function: reverse-engineering
630 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| anhkgg/SuperDllHijack SuperDllHijack is a C++ library implementing a general DLL hijacking technique for Windows that forwards calls to the original DLL without … | 32 | 1035 | maintenance |
| d35ha/CallObfuscator CallObfuscator is a C++ library and CLI tool that hides Windows PE imports by rewriting the Import Address Table so sensitive APIs appear a… | 23 | 1024 | maintenance |
| F8LEFT/SoFixer SoFixer is a command-line tool that repairs ELF shared object (.so) files dumped from process memory, fixing section headers, program heade… | 10 | 1024 | maintenance |
| rwfpl/rewolf-wow64ext A C++ helper library enabling 32-bit (x86) applications running under the WOW64 layer on 64-bit Windows to interact with native x64 process… | 23 | 1015 | maintenance |
| Inori/FuckGalEngine A collection of C tools for unpacking, repacking, and hooking visual novel (galgame) engines to enable fan translation and modifications. I… | 32 | 1013 | maintenance |
| WithSecureLabs/python-exe-unpacker A Python CLI script that unpacks and decompiles Windows EXEs compiled from Python code, supporting executables built with py2exe and PyInst… | 32 | 1013 | maintenance |
| c0ny1/java-memshell-scanner A JSP-based scanner that detects and helps remove Java web memory shells (memshells) such as Filter, Servlet, and Listener types in middlew… | 32 | 1012 | maintenance |
| feihong-cs/Java-Rce-Echo A collection of Java test code for achieving command output echo after remote code execution (RCE) across common application servers and pl… | 32 | 1008 | maintenance |
| JJTech0130/pypush A Python library for interacting with Apple's private APIs, originally a proof-of-concept iMessage reverse-engineering project. It currentl… | 65 | 3768 | experimental |
| ran-j/PS2Recomp A PlayStation 2 static recompiler that translates PS2 ELF binaries (MIPS R5900 instructions) into C++ code, plus a runtime to execute the g… | 72 | 3200 | experimental |
| SamboyCoding/Cpp2IL Cpp2IL is a work-in-progress tool that reverses Unity's IL2CPP build process, recovering managed DLLs from IL2CPP-compiled games. It parses… | 78 | 2597 | experimental |
| can1357/NoVmp NoVmp is a static devirtualizer that translates VMProtect x64 3.x-virtualized binaries into optimized VTIL intermediate code, optionally re… | 23 | 2185 | experimental |
| xoreaxeaxeax/skitter-creek-bath-salts A security research tool written in C that reprograms AMD Family 16h DRAM controller address translation registers to scramble physical mem… | 56 | 1937 | experimental |
| JSREI/ast-hook-for-js-RE A browser memory roaming tool for JavaScript reverse engineering that hooks variable assignments via AST-transformed proxy responses. It le… | 23 | 1912 | experimental |
| nmikhailov/Validity90 A reverse-engineering project for Validity/Synaptics fingerprint readers (USB IDs 138a:0090, 138a:0094, 138a:0097, 06cb:0081, 06cb:009a), p… | 32 | 1875 | experimental |
| codykociemba/NoLongerEvil-Thermostat No Longer Evil is a right-to-repair firmware and cloud replacement for bricked or sunset Nest Gen 1 and Gen 2 thermostats. It flashes modif… | 54 | 1826 | experimental |
| rexdex/recompiler A C++ tool that converts Xbox 360 PowerPC executables into native Windows x86 executables, handling CPU translation, endianness, and GPU em… | 32 | 1740 | experimental |
| zeldaret/mm A work-in-progress from-scratch decompilation of The Legend of Zelda: Majora's Mask (N64 US 1.0), recreating readable C source code that bu… | 77 | 1710 | experimental |
| YimMenu/YimMenuV2 YimMenuV2 is an experimental mod menu (injected DLL) for GTA 5: Enhanced written in C++. It provides an in-game overlay menu for modifying … | 83 | 1670 | experimental |
