Reverse-engineering projects on GitHub

1. 1
   #1 · morluto/rea

   rea

   REA lets AI coding agents reverse engineer apps, binaries, websites, and other software through a single MCP server and CLI, returning findings with the evidence behind them so an agent can explain a feature or rebuild it.

   307.6K
2. 2
   #2 · Hack-with-Github/Awesome-Hacking

   Awesome-Hacking

   A massive index that links out to dozens of other awesome-lists covering nearly every security domain: android security, bug bounty, fuzzing, malware analysis, OSINT, reverse engineering, web hacking, and more.

   122.9K
3. 3
   #3 · NationalSecurityAgency/ghidra

   ghidra

   Ghidra is a software reverse engineering (SRE) framework created and maintained by the NSA's Research Directorate, used to disassemble, decompile, graph, and analyze compiled code.

   90.4K

4. 4

   gpt4free

   66.9Kxtekky/gpt4free · Python

   GPT4Free (g4f) is a community-driven project that aggregates many free and reverse-engineered access points to commercial LLMs (GPT-4, Claude, Gemini, DeepSeek, etc.) and media-generation models, exposing them through one unified Python/JS client, web GUI, and OpenAI-compatible API.

   • chatgpt-api
   • deepseek-r1
   • gpt-4o
   • chatbots
5. 5

   ImHex

   55.4KWerWolv/ImHex · C++

   ImHex is a hex editor built for reverse engineers, programmers, and anyone analyzing binary data, with a custom pattern language for parsing and highlighting file structures.

   • analyzer
   • multi-platform
   • disassembler
   • forensics
6. 6

   jadx

   51Kskylot/jadx · Java

   jadx is a Dex to Java decompiler: command line and GUI tools that produce Java source code from Android Dex and Apk files.

   • dex
   • decompilation
   • disassembler
   • debugger
7. 7

   x64dbg

   49.9Kx64dbg/x64dbg · C++

   x64dbg is an open-source user-mode debugger for Windows, built specifically for reverse engineering and malware analysis.

   • dynamic-analysis
   • x64
   • exploit-development
   • disassembler
8. 8

   reverse-skill

   42.5Kzhaoxuya520/reverse-skill · PowerShell

   It is a skill pack that routes AI coding agents to the right reverse engineering, penetration testing, and security research methodology for a given task (APK, binary, JS, CTF, malware, etc.), checks which tools are installed, and runs a repeatable workflow instead of letting the agent guess commands.

   • malware-analysis
   • ctf
   • binary-analysis
   • powershell
9. 9

   AnyPS5

   42.1Kboykopovar/AnyPS5 · C++

   AnyPS5 is a tool that automatically ports PS5 executables so they run natively on Linux and Windows, without emulation.

   • ps5
   • shader
   • vulkan
   • gplv2
10. 10

    RevokeMsgPatcher

    39Khuiyadanli/RevokeMsgPatcher · C#

    A patcher for the Windows desktop versions of WeChat, QQ, and TIM that disables the 'message revoked' notification, so recalled/deleted messages stay visible to you.

    • patch
    • qq
    • patcher
    • wechat
11. 11

    ai-website-cloner-template

    36.9KJCodesMore/ai-website-cloner-template · TypeScript

    A GitHub template that lets an AI coding agent clone any website into a working Next.js project just by giving it the URL.

    • shadcn-ui
    • boilerplate
    • gemini-cli
    • github-copilot
12. 12

    CyberChef

    36.1Kgchq/CyberChef · JavaScript

    CyberChef is a web app that bundles encoding, encryption, compression, hashing and other data-analysis operations ('cyber' operations) into a single drag-and-drop recipe builder that runs entirely in your browser.

    • hashing
    • encoding
    • forensics
    • ctf
13. 13

    Anthropic-Cybersecurity-Skills

    34.6Kmukul975/Anthropic-Cybersecurity-Skills · Python

    An open-source library of 818 production-grade cybersecurity skills for AI agents, covering 34 security domains and mapped to six frameworks including MITRE ATT&CK and NIST CSF 2.0.

    • container-security
    • threat-hunting
    • cloud-security
    • vulnerability-management
14. 14

    shadPS4

    33.7Kshadps4-emu/shadPS4 · C++

    shadPS4 is an early PlayStation 4 emulator for Windows, Linux, macOS and FreeBSD, written in C++. It lets you run real PS4 game titles on a PC.

