resource: reverse-engineering
178 resources, primary matches first, then adoption-weighted; health v2 shown.
| Resource | Health v2 | Stars | Maturity |
|---|---|---|---|
| vxunderground/MalwareSourceCode A large curated collection of malware source code spanning many platforms (Windows, Linux, Android, macOS, MS-DOS, PHP, Java, and more) and… | 70 | 18675 | active |
| vitalysim/Awesome-Hacking-Resources A curated awesome-list of hacking, penetration testing, and AI red-teaming resources including courses, YouTube channels, labs, and tools. … | 70 | 17359 | active |
| mytechnotalent/Reverse-Engineering A free, comprehensive reverse engineering tutorial covering x86, x64, ARM, AVR, and RISC-V architectures, with an accompanying e-book and P… | 77 | 14171 | active |
| OWASP/mastg The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive open-source manual for mobile app security testing and rever… | 95 | 13137 | active |
| zardus/ctf-tools A Nix flake that packages a large collection of security research and CTF (capture-the-flag) tools for easy deployment. It bundles tools li… | 86 | 9501 | active |
| mandiant/flare-vm FLARE-VM is a collection of PowerShell installation scripts that set up and maintain a reverse engineering and malware analysis environment… | 63 | 8965 | active |
| xairy/linux-kernel-exploitation A curated collection of links about Linux kernel security and exploitation, covering techniques, vulnerabilities, tools, books, and practic… | 76 | 6602 | active |
| 0xZ0F/Z0FCourse_ReverseEngineering A free open-source course that teaches reverse engineering of x64 Windows binaries, taking learners from beginner to intermediate level. It… | 65 | 5906 | active |
| dsasmblr/game-hacking A curated list of tools, tutorials, books, and presentations for reverse engineering and hacking video games. It aggregates resources like … | 32 | 5567 | active |
| firmianay/CTF-All-In-One An open-source Chinese-language book series, 'CTF Competition Authoritative Guide', covering CTF security competition topics with a publish… | 32 | 4493 | active |
| skerkour/black-hat-rust The companion repository for the book 'Black Hat Rust', teaching applied offensive security by building real-world attack tools in Rust. It… | 52 | 4391 | active |
| r0ysue/AndroidSecurityStudy A curated Chinese-language study repository for Android application security, centered on Frida dynamic instrumentation and the FART unpack… | 32 | 4370 | active |
| 0xor0ne/awesome-list A curated awesome list of cybersecurity blog posts, write-ups, and papers organized by year, plus a companion list of security tools and re… | 77 | 4068 | active |
| liuup/claude-code-analysis A repository of static analysis documents for the leaked TypeScript source code of Anthropic's Claude Code CLI agent, covering architecture… | 48 | 3853 | active |
| onethawt/idaplugins-list A curated list of plugins for IDA Pro, the interactive disassembler, covering loaders, decompiler helpers, debuggers, and analysis tools. I… | 32 | 3832 | active |
| dekuNukem/Nintendo_Switch_Reverse_Engineering A community documentation repository of reverse engineering findings about the Nintendo Switch and Joy-Con controllers, including PCB layou… | 76 | 3776 | active |
| vaib25vicky/awesome-mobile-security A curated awesome-list collecting Android and iOS security resources, including blogs, papers, tools, and guides for mobile penetration tes… | 32 | 3525 | active |
| V33RU/awesome-connected-things-sec A curated awesome-list of 900+ security resources for IoT, embedded, industrial control, automotive, and wireless systems. It organizes lin… | 76 | 3524 | active |
| dweinstein/awesome-frida A curated list of Frida resources, including libraries, projects, scripts, talks, and blog posts. Frida is a dynamic code instrumentation t… | 66 | 3516 | active |