| patjak/facetimehd A reverse-engineered Linux kernel driver for the Facetime HD (Broadcom 1570) PCIe webcam found in newer MacBooks. It is written in C and li… | 95 | 1501 | experimental |
| JonathanSalwan/VMProtect-devirtualization An experimental research project demonstrating a dynamic approach to devirtualize pure functions protected by VMProtect 3.x using symbolic … | 32 | 1494 | experimental |
| whitequark/unfork unfork(2) is a proof-of-concept Linux technique and library that joins two process address spaces into one, the inverse of fork(2), by comb… | 32 | 1488 | experimental |
| opa334/darksword-kexploit A reimplementation of the DarkSword kernel exploit in Objective-C, targeting iOS 15.0 through 26.0.1. It is a security research artifact ba… | 48 | 1483 | experimental |
| alephsecurity/xnu-qemu-arm64 A fork of QEMU that emulates an iPhone (iPhone 6s Plus) well enough to boot a fully functional iOS 12.1 system, including launchd, bash, SS… | 32 | 1460 | experimental |
| iPower/KasperskyHook A Windows research project that hooks system calls by loading Kaspersky's hypervisor driver (klhk.sys) and a custom kernel driver that subv… | 66 | 1314 | experimental |
| amimo/dcc DCC (Dex-to-C Compiler) is a method-based ahead-of-time compiler that translates Android DEX bytecode into C code compiled via the NDK. It … | 32 | 1296 | experimental |
| JuliaPoo/Artfuscator Artfuscator is a novelty C compiler built on ELVM that compiles C programs into a binary whose entire control flow graph renders as a chose… | 32 | 1102 | experimental |
| ZeroMemoryEx/Terminator Terminator is a C++ proof-of-concept tool that terminates EDR/XDR/antivirus processes on Windows by abusing the vulnerable, signed zam64.sy… | 20 | 1061 | experimental |
| apprenticeharper/DeDRM_tools A collection of Python scripts packaged as calibre plugins (DeDRM and Obok) that remove DRM from ebooks, covering Amazon, Adobe Digital Edi… | 23 | 15313 | abandoned |
| PowerShellMafia/PowerSploit PowerSploit is a collection of PowerShell modules for post-exploitation tasks during penetration tests, covering code execution, persistenc… | 10 | 13085 | abandoned |
| CodeTips/BaiduNetdiskPlugin-macOS A macOS plugin that patches the Baidu Netdisk client binary via dylib injection to fake SVIP status and remove local download speed limits.… | 10 | 8873 | abandoned |
| acheong08/EdgeGPT A Python library that reverse engineers Microsoft's Bing Chat (EdgeGPT) API, providing unofficial programmatic access to Bing AI conversati… | 10 | 7851 | abandoned |
| R3nzTheCodeGOD/R3nzSkin R3nzSkin is an internal skin changer for League of Legends that lets players change champion, ward, minion, and monster skins in-game via a… | 10 | 4870 | abandoned |
| qwerty472123/wxappUnpacker wxappUnpacker is a tool for unpacking and decompiling packaged WeChat mini-program (wxapkg) files back into readable source files such as w… | 10 | 4506 | abandoned |
| Proxmark/proxmark3 The official (now archived) client software, FPGA logic, and design documentation for the Proxmark3, a general-purpose RFID tool that can s… | 50 | 3534 | abandoned |
| djkaty/Il2CppInspector Il2CppInspector is an automated tool for reverse engineering Unity IL2CPP binaries, extracting type definitions, metadata and method pointe… | 23 | 3036 | abandoned |
| stefanesser/dumpdecrypted A dylib that, when injected via DYLD_INSERT_LIBRARIES into an encrypted iPhone application on a jailbroken device, dumps the decrypted Mach… | 32 | 3035 | abandoned |
| google/binnavi BinNavi is a binary analysis IDE for inspecting, navigating, editing, and annotating control-flow and call graphs of disassembled code, wit… | 10 | 2883 | abandoned |
| tostercx/GTAO_Booster_PoC A proof-of-concept DLL injection that patches two bugs in GTA Online to drastically reduce load times on CPU-bound systems. It was official… | 10 | 2871 | abandoned |