    • cpp23
    • imgui
    • sdl3
    • emulation
15. 15

    librepods

    30.3Klibrepods-org/librepods · Kotlin

    LibrePods is an app that unlocks AirPods features normally exclusive to Apple devices on Linux and Android — noise control modes, ear detection, battery status, head gestures, conversational awareness and more.

    • linux-app
    • android-app
    • accessibility
    • kotlin
16. 16

    revanced-manager

    29.9KReVanced/revanced-manager · Kotlin

    ReVanced Manager is an Android application that applies ReVanced Patcher patches to Android apps, letting you download an app and inject custom patches (ad-blocking, feature unlocks, UI tweaks, etc.) into it.

    • jetpack-compose
    • modding
    • kotlin
    • mobile-app
17. 17

    h4cker

    29.8KThe-Art-of-Hacking/h4cker · Jupyter Notebook

    A curated collection of thousands of cybersecurity resources — references, scripts, tools, code, labs, and training material — maintained by Omar Santos as a companion to his books, video courses, and live training.

    • cloud-security
    • vulnerability-management
    • vulnerability-research
    • certification
18. 18

    dnSpy

    29.7KdnSpy/dnSpy · C#

    dnSpy is a Windows debugger and assembly editor for .NET and Unity programs - it lets you set breakpoints, step through code, and even edit methods and metadata without having the original source code.

    • disassembler
    • debugger
    • decompiler
    • malware-analysis
19. 19

    ChatGPT

    27.9Kacheong08/ChatGPT · Python

    An unofficial, reverse-engineered ChatGPT API in Python — it lets you talk to ChatGPT from your code or terminal instead of the website, and it is extensible for building chatbots.

    • api-client
    • openai-api
    • chat
    • gpt
20. 20

    ILSpy

    26.7Kicsharpcode/ILSpy · C#

    It's the open-source, cross-platform .NET assembly browser and decompiler: point it at a compiled .NET assembly and it shows you the C# code behind it, on Windows, Linux, and macOS alike.

    • dotnetcore
    • unity
    • decompiler
    • c-sharp
21. 21

    Apktool

    26KiBotPeaches/Apktool · Java

    Apktool is a command-line tool for reverse engineering third-party, closed, binary Android apps. It decodes an APK's resources to nearly original form and rebuilds the app after you make changes.

    • disassembler
    • gradle
    • decompiler
    • apk
22. 22

    radare2

    25.1Kradareorg/radare2 · C

    r2 (radare2) is a libre reverse engineering framework for Unix-like systems: a set of libraries, tools and plugins for analyzing, disassembling, emulating, debugging and modifying binaries.

    • commandline
    • disassembler
    • forensics
    • debugger
23. 23

    downkyi

    24.4Kleiurayer/downkyi

    Downkyi (下载姬) was a desktop GUI tool for downloading videos, subtitles, and danmaku from the Chinese video platform Bilibili (B站) by reverse-engineering its private APIs and bypassing login authentication and anti-scraping protections. The repository has since been permanently shut down and is no longer maintained.

    • anti-bot
    • danmaku
    • piracy
    • bypass
24. 24

    OSX-KVM

    23.7Kkholia/OSX-KVM · Shell

    Scripts and OpenCore configuration for running macOS as a virtual machine under QEMU/KVM on a Linux host, supporting recent macOS versions such as Monterey, Ventura and Sonoma.

    • macos-installer
    • hackintosh
    • proxmox
    • osx
25. 25

    unleashed-firmware

    22.5KDarkFlippers/unleashed-firmware · C

    Unleashed is custom firmware for the Flipper Zero multitool — a fork of the official firmware (OFW) that adds extra features and improvements while staying compatible with official apps.

    • flipperzero
    • unofficial
    • bruteforce
    • wireless
26. 26

    TrollStore

    22.4Kopa334/TrollStore · Objective-C

    TrollStore is a permasigned jailed app for iOS that permanently installs any IPA you open in it. It works via an AMFI/CoreTrust bug: iOS doesn't correctly verify code signatures when a binary has multiple signers, so TrollStore can resign apps with its fake root certificate and keep them installed for good.

    • iphone
    • root
    • jailbreak
    • exploit
27. 27

    frida

    22.3Kfrida/frida · Meson

    Frida is a dynamic instrumentation toolkit for developers, reverse-engineers, and security researchers, used to instrument running apps; more at frida.re.

