标协议，但仓库同时提交了厂商拥有版权的产品图片，需要维护者判断收录政策。","evidence_url":"https://github.com/Fanxingkeming/p1-studio/blob/6a71fc57d890af4c4bd63e75aa3cdb63e0839fe6/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1441234998","full_name":"gnacho/wibox-android","url":"https://github.com/gnacho/wibox-android","batch_id":"run-42201075883-1","decision":"hold","reason_code":"linking-policy","reason_en":"Wibox Kotlin documents APK and protocol analysis, but the tree commits many resources extracted from the factory APK, including interface images and XML files.","reason_zh":"Wibox Kotlin 记录了 APK 和协议分析，但仓库提交了大量从原厂 APK 提取的图片及 XML 资源，需维护者判断。","evidence_url":"https://github.com/gnacho/wibox-android/blob/77b793cde60b22a4f38abd631e55000f9c78276e/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1441240435","full_name":"Jbsco/sls-scan","url":"https://github.com/Jbsco/sls-scan","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"unrelated","reason_en":"sls-scan measures physical objects with structured light and reconstructs CAD meshes; it does not investigate software, firmware or device behavior.","reason_zh":"sls-scan 用结构光测量实物并生成 CAD 网格，研究对象是几何形状，而非软件、固件或设备行为。","evidence_url":"https://github.com/Jbsco/sls-scan/blob/2e7b9dc8db2f1c12993a07ae275817e8234b3abc/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1441250851","full_name":"Marukooh/Camp-Funds-Withdraw","url":"https://github.com/Marukooh/Camp-Funds-Withdraw","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"game-mod-no-re","reason_en":"Withdraw Camp Funds is a Crimson Desert gameplay mod; its documentation explains installation and in-game behavior but does not document original reverse-engineering findings.","reason_zh":"Withdraw Camp Funds 是 Crimson Desert 的玩法模组，文档介绍安装和游戏内功能，没有记录自身的逆向分析成果。","evidence_url":"https://github.com/Marukooh/Camp-Funds-Withdraw/blob/788fe6acd1aa763f3947e333134697facaddb729/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1441275924","full_name":"Satoheii/PaoPao-Better-Farming","url":"https://github.com/Satoheii/PaoPao-Better-Farming","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"game-mod-no-re","reason_en":"Better Farming changes PAO PAO farming timings through a BepInEx IL2CPP plugin and documents installation and configuration, but no reverse-engineering work.","reason_zh":"Better Farming 通过 BepInEx IL2CPP 插件调整 PAO PAO 的农作操作节奏，文档只涉及安装与配置，没有逆向分析内容。","evidence_url":"https://github.com/Satoheii/PaoPao-Better-Farming/blob/f6908099c4c2a161648a329247588ce0d05226d6/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1441276142","full_name":"Satoheii/PaoPao-Overcooked-Style-Movement","url":"https://github.com/Satoheii/PaoPao-Overcooked-Style-Movement","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"game-mod-no-re","reason_en":"Overcooked-Style Movement changes PAO PAO turning and dashing through a BepInEx plugin, without documenting an investigation of the game's implementation.","reason_zh":"Overcooked-Style Movement 通过 BepInEx 插件调整 PAO PAO 的转向和冲刺，未记录对游戏实现的逆向分析。","evidence_url":"https://github.com/Satoheii/PaoPao-Overcooked-Style-Movement/blob/5343dcca9e2c4d280b777fd726ef052132b81e91/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1441285867","full_name":"dodoflix/moon-sweepers-qol","url":"https://github.com/dodoflix/moon-sweepers-qol","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"game-mod-no-re","reason_en":"Moon Sweepers QoL primarily adds purchasable gameplay upgrades; its member-inspection notes serve plugin development rather than a reverse-engineering study.","reason_zh":"Moon Sweepers QoL 的主体是增加可购买的游戏升级；成员检查笔记用于开发插件，并非独立的逆向研究。","evidence_url":"https://github.com/dodoflix/moon-sweepers-qol/blob/998beea1f2ea8c23a502cec0d6eb0f510653bfd9/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1441311678","full_name":"InsideExploit/phoenix-ac","url":"https://github.com/InsideExploit/phoenix-ac","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"detection-only","reason_en":"phoenix-ac is a FiveM anti-cheat product with a Windows agent, backend, dashboard, and game resource; its documented work is detection and administration.","reason_zh":"phoenix-ac 是由 Windows 客户端、后端、管理面板和 FiveM 资源组成的反作弊产品，主要用于检测与管理。","evidence_url":"https://github.com/InsideExploit/phoenix-ac/blob/591bcef36674b40a9b529bcea893d567cc47efad/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1441315990","full_name":"alemigav/re2-64-decomp","url":"https://github.com/alemigav/re2-64-decomp","batch_id":"run-42201075883-1","decision":"hold","reason_code":"linking-policy","reason_en":"The Resident Evil 2 study contains extensive cartridge research and a committed corpus of recovered commercial game functions, requiring a decision on decompiled output.","reason_zh":"Resident Evil 2 