| rockbruno/swiftshield SwiftShield is a Swift obfuscator that renames types and methods in iOS projects using SourceKit to protect apps against reverse engineerin… | 23 | 2546 | abandoned |
| DrizzleRisk/drizzleDumper drizzleDumper is a memory-search-based Android unpacking tool that dumps DEX files from packed/protected Android apps. It runs as a command… | 32 | 2415 | abandoned |
| whoeevee/EeveeSpotifyReborn EeveeSpotifyReborn is a Swift-based tweak (successor to the DMCA-taken-down EeveeSpotify) that patches the Spotify iOS app to behave as if … | 10 | 2383 | abandoned |
| grishka/Houseclub An unofficial, barebones Android client for the Clubhouse social audio app, built in Java as a proof of concept using a reverse-engineered … | 23 | 2308 | abandoned |
| dgiese/dustcloud A research project for reverse engineering and rooting Xiaomi Smart Home devices, including robot vacuums, providing methods to root device… | 23 | 2281 | abandoned |
| 8enet/Charles-Crack A repository that provided a crack/patch to bypass licensing of Charles Proxy, an HTTP debugging proxy tool. The repository content was rem… | 32 | 2149 | abandoned |
| HikariObfuscator/Hikari Hikari is an LLVM-based code obfuscator that transforms compiled binaries with techniques like string encryption, indirect branching, funct… | 10 | 2106 | abandoned |
| google/rekall Rekall is a Python-based memory forensic framework for extracting and analyzing digital artifacts from physical memory images of Windows, L… | 10 | 2007 | abandoned |
| XcodeGhostSource/XcodeGhost The published source code of XcodeGhost, the infamous 2015 malware that spread through a compromised Xcode build configuration and infected… | 32 | 1925 | abandoned |
| JuncoJet/unlimited-landeng-for-win A Windows patcher/injector for the Lantern proxy client that modifies its PE structure or loads it via an injector to unlock paid/pro limit… | 32 | 1914 | abandoned |
| Gh0u1L5/WechatMagician WechatMagician is an open-source Xposed module written in Kotlin that hooks into the WeChat app to give users full control over chat messag… | 23 | 1894 | abandoned |
| TKkk-iOSer/WeChatPlugin-iOS A jailbreak tweak (dylib) for the WeChat iOS app, built with Theos in Objective-C. It patches WeChat's runtime behavior to add unofficial f… | 32 | 1864 | abandoned |
| kpwn/yalu102 Yalu102 is an incomplete, work-in-progress jailbreak for 64-bit iOS devices running iOS 10.0 through 10.2, created by qwertyoruiopz and mar… | 32 | 1762 | abandoned |
| Xposed-Modules-Repo/com.bug.hookvip An Xposed module for Android that hooks into apps to unlock certain VIP/membership features and extend functionality. The repository has be… | 10 | 1762 | abandoned |
| KEV0143/Direct-memory-access-CS2-DMA A C++ framework demonstrating Direct Memory Access (DMA) interaction with Counter-Strike 2, covering memory reading, entity-state parsing, … | 62 | 1749 | abandoned |
| Gh0u1L5/WechatSpellbook An open-source WeChat plugin framework written in Kotlin that sits on top of hooking frameworks like Xposed or VirtualXposed. It exposes a … | 32 | 1732 | abandoned |
| Cisco-Talos/pyrebox PyREBox is a Python-scriptable reverse engineering sandbox built on QEMU that provides whole-system dynamic analysis and debugging of runni… | 10 | 1684 | abandoned |
| chaitin/passionfruit Passionfruit is a web-based GUI tool for blackbox assessment of iOS apps, built on the Frida instrumentation framework and Vue.js. It lets … | 10 | 1668 | abandoned |
| asLody/legend Legend is a Java method hooking framework for Android that works without root access, supporting both Dalvik and ART runtimes. It lets deve… | 32 | 1605 | abandoned |
| viper-framework/viper Viper is a Python-based binary analysis and management framework for organizing collections of malware and exploit samples along with analy… | 10 | 1562 | abandoned |
