awesome game security [Welcome to PR]
Overview
Show respect to all the projects below, perfect works of art :saluting_face: As AI agents increasingly write, analyze, and rewrite low-level code, generic toolchains become a bottleneck. Security researchers need semantics they can trust — deterministic compilation on the way in, and faithful decompilation on the way out. - — The AI-friendly C23 compiler for security research. Pure C23, integrated linker, DynCode pipeline, cross-platform PE/ELF/Mach-O generation, compile-time string encryption, and a plugin API spanning 130+ compiler phases — designed so LLM-generated code compiles correctly more often than C++ alternatives. - — The AI-friendly binary analysis & decompilation engine with 1:1 instruction-level lifting. PE/ELF/Mach-O support, strict semantic fidelity, structured C and LLVM IR output, binary rewrite, and a pure C SDK (libneverd) built for CLI tools, integrators, and AI agents.
README
awesome-game-security
If you find that some links are not working, you can simply replace the username with gmh5225.
Or you can send an issue for me.
Show respect to all the projects below, perfect works of art :saluting_face:
NeverC & NeverD — Your Compiler & Decoder for the AI Era
As AI agents increasingly write, analyze, and rewrite low-level code, generic toolchains become a bottleneck. Security researchers need semantics they can trust — deterministic compilation on the way in, and faithful decompilation on the way out. In the age of AI, everyone needs their own compiler and their own decoder.
- NeverC — The AI-friendly C23 compiler for security research. Pure C23, integrated linker, DynCode pipeline, cross-platform PE/ELF/Mach-O generation, compile-time string encryption, and a plugin API spanning 130+ compiler phases — designed so LLM-generated code compiles correctly more often than C++ alternatives.
- NeverD — The AI-friendly binary analysis & decompilation engine with 1:1 instruction-level lifting. PE/ELF/Mach-O support, strict semantic fidelity, structured C and LLVM IR output, binary rewrite, and a pure C SDK (
libneverd) built for CLI tools, integrators, and AI agents.
Compile with NeverC, analyze and decompile with NeverD — an AI-friendly LLVM toolchain you control, built for security research.
How to contribute?
- https://github.com/HyunCafe/contribute-practice
- https://docs.github.com/en/get-started/quickstart/contributing-to-projects
Skills for AI Agents
This repository provides skills that can be used with AI agents and coding assistants such as Cursor, OpenClaw, Claude Code, Codex CLI, and other compatible tools. Install skills to get specialized knowledge about game security topics.
Installation:
npx skills add https://github.com/gmh5225/awesome-game-security --skill
Available Skills:
| Skill | Description |
|---|---|
anti-cheat-systems |
Layered integrity, telemetry provenance, detector operation, enforcement evidence and false-positive review |
dma-attack-techniques |
DMA versus host-mediated acquisition, transport roles, IOMMU scope and memory-forensics evidence |
game-engine-resources |
Engine source, runtime metadata, editor/runtime plugins, assets and authoritative-state boundaries |
game-hacking-techniques |
Attack classes, prerequisite access, trust boundaries, defensive observations and benign counterexamples |
graphics-api-hooking |
Graphics API and translation layers, frame capture, performance traces and observation limits |
mobile-security |
Android/iOS runtime, package provenance, device-integrity evidence and mobile platform boundaries |
awesome-game-security-overview |
Exact repository categories, resource selection, local-layer lookup and source provenance |
reverse-engineering-tools |
Binary identity, static analysis, symbols, versioned code comparison and offline artifacts |
windows-kernel-security |
Driver interfaces, callbacks, platform policy, kernel telemetry and forensic coverage |
game-server-security |
Server authority, sessions, RPC authorization, economy consistency, clocks and replay evidence |
game-supply-chain-security |
Build/release authority, signed updates, dependency provenance, mods and content distribution |
linux-platform-security |
Native Linux, SteamOS, Proton, credentials, isolation and platform-policy evidence |
game-security-research-rigor |
Source reconciliation, claim provenance, detector evaluation, uncertainty and skill regression review |
Compiled wiki: agents can also browse wiki/ (see wiki/AGENTS.md) — a maintained knowledge layer over skills, README categories, and descriptions.
Example:
# Install anti-cheat systems skill
npx skills add https://github.com/gmh5225/awesome-game-security --skill anti-cheat-systems
# Install multiple skills
npx skills add https://github.com/gmh5225/awesome-game-security --skill windows-kernel-security
npx skills add https://github.com/gmh5225/awesome-game-security --skill reverse-engineering-tools
Contents
- Game Engine
- Mathematics
- Renderer
- 3D Graphics
- AI
- Image Codec
- Wavefront Obj
- Task Scheduler
- Game Network
- PhysX SDK
- Game Develop
- Game Assets
- Game Hot Patch
- Game Testing
- Game Tools
- Game Manager
- Game CI
- DirectX
- OpenGL
- Vulkan
- Cheat
- Anti Cheat
- Some Tricks
- Windows Security Features
- WSL
- WSA
- Windows Emulator
- Linux Emulator
- Android Emulator
- IOS Emulator
- Game Boy
- GameCube/Wii
- Nintendo 3DS
- Nintendo Switch
- Xbox
- PlayStation
Game Engine
Guide
- https://github.com/QianMo/Game-Programmer-Study-Notes
- https://github.com/raysan5/custom_game_engines [A comprehensive list of custom game engines]
- https://github.com/stevinz/awesome-game-engine-dev [Awesome Game Engine Development]
- https://github.com/Gforcex/OpenGraphic [Graphic Engine & Game Engine lists]
- https://github.com/bobeff/open-source-engines [A list of open source game engines]
- https://github.com/ThisisGame/cpp-game-engine-book
- https://github.com/netwarm007/GameEngineFromScratch
- https://forums.unrealengine.com [Unreal]
- https://docs.unrealengine.com [Unreal]
- https://www.unrealengine.com/resources [Unreal]
- https://github.com/donaldwuid/unreal_source_explained [Unreal]
- https://github.com/mikeroyal/Unreal-Engine-Guide [Unreal]
- https://github.com/Allar/ue5-style-guide [Unreal]
- https://github.com/revan1611/UE-Interview-Cheat-Sheet [Unreal]
- https://github.com/tomlooman/ue4-tutorials [Unreal]
- https://github.com/JaredP94/Unreal-Development-Guides-and-Tips [Unreal]
- https://github.com/ikrima/gamedevguide [Unreal Engine / game development programming guide]
- https://github.com/lettier/3d-game-shaders-for-beginners [Shader]
- https://github.com/PardCode/OpenGL-3D-Game-Tutorial-Series [OpenGL]
- https://github.com/PardCode/CPP-3D-Game-Tutorial-Series [DirectX]