| gmh5225/awesome-game-security A curated awesome-list of resources on game security, covering anti-cheat systems, anti-debugging, kernel drivers, and game hacking techniq… | 77 | 3433 | active |
| iDoka/awesome-canbus A curated awesome-list of CAN bus tools, hardware, and resources for reverse engineering and automotive security research. It collects soft… | 75 | 3432 | active |
| guyinatuxedo/nightmare Nightmare is an open-source introductory course on binary exploitation and reverse engineering built around CTF challenges, with over 90 do… | 62 | 3210 | stable |
| ytisf/theZoo theZoo is a curated repository of live malware samples made publicly accessible for educational malware analysis. It includes a Python cons… | 65 | 13328 | maintenance |
| ljagiello/ctf-skills A collection of Agent Skills (SKILL.md files) that teach AI coding agents like Claude Code, Codex, and Gemini CLI how to solve Capture The … | 60 | 3104 | active |
| ivRodriguezCA/RE-iOS-Apps A free, open-source online course teaching reverse engineering of iOS applications across five modules, from environment setup to binary pa… | 32 | 2901 | active |
| user1342/Awesome-Android-Reverse-Engineering A curated awesome-list of Android reverse engineering training courses, videos, books, tools, and CTF resources. It serves as a reference d… | 43 | 2679 | active |
| j00ru/windows-syscalls A collection of Windows system call tables extracted from ntoskrnl.exe and win32k.sys across nearly every Windows release from NT 3.x throu… | 59 | 2631 | active |
| wtsxDev/reverse-engineering A curated awesome-list of reverse engineering resources including books, courses, tools, and practice materials. It covers topics like disa… | 32 | 10392 | maintenance |
| iddoeldor/frida-snippets A curated collection of hand-crafted Frida script snippets for dynamic instrumentation and runtime hooking. It covers native, Android, iOS,… | 32 | 2533 | active |
| pret/pokecrystal A complete, buildable disassembly of Pokémon Crystal written in Game Boy assembly (gbz80). It reconstructs the original ROM byte-for-byte a… | 76 | 2494 | active |
| fkie-cad/awesome-embedded-and-iot-security A curated awesome-list of resources for embedded and IoT security, including software and hardware tools, books, research papers, case stud… | 32 | 2430 | active |
| jgamblin/Mirai-Source-Code A mirror of the leaked Mirai botnet source code (bot, CnC server, loader) published for cybersecurity research, malware analysis, and indic… | 53 | 9457 | maintenance |
| Y4tacker/JavaSec A personal study repository documenting the author's Java security learning journey, from fundamentals like reflection and dynamic proxies … | 66 | 2300 | active |
| ZJ595/AndroidReverse A Chinese-language tutorial series ('安卓逆向这档事') on Android reverse engineering, covering APK structure, smali, dynamic debugging, Xposed hoo… | 48 | 2272 | active |
| mengjian-github/copilot-analysis A research write-up with accompanying JavaScript tooling that reverse engineers the closed-source GitHub Copilot VSCode extension. It uses … | 29 | 2205 | stable |
| Mr-Un1k0d3r/EDRs A collection of proof-of-concept C tools and reference data for understanding EDR/AV hooking on Windows, including syscall patching utiliti… | 66 | 2202 | active |
| hasherezade/malware_training_vol1 Training materials for Windows malware analysis (volume 1), covering compilation, PE format, processes, shellcode, hooking, persistence, an… | 32 | 2099 | active |
| milabs/awesome-linux-rootkits A curated awesome-list of Linux rootkits, covering both user-mode (LD_PRELOAD) and kernel-mode (LKM) rootkits with a feature comparison tab… | 62 | 2094 | active |
| saeidshirazi/awesome-android-security A curated list of Android security materials and resources for pentesters and bug hunters, covering blogs, papers, books, trainings, tools,… | 73 | 2014 | active |
| zeldaret/tp A work-in-progress decompilation of The Legend of Zelda: Twilight Princess that reconstructs the original C++ source code so it compiles ba… | 72 | 2001 | active |
