🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.

Reverse engineering focusing on x64 Windows.

Advanced usermode anti-anti-debugger. Forked from https://bitbucket.org/NtQuery/scyllahide

Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).

C++20, x86/x64 Hooking Libary v2.0

Windows kernel hacking framework, driver template, hypervisor and API written on C++

wtf is a distributed, code-coverage guided, customizable, cross-platform snapshot-based fuzzer designed for attacking user and / or kernel-mode targets running on Microsoft Windows and Linux user-m…

revng: the core repository of the rev.ng project

A Pin Tool for tracing API calls etc

Virtual-machine Translation Intermediate Language

A library to load, manipulate, dump PE files. See also: https://github.com/hasherezade/libpeconv_tpl

DRAKVUF Black-box Binary Analysis

Public API, examples, documentation and issues for Binary Ninja

Plugin manager for x64dbg

XMachOViewer is a Mach-O viewer for Windows, Linux and MacOS

Labeless is a multipurpose IDA Pro plugin system for labels/comments synchronization with a debugger backend, with complex memory dumping and interactive Python scripting capabilities.

A collection of x64dbg scripts. Feel free to submit a pull request to add your script.

A Full-Featured HexEditor compatible with Linux/Windows/MacOS

Yet another windows internals repo

A modern Objective-C class dump based on LIEF and LLVM.

Binary Ninja plugin & workflow to help analyze Objective-C code

Binary Ninja plugin & workflow to help analyze Objective-C code