- https://github.com/ssloy/tinyrenderer [Render]
- https://github.com/crazyshader/GameDev [Unity]
- https://github.com/RyanNielson/awesome-unity [Unity]
- https://github.com/shadirvan/Unity-Cheat-Sheet [Unity]
- https://github.com/QianMo/Unity-Design-Pattern [Unity Design]
- https://github.com/whx-prog/The-Seed-Link-Future [Unity VR]
- https://github.com/twohyjr/Metal-Game-Engine-Tutorial [Apple’s Metal Api]
- https://github.com/GameDevGrzesiek/OptimizationBible [Game optimization notes focused on Unity and Unreal Engine]
Source
- https://github.com/EpicGames/UnrealEngine
- https://github.com/Unity-Technologies/UnityCsReference [C# reference]
- https://github.com/cocos2d/cocos2d-x
- https://github.com/cocos/cocos-engine
- https://github.com/cocos/cocos4
- https://github.com/gmh5225/GameEngine-CRYENGINE
- https://github.com/panda3d/panda3d
- https://github.com/ValveSoftware/source-sdk-2013
- https://github.com/gmh5225/source-sdk-orangebox
- https://github.com/UTINKA/source-engine.2003
- https://github.com/gmh5225/SourceEngine2007
- https://github.com/nillerusr/source-engine
- https://github.com/gmh5225/GoldSourceRebuild [GoldSource engine rebuild]
- https://github.com/K0bin/SourceRenderer [Rust toy engine/renderer with Valve Source format loaders (bsp/mdl/vpk/vtf) and Vulkan/Metal/WebGPU backends]
- https://github.com/adriengivry/Overload
- https://github.com/gmh5225/GameEngine-MapleEngine
- https://github.com/inanevin/LinaEngine
- https://github.com/apistol78/traktor [Open-source C++ Vulkan game engine with editor tooling and shipped commercial titles on Steam, PSN, iOS, and macOS]
- https://github.com/storm-devs/storm-engine
- https://github.com/minetest/minetest
- https://github.com/godotengine/godot
- https://github.com/NVIDIA-RTX/godot [NVIDIA fork of Godot Engine]
- https://github.com/gmh5225/reGS
- https://github.com/nem0/LumixEngine
- https://github.com/urho3d/Urho3D
- https://github.com/KorokEngine/Korok [Golang]
- https://github.com/matjam/bunyip [Pure Go game engine with Vulkan rendering, ECS, physics, and headless screenshot tests]
- https://github.com/BoomingTech/Pilot
- https://github.com/Sirkles/JoshoEngine-Native
- https://github.com/ExplosionEngine/Explosion
- https://github.com/danhuynh0803/Campfire
- https://github.com/lowenware/dotrix [Rust]
- https://github.com/bevyengine/bevy [Rust]
- https://github.com/FyroxEngine/Fyrox [Rust]
- https://github.com/AmbientRun/Ambient [Rust]
- https://github.com/PrograMistV1/ursus [Rust Vulkan engine with render graph, ECS, asset pipeline, and deferred pipelines]
- https://github.com/matthewjberger/nightshade [Rust data-oriented game engine with custom ECS and wgpu PBR renderer (native/web/VR)]
- https://github.com/not-fl3/macroquad [Rust 2D]
- https://github.com/AbyssEngine/AbyssEngine [ARPG]
- https://github.com/skylicht-lab/skylicht-engine
- https://github.com/ValveSoftware/halflife [Half-Life 1]
- https://github.com/SamVanheer/halflife-unified-sdk [Half-Life SDK]
- https://github.com/alliedmodders/hl2sdk [Half-Life SDK]
- https://github.com/ezhangle/hlmaster [Half-Life Master Server]
- https://github.com/MonoGame/MonoGame [.NET]
- https://github.com/libgdx/libgdx [Cross-platform Java game development framework]
- https://github.com/vchelaru/FlatRedBall [.NET 2D]
- https://github.com/nCine/nCine [2D]
- https://github.com/gameplay3d/gameplay [2D/3D]
- https://github.com/NoelFB/blah [C++ 2D]
- https://github.com/Squalr/Squally [C++ 2D]
- https://github.com/Hekbas/Luth [C++ 2D]
- https://github.com/u3d-community/U3D [C++ 2D/3D]
- https://github.com/turbulenz/turbulenz_engine [HTML5]
- https://github.com/melonjs/melonJS [HTML5]
- https://github.com/egret-labs/egret-core [HTML5]
- https://github.com/pixijs/pixijs [HTML5]
- https://github.com/BabylonJS/Babylon.js [HTML5/WebGL/WebGPU game and rendering engine]
- https://github.com/playcanvas/engine [HTML5 3D]
- https://github.com/TorqueGameEngines/Torque2D [2D]
- https://github.com/TorqueGameEngines/Torque3D [3D]
- https://github.com/gmh5225/GameEngine-CX3D [3D]
- https://github.com/solenum/exengine [C99 3D]
- https://github.com/TheCherno/Hazel
- https://github.com/duddel/yourgamelib
- https://github.com/Serious-Engine/Base
- https://github.com/benanil/Castle-Engine [DX11]
- https://github.com/OpenArena/engine [quake3]
- https://github.com/rbfx/rbfx [C# support and WYSIWYG editor]
- https://github.com/BobbyAnguelov/Esoterica
- https://github.com/ZDoom/gzdoom [Doom]
- https://github.com/UZDoom/UZDoom [Doom source port, GZDoom continuation]
- https://github.com/L-Spiro/L.-Spiro-Engine-2022
- https://github.com/MohitSethi99/ArcEngine
- https://github.com/gscept/nebula
- https://github.com/irisengine/iris [cross-platform C++]
- https://github.com/WistfulHopes/NightSkyEngine [A fighting game engine written in Unreal Engine 5]
- https://github.com/ObEngine/ObEngine [2D+Lua]
- https://github.com/harukumo/HorizonEngine [3D rendering engine]
- https://github.com/benjinx/Toon [C++]
- https://github.com/chrismaltby/gb-studio [GameBoy]
- https://github.com/orx/orx [C++]
- https://github.com/gmh5225/EtherealEngine [C++]
- https://github.com/clibequilibrium/EquilibriumEngine [C++]
- https://github.com/turanszkij/WickedEngine [C++ 3D]
- https://github.com/AustinBrunkhorst/Ursine3D [C++ 3D]
- https://github.com/RavEngine/RavEngine [C++ 3D]
- https://github.com/asc-community/MxEngine [C++ 3D]
- https://github.com/jmorton06/Lumos [C++ 2D/3D]
- https://github.com/fredakilla/GPlayEngine [C++ 2D/3D]
- https://github.com/crownengine/crown [C++ 2D/3D]
- https://github.com/FlaxEngine/FlaxEngine [C++/C# 3D]
- https://github.com/stride3d/stride [C# 3D]
- https://github.com/ProwlEngine/Prowl [Open-source C# 3D game engine with Unity-like editor (MIT)]
- https://github.com/Net5F/AmalgamEngine
- https://github.com/rxi/kit [pixels]
- https://github.com/isadorasophia/murder [pixel]
- https://github.com/nitaigao/engine-showcase [Old engine]
- https://github.com/PanosK92/SpartanEngine [Research-focused game engine designed for real-time solutions]
- https://github.com/OpenXRay/xray-16 [Improved version of the X-Ray Engine]
- https://github.com/love2d/love [2D game framework for Lua]
- https://github.com/4ian/GDevelop [Open-source cross-platform 2D/3D/multiplayer game engine]
- https://github.com/multitheftauto/mtasa-blue [Multi Theft Auto — networked multiplayer engine/mod framework for GTA: San Andreas]
- https://github.com/PixelGuys/Cubyz [3D voxel sandbox game written by Zig language]
- https://github.com/RSDKModding/RSDKv5-Decompilation [Retro Engine v5 / v5Ultimate decompilation]
- https://github.com/InfiniteC0re/OpenBarnyard [WIP decompilation of Barnyard and the proprietary TOSHI 2.0 engine, with Ghidra RE workflow]