| sailro/Reflexil Reflexil is a .NET assembly editor that runs as a plugin for Reflector, ILSpy, and JustDecompile. Built on Mono.Cecil, it can manipulate IL… | 10 | 1530 | abandoned |
| kennytm/iphone-private-frameworks A collection of C headers for private frameworks and undocumented interfaces of iPhoneOS 3.x and earlier, used for jailbroken iOS tweak dev… | 10 | 1462 | abandoned |
| hteso/iaito Iaitō is a Qt and C++ graphical user interface for the radare2 reverse engineering framework, aimed at users who find radare2's CLI too dif… | 32 | 1457 | abandoned |
| das-labor/panopticon Panopticon is a libre, cross-platform disassembler written in Rust for reverse engineering binaries. It supports AMD64, x86, AVR, and MOS 6… | 10 | 1445 | abandoned |
| xmoezzz/KrkrExtract KrkrExtract is a Windows tool for extracting and repacking XP3 archive files used by the Kirikiri (krkr2/krkrz) visual novel game engine, s… | 10 | 1430 | abandoned |
| RaduMC/AssetStudio AssetStudio is a standalone Windows GUI tool for exploring, previewing, and extracting assets from Unity game files and bundles. It can exp… | 23 | 1421 | abandoned |
| Plutoberth/SonyHeadphonesClient A cross-platform desktop client that replicates the mobile-only Sony Headphones app, allowing control of Sony noise-cancelling headphones (… | 10 | 1364 | abandoned |
| zyq8709/DexHunter DexHunter is an automatic unpacking tool for Android Dex files protected by app-hardening services. It works by replacing the ART and DVM r… | 32 | 1357 | abandoned |
| szdc/tiktok-api An unofficial, reverse-engineered TypeScript API wrapper for TikTok (formerly Musical.ly), published as the npm package tiktok-api. It lets… | 10 | 1292 | abandoned |
| crmulliner/adbi ADBI is a dynamic binary instrumentation toolkit for Android ARM and Thumb binaries, based on library injection and inline hooking of funct… | 32 | 1266 | abandoned |
| samyk/usbdriveby USBdriveby is an Arduino/Teensy microcontroller project that emulates a USB HID keyboard and mouse to covertly install a backdoor, evade fi… | 32 | 1263 | abandoned |
| tomer8007/widevine-l3-decryptor A Chrome extension that demonstrated bypassing Widevine L3 DRM by hijacking Encrypted Media Extensions calls to extract content decryption … | 10 | 1246 | abandoned |
| optiv/Mangle Mangle is a Go-based CLI tool that manipulates compiled Windows executables (.exe and DLL) to evade EDR detection. It strips known indicato… | 10 | 1235 | abandoned |
| hfiref0x/TDL TDL is a Windows x64 driver loader that bypasses Driver Signature Enforcement by exploiting a VirtualBox kernel vulnerability to map specia… | 10 | 1226 | abandoned |
| wibus-wee/InjectGUI InjectGUI is a macOS graphical application that wraps the QiuChenly InjectLib framework for injecting dylibs into macOS applications, handl… | 10 | 1222 | abandoned |
| jacopotediosi/GAppsMod GAppsMod is a root-required Android application that tweaks Google apps (like Phone and Messages) by modifying the Phenotype DB flags manag… | 10 | 1218 | abandoned |
| transitive-bullshit/bing-chat A Node.js/TypeScript client library wrapping Bing Chat's unofficial, reverse-engineered API, supporting conversations, streaming responses,… | 10 | 1207 | abandoned |
| leo9960/wechat-app-unpack A JavaScript tool and write-up for unpacking WeChat Mini Program .wxapkg packages, restoring source files like app-config., app-service.js,… | 32 | 1167 | abandoned |
| riverar/mach2 Mach2 is a Windows command-line multi-tool for managing the Windows Feature Store, allowing users to discover, enable, disable, and revert … | 10 | 1119 | abandoned |
| yulingtianxia/FishChat FishChat is an Objective-C hooking project that injects a dylib into a decrypted WeChat.app binary to modify its behavior on non-jailbroken… | 10 | 1103 | abandoned |