    • injection
    • pip
    • pentesting
    • debugging
28. 28

    learn_python3_spider

    22.2Kwistbean/learn_python3_spider · Python

    A free Chinese-language tutorial series that teaches Python web scraping from zero — 30+ numbered lessons and mitmproxy guides, from first packet capture to distributed crawling, with source code for the practice projects.

    • mobile-automation
    • mitm
    • selenium
    • captcha
29. 29

    bilibili-API-collect

    20.2KSocialSisterYi/bilibili-API-collect

    This was a community-maintained reference documenting Bilibili's (China's biggest video platform) unofficial, non-public API endpoints - their parameters, call logic and authentication flows - used by developers building unofficial clients and tools. The repository is now permanently closed.

    • bilibili
    • knowledge-base
    • reference
    • deprecated
30. 30

    Atmosphere

    20.1KAtmosphere-NX/Atmosphere · C++

    Atmosphère is a work-in-progress custom firmware (CFW) for the Nintendo Switch that replaces and patches core parts of the console's Horizon OS to add new features and customization.

    • bare-metal
    • toolchain
    • console
    • game-modding
31. 31

    rpcs3

    20.1KRPCS3/rpcs3 · C++

    RPCS3 is the world's first free and open-source PlayStation 3 emulator and debugger, written in C++.

    • assembly-language
    • game-preservation
    • multiplatform
    • llvm
32. 32

    cutter

    20Krizinorg/cutter · C++

    Cutter is a free and open-source reverse engineering platform powered by the rizin engine — a desktop tool for analyzing, disassembling and debugging binaries.

    • disassembler
    • debugger
    • homebrew
    • security-tools
33. 33

    Sandboxie

    19.7Ksandboxie-plus/Sandboxie · C

    Sandboxie is a sandbox-based isolation tool for Windows that lets you run or install untrusted programs in an isolated virtual environment without permanently modifying your drives or registry.

    • malware
    • firewall
    • windows-10
    • windows-11
34. 34

    cheat-engine

    19.3Kcheat-engine/cheat-engine · Pascal

    Cheat Engine is a development environment focused on modding games and applications for personal use. Its repository tags describe it as a memory scanner and debugger.

    • directx
    • debugger
    • scripting
    • modding
35. 35

    upx

    18Kupx/upx · C++

    UPX (Ultimate Packer for eXecutables) is a command-line tool that compresses executable files and DLLs, typically shrinking their size by 50-70% while keeping them runnable without any runtime penalty for most formats.

    • compression
    • gplv2
    • c++
    • command-line
36. 36

    Awesome-Hacking-Resources

    17.5Kvitalysim/Awesome-Hacking-Resources

    A curated collection of hacking, penetration testing and AI red-teaming resources — courses, YouTube channels, CTF platforms and guides, picked to make you better at offensive security.

    • kali-linux
    • exploit-development
    • privilege-escalation
    • owasp
37. 37

    awesome-hacking

    17.3Kcarpedm20/awesome-hacking

    A curated list of hacking tutorials, tools and resources covering system exploitation, reverse engineering, web security, network security, forensics, cryptography and wargames.

    • hacking-tools
    • forensics
    • ctf
    • network-security
38. 38

    YoutubeDownloader

    16.5KTyrrrz/YoutubeDownloader · C#

    A desktop app for downloading from YouTube: paste the URL of any video, playlist or channel and save it in the format you choose. It can also search YouTube by keywords for quick look-ups.

    • mp3
    • mp4
    • playlist
    • youtube-downloader
39. 39

    awesome-python-login-model

    16.2KKr1s77/awesome-python-login-model · Python

    A collection of Python 3 example scripts that simulate logging into popular websites — mostly Chinese ones like Zhihu, Bilibili, Weibo, JD (JingDong) and Taobao, plus Facebook and GitHub — together with a few simple crawlers. It is meant as a learning resource for login simulation and scraping techniques.

    • weibo
    • webdriver
    • login
    • selenium
40. 40

    VirtualXposed

    16.1Kandroid-hacker/VirtualXposed · Java

    VirtualXposed is an Android app, built on VirtualApp and epic, that lets you run Xposed modules on your phone without root, an unlocked bootloader, or a custom system image.