- https://github.com/OpenKH/OpenKh [Kingdom Hearts reverse-engineering libraries, tools, engine research, and modding documentation]
- https://github.com/koosoli/PoseidonVK [Vulkan modernization fork of the Poseidon/CWR-CE engine (Arma: Cold War Assault)]
- https://github.com/udinmoInc/WindEffects [C++23 Vulkan game engine with ECS, editor, and asset pipeline]
- https://github.com/MasterLaplace/LplPlugin [Experimental C++23 engine with Vulkan, ECS, Linux kernel IPC module, and Morton spatial partitioning]
- https://github.com/goobz22/cat-annihilation [C++20/Vulkan/CUDA engine with render graph, clustered deferred PBR, ECS, and wave-survival test game]
- https://github.com/orkitec/orkige [C++20 game engine with dual OGRE renderers, Lua scripting, and AI-native editor over MCP]
- https://github.com/Bloom-Engine/engine [Native TypeScript game engine compiling to Metal, DirectX 12, Vulkan, OpenGL, and WebGPU]
- https://github.com/Krilliac/SparkEngine [Open-source C++23 3D engine with DirectX 12/Vulkan RHI, ECS, Jolt Physics, and ImGui editor]
- https://github.com/HyperionGameTech/HyperionEngine [C++/C# game engine with DirectX 12 and Vulkan, editor, multiplayer, and Glimmer GI with clustered deferred rendering]
- https://github.com/doriaxengine/doriax [Cross-platform C++ ECS game engine with editor, Lua/C++ scripting, and DirectX/OpenGL/Metal/Vulkan backends]
- https://github.com/wh1t3lord/kotek [Modular C++20 game/application framework with OpenGL ES, Vulkan, DirectX, and BGFX backends]
- https://github.com/oxylusengine/Oxylus [Data-driven C++ game engine with modular Vulkan renderer, flecs ECS, Lua scripting, and ImGui editor]
- https://github.com/ostef/Vk-Engine [WIP Vulkan game engine with hot-reloadable modules, clustered forward rendering, PBR, and editor viewports]
- https://github.com/RuqoomTech/Pyramid-Engine [C++ Windows OpenGL game engine with deferred/forward rendering, tests, and CI (pre-alpha)]
Game Engine Plugins:Unreal
- Plugin for UE4 to user Rider for Unreal Engine as code editor
- Design-agnostic node system for scripting game’s flow in Unreal Engine
- Sample Unreal Engine 5.0.1 C++ Project That Incorporates Dear ImGui
- A set of tools and utilities for use with Unreal Engine projects using ImGui
- A simple Unreal Engine subsystem to provide a more accurate server world time to clients
- UE4 UI Texture Validator Plugin
- Unreal Engine .NET 6 integration
- Houdini Engine Plugin for Unreal Engine
- A small tutorial repository on capturing images with semantic annotation from UnrealEngine to disk
- UE4 plugin for live2d model
- An Unreal Engine code plugin that adds a custom asset type and editor to the engine
- Unreal Engine 4 Plugin for Lua APIs implementation
- Debug Menu for UnrealEngine4
- https://github.com/Ghostleadie/CheatManagerMenu [UE 5.8 plugin that auto-builds an in-game cheat menu by reflecting UCheatManager and registered cheat extensions]
- ‘Dear Imgui’ remote access library and application
- Customizable performance metric charts and STAT commands control panel
- Unreal Engine plugin providing a set of Hermes endpoints
- Unreal Engine 4 Plugin for Lua APIs implementation
- Copies the argument string to the clipboard and outputs the characters copied to the clipboard
- Generic graph data structure plugin for ue4
- https://github.com/TheGeebus/SimpleQuest [Unreal Engine 5.6+ event-driven progression/quest framework with visual graph authoring]
- A quick implementation of modular game features for the ‘BTS’ test
- https://github.com/Natfii/UnrealClaude [Claude Code CLI integration for Unreal Engine 5.7; AI coding assistance with built-in UE5.7 documentation context in the editor]
Game Engine Plugins:Unity
- A markdown viewer for unity
- An integrated solution for authoring / importing / simulating / rendering strand-based hair in Unity
- A maintained collection of useful & free unity scripts / library’s / plugins and extensions
- ChatGPT integration with Unity Editor
- Code editor integration for supporting Cursor as code editor for unity
- https://github.com/Besty0728/Unity-Skills [AI automation skills specifically designed for Unity]
- https://github.com/yucchiy/UniCli [CLI to control Unity Editor from terminal — compile, test, build, inspect GameObjects; 80+ commands, AI-agent ready (Claude Code plugin, Agent Skills)]
Game Engine Plugins:Godot
- https://github.com/GDPatch/GDPatch [Cross-platform cross-version Godot 4.x mod loader with script patching, Lua hooks, and runtime mod loading without modifying game files]
- https://github.com/libriscv/godot-sandbox [Sandboxing that enables safe modding for Godot games]
- https://github.com/gtibo/Godot-Plush-Character [3D Plush Character for Godot 4.x]
- https://github.com/allenwp/godot-resource-remaps [Godot editor export plugin for remapping resources by feature tags]
Game Engine Plugins:Lumix
- https://github.com/nem0/lumixengine_maps [Map downloader]
Game Engine Detector
- https://github.com/walzer/game-engine-detector [Mobile Game]
Mathematics
- https://github.com/nfrechette/rtm
- https://github.com/microsoft/DirectXMath
- https://github.com/Kazade/kazmath
- https://github.com/milakov/int_fastdiv
- https://github.com/freemint/fdlibm
- https://github.com/Jaysmito101/cgl
- https://github.com/orange-cpp/omath [C++23 constexpr math/physics framework for game, mod, and cheat development]
Renderer
- https://github.com/bkaradzic/bgfx [Rendering library]
- https://github.com/DiligentGraphics/DiligentEngine [Rendering library]
- https://github.com/LukasBanana/LLGL [Thin C++ abstraction over OpenGL, D3D11/12, Vulkan, and Metal with C/C#/Go wrappers]
- https://github.com/kanition/pbrtbook [Physically Based Rendering: From Theory To Implementation]
- https://github.com/keith2018/SoftGLRender
- https://github.com/DQLin/VolumetricReSTIRRelease
- https://github.com/HackerPoet/NonEuclidean
- A graphics engine designed to run on a single thread on CPU
- https://github.com/paroj/gltut [OpenGL Render]
- https://github.com/ashawkey/raytracing [RayTracer]
- https://github.com/sultim-t/xash-rt [Xash3D FWGS with a real-time path tracing]
- https://github.com/crosire/reshade [A generic post-processing injector for games and video software]
- https://github.com/harukumo/HorizonEngine [3D rendering engine]
- https://github.com/Patryk27/strolle [Real-time rendering engine]
- https://github.com/ssloy/tinyraytracer [A brief computer graphics / rendering course]
- https://github.com/freetype/freetype [Render fonts]
- https://github.com/MethanePowered/MethaneKit [DirectX 12, Metal & Vulkan]
- https://github.com/EmbarkStudios/kajiya [Experimental real-time global illumination renderer]
- https://github.com/tgfrerer/island [Experimental hot-reloading Vulkan renderer/engine (C/C++) for Linux and Windows]
