Reverse engineer anything with agents, from app behavior down to native binaries.
Global
#8 · +1.9K · 1d ·GitHub
This is the skill that seeded Cloudflare's vulnerability discovery harness, described in Build your own vulnerability harness. The harness grew into a multi-stage, fleet-wide system; this skill is the single-repo starting point it evolved from.
Early access to the graphify platform is open before the public v1 launch: app.graphify.com
Succinct Compositional Program Graph (SCPG) static analysis engine & 14-diagram UML generator in Rust.
In support of NSA's Cybersecurity mission, Ghidra was built to solve scaling and teaming problems on complex SRE efforts, and to provide a customizable and extensible SRE research platform.
An advanced, unified platform for code quality, architectural metrics, and Agile analytics. Features Python AST parsing, Java static analysis (code smells), and interactive project health dashboards built with Streamlit.
One 8 KB skill file that does what REA does: no MCP server, no 207 tools, no setup.
#350 · +119 · 1d ·GitHub
SkillSpector helps you answer: "Is this skill safe to install?"
Pre-indexed code knowledge graph, auto syncs on code changes, for Claude Code, Codex, Gemini, Cursor, OpenCode, AntiGravity, Kiro, CoPilot, and Hermes Agent — fewer tokens, fewer tool calls, 100% local
#474 · +86 · 1d ·GitHub
> Featured: REA — Agent-oriented reverse-engineering tools, from application behavior to native binaries. By the creators of awesome-reverse-engineering.
#476 · +85 · 1d ·GitHub
Secure, fast, efficient, battle-tested at Alibaba's scale. Hybrid architecture code review tool: deterministic pipelines + LLM Agent, precise line-level comments, built-in multi-language ruleset (NPE, thread-safety, XSS, SQL injection), OpenAI & Anthropic compatible.
scriptc compiles TypeScript and JavaScript to typed IR, readable C, textual LLVM IR, native assembly and objects, native executables, and WebAssembly modules. It uses the TypeScript compiler for parsing and type checking. Source outputs require only Node.
This is an early release. It has 100% compatibility in every real world project we have tested. It should work as a drop in replacement for the vast majority of apps.
#721 · +50 · 1d ·GitHub
Reverse engineer anything with agents, from app behavior down to native binaries.
Tutorial · Specification · Samples · Benchmarks · Standard library
Ruff can be used to replace Flake8 (plus dozens of plugins), Black, isort, pydocstyle, pyupgrade, autoflake, and more, all while executing tens or hundreds of times faster than any individual tool.
#981 · +35 · 1d ·GitHub
PS2 games in the browser: static recompilation to WebAssembly with a native runtime
jadx-gui features: - view decompiled code with highlighted syntax - jump to declaration - find usage - full text search - smali debugger, check wiki page for setup and usage
> Like DeepWiki, but deeper. DeepWiki helps you understand code. GitNexus lets you analyze it — a knowledge graph tracks every relationship, not just descriptions.
CAUTION] USE AT YOUR OWN RISK. BE EXTREMELY CAREFUL. This suite is > designed to generate and execute autonomously generated code that may be > unstable or perform unexpected actions.
🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.
#1163 · +28 · 1d ·GitHub
One command sets up everything. install detects which AI coding tools you have, writes the correct MCP configuration for each one, installs platform-native hooks/skills where supported, and injects graph-aware instructions into your platform rules.
#1183 · +28 · 1d ·GitHub
Agent-Native multi-platform reverse engineering and CWE-602 client-side authorization audit workbench.
#1226 · +26 · 1d ·GitHub
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
#1258 · +26 · 1d ·GitHub
Ghidra MCP Server — 200+ MCP tools for AI-powered reverse engineering. GUI plugin + headless server, lazy tool loading, convention enforcement, batch operations, Ghidra Server integration, and Docker deployment.
Deepsec is a security harness for finding vulnerabilities in your codebase powered by coding agents
Semgrep is a fast, open-source, static analysis tool that searches code, finds bugs, and enforces secure guardrails and coding standards. Semgrep supports 30+ languages and can run in an IDE, as a pre-commit check, and as part of CI/CD workflows.
#1756 · +17 · 1d ·GitHub
Claude Code skill to support Android app's reverse engineering
Bugs discovered using Trail of Bits Skills. Found something? Let us know!
The EDG C/C++ front end is the primary focus of this repository.