    • xposed
    • hook
    • apk
    • virtualization
41. 41

    bytecode-viewer

    15.7KKonloch/bytecode-viewer · Java

    Bytecode Viewer (BCV) is a lightweight Java/Android reverse engineering suite: drag in a Jar or APK and it decompiles, disassembles, searches and debugs it, powered by several open source tools.

    • bytecode
    • malware
    • debugger
    • decompiler
42. 42

    hacker-roadmap

    15.7Ksundowndev/hacker-roadmap

    This is a curated roadmap and toolkit index for learning and practicing ethical hacking: it explains what penetration testing is and groups hundreds of security tools, wordlists and references by category (recon, password attacks, wireless, exploitation, web hacking, post-exploitation, frameworks).

    • wordlist
    • password-cracking
    • post-exploitation
    • wireless
43. 43

    AssetStudio

    15.6KPerfare/AssetStudio · C#

    A Windows desktop tool for exploring, extracting and exporting assets and assetbundles from Unity games — textures, audio, meshes, fonts, shaders and animations.

    • game-assets
    • unity3d
    • unity
    • converter
44. 44

    OpenWA

    15.5Krmyndharis/OpenWA · TypeScript

    A free, open-source, self-hosted WhatsApp API gateway: it exposes messaging over a REST API with webhooks and a web dashboard, and you run it on your own server.

    • whatsapp-api
    • unofficial
    • nestjs
    • gateway
45. 45

    vphone-cli

    15.5KLakr233/vphone-cli · Swift

    vphone-cli boots a virtual iPhone on a Mac using Apple's Virtualization.framework, built on Apple's PCC research VM infrastructure, so you can run, test, and even jailbreak iOS without a physical device.

    • vnc
    • vm
    • jailbreak
    • virtualization
46. 46

    DeDRM_tools

    15.4Kapprenticeharper/DeDRM_tools · Python

    DeDRM_tools is a collection of scripts and calibre plugins for stripping DRM protection off ebooks so they can be read, converted, or backed up freely.

    • calibre
    • kobo
    • ebook
    • encryption
47. 47

    WeFlow

    15.2Khicccc77/WeFlow · TypeScript

    WeFlow is a tool for viewing, analyzing, and exporting your WeChat chat history — it crunches your chats into personal data visualizations and a one-of-a-kind annual report.

    • data-privacy
    • data-analysis
    • wechat
    • app
48. 48

    jd-gui

    15.2Kjava-decompiler/jd-gui · Java

    JD-GUI is a standalone graphical utility that decompiles Java .class files and displays the reconstructed source code.

    • decompiler
    • java
    • desktop
    • gplv3
49. 49

    Reverse-Engineering

    14.8Kmytechnotalent/Reverse-Engineering · Assembly

    A free, massive collection of reverse engineering and hacking tutorials covering x86, x64, ARM (32/64-bit), AVR, RISC-V, Windows internals, malware analysis, embedded systems, Rust, Go, Wasm, and more, delivered as free ebooks/lessons.

    • assembly-language
    • x64
    • risc-v
    • malware
50. 50

    binwalk

    14.5KReFirmLabs/binwalk · Rust

    Binwalk is a firmware analysis tool that can identify, and optionally extract, files and data that have been embedded inside other files.

    • forensics
    • binary-analysis
    • embedded-systems
    • hacking-tool
51. 51

    awesome-malware-analysis

    14.3Krshipp/awesome-malware-analysis

    A curated 'awesome list' of malware analysis tools and resources, covering sample collection, sandboxes, detection tools, threat intelligence feeds, reverse engineering, and forensics.

    • dynamic-analysis
    • chinese-translation
    • threat-intelligence
    • forensics
52. 52

    awesome-web-security

    13.9Kqazbnm456/awesome-web-security · Python

    A curated list of web security materials and resources, organized by vulnerability class and attack type (XSS, SQL injection, CSRF, SSRF, XXE, deserialization, OAuth, JWT, and more), plus cheatsheets, tools, and write-ups for penetration testing.

    • waf
    • recon
    • appsec
    • information-gathering
53. 53

    openhaystack

    13.9Kseemoo-lab/openhaystack · Swift

    OpenHaystack is a framework that lets you build your own 'AirTag'-like trackers by exploiting Apple's Find My network, so you can track Bluetooth accessories (keyrings, backpacks, notebooks) using nearby iPhones as relays.