3D Graphics
- https://github.com/gmh5225/nv-graphics-mesa
- https://github.com/MethanePowered/MethaneKit [DirectX 12, Metal & Vulkan]
- https://github.com/mrdoob/three.js [JavaScript 3D Library]
- https://github.com/playcanvas/supersplat [3D Gaussian Splat Editor]
AI
- https://github.com/ls361664056/GameAI-paper-list [zh]
- https://github.com/lightningpixel/modly [Local image-to-3D mesh desktop app; open-source AI on GPU; Windows/Linux; extensible generators]
- https://github.com/neilsonnn/image-blaster [Claude skillset: single image to 3D meshes (.glb/.obj), Gaussian splat environment (.spz), and SFX; World Labs + FAL; Unity/Unreal/Godot/Blender]
- https://github.com/PSkinnerTech/3d-asset-factory [CLI-first YAML→3D pipeline: GPT Image 2.0 concept → TRELLIS.2 GLB; QA gate, review HTML, web/Unity/Unreal export; mock & remote GPU runners]
- https://github.com/blendi-remade/sprite-sheet-creator [AI 2D pixel-art sprite sheets & parallax backgrounds; fal.ai; Next.js; walk/jump/attack/idle, sandbox]
Image Codec
- https://github.com/nothings/stb
- https://github.com/libjpeg-turbo/libjpeg-turbo
- https://github.com/erkkah/tigr
- https://github.com/tsoding/olive.c
- https://github.com/kylejckson/PaintFE [Rust raster image editor — layers, wgpu GPU filters, Rhai scripting, CLI batch, GIF/APNG, single portable binary]
Wavefront Obj
Task Scheduler
Game Network
Guide
- https://github.com/MFatihMAR/Game-Networking-Resources
- https://partner.steamgames.com/doc/api/ISteamNetworkingMessages#functions_sendrecv [Steam]
- https://github.com/mcxiaoke/mqtt [mqtt]
Source
- https://github.com/cloudwu/skynet
- https://github.com/ketoo/NoahGameFrame [Server Engine]
- https://github.com/chronoxor/CppServer
- https://github.com/Qihoo360/evpp
- https://github.com/ValveSoftware/GameNetworkingSockets [Steam]
- https://github.com/mas-bandwidth/yojimbo [C++ network library for client/server games]
- https://github.com/pond3r/ggpo [Rollback networking SDK using input prediction and speculative execution; includes the Vector War sample]
- https://github.com/gschup/ggrs [Safe Rust reimagining of GGPO with a request-based API; includes P2P, spectator, and sync-test examples]
- https://github.com/HeatXD/GekkoNet [C/C++ P2P rollback networking SDK inspired by GGPO and GGRS, with input prediction and speculative execution]
- https://github.com/skywind3000/kcp [KCP]
- https://github.com/Unit-X/kcp-cpp [KCP]
- https://github.com/TLeonardUK/ds3os [Dark Souls 3]
- https://github.com/TLeonardUK/ds2os [Dark Souls 2]
- https://github.com/geekrainian/killingfloor-bot-client [Killing Floor UE2.5 headless client with protocol docs, Steam auth RE, and Ghidra scripts]
- https://github.com/ljagiello/lastwar-client [Go reimplementation of Last War mobile client networking: GSL RSA/AES bootstrap, SFS2X framing, and SFSObject codec with live protocol documentation]
- https://github.com/Bratah123/Spirit-PTCGO [Pokemon TCG Online private server emulator]
- https://github.com/DragonMinded/bemaniutils [RE toolkit for BEMANI arcade titles: network service emulation, packet sniff/redirect/reconstruct, and binary asset unpack/repack utilities]
- https://github.com/rathena/rathena [MMORPG]
- https://github.com/TrinityCore/TrinityCore [Server for WOW]
- https://github.com/uNetworking/uWebSockets [WebSockets]
- https://github.com/socketio/socket.io [Nodejs]
- https://github.com/mqttjs/MQTT.js [mqtt nodejs]
- https://github.com/eclipse/paho.mqtt.cpp [mqtt cpp]
- https://github.com/topfreegames/pitaya [Server framework]
- https://github.com/cBournhonesque/lightyear [Rust server-authoritative Bevy multiplayer library with prediction, rollback, and WebTransport/wasm support]
- https://github.com/azerothcore/azerothcore-wotlk [Server for WOW]
- https://github.com/arlyon/azerust [Rust Server for WOW]
- https://github.com/arlyon/awesome-wow-rust [Rust Server for WOW]
- https://github.com/2601677867/One-Click-Run_Source_Server [Server for Source Engine]
JWT / Auth Token
- https://github.com/ticarpi/jwt_tool [JWT toolkit — validate, forge, scan, tamper; CVE tests (alg=none, RS/HS256, key injection, etc.), fuzzing, dict attack]
Location / Geocoding
- https://github.com/traccar/traccar-geocoder [Self-hosted reverse geocoding from OpenStreetMap; Traccar stack; Rust server + C++ PBF indexer, Docker]
PhysX SDK
- https://github.com/NVIDIAGameWorks/PhysX
- https://github.com/NVIDIAGameWorks/PhysX-3.4
- https://github.com/bulletphysics/bullet3
Game Develop
Guide
- https://github.com/Calinou/awesome-gamedev
- https://github.com/notpresident35/learn-awesome-gamedev
- https://github.com/yrgo/awesome-educational-games
- https://github.com/bobeff/open-source-games [A list of open source games]
- https://github.com/michelpereira/awesome-open-source-games [Collection of Games]
- https://github.com/raizam/gamedev_libraries [A collection of open source c/c++ libraries for gamedev]
- https://github.com/gheja/game-design-documents [Game design documents]
- https://github.com/Kavex/GameDev-Resources [Game Development resources]
- https://github.com/crazyshader/GameDev [Unity]
- https://github.com/RyanNielson/awesome-unity [Unity]
- https://github.com/QianMo/Unity-Design-Pattern [Unity Design]
- https://github.com/michal-z/zig-gamedev [Building game development ecosystem for ziglang]
- https://github.com/OTFCG/Awesome-Game-Analysis [Video game tech analysis resources]
- https://github.com/killop/anything_about_game [Game Development resources]
- https://github.com/TastSong/GameProgrammerStudyNotes [Game Development notes]
- https://github.com/gmh5225/gtav-sourcecode-build-guide [GTA V Source Code Build Tutorial]
Source
- https://github.com/PiMoNFeeD/csgo-src [Leaked CSGO]
- https://github.com/perilouswithadollarsign/cstrike15_src [Leaked CSGO With CI]
- https://github.com/gmh5225/Far-Cry-1-Source-Full [Leaked Far Cry 1]
- https://github.com/gmh5225/FarCry [Leaked Far Cry 1]
- https://github.com/SwagSoftware/Kisak-Strike [Open Source CSGO]
- https://github.com/SwagSoftware/KisakCOD [COD4 Open Source Reimplementation]
- https://github.com/SwagSoftware/KisakBlack [COD:Black Ops Open Source Reimplementation]
- https://github.com/gmh5225/csso-src [CSGO Mod]
- https://github.com/thomaseichhorn/cs16-client [Rewrote CS1.6]
- https://github.com/s1lentq/ReGameDLL_CS [Reversed CS1.6]
- https://github.com/Velaron/cs16-client [Reversed CS1.6]
- https://github.com/Source2ZE/CS2Fixes [CS2 mod]
- https://github.com/gmh5225/Game-GTA-re3 [Reversed GTA III, Vice City]
- https://github.com/gmh5225/reGTA [Reverse Engineered GTA III and GTA VC]
- https://github.com/gta-reversed/gta-reversed-modern [Reimplementation of GTA:SA 1.0 US]