| WuFengXue/android-reverse A curated awesome-list of Android reverse engineering tools, covering unpacking (脱壳), native library analysis, decompilers, GUI tools, and … | 40 | 1983 | active |
| lixi5338619/lxSpider A collection of Python web scraping example scripts covering many Chinese platforms (Taobao, Douyin, Weibo, WeChat, Xiaohongshu, etc.) plus… | 23 | 1968 | active |
| Siguza/ios-resources A curated collection of resources for iOS hacking and reverse engineering, covering ARM64 assembly, Mach-O internals, sandbox, IPC, and rel… | 43 | 1966 | active |
| Discord-Datamining/Discord-Datamining A community-maintained repository that tracks changes to the Discord client by diffing JavaScript files served to the Discord Canary build.… | 77 | 1845 | active |
| rootkit-io/awesome-malware-development A curated awesome-list of resources for malware development, rootkits, EDR evasion, and red-team tooling, intended for educational and defe… | 66 | 1816 | active |
| Bambu-Research-Group/RFID-Tag-Guide A community research guide documenting how to decrypt, read, and clone the NFC/RFID tags Bambu Lab uses on its 3D printer filament spools, … | 51 | 1690 | active |
| frk1/hazedumper A continuously updated repository of Counter-Strike: Global Offensive memory offsets, netvars, and signature-scanning configs for the hazed… | 32 | 1685 | active |
| jstrosch/malware-samples A curated collection of password-protected malware samples, malicious documents, and training PCAPs for malware analysis practice. It also … | 32 | 1671 | active |
| RPISEC/MBE Course materials for RPISEC's Modern Binary Exploitation, a university course teaching binary exploitation, reverse engineering, and vulner… | 23 | 6033 | maintenance |
| mytechnotalent/Hacking-Windows A free self-study course and book teaching Windows C development with the Win32 API, with each step reverse engineered and hacked using IDA… | 77 | 1620 | active |
| packing-box/awesome-executable-packing A curated awesome-list of resources on executable packing, covering literature, datasets, packers, and detection/unpacking tools for format… | 70 | 1614 | active |
| fr0gger/awesome-ida-x64-olly-plugin A curated awesome-style list of plugins for reverse-engineering tools including IDA Pro, Ghidra, x64DBG, GDB, and OllyDBG. It catalogs plug… | 63 | 1586 | active |
| xairy/kernel-exploits A collection of proof-of-concept exploits for Linux kernel vulnerabilities written in C, covering CVEs from 2016 to 2025. Each exploit demo… | 51 | 1582 | active |
| openedclaude/claude-reviews-claude A 17-chapter bilingual (EN/ZH) architectural deep-dive into Claude Code v2.1.88, written by Claude itself after reading its own 477K-line T… | 48 | 1569 | active |
| maddiestone/AndroidAppRE An introductory workshop on reverse engineering Android applications, covering both DEX bytecode and native code analysis. It is hosted as … | 32 | 1557 | stable |
| mikesiko/PracticalMalwareAnalysis-Labs A collection of malicious lab binaries accompanying the book 'Practical Malware Analysis'. The samples are designed as hands-on reverse-eng… | 32 | 1545 | stable |
| NotPrab/.NET-Deobfuscator A curated list of open-source .NET deobfuscators and unpackers, organized by the obfuscator they target (ConfuserEx, .NET Reactor, Eazfusca… | 34 | 1513 | active |
| davinci1010/pinduoduo_backdoor A security research repository documenting analysis of privilege-escalation code embedded in the Pinduoduo Android APK, including a VMP-pac… | 30 | 5448 | maintenance |
| HACKE-RC/awesome-reversing A curated awesome-list of resources for learning reverse engineering from beginner to advanced, covering assembly, OS internals, deobfuscat… | 37 | 1492 | active |
| NotPrab/.NET-Obfuscator A curated list of .NET obfuscators, protectors, and packers, categorized as open source, free, freemium, and paid. It helps developers find… | 34 | 1492 | active |
