Reverse engineer anything with agents, from app behavior down to native binaries.
Global
#209 · +148 · 1d ·GitHub
When an AI agent (Claude Code, Codex, Cursor, OpenCode, or another compatible client) encounters an APK, a binary, frontend JS encryption, a CTF challenge, or a pentesting target, this package routes it to the right methodology, checks available tools, and executes a repeatable…
#289 · +106 · 1d ·GitHub
A collection of various awesome lists for hackers, pentesters and security researchers
#338 · +88 · 1d ·GitHub
Agent-Native multi-platform reverse engineering and CWE-602 client-side authorization audit workbench.
#391 · +78 · 1d ·GitHub
> Featured: REA — Agent-oriented reverse-engineering tools, from application behavior to native binaries. By the creators of awesome-reverse-engineering.
#533 · +55 · 1d ·GitHub
A FREE comprehensive reverse engineering tutorial covering x86, x64, 32-bit/64-bit ARM, 8-bit AVR and 32-bit RISC-V architectures.
#824 · +33 · 1d ·GitHub
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
#914 · +30 · 1d ·GitHub
List of awesome reverse engineering resources
An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.
#1044 · +26 · 1d ·GitHub
claude-red is a curated library of offensive security skills designed for the Claude skills system. md file that primes Claude with expert-level methodology for a specific attack surface — from SQLi to shellcode, EDR evasion to exploit development.
#1267 · +20 · 1d ·GitHub
Automated Penetration Testing Agentic Framework Powered by Large Language Models
#1493 · +16 · 1d ·GitHub
Penetration testing is the practice of launching authorized, simulated attacks against computer systems and their physical infrastructure to expose potential security weaknesses and vulnerabilities.
#2177 · +10 · 1d ·GitHub
Autonomous penetration testing using a swarm of AI agents. Orchestrates recon, classification, exploitation, and reporting specialists with ReAct reasoning — supports bug bounty, continuous monitoring, and CTF modes. Built with Go and 7+ native security tools.
The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis
warning] > Most of our current development effort is on mini-swe-agent, > which has superseded SWE-agent. It matches the performance performance of SWE-agent, while being > much simpler. > See the FAQ for more details about the differences.
#2449 · +8 · 1d ·GitHub
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
autonomous red teaming platform; multi-agent offensive-security meta-harness
#2839 · +6 · 1d ·GitHub
Let's make it the biggest resource repository for our community.
#2989 · +6 · 1d ·GitHub
Uncensored AI models or those fine-tuned for cybersecurity tasks.
> Talk to your Flipper Zero like it's your partner-in-hacking. Vesper turns your pocket hacking tool into an AI-powered command center — controlled entirely through natural language from your Android device or smart glasses.
Stop your AI from making things up — it proposes, deterministic tools decide, every claim checked against ground truth with evidence. Grounded facts and context survive resets. Reverse engineering is the proving ground.
pwndbg (/paʊnˈdiˌbʌɡ/) is a GDB and LLDB plug-in that makes debugging suck less, with a focus on features needed by low-level software developers, hardware hackers, reverse-engineers and exploit developers.
#3697 · +4 · 1d ·GitHub
基于dsh web实现的多种模式，目的是服务于redteam进行授权的安全研究，覆盖渗透测试、红队评估、代码审计等范围领域，请勿用于非法行为。（允许二开，赋予模块各位自己的业务逻辑，方法论只有自己熟练的才好用，好的方法论=好的生态）
#3921 · +3 · 1d ·GitHub
For a list of free hacking books available for download, go here
#3992 · +3 · 1d ·GitHub
Needless to say, most websites suffer from various types of bugs which may eventually lead to vulnerabilities. Why would this happen so often? There can be many factors involved including misconfiguration, shortage of engineers' security skills, etc.
#4028 · +3 · 1d ·GitHub
Your local copy of HackTricks will be available at after <5 minutes (it needs to build the book, be patient).
#4261 · +3 · 1d ·GitHub
Someone hides a crypto wallet inside a puzzle, publishes the address, and dares the internet to solve it and keep what is in it. These are real, still unsolved, and the coins are sitting on-chain right now.
This repository is an overview of what you need to learn penetration testing and a collection of hacking tools, resources and references to practice ethical hacking. Most of the tools are UNIX compatible, free and open source.
#4909 · +2 · 1d ·GitHub
脚本会安装并 enable atkbrain-flash-backend.service、atkbrain-flash-frontend.service，把模型相关环境变量写入 backend/data/atkbrain-claude.env，拉起后端 :5003、前端 :5001（崩溃会自动重启）。
ciphey is the next generation of decoding tools, built by the same people that brought you Ciphey.