- https://github.com/monstercameron/LibertyFlux [GTA IV RAGE engine Rust reimplementation via Ghidra-assisted reverse engineering for 64-bit Windows, Windows on ARM, and macOS; no game assets]
- https://github.com/ThirteenAG/GTAIV.EFLC.FusionFix [GTA IV: Complete Edition fixes and modern-feature patch (graphics, FPS, QoL, scripting, widescreen)]
- https://github.com/gmh5225/Grand-Theft-Auto-Modding-Source [Code snippets for Vice City]
- https://github.com/Harrison1/unrealcpp [UE4 C++ examples]
- https://github.com/QianMo/UE4-FPS-Game [UE4 FPS Game]
- https://github.com/KitchenGun/UE4_FPS [UE4 FPS Demo]
- https://github.com/tomlooman/SimpleFPSTemplate [UE4 FPS Demo]
- https://github.com/tomlooman/EpicSurvivalGame [UE4 FPS Game]
- https://github.com/QianMo/UE4-Tank-Game [UE4 Game]
- https://github.com/gmh5225/UE5-FPS-CryptRaider [UE5 FPS Game]
- https://github.com/LeroyTechnologies/ProjectM [UE5 FPS Game]
- https://github.com/invi1998/MultiplayerBlasterGame [UE5 FPS Game]
- https://github.com/DruidMech/MultiplayerCourseBlasterGame [UE5 FPS Game]
- https://github.com/gmh5225/UE5MultiplayerProject [UE5 horror game with anti-cheat]
- https://github.com/perfect-hand/ue5-cardgame [UE5 Card Game]
- https://github.com/stackOverflower92/FightingGame-UE5 [UE5 Fighting Game]
- https://github.com/gmh5225/UnrealEngine5-UltimateStreetFighters [UE5 StreetFighters Game]
- https://github.com/EvelynSchwab/ComponentFuseMechanic [UE5 constraining system]
- https://github.com/CobraCodeDev/TP_2DSideScrollerBP [UE5 2D template]
- https://github.com/gmh5225/ue5-roll-a-ball-game [UE5 Roll a Ball Game]
- https://github.com/tomlooman/ActionRoguelike [UE Roguelike Game]
- https://github.com/Unity-Technologies/FPSSample [Unity Game]
- https://github.com/OguzKaira/FPS-Movement [Unity FPS]
- https://github.com/OguzKaira/SQLite-Unity3D [Unity SQLite]
- https://github.com/swordjoinmagic/MoBaDemo [Unity MoBa]
- https://github.com/gmh5225/U3D_MiniDNF [Unity mini DNF]
- https://github.com/gmh5225/unity-vrchat-template [Unity VRChat Template]
- https://github.com/Saukiya/Arknights [Unity Arknights]
- https://github.com/ZehMatt/SnakeRoyal [Mini Game With Server]
- https://github.com/MKXJun/Super-Fighter [DX11 Mini Game]
- https://github.com/MKXJun/Rubik-Cube [DX9/11 Mini Game]
- https://github.com/Suprcode/mir2 [MIR2]
- https://github.com/Suprcode/mir3-zircon [MIR3]
- https://github.com/WolfireGames/overgrowth [Overgrowth]
- https://github.com/solidi/hl-mods [Modification For Half-Life]
- https://github.com/codingben/maple-fighters [A small online game similar to MapleStory]
- https://github.com/gmh5225/WinAPI_MapleStory [WinAPI MapleStory]
- https://github.com/ZeromaXHe/MapleStoryCopy [Godot MapleStory]
- https://github.com/godotengine/godot-demo-projects [Demonstration and Template Projects for Godot]
- https://github.com/loqix/Fortnite [Fortnite]
- https://github.com/bradharding/doomretro [DOOM]
- https://github.com/Daivuk/PureDOOM [DOOM]
- https://github.com/NSG650/NtDOOM [Doom running in the NT kernel]
- https://github.com/Luxon98/Super-Mario-Bros-game [Remake of Super Mario]
- https://github.com/plibither8/2048.cpp [2048]
- An open source re-implementation of RollerCoaster Tycoon 2
- This is the old Paradise SPRX BO2 soruce code
- https://github.com/dreamstalker/rehlds [Reverse-engineered HLDS]
- https://github.com/AndroidModLoader/AndroidModLoader [Android Mod Loader]
- https://github.com/marblexu/PythonPlantsVsZombies [PlantsVsZombies]
- https://github.com/mhyousefi/ZombiesVsPlants [PlantsVsZombies]
- https://github.com/Fewnity/Counter-Strike-DS-Unity-Project [Unity CS]
- https://github.com/Fewnity/Counter-Strike-Nintendo-DS [Nintendo CS]
- https://github.com/ppy/osu [osu]
- https://github.com/ppy/osu-framework [osu]
- https://github.com/dufernst/LegionCore-7.3.5 [wow]
- https://github.com/RageProject/5.4.7-Wow-source [wow]
- https://github.com/SkyFire/MopCore547 [wow]
- https://github.com/Arctium/WoW-Launcher [wow launcher]
- https://github.com/skMetinek/Non-Newtonian-New-York [Spider-Man Remastered Mod]
- https://github.com/playgameservices/cpp-android-basic-samples [Sample games using the Google Play Games C++ SDK]
- https://github.com/pafuhana1213/KawaiiPhysics [Simple fake Physics for UnrealEngine4 & 5]
- https://github.com/pafuhana1213/VTuberWithUE4 [UE4 VTuber]
- https://github.com/Bratah123/GojoTheSpire [Slay The Spire Remastered Mod]
- https://github.com/snesrev/zelda3 [A reimplementation of Zelda 3]
- https://github.com/kantam5/DeadByDaylight [Dead By Daylight Copy]
- https://github.com/Phobos-developers/Phobos [Red Alert 2: Yuri’s Revenge engine extension]
- https://github.com/praydog/AutomataMP [NieR]
- https://github.com/xinyu-evolutruster/3D-Racing-Game [A racing game based on OpenGL]
- https://github.com/ProjectBorealis/PBCharacterMovement [HL2-style, classic FPS movement for UE4 implemented in C++]
- https://github.com/Merisho/tx-holdem [Texas Holdem Poker made by JS]
- https://github.com/raysan5/raylib [A simple and easy-to-use library to enjoy videogames programming]
- https://github.com/Bigfoot71/r3d [3D Extension Library for raylib]
- https://github.com/scottcgi/Mojoc [A cross-platform, open-source, pure C game engine for mobile game]
- https://github.com/MarilynDafa/Bulllord-Engine [lightspeed lightweight elegant game engine in pure c]
- https://github.com/orangeduck/Corange [Pure C Game Engine]
- https://github.com/NotYetGames/WarriOrb [a Dark-Souls like action platformer using UE4]
- https://github.com/pjasicek/OpenClaw [Reimplementation of Captain Claw (1997) platformer]
- https://github.com/galaxyhaxz/devilution [Reversed Devilution]
- https://github.com/assaultcube/AC [FPS Game]
- https://github.com/fishfolk/jumpy [Pixels style]
- https://github.com/jynew/jynew [JinYongLegend]
- https://github.com/johndpope/pianogame [Piano Game]
- https://github.com/gmh5225/QQTang [QQTang]
- https://github.com/kvnxiao/storytime [Remake of MapleStory]
- https://github.com/deathkiller/jazz2-native [Remake of Jazz Jackrabbit 2]
- https://github.com/electronicarts/CnC_Red_Alert [Command and Conquer: Red Alert]
- https://github.com/huangkaoya/redalert2 [Red Alert 2 on Web]
MCP server
- https://github.com/TensorBlock/awesome-mcp-servers [Awesome MCP]
- https://github.com/ahujasid/blender-mcp [Blender Model Context Protocol Integration]
- https://github.com/chongdashu/unreal-mcp [MCP for Unreal Engine]
- https://github.com/kvick-games/UnrealMCP [MCP for Unreal Engine]
- https://github.com/VedantRGosavi/UE5-MCP [MCP for Unreal Engine 5]
- https://github.com/glmour/ue-live-bridge [UE4SS Lua bridge with Python MCP driver for live UObject/UFunction control and verified agent write claims]
- https://github.com/justinpbarnett/unity-mcp [MCP for unity]
- https://github.com/wondeks/unity-mcp [MCP for unity]