| hfiref0x/SyscallTables A collection of combined Windows NT syscall tables covering ntoskrnl and win32k service tables across Windows versions from XP x64 through … | 63 | 1465 | active |
| skyw4tch3r/RootKits-List-Download A curated list of links to rootkit projects and resources found on GitHub and other sites, covering Linux, Windows, BSD, and Android rootki… | 50 | 1465 | active |
| tanprathan/MobileApp-Pentest-Cheatsheet A curated cheat sheet and checklist of high-value tools and techniques for mobile application penetration testing, mapped to the OWASP Mobi… | 32 | 5257 | maintenance |
| gh0stkey/Binary-Learning A collection of Chinese-language study notes on binary security and reverse engineering, primarily covering the Dishui (滴水) reverse enginee… | 32 | 1441 | active |
| mandiant/flare-learning-hub A free educational hub from Mandiant's FLARE team offering courses on reverse engineering and malware analysis, with web-published modules … | 48 | 1438 | active |
| AllsafeCyberSecurity/awesome-ghidra A curated awesome-list of Ghidra resources, including scripts, plugins, extensions, and related reverse-engineering tooling. It serves as a… | 72 | 1427 | active |
| darbra/sperm A curated collection of reverse-engineering articles gathered from Chinese platforms like 52pojie, Kanxue, CSDN, and WeChat public accounts… | 67 | 1409 | active |
| alphaSeclab/awesome-reverse-engineering A curated awesome-list of reverse engineering resources covering 3500+ open source tools and 2300+ articles and videos across Windows, Linu… | 23 | 5035 | maintenance |
| stong/how-to-exploit-a-double-free A long-form tutorial repository teaching modern binary exploitation through a real CTF challenge from pbctf. It walks through exploiting an… | 34 | 1387 | stable |
| ckane/CS7038-Malware-Analysis A public course repository for the University of Cincinnati's Malware Analysis class (CS6038/CS5138), containing lecture content, topics, a… | 32 | 1383 | active |
| kgspider/crawler A collection of example code accompanying the 'K哥爬虫' tutorial series on JavaScript reverse engineering for web scraping. Each subdirectory … | 42 | 1379 | active |
| hack-different/apple-knowledge A curated collection of reverse-engineered Apple formats, protocols, and knowledge, including a machine-readable YAML database of Apple har… | 76 | 1378 | active |
| ACreTeam/ac-decomp A community decompilation project that reconstructs the C source code of Animal Crossing for the Nintendo GameCube from its compiled binary… | 73 | 1346 | active |
| luzhisheng/js_reverse A curated collection of study notes and tool links for learning web scraping reverse engineering, covering JavaScript deobfuscation, app re… | 76 | 1319 | active |
| DERE-ad2001/Frida-Labs A series of hands-on Android challenges designed to teach Frida dynamic instrumentation from basics to intermediate usage. Each challenge s… | 57 | 1315 | active |
| crifan/android_app_security_crack An open-source ebook (built with HonKit) covering Android app security and reverse engineering, from APK packaging and Dalvik/ART internals… | 32 | 1313 | active |
| bsauce/kernel-exploit-factory A curated collection of Linux kernel CVE exploits paired with preconfigured QEMU debug environments and analysis writeups. It lets research… | 70 | 1296 | active |
| tylerha97/awesome-reversing A curated awesome-list of reverse engineering resources including books, courses, tutorials, tools, and practice platforms. It covers topic… | 32 | 4515 | maintenance |
| FabricMC/yarn Yarn is a set of open, freely licensed (CC0) Minecraft mappings that translate obfuscated Minecraft class, method, and field names into rea… | 70 | 1222 | active |
| blackarrowsec/redteam-research A collection of proof-of-concept code and offensive security techniques published by the BlackArrow Red Team. It serves as a research repos… | 67 | 1219 | active |