| okcar-os/android OkcarOS is an open-source Android 13-based ROM (built on LineageOS) that lets an Android smartphone act as a CarPlay device, streaming audi… | 69 | 1077 | abandoned |
| EquiFox/KsDumper KsDumper is a Windows tool that dumps process memory (including protected processes with stripped handles) using a kernel driver, rebuildin… | 23 | 1055 | abandoned |
| denandz/KeeFarce KeeFarce is a security tool that extracts passwords and other cleartext data from a running KeePass 2.x process by injecting a DLL into its… | 32 | 1029 | abandoned |
| AsahiLinux/gpu Research repository for reverse-engineering the Apple M1 GPU to build an open-source 3D graphics stack, including a Metal API interception … | 10 | 1026 | abandoned |
| halfkiss/ZjDroid ZjDroid is an Xposed framework module for dynamic reverse engineering of Android apps. It supports memory dumping of DEX files, BackSmali d… | 32 | 1021 | abandoned |
| ba0gu0/520apkhook A Java-based tool that attaches an Android remote-access APK payload to a legitimate app, producing a trojanized APK where the original app… | 32 | 1015 | abandoned |
| qwqdanchun/DcRat DcRat is an open-source remote administration tool (RAT) written in C# for Windows, providing remote desktop, file management, and remote c… | 10 | 1011 | abandoned |
| xtekky/gpt4free GPT4Free (g4f) is a Python library and application that aggregates many free/reverse-engineered LLM providers behind an OpenAI-compatible A… | 93 | 66605 | active |
| lucasg/Dependencies A modern open-source rewrite of the legacy Dependency Walker (depends.exe) tool, written in C#, for analyzing Windows DLL load dependencies… | 23 | 11781 | stable |
| majd/ipatool A command-line tool written in Go that lets users search the iOS App Store and download app packages (ipa files) using their Apple ID. It s… | 88 | 9934 | active |
| firerpa/lamda FIRERPA (lamda) is an all-in-one Android device control platform whose server runs directly on the device (root or non-root) and exposes 16… | 98 | 8243 | active |
| aidlearning/AidLearning-FrameWork AidLux (originally AidLearning) is an AIoT development platform that runs a native Ubuntu Linux environment with GUI, deep learning tooling… | 70 | 5797 | active |
| kaitai-io/kaitai_struct Kaitai Struct is a declarative language for describing binary data structures (file formats, network packet layouts) in .ksy files. A compi… | 76 | 4664 | active |
| Mouseww/anything-analyzer An Electron-based all-in-one protocol analysis toolkit that captures HTTP(S) traffic from browsers, desktop apps, terminals, scripts, and m… | 77 | 3586 | active |
| HanaokaYuzu/Gemini-API A reverse-engineered asynchronous Python client library for Google's Gemini web app (formerly Bard), published as gemini-webapi on PyPI. It… | 92 | 3437 | active |
| jehna/humanify A Rust CLI tool that unminifies and deobfuscates JavaScript by using LLMs (OpenAI, Anthropic, Gemini, OpenRouter, or local Ollama) to sugge… | 92 | 3272 | active |
| ttttupup/wxhelper wxhelper is a C++ DLL that hooks the Windows PC WeChat client, exposing its internal functions through a local HTTP server (default port 19… | 61 | 3141 | active |
| onekey-sec/unblob unblob is an extraction suite that parses unknown binary blobs for 78+ archive, compression, and file-system formats, recursively extractin… | 91 | 2544 | active |
| jxhczhl/JsRpc JsRpc is a Go-based RPC server that lets you remotely invoke JavaScript methods running in a browser via WebSocket, avoiding the need to ex… | 84 | 2347 | active |
| learnhouse/learnhouse LearnHouse is a next-generation open-source learning management system (LMS) for creating, sharing, and selling educational content. It com… | 99 | 2203 | active |
| multitheftauto/mtasa-blue Multi Theft Auto is an open-source multiplayer modification that adds networked multiplayer gameplay to Grand Theft Auto: San Andreas via c… | 67 | 1833 | active |