    • bluetooth
    • flutter
    • embedded
    • apple
54. 54

    WeChatTweak

    13.8Ksunnyyoung/WeChatTweak · Swift

    WeChatTweak is a macOS command-line tool that patches the installed WeChat desktop client to block message-recall notices, disable WeChat's automatic updater, and let you run multiple WeChat instances at once.

    • injection
    • alfred
    • weixin
    • wechat
55. 55

    LunaTranslator

    13.8KHIllya51/LunaTranslator · C++

    LunaTranslator is a Windows desktop tool that extracts text from visual novels and galgames in real time (mainly via text hooking) and translates it, so you can play untranslated Japanese games.

    • win32
    • translator
    • machine-translation
    • language-learning
56. 56

    theZoo

    13.5Kytisf/theZoo · Python

    theZoo is a public repository of live malware samples and their source code, gathered so that anyone interested in malware analysis can study real specimens in an organized and accessible way.

    • malware
    • malware-analysis
    • infosec
    • virtualization
57. 57

    mastg

    13.3KOWASP/mastg · Python

    A comprehensive OWASP manual for mobile app security testing and reverse engineering. It gives technical processes for verifying the weaknesses listed in the OWASP Mobile Security Weakness Enumeration (MASWE).

    • dynamic-analysis
    • android-application
    • network-analysis
    • checklist
58. 58

    dex2jar

    13.1Kpxb1988/dex2jar · Java

    A set of command-line tools for working with Android .dex and Java .class files, best known for converting the dex bytecode inside an APK into a jar you can open in a Java decompiler.

    • dex
    • obfuscation
    • apk
    • security-tools
59. 59

    ida-pro-mcp

    13Kmrexodia/ida-pro-mcp · Python

    It is an MCP server that bridges IDA Pro with AI language models, letting coding agents like Claude, Codex or Cursor help you reverse engineer binaries ('vibe reversing').

    • disassembler
    • decompiler
    • malware-analysis
    • binary-analysis
60. 60

    hexstrike-ai

    12.9K0x4m4/hexstrike-ai · Python

    HexStrike AI MCP Agents is an MCP server that lets AI agents like Claude, GPT, or Copilot autonomously run 150+ real cybersecurity tools for automated pentesting, bug bounty hunting, CTF challenges, and vulnerability discovery.

    • ai-hacking
    • ctf-tools
    • ai-penetration-testing
    • ai-security-tool
61. 61

    Vector

    12.8KJingMatrix/Vector · Kotlin

    Vector is a high-performance ART hooking framework for modern Android. It ships as a Zygisk module and keeps API consistency with the original Xposed, so Xposed-style modules keep working on current devices.

    • xposed
    • magisk
    • system
    • root
62. 62

    urh

    12.6Kjopohl/urh · Python

    URH (Universal Radio Hacker) is a suite for investigating wireless protocols: it captures radio signals via SDR hardware, demodulates them with automatic modulation detection, and helps you reverse-engineer the bits and bytes flying over the air.

    • sdr
    • wireless
    • radio
    • fuzzing
63. 63

    learn-coding-agent

    12.3Ksanbuphy/learn-coding-agent

    A research repository that reverse-engineers and documents the internal architecture of Anthropic's Claude Code CLI agent, covering its tool system, prompt structure, telemetry, and hidden features.

    • architecture
    • i18n
    • multilingual
    • knowledge-base
64. 64

    awesome-ctf

    11.9Kapsdehal/awesome-ctf · JavaScript

    A curated list of frameworks, libraries, tools, and resources for Capture The Flag (CTF) competitions, covering everything from building challenges to solving them.

    • ctf-tools
    • forensics
    • ctf
    • exploit
65. 65

    Detect-It-Easy

    11.7Khorsicq/Detect-It-Easy · JavaScript

    Detect It Easy (DiE) is a cross-platform tool that identifies file types and inspects executables (PE, ELF, Mach-O) for malware analysts, reverse engineers, and cybersecurity researchers, combining signature-based detection with a deep heuristic engine.

    • hacktoberfest2023
    • disassembler
    • scanner
    • pentest
66. 66

    ipatool

    11.7Kmajd/ipatool · Go

    ipatool is a command-line tool for searching the App Store and downloading .ipa packages for iOS, iPadOS, tvOS and visionOS apps, as well as .pkg packages for macOS apps.