- https://github.com/gmh5225/mcpup [MCP for unity]
- https://github.com/IvanMurzak/GameDev-MCP-Server [Engine-agnostic MCP server shared by Unity-MCP, Godot-MCP, and Unreal-MCP]
- https://github.com/n24q02m/better-godot-mcp [Composite MCP server for Godot Engine AI-assisted game development]
- https://github.com/gmh5225/vibe-blocks-mcp [MCP for Roblox Studio]
- https://github.com/willy92wins/dayz-mcp [DayZ MCP server with 53 tools for mod build/run, server-authoritative world control, telemetry, and automated in-game testing]
- https://github.com/rehan-remade/universal-modder [Agent skills, fal MCP, and um CLI for game recon, RE, mod building, and in-game verification]
- https://github.com/LaurieWired/GhidraMCP [MCP for Ghidra]
- https://github.com/jtang613/GhidrAssistMCP [MCP for Ghidra]
- https://github.com/mrphrazer/ghidra-headless-mcp [ghidra-headless-mcp — headless Ghidra over MCP]
- https://github.com/morluto/rea [Local CLI and MCP server for agent-assisted reverse engineering of native binaries, JavaScript/Electron apps, and .NET assemblies; returns evidence provenance and limitations; native deep analysis needs separately installed Hopper, Ghidra, or IDA]
- https://github.com/mrexodia/ida-pro-mcp [MCP for IDA pro]
- https://github.com/bkerler/ida_rpc [IDA Pro JSON-RPC daemon for LLM/agent-assisted RE: decompile, xrefs, types, patches; headless & GUI; ghidra-rpc-compatible CLI]
- https://github.com/cellebrite-labs/ida-bridge [Agent bridge for IDA Pro 9+ — CLI runs IDAPython/SQL on live UI or headless idalib; supervisor lifecycle; bundled agent skill; macOS]
- https://github.com/saileaxh/iida-mcp [Faster IDA Pro MCP plugin — 77 tools, multi-instance routing, optional Windows kernel memory/module access via iida-mcp-ioctl driver]
- https://github.com/MeroZemory/ida-multi-mcp [Multi-instance IDA Pro MCP: one endpoint for many GUI/idalib sessions; parallel routing; BCSD function similarity; Python]
- https://github.com/cnitlrt/headless-ida-mcp-server [MCP for IDA pro(headless)]
- https://github.com/MxIris-Reverse-Engineering/ida-mcp-server [MCP for IDA pro]
- https://github.com/taida957789/ida-mcp-server-plugin [MCP for IDA pro]
- https://github.com/fdrechsler/mcp-server-idapro [MCP for IDA pro]
- https://github.com/rand-tech/pcm [MCP for IDA pro]
- https://github.com/Iamgublin/ida-codex-mcp [IDA Codex MCP]
- https://github.com/HLND2T/CS2_VibeSignatures [Generate CS2 signatures via Agent SKILLS with ida-pro-mcp]
- https://github.com/axelmierczuk/tenrec [A headless, extendable, multi-session, IDA Pro MCP framework]
- https://github.com/blacktop/ida-mcp-rs [Headless IDA Pro MCP server]
- https://github.com/fosdickio/binary_ninja_mcp [MCP for Binary_Ninja]
- https://github.com/Invoke-RE/binja-lattice-mcp [MCP for Binary_Ninja]
- https://github.com/mrphrazer/binary-ninja-headless-mcp [Headless Binary Ninja MCP server with 181 RE tools for AI agents — disassembly, IL, patching, types, xrefs, undo/redo, and scripting without a GUI]
- https://github.com/dnakov/radare2-mcp [Radare2 MCP Server]
- https://github.com/GLips/Figma-Context-MCP [Cursor Talk To Figma MCP server]
- https://github.com/gmh5225/hex2dec-mcp [MCP server that provides conversion between hexadecimal and decimal numbers]
- https://github.com/signal-slot/mcp-gdb [MCP for GDB]
- https://github.com/jtang613/gdb-mcp [Lightweight MCP server for GDB automation (FastMCP, SSE, gdb-command proxy)]
- https://github.com/svnscha/mcp-windbg [MCP for WinDBG]
- https://github.com/Devolutions/windbg-tool [Windows CLI + MCP for WinDbg/TTD: replay .run traces, dump triage, live probes; JSON for AI agents; Rust]
- https://github.com/AgentSmithers/x64DbgMCPServer [MCP for x64Dbg]
- https://github.com/bromoket/x64dbg_mcp [MCP for x64Dbg with extensive tooling]
- https://github.com/IChooseYou/Reclass [MCP for Reclass]
- https://github.com/ant4g0nist/lisa.py [MCP for LLDB]
- https://github.com/droidrun/droidrun [MCP for Android]
- https://github.com/un4ckn0wl3z/MemMCP [Cheat Engine-like but MCP]
- https://github.com/Neverdecel/pcileech-memprocfs-mcp [Linux-native MCP server for PCILeech/MemProcFS DMA memory R/W, RE scanning, and UE/Unity SDK dumping]
- https://github.com/rabbanyhmm/DnSpyMCP [MCP server for .NET assembly RE, IL2CPP/Unity dump analysis, cross-refs, and network patching (31 tools)]
- https://github.com/Eruditi/CE-MCP-Plugin [MCP for Cheat Engine]
- https://github.com/miscusi-peek/cheatengine-mcp-bridge [MCP for Cheat Engine]
- https://github.com/beamstar/cheatengine-mcp-bridge [MCP for Cheat Engine]
- https://github.com/illegal-instruction-co/processhacker-mcp [MCP for runtime analysis and process hacking; ProcessHacker for AI agents, extensible with DLL plugins]
- https://github.com/AnonymoDGH/cheat-mcp [C++17 MCP server for Windows game memory R/W, scanning, DLL injection, IAT hooking, speedhack, and anti-cheat detection]
- https://github.com/0111-0222/uc-mcp [Read-only, date-aware MCP server for searching UnknownCheats forum threads via your own session cookies]
- https://github.com/zinja-coder/apktool-mcp-server [A MCP Server for APK Tool (Part of Android Reverse Engineering MCP Suites)]
- https://github.com/xjoker/delamain [Headless JADX MCP server for AI-driven Android APK/DEX/AAB reverse engineering]
- https://github.com/azw413/Glass [Built-in MCP for mobile RE — CLI verbs (disasm, search, cfg-of, dex-callers, bin-search, insn-search, etc.) as MCP tools on APK/IPA/AArch64;
glass mcp] - https://github.com/zhizhuodemao/android_proxy_mcp [Android Proxy MCP — HTTP/HTTPS packet capture for AI assistants, mitmdump + SQLite + natural language query]
- https://github.com/regenrek/deepwiki-mcp [MCP for deepwiki]
- https://github.com/gmh5225/zig-mcp-server [A high-performance implementation of the MCP protocol in Zig]
- https://github.com/noopstudios/interactive-feedback-mcp [Interactive User Feedback MCP]
- https://github.com/gmh5225/interactive-feedback-macos-mcp [A native macOS MCP server for collecting interactive user feedback with AppleScript dialogs and image support]
- https://github.com/datalayer/jupyter-mcp-server [MCP for Jupyter]
- https://github.com/PortSwigger/mcp-server [MCP for Burp Suite]
- https://github.com/cycraft-corp/BinaryAnalysisMCPs [Binary analysis MCPs collections]
MCP server security
- https://github.com/johnhalloran321/mcpSafetyScanner [MCPSafetyScanner - Automated MCP safety auditing and remediation using Agents]
- https://github.com/appsecco/vulnerable-mcp-servers-lab [A collection of servers which are deliberately vulnerable to learn Pentesting MCP Servers]
AI Agents
- https://github.com/0xeb/windbg-copilot [WinDbg Copilot - Agentic Debugging extension]