| Buckminsterfullerene02/UE-Modding-Tools A curated databank of Unreal Engine modding tools and guides applicable across multiple UE4/UE5 games. It catalogs packers, unpackers, SDK … | 75 | 1215 | active |
| t3l3machus/PowerShell-Obfuscation-Bible A curated educational reference of manual PowerShell script obfuscation techniques for bypassing signature-based antivirus detection, with … | 30 | 1204 | active |
| luguanxing/Cheating-Plugin-Program A step-by-step educational C++ tutorial series studying the design principles of game cheats, covering memory editing, base address reading… | 32 | 1203 | active |
| httpvoid/writeups A collection of application security research writeups by the HTTPVoid team, covering their own CVEs and technical analyses of public n-day… | 32 | 1199 | active |
| wh1te4ever/super-tart-vphone-writeup A technical writeup explaining how to build a virtual iPhone using the vphone600ap components found in Apple's Private Cloud Compute (PCC) … | 46 | 1192 | active |
| alvin-tosh/Malware-Exhibit A curated collection of real-world malware samples compiled and analyzed by researchers for studying malware threats, analysis techniques, … | 32 | 1181 | active |
| RPISEC/Malware Course materials for RPISEC's university-level Malware Analysis course (CSCI 4976), built around the Practical Malware Analysis book. It in… | 23 | 4059 | maintenance |
| AlienwareHe/awesome-reverse A curated awesome-list style learning resource for reverse engineering beginners, covering JavaScript (web/PC/H5) and Android app/native re… | 50 | 1160 | active |
| travisgoodspeed/gbrom-tutorial A step-by-step tutorial for recovering the GameBoy boot ROM from photographs of a decapsulated chip's die, using MaskRomTool to extract bit… | 74 | 1154 | active |
| OpenStick/OpenStick OpenStick is a reverse-engineering and mainline Linux porting project for msm8916-based 4G modem dongles, documenting how to replace the st… | 23 | 1148 | active |
| HuskyHacks/PMAT-labs A collection of lab exercises and live malware samples accompanying the Practical Malware Analysis & Triage (PMAT) course. The repository i… | 64 | 1147 | active |
| jakespringer/angr_ctf A collection of capture-the-flag style challenges designed to teach binary analysis and symbolic execution with the angr framework. It incl… | 32 | 1123 | active |
| BC-SECURITY/Beginners-Guide-to-Obfuscation A hands-on workshop and course material from BC Security teaching malware obfuscation and defense evasion techniques on Windows. It covers … | 32 | 1080 | active |
| Silverr12/DMA-CFW-Guide A detailed guide for creating custom/modified DMA attack firmware based on pcileech-fpga for FPGA-based PCIe DMA cards. It walks through do… | 53 | 1041 | active |
| enovella/TEE-reversing A curated list of public resources for learning about Trusted Execution Environments (TEE) and ARM TrustZone, including papers, blog posts,… | 60 | 1036 | active |
| Anime4000/RTL960x A community documentation and reverse-engineering repository for RTL960x-based GPON SFP ONT sticks, including firmware builds, configuratio… | 72 | 1023 | active |
| spawnmason/randar-explanation An explanation and writeup of 'Randar', a Minecraft exploit that uses LLL lattice reduction to crack the internal state of a reused java.ut… | 72 | 1020 | active |
| imadr/Unity-game-hacking A community guide explaining how to extract and modify assets and code from games built with the Unity engine. It covers Unity's game folde… | 32 | 3457 | maintenance |
| maestron/botnets A curated collection of botnet source code samples gathered for educational and malware research purposes. It aggregates many historical bo… | 32 | 3335 | maintenance |
| Xyl2k/TSA-Travel-Sentry-master-keys A collection of 3D-printable model files reproducing TSA Travel Sentry and Safe Skies master luggage keys, based on leaked key images and r… | 70 | 3302 | maintenance |
page 1 / 2 next →