    • appstore
    • visionos
    • golang-library
    • ios-app
67. 67

    SpotiFLAC

    11.6Kspotbye/SpotiFLAC · TypeScript

    SpotiFLAC lets you grab Spotify tracks in true lossless FLAC quality by pulling the actual audio from Tidal, Qobuz or Amazon Music instead of Spotify's own lossy streams, and it works without ever logging into any account.

    • spotify-downloader
    • wails
    • lossless
    • flac
68. 68

    BiliRoaming

    11.5Kyujincheng08/BiliRoaming · Kotlin

    BiliRoaming (哔哩漫游) was an Xposed module that unblocked region-restricted bangumi (anime) in the Android Bilibili app, with a few miscellaneous extra features. The repo is now archived, and its README is a cease-and-desist letter from Bilibili's lawyers.

    • xposed
    • cdn
    • piracy
    • bypass
69. 69

    pics

    11.5Kcorkami/pics · Assembly

    A gallery of visual dissections of binary file formats: annotated posters, tracings and outlines that map how binary files are structured inside.

    • poster
    • curated
    • gallery
    • images
70. 70

    Sn1per

    11.5K1N3/Sn1per · Shell

    Sn1per is an offensive-security platform that bundles reconnaissance, vulnerability scanning, exploitation and reporting into one workspace, orchestrating 600+ exploits and 90+ third-party tools for pentesters and attack-surface-management teams.

    • osint-framework
    • pentest-tool
    • pentesting-tools
    • osint-tool
71. 71

    Baileys

    11.4KWhiskeySockets/Baileys · JavaScript

    Baileys is an open-source TypeScript/JavaScript library that lets your code talk to WhatsApp directly: it connects over WebSockets to the WhatsApp Web API, so you can read and send messages programmatically without the official Business API.

    • whatsapp-api
    • end-to-end-encryption
    • websockets
    • deno
72. 72

    GhidraMCP

    11.4KLaurieWired/GhidraMCP · Java

    GhidraMCP is a Model Context Protocol server that lets LLMs autonomously reverse engineer applications by exposing Ghidra's core functionality (decompiling, renaming, listing imports/exports) to any MCP client.

    • decompiler
    • malware-analysis
    • binary-analysis
    • security-research
73. 73

    DiPlay

    11.4Kshihabal3amri/DiPlay · Kotlin

    DiPlay is an independent CarPlay receiver app for compatible BYD Android head units, offering both wired and wireless connections with a DiAuto-style interface.

    • wifi
    • usb
    • gpl
    • localization
74. 74

    pwndbg

    11.1Kpwndbg/pwndbg · Python

    A plug-in for GDB and LLDB that makes debugging far less painful for low-level developers, hardware hackers, reverse-engineers and exploit developers — it adds the utilities vanilla debuggers are missing.

    • riscv
    • gdb
    • exploit-development
    • disassembler
75. 75

    LaZagne

    11KAlessandroZ/LaZagne · Python

    LaZagne is an open-source tool that retrieves passwords stored locally on a computer by reverse-engineering the storage method of each software (plaintext, APIs, custom algorithms, databases, etc.).

    • penetration-testing-tools
    • credentials
    • password-cracking
    • post-exploitation
76. 76

    reverse-engineering

    10.6KwtsxDev/reverse-engineering

    A curated list of reverse engineering resources: books, courses, practice grounds, and a big toolbox section spanning hex editors, disassemblers, debuggers, and dynamic analysis tools.

    • disassembler
    • malware
    • forensics
    • decompiler
77. 77

    fq

    10.6Kwader/fq · Go

    fq is a command-line tool, language and collection of decoders for working with binary formats - often described as jq for binary data. You can dump a file's structure, run jq-style queries against it and explore results in an interactive REPL.

    • packet-capture
    • repl
    • codec
    • xml
78. 78

    claude-code-sourcemap

    9.7KChinaSiro/claude-code-sourcemap · TypeScript

    An unofficial research repository that reconstructs the TypeScript source code of Claude Code from the published '@anthropic-ai/claude-code' npm package and its bundled source map — for study and learning, not for use.

    • anthropic
    • developers
    • coding-agent
    • claude
79. 79

    KytyPS5

    8.9KKytyPS5/KytyPS5 · C++

    KytyPS5 is a free and open-source PlayStation 5 emulator (translation layer) written in C++ for Windows and Linux, with experimental macOS support, based on a heavily modified version of the Kyty project.

