KasperskyLab/hrtng

Health v2 · maintenance only

Adoption not part of the score

1916 stars · 175 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

An IDA Pro plugin (C++) providing a rich toolkit for reverse engineering: string/data decryption, deobfuscation of Hex-Rays pseudocode, unflattening, code recognition via microcode signatures, and interactive pseudocode transformations. It requires the Hex-Rays decompiler and targets the latest IDA versions.

Use cases

• deobfuscate malware pseudocode in IDA Pro
• decrypt obfuscated strings in a binary
• unflatten control-flow-flattened functions
• recognize inlined library functions in decompiled code
• automatically rename variables and add comments in Hex-Rays output
• resolve hashed API names in malware samples
• transform and retype pseudocode interactively while reversing

When to choose

• you use IDA Pro with Hex-Rays and analyze obfuscated or packed malware
• you need automated string decryption or API hash resolution during reversing
• you want richer pseudocode transformation and renaming tooling than stock IDA

When to avoid

• you don't own IDA Pro with the Hex-Rays decompiler
• you need a standalone decompiler or disassembler
• you rely on older IDA versions and need long-term backward compatibility

Facets

plugin · maturity active

reverse-engineering parser developer-tools reverse-engineering security developer-tools windows cpp ida-pro hex-rays decompiler deobfuscation malware-analysis binary-analysis microcode pseudocode linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="KasperskyLab/hrtng")