项目有详实的卡带研究，也提交了大量由商业游戏恢复的函数源码，需确定反编译产物的收录政策。","evidence_url":"https://github.com/alemigav/re2-64-decomp/blob/85bb1774be396f7ade40c920d872fb509c52df8b/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1441318711","full_name":"liwwyy/soloist-cache-research","url":"https://github.com/liwwyy/soloist-cache-research","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"Soloist cache research publishes scripts to remove Spotify cache encryption and export complete encoded tracks outside the playback path.","reason_zh":"Soloist 缓存研究发布了去除 Spotify 缓存加密并在播放流程之外导出完整编码曲目的脚本，属于内容保护绕过。","evidence_url":"https://github.com/liwwyy/soloist-cache-research/blob/4b569153cf423c4d4406efb3baa059456173afad/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1441328275","full_name":"Jeanorochka/cstone","url":"https://github.com/Jeanorochka/cstone","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"development-tool","reason_en":"Cstone is an assembler that converts source text to machine code; its documentation explicitly excludes disassembly and gives no reverse-engineering analysis use.","reason_zh":"Cstone 是将汇编文本转换为机器码的汇编器；文档明确说明不提供反汇编，也未描述逆向分析用途。","evidence_url":"https://github.com/Jeanorochka/cstone/blob/6c337779cce9115b95607c2d5f66378e3fdcd752/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1441337598","full_name":"lza6/ZCode-Desktop-Protocol-RE","url":"https://github.com/lza6/ZCode-Desktop-Protocol-RE","batch_id":"run-42201075883-1","decision":"hold","reason_code":"linking-policy","reason_en":"The ZCode investigation includes useful protocol findings but commits a full unpacked commercial Electron application and CLI runtime, requiring a maintainer linking decision.","reason_zh":"ZCode 调查包含协议发现，但仓库提交了完整解包的商业 Electron 应用及 CLI 运行时，需要维护者决定收录链接。","evidence_url":"https://github.com/lza6/ZCode-Desktop-Protocol-RE/blob/9075cb20d669801d5936f33555a1ea1bd89b2bca/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1441353876","full_name":"TheYellowBee/silent-hill-dualscreen","url":"https://github.com/TheYellowBee/silent-hill-dualscreen","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"distribution-site","reason_en":"The repository distributes a Silent Hill dual-screen Android mod through releases, while its tree contains documentation and images but no mod source or analysis.","reason_zh":"该仓库通过 Releases 发布《寂静岭》双屏 Android 模组，仓库树中只有说明和图片，没有模组源码或逆向分析。","evidence_url":"https://github.com/TheYellowBee/silent-hill-dualscreen/blob/194eed35a9fa3b0817735410fcf9346d01f1d9ee/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1441356815","full_name":"YiIimini/knx-agent","url":"https://github.com/YiIimini/knx-agent","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"general-application","reason_en":"knx-agent implements KNX commissioning over a documented protocol and a simulated bus; its ETS recording path has no reported proprietary-protocol reconstruction.","reason_zh":"knx-agent 实现基于 KNX 协议的设备调试，并用模拟总线测试；ETS 录制功能没有对应的私有协议还原成果。","evidence_url":"https://github.com/YiIimini/knx-agent/blob/ab3783ffd0c657d4ff7cf864c31aca792998a954/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1441373883","full_name":"pyratu/CanEmAll-MoneyMod","url":"https://github.com/pyratu/CanEmAll-MoneyMod","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"cheat-or-evasion","reason_en":"The Can 'Em All DLL injects into the game and increases the player's money in memory and save files through a button or hotkey.","reason_zh":"Can 'Em All 的 DLL 注入游戏，通过按钮或快捷键修改内存和存档中的金钱数值，属于游戏作弊工具。","evidence_url":"https://github.com/pyratu/CanEmAll-MoneyMod/blob/9cf1b0e439031d2a68a656c0cb3f97462259a4ba/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1441382462","full_name":"averagenative/mechen-m30-firmware","url":"https://github.com/averagenative/mechen-m30-firmware","batch_id":"run-42201075883-1","decision":"hold","reason_code":"linking-policy","reason_en":"The MECHEN M30 repository documents firmware analysis and patch tools, but its releases also distribute complete patched vendor firmware.","reason_zh":"MECHEN M30 项目提供固件分析资料和补丁工具，但发布页也提供完整的改版厂商固件，需确定收录政策。","evidence_url":"https://github.com/averagenative/mechen-m30-firmware/blob/16eeeb41a02530fee0d1aad83023364dd13e62dd/README.md","reviewed_at":"2026-11-06"},{"id":"scan-1441383875","full_name":"Karan546-ai/ECC-Universal","url":"https://github.com/Karan546-ai/ECC-Universal","batch_id":"run-42201075883-1","decision":"exclude","reason_code":"fork-or-mirror","reason_en":"ECC-Universal reproduces affaan-m/ECC's agent harness and identifies its changes as modifications and REA integration; the visible material does not establish a separate original RE project.","reason_zh":"ECC-Universal 沿用 affaan-m/ECC 的智能体框架，并将自身改动标为修改与 REA 集成；可见内容不足以构成独立原创逆向项目。","evidence_url":"https://github.com/Karan546-ai/ECC-Universal/blob/8a9f60cab4fec227c9865a01795036defa3e08e8/README.md","reviewed_at":"2026-11-06"}]}