    • ps5
    • qt6
    • sdl3
    • nixos
80. 80

    Cybersecurity-Projects

    8.3KCarterPerez-dev/Cybersecurity-Projects · Go

    This is a growing collection of 70 hands-on cybersecurity projects with full source code, organized into four difficulty tiers, plus 10 certification roadmaps and curated learning resources for cybersecurity careers.

    • certification
    • malware
    • red-team
    • agplv3
81. 81

    universal-modder

    8.3Krehan-remade/universal-modder · Python

    Universal Modder gives Claude Code (and other AI coding agents) a set of Agent Skills, a CLI called 'um', and a fal MCP server so the agent can find, reverse-engineer, and mod almost any PC game you own, then generate art, 3D, audio, test the mod in-game, and record a showcase video.

    • game-assets
    • 3d-generation
    • blender
    • steam
82. 82

    android-reverse-engineering-skill

    8.2KSimoneAvogadro/android-reverse-engineering-skill · Shell

    A Claude Code skill that decompiles Android APK/XAPK/JAR/AAR files and extracts the HTTP APIs used by the app — Retrofit endpoints, OkHttp calls, hardcoded URLs, and authentication patterns — so you can document and reproduce them without the original source code.

    • mobile-security
    • decompiler
    • penetration-testing
    • static-analysis
83. 83

    skills

    7.6Ktrailofbits/skills · Python

    This is Trail of Bits' Claude Code plugin marketplace: a curated collection of AI-agent skills for security research, vulnerability detection, and audit workflows, covering everything from smart contract audits to malware analysis and reverse engineering.

    • vulnerability-management
    • vulnerability-detection
    • security-audit
    • malware-analysis
84. 84

    Claude-Red

    7.6KSnailSploit/Claude-Red · Python

    claude-red is a curated library of offensive security skills for the Claude Skills system: structured SKILL.md files that prime Claude with expert-level methodology for one attack surface each, from SQLi to shellcode.

    • vulnerability-research
    • phishing
    • post-exploitation
    • pentesting-tools
85. 85

    ANE

    7.3Kmaderix/ANE · Objective-C

    ANE is a research project that trains neural networks directly on Apple's Neural Engine using reverse-engineered private APIs, instead of CoreML's inference-only path.

    • model-training
    • edge-ai
    • objective-c
    • optimization
86. 86

    web-to-app

    6.8Kshiaho777/web-to-app · Kotlin

    WebToApp is an Android app that builds installable APKs from web projects entirely on your phone — no PC and no remote build server. Beyond wrapping URLs, it runs real server runtimes, ships an anti-censorship network stack, signs for Google Play and supports browser extensions.

    • app-builder
    • fingerprint
    • webview
    • userscript
87. 87

    AirCard

    6.7KMak5er/AirCard · Swift

    AirCard is a macOS app that lets you customize Apple Wallet card skins and iOS lockscreen passcode keypad themes on iOS 18+ without jailbreaking your iPhone.

    • universal
    • iphone
    • x86
    • jailbreak
88. 88

    chatgpt2api

    6.7Kbasketikun/chatgpt2api · Python

    ChatGPT2API reverse-engineers ChatGPT's web endpoints to give you a self-hosted, OpenAI-compatible API for image generation, image editing and text completions, plus a dashboard for managing a pool of ChatGPT accounts.

    • gpt-image-2
    • self-hosted-ai
    • gpt
    • chatgpt
89. 89

    sharpemu

    6.4Ksharpemu/sharpemu · C#

    SharpEmu is an experimental PlayStation 5 emulator for Windows, Linux and macOS, written from scratch in C#. It is in early development, with the current focus on accuracy and infrastructure rather than game-specific compatibility.

    • ps5
    • emulation
    • emulator
    • arm64
90. 90

    ESP32-Bit-Pirate

    6.1Kgeo-tp/ESP32-Bit-Pirate · C++

    ESP32 Bit Pirate is open-source firmware that turns an ESP32-S3 board into a multi-protocol hardware hacking and development tool, inspired by the Bus Pirate, letting you sniff, send and script digital and radio protocols.

