UNIX-like reverse engineering framework and command-line toolset

Symbolic execution tool

LIEF - Library to Instrument Executable Formats

Framework for lifting x86, amd64, and aarch64 program binaries to LLVM bitcode

Program for determining types of files for Windows, Linux and MacOS.

Triton is a Dynamic Binary Analysis (DBA) framework. It provides internal components like a Dynamic Symbolic Execution (DSE) engine, a dynamic taint engine, AST representations of the x86, x86-64, ARM32 and AArch64 Instructions Set Architecture (ISA), SMT simplification passes, an SMT solver interface and, the last but not least, Python bindings.

Dynamic Instrumentation Tool Platform

Binary Analysis Platform

BARF : A multiplatform open source Binary Analysis and Reverse engineering Framework

The OpenSource Disassembler

Automated static analysis tools for binary programs

Andromeda - Interactive Reverse Engineering Tool for Android Applications

DECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope dynamic Android malware analysis platform. DroidScope is now an extension to DECAF.

An impish, cross-platform binary parsing crate, written in Rust

Pintool example and PoC for dynamic binary analysis

The Kam1n0 Assembly Analysis Platform

The dissection of a simple "hello world" ELF binary.

📓 Some security related notes

软件安全工程师技能表

Binee: binary emulation environment

DyninstAPI: Tools for binary instrumentation, analysis, and modification.

The PE file analysis toolkit

DIE engine

Components of a decompilation pipeline.

idenLib - Library Function Identification [This project is not maintained anymore]

BootStomp: a bootloader vulnerability finder

Python core of avatar²

《macOS软件安全与逆向分析》随书源码

Binary Analysis Framework in Rust

cwe_checker finds vulnerable patterns in binary executables