Open-source projects in RE Tooling that exist because someone reverse engineered a closed product. Most-starred: rea, Ghidra, jadx, x64dbg, mitmproxy.
Search and filter this category →NSA's software reverse engineering framework with decompiler
Open source user-mode debugger for Windows
.NET debugger, decompiler and assembly editor
Cross-platform .NET decompiler
UNIX-like reverse engineering framework and toolset
Free RE platform/GUI powered by rizin
Java JAR and Android APK reverse engineering suite with multiple decompilers, editor and debugger
Standalone GUI Java decompiler
Revival of dnSpy .NET debugger and assembly editor
Python binary analysis framework with symbolic execution and decompiler
Dex to Java decompiler for Android apps
Tool for reverse engineering Android APK files
Static and dynamic analysis framework for Android and iOS app packages
Tools to convert Android .dex to Java .class files
Unity il2cpp metadata dumper for reverse engineering
Runtime mobile exploration toolkit powered by Frida
Extracts Unity serialized assets and projects
Android device control platform with remote desktop, automation, MITM and built-in Frida
Python toolkit for Android app analysis
Frida-based Android reverse engineering toolkit with CLI and universal scripts
Agentic tool to reverse engineer apps from behavior down to native binaries
MCP bridge between IDA Pro and LLM clients
MCP server exposing Ghidra to LLM clients
Skills and tools that let AI coding agents reverse engineer and mod almost any PC game
Claude Code skill for reverse engineering Android apps
Claude skills that reverse engineer an app, rebuild it, test it and fix user-reported issues
IDA Pro plugin using LLMs to explain and rename decompiled functions
Renames identifiers in minified JavaScript with LLM-suggested names via AST rewriting
Agent skill that routes app and binary investigations through command-line RE tools
MCP server for JavaScript reverse engineering with Chrome debugging, breakpoints and network analysis
Program for determining file types, compilers and packers
FLARE tool that identifies capabilities in executable files
Library to parse and modify ELF, PE and Mach-O binaries
Terminal UI to analyze ELF binaries
Extracts obfuscated, stack and tight strings from malware binaries
Scans a running process for injected or modified code and dumps it
Multiplatform PE file reversing tool
Detect It Easy engine for identifying file types, packers and compilers
Reverse-engineers' hex editor with structure annotation
Python module to read and work with PE files
Dynamic instrumentation toolkit for native apps
Record and replay debugger for Linux
Lightweight multi-architecture CPU emulator framework
GDB extension that adds dynamic-analysis commands and context views
Dynamic binary analysis library with symbolic execution
Hypervisor-based native debugger for reverse engineering
Timeless debugger that records and lets you browse full program execution
Windows and Linux userspace emulator for analysis
Dynamic binary instrumentation tool platform
GDB front-end and memory scanner for reverse engineering games on Linux
Program diffing plugin for IDA, Ghidra-compatible exports
Playstation 2 Static Recompiler & Runtime Tool to make native PC ports
Binary diffing tool for comparing disassembled code
Ghidra-based command-line binary diffing engine
Reverse-engineering collaboration and sync across decompilers
Decompiles any Minecraft version using official mappings
MIPS/PowerPC/ARM assembly to C decompiler aimed at matching output
Local object-file diffing tool for matching decompilation projects
Ghidra extension exporting relocatable object files for delinking
PSX Static Recompiler and Runtime, Not Affiliated With Sony or PlayStation
Interactive TLS-capable intercepting HTTP proxy
Reverse-engineers REST APIs into OpenAPI specs from captured mitmproxy/HAR traffic
Remote WebView debugger and HTTPS capture proxy for WeChat and mobile pages
CLI that prepares Android APKs for HTTPS inspection by removing pinning
Android on-device HTTP packet capture and network diagnosis app
Protocol analysis workstation: browser capture, MITM proxy, AI analysis and MCP server
Disables SSL certificate validation and pinning in iOS and macOS apps
Agent that captures website traffic and turns it into API clients
iOS MITM-based HTTPS packet capture app
mitmproxy-style HTTPS interception proxy implemented in Go
Installer that sets up a Windows VM for reverse engineering and malware analysis
ESP32 hardware hacking tool that speaks I2C, SPI, UART, IR, RF and more protocols
RF and reverse engineering framework for signal detection, protocol discovery and attacks
Interactive tool to explore the Windows Text Services Framework (CTF) protocol
PowerShell module with reverse engineering utilities
Online x86-64 assembly editor, emulator and debugger
Interactive shell for Avast's JavaScript engine extracted via reverse engineering
Shell tools for data translation and manipulation during reverse engineering
Example using the undocumented Windows dark mode API in Win32 apps
Tool to decode digital RF signals for RF reverse engineering