    • flipperzero
    • i2c
    • spi
    • sdr
91. 91

    dusklight

    5.9KTwilitRealm/dusklight · C++

    Dusklight is a reverse-engineered reimplementation of The Legend of Zelda: Twilight Princess, rebuilt from a community decompilation so the game can run natively on PC and mobile with bug fixes, new options, and customization tools.

    • decompilation
    • retrogaming
    • app
    • gaming
92. 92

    ghidra-mcp

    5.7Kbethington/ghidra-mcp · Java

    This is an MCP (Model Context Protocol) server that bridges Ghidra's reverse engineering engine with AI tools like Claude and Cursor, giving AI agents 245 tools to analyze, rename, document, and even emulate functions in binaries.

    • binary-analysis
    • debugging
    • static-analysis
    • model-context-protocol
93. 93

    exploitarium

    5.2Kbikini/exploitarium · Python

    Exploitarium is a single consolidated archive of the author's public proof-of-concept exploits and vulnerability research writeups, merging dozens of their former standalone PoC repos into one place.

    • cve
    • exploit-development
    • fuzzing
    • ethical-hacking
94. 94

    reverse-SynthID

    5Kaloshdenny/reverse-SynthID · Python

    reverse-SynthID reverse-engineers Google's SynthID watermark embedded in Gemini-generated images using signal processing and spectral analysis, and ships tools that detect and surgically bypass that watermark without any access to Google's proprietary encoder/decoder.

    • adversarial-attacks
    • image-manipulation
    • forensics
    • bypass
95. 95

    antigravity-proxy

    4.5Kyuaotian/antigravity-proxy · C++

    Antigravity-Proxy is a Windows DLL injector that forces the Antigravity code editor (and its CLI) to route its network traffic through your SOCKS5/HTTP proxy, without needing Clash's TUN mode.

    • dll-injection
    • transparent-proxy
    • fanqiang
    • http-proxy
96. 96

    claude-code-book

    4.3Klintsinghua/claude-code-book · Python

    'Yu Yu: Decoding Agent Harness' (御舆:解码 Agent Harness) is a roughly 420,000-character Chinese technical book that reverse-engineers how Claude Code's Agent Harness works internally - the runtime driving the conversation loop, tool calls, permission checks, memory, context management and multi-agent orchestration.

    • harness-engineering
    • context-engineering
    • architecture
    • agent-framework
97. 97

    GenP

    4.3KTheMythologist/GenP · AutoIt

    GenP is an open-source Adobe Creative Cloud patcher written in AutoIt that applies binary hex patches to Adobe app files to disable their licensing checks, letting apps like Photoshop, Illustrator, and Premiere Pro run without an active subscription.

    • activation-tools
    • crack
    • adobe
    • cracking
98. 98

    Codex-X

    4.2Kyynxxxxx/Codex-X · Rust

    Codex-X is a cross-platform desktop app that gives OpenAI Codex (desktop app and CLI) a visual control panel: it centralizes prompt injection templates, provider/API switching, session syncing, Skills/MCP management, and TOML config editing so you don't have to hand-edit config files.

    • session
    • toml
    • token-usage
    • codex-cli
99. 99

    morphe-patches

    4.1KMorpheApp/morphe-patches · Java

    This repo holds the patch definitions used to build Morphe, a modified version of the YouTube and YouTube Music Android apps that adds ad-blocking, SponsorBlock, Return YouTube Dislike, and dozens of customization options. It is a continuation of the ReVanced patching work.

    • sponsorblock
    • adblock
    • apk
    • modding
100. 100

     copy-fail-CVE-2026-31431

     4.1Ktheori-io/copy-fail-CVE-2026-31431 · Python

     This repository is a technical writeup and proof-of-concept for CVE-2026-31431, a 9-year-old Linux kernel local privilege escalation (LPE) vulnerability found by Theori's AI vulnerability research tool, Xint Code.

     • privilege-escalation
     • linux-kernel
     • ethical-hacking
     • redteam

Showing the 100 most-starred of 222. See every one in the catalog.

• open-source5,666
• windows3,401
• linux4,181
• macos3,544
• security977
• cross-platform2,622
• security-tools281
• tool1,294
• python2,396
• cybersecurity244
• mit3,311
• hacking135
• desktop-app1,019
• cli2,227
• developer-tools2,927
• gplv3515
• gaming221
• android743
• binary-analysis42
• gui802
• c++420
• game167
• ios535
• mobile473