- https://github.com/originsec/pocsmith [Autonomous Windows POC developer from patchwatch diff reports; Claude agent + MCP (Hyper-V, kd, Ghidra) to write, build, and verify PoCs on pre-patch VMs]
- https://github.com/leigest519/OpenGame [Open agentic coding for web games end-to-end from prompts; Game Skill (template + debug); GameCoder-27B; OpenGame-Bench; qwen-code-based CLI]
- https://github.com/0x0funky/agent-sprite-forge [Codex skills for game-ready 2D sprites, layered maps, and engine-ready prototypes (Godot/Unity)]
- https://github.com/dreiachse-cyber/image-cockpit-for-codex-workflows [Local cockpit for Codex imagegen workflows — pixel art, region-based editing, animation frames and sprite sheets via codex-handoff inbox/outbox; no direct OpenAI API calls]
- https://github.com/htdt/godogen [Autonomous game development for Godot, Bevy, and Babylon.js with Claude Code and Codex; plans, generates assets, screenshot-guided self-repair]
- https://github.com/MRCalderon3D/everything-game-dev-code [Multi-engine AI agent scaffold for Unity/Unreal/Godot/HTML with Claude, Codex, Cursor, OpenCode, and Kiro harnesses]
- https://github.com/gamedev-skills/awesome-gamedev-agent-skills [66 version-pinned game-dev Agent Skills plus router for Godot/Unity/Unreal and other engines across Cursor/Claude/Codex]
Game Assets
- https://github.com/Miziziziz/Retro3DGraphicsCollection
- https://github.com/KyleBing/retro-game-console-icons [Retro game console icons in multiple PNG sizes; TrimUI/Miyoo themes]
- https://github.com/blendi-remade/sprite-sheet-creator [AI 2D pixel-art sprite sheets & parallax backgrounds; fal.ai; Next.js; walk/jump/attack/idle, sandbox]
- https://github.com/aldegad/sprite-gen [Codex/Claude skill for generating clean 2D game sprites and animation atlases via component-row state pipelines, alpha cleanup, frame extraction, and runtime atlas output]
- https://github.com/HitmanHimself/GOWTool [God of War 2018]
- https://github.com/KhronosGroup/glTF [Runtime 3D Asset Delivery]
- https://github.com/syoyo/tinygltf [Header only C++11 tiny glTF 2.0 library]
- https://github.com/PSkinnerTech/3d-asset-factory [CLI-first YAML→3D asset pipeline: spec → GLB; QA gate, review HTML, web/Unity/Unreal export packages; manifest provenance]
- https://github.com/atenfyr/UAssetGUI [Viewing and modifying UE4 game assets]
- https://github.com/UETools/UETools [Accessing, reading and deserializing UE4 assets]
- https://github.com/atenfyr/UAssetAPI [A low-level .NET library for reading and writing Unreal Engine game assets]
- https://github.com/r6e/paksmith [Rust cross-platform Unreal Engine pak/UAsset explorer and extractor (pak v3–v11, textures/meshes/audio export)]
- https://github.com/laurentvv/universal-asset-ripper [Multi-engine asset extractor (Godot, Unreal, Unity, Windows PE) with MCP-backed inspection and binary RE helpers]
Game Hot Patch
- https://github.com/Tencent/xLua
- https://github.com/Tencent/InjectFix
- https://github.com/focus-creative-games/hybridclr
Game Testing
- https://github.com/UnityTech/GamesTestAutomationExample [The collecting ideas on how to do Test Automation in Games]
- https://github.com/nowsprinting/UnityAutomatedQAExamples [Unity Automated QA Guidebook]
- https://github.com/AirtestProject/Airtest [UI Automation Framework]
- https://github.com/dendibakh/perf-ninja [Performance Analysis]
- https://github.com/CookiePLMonster/UptimeFaker [Detecting High PC Uptime]
- https://github.com/GameTechDev/PresentMon [Graphics Performance]
- https://github.com/gatling/gatling [Server Testing]
- https://github.com/aristocratos/btop [Performance Monitor]
- https://github.com/Celtoys/Remotery [A realtime CPU/GPU profiler]
- https://github.com/Volkanite/Push [Monitor GPU/CPU/RAM performance]
- https://github.com/google/orbit [C/C++ Performance Profiler]
- https://github.com/wolfpld/tracy [C++ frame profiler]
- https://github.com/bombomby/optick [C++ Profiler For Games]
- https://github.com/RomanceTheHeart/Automation_Examples [Automating certain tasks in the Unreal editor]
- https://github.com/DaedalicEntertainment/ue4-test-automation [Facilitates setting up integration test suits with Unreal Engine 4 Gauntlet]
- https://github.com/shaylanger/Kenshi-Automation-Harness [In-game test automation harness for Kenshi mod development — scriptable spawn, teleport, combat, crafting, and UI checks via an RE_Kenshi plugin and CLI client]
- https://github.com/CalebFenton/PZ_DevHarness [Headless in-game test harness for Project Zomboid Build 42 mods with Java reflection launchers, fast SP/MP runs, desync checks, and CI-friendly exit codes]
- https://github.com/DenuvoSoftwareSolutions/Onlooker [Tool to collect and visualize memory usage of a process tree]
- https://github.com/milostosic/rprof [CPU scope based profiling library]
- https://github.com/DarknessFX/DFoundryFX [UE Performance]
- https://github.com/AitiX/Fastlogs [Unity/GameMaker debug engine that ships logs, device state, and screenshots from remote builds as short links]
Game Tools
- Play your favorite games in a borderless window; no more time consuming alt-tabs
- https://github.com/bad-antics/rce-shield [RCE hardening toolkit for PC gamers]
- https://github.com/Genymobile/scrcpy [Display and control your Android device]
- https://github.com/ryanjon2040/Unreal-Binary-Builder [Build UE Source]
- https://github.com/ryanjon2040/UnrealNetworkProfiler [Network Profiler for UE]
- Command line tool for getting the download URL for the latest or specific version of Unity
- https://github.com/recastnavigation/recastnavigation [Navigation-mesh Toolset for Games]
- https://github.com/TensorWorks/UE-Clang-Format [UE Clang-Format configuration]
- https://github.com/inflation/goldberg_emulator [Steam emulator]
- https://github.com/PixiEditor/PixiEditor [PixiEditor is a Universal Editor for all your 2D needs]
Game Manager
Game CI
- https://github.com/game-ci
- https://github.com/nikaera/Unity-GameCI-Sample [Unity]
- https://github.com/EpicGames/lore [Epic Games open source VCS for games: content-addressed chunk storage, sparse workspaces, tamper-evident history, large binary assets; Rust; UEFN]
DirectX
Guide
- https://github.com/planetchili/hw3d [C++ 3D DirectX Tutorial]
- https://github.com/jpvanoosten/LearningDirectX12 [DX12]
- https://github.com/PAMinerva/LearnDirectX [DX12]
- https://github.com/MKXJun/DirectX11-With-Windows-SDK [DX11 zh]
- https://github.com/yottaawesome/intro-to-dx11-revisited [Modernized C++ revisited source for Frank Luna’s Introduction to 3D Game Programming with DirectX 11]
- https://github.com/d3dcoder/d3d12book [DX12]
- https://github.com/yottaawesome/intro-to-dx12-2nd-edition-revisited [Modernized C++ revisited source for Frank Luna’s Introduction to 3D Game Programming with DirectX 12 (2nd ed.)]
- https://github.com/pkurth/D3D12Renderer [DX12]
Hook
- https://github.com/rdbo/DX11-BaseHook [DX11 Imgui]
- https://github.com/DrNseven/D3D12-Hook-ImGui [DX12 Imgui]
- https://github.com/frostbone25/ShaderInjector [D3D12 shader injector for FF7 Rebirth PC — intercepts rendering API calls to inject/replace pixel shaders at runtime; minhook + ImGui; adaptable to other D3D12 titles]
- https://github.com/Qervas/segcap [D3D12 hooking tool extracting per-pixel object-ID segmentation masks from shipping UE4/UE5 games without engine source or modification]
- https://github.com/baobao1044/GameLagReducer [Launcher + native DLL that hooks D3D11/OpenGL/Vulkan to capture and flatten/replace shaders at runtime for FPS]
- https://github.com/niemand-sec/DirectX11Hook [DX11 Imgui]
- https://github.com/guided-hacking/GH_D3D11_Hook [DX11]
- https://github.com/justinstenning/Direct3DHook [Direct3D 9/10/11 API hooks for screen capture and in-game overlays]
- https://github.com/techiew/DirectXHook [DirectX 11/12 Present hook with a simple in-game overlay framework]
- https://github.com/nefarius/HydraHook [DirectX 9–12 API-hooking and overlay rendering framework for games]
- https://github.com/aufkrawall/capture-engine [Windows game capture with injected D3D9–D12, Vulkan, OpenGL, and DXVK hooks, custom overlays, and frame pacing]
- https://github.com/gogo9211/Discord-Overlay-Hook [DX11]
- https://github.com/ocornut/imgui/commit/923bd2fd217c1dc1e75fa92b0284d3817904988b [DX11/12 ResizeBuffers]
- https://github.com/marlkiller/d3dhook_imgui [d3d opengl hook imgui x86/x64]
- Universal graphical hook for a D3D9-D3D12, OpenGL and Vulkan based games
- https://github.com/kirchesz/kiero2 [kiero v2 — runtime locator for D3D9–D12, OpenGL, and Vulkan graphics API method addresses; BYO hooking library; CMake FetchContent; cross-platform OpenGL/Vulkan on Win/Linux/macOS]
- https://github.com/jmpews/Dobby [a lightweight, multi-platform, multi-architecture hook framework]
- https://github.com/Sh0ckFR/Universal-Dear-ImGui-Hook [An universal Dear ImGui Hook]
- https://github.com/bruhmoment21/UniversalHookX [DX/OpenGL/Vulkan]
Tools
- https://github.com/visotw/3d9 [Fixing broken stereoscopic effects in DX11 games]
- https://github.com/adriank56793/rdc-cli [Scriptable CLI to query RenderDoc .rdc captures (draws, shaders, diffs) for terminal, CI, and agent workflows on D3D/Vulkan/OpenGL frames]
Emulation
Compatibility
- https://github.com/CnCNet/cnc-ddraw [Old Game]
- https://github.com/openeggbert/free-direct [DirectX 3 (DirectDraw/DirectSound) subset reimplemented on SDL3 for running legacy 2D games]
- https://github.com/elishacloud/dxwrapper [DirectX DLL wrapper for older games on Win10/11; Dd7to9/d3d8to9, DDrawCompat, ASI loader]
- https://github.com/ShyVortex/dlss-unlocked [DirectX 12 DLL wrapper unlocking DLSS-G, multi-frame generation, and DLSS-NR on RTX 20xx/30xx/40xx in supported games (Windows and Proton)]
- https://github.com/BUNNY-19C/DLSSG-30s-manager [WPF manager for per-game dlssg_for_sm86 deployment on RTX 30 (SM86), with backups, restore, and automatic kernel anti-cheat detection that blocks unsafe installs]
- https://github.com/REDPOWAR/D2GI [DirectDraw7/D3D7 to D3D9 wrapper for Hard Truck 2 (King of the Road) — modern resolutions, MSAA, anisotropic filtering, graphics fixes, widescreen hooks]
- https://github.com/aleko2144/KoTR_Modern_Patch [King of the Road / Hard Truck 2 ASI patch — collision, camera, physics, AI traffic, trailer and UI fixes; complements D2GI; ModUtils + Ultimate ASI Loader]
- https://github.com/xoxor4d/gta4-rtx [GTA IV RTX Remix compatibility mod — adapts Complete Edition for NVIDIA RTX Remix path-traced remaster pipeline; complements FusionFix]
- https://github.com/microsoft/D3D9On12 [The Direct3D9-On-12 mapping layer]
- https://github.com/Daniel-Lobo/WineHooks [Compatibility and enhancement framework for classic PC games]
- https://github.com/samuelgr/Xidi [DirectInput interface for XInput controllers]
Overlay
- https://github.com/SeanPesce/Direct3D9-Overlay
- https://github.com/dantebuilds/swapchain-bottleneck [Architecture analysis of DXGI swapchain/MPO overlay injection, Present-hook collisions, TDR cascades, and anti-cheat whitelist friction]
OpenGL
Guide
Source
- https://github.com/brackeen/glfm [Write OpenGL ES code in C/C++]
Hook
- https://github.com/bruhmoment21/UniversalHookX
- https://github.com/ASDAlexander77/opengl32_enhancer [32-bit opengl32.dll proxy that forwards OpenGL calls and hooks wglSwapBuffers for ReShade-style GPU post-processing without binary patching]
Vulkan
Guide
API
- https://github.com/liblava/liblava [Modern and easy-to-use library for Vulkan]
- https://github.com/corporateshark/lightweightvk
- https://github.com/BeRo1985/pasvulkan [Object Pascal Vulkan header generator, OOP API wrapper, and Vulkan-based engine framework]
Hook
- https://github.com/Rebzzel/kiero [X86/64 Windows]
- https://github.com/kirchesz/kiero2 [kiero v2 — locate Vulkan/D3D/OpenGL API method addresses at runtime; BYO hooking; Win/Linux/macOS]
- https://github.com/ales-drnz/vocem-overlay [Linux in-game overlay via Vulkan implicit layer and OpenGL interposer]
- https://github.com/blanec/cyberpunk-better-shaders [Vulkan implicit layer (VkLayer_callisto_spvswap) that hot-swaps Cyberpunk 2077 path-tracer ray-gen SPIR-V at load time via Proton on Linux]
- https://github.com/bruhmoment21/UniversalHookX [X86/64 Windows]
- https://github.com/gmh5225/Vulkan-Hook [X86/64 Windows]
- https://github.com/Sh0ckFR/Universal-Dear-ImGui-Hook
- https://github.com/Halen84/ImGuiRDR2Hook
Cheat
Guide
- https://github.com/dsasmblr/game-hacking
- https://github.com/dsasmblr/hacking-online-games
- https://github.com/jbro129/android-modding [A collection of repositories related to Android game modding]
- https://github.com/liuyiyi0219-arch/unity-apk-reverse [40-chapter hands-on Unity mobile APK reverse-engineering course covering IL2CPP, Lua, DEX, Frida, and asset extraction with runnable demos and auto-graded labs]
- https://github.com/kovidomi/game-reversing
- https://github.com/Vieuxnorris/farcry-6-hack [Offline Far Cry 6 RE learning project: in-process C++ DLL with aimbot, skeleton ESP, D2D overlay, fc6probe scanner, and Python tooling over game systems (Havok, aim-assist targets)]
- https://github.com/TheZong/Game-Hacking
- https://github.com/mytechnotalent/Reverse-Engineering
- https://github.com/wtsxDev/reverse-engineering
- https://github.com/Coldzer0/RE4F [Obsidian-based reverse-engineering curriculum covering x86/x64 assembly, Windows memory and PE internals, static/dynamic analysis, and anti-analysis (packing, anti-debug)]
- https://github.com/mytechnotalent/Hacking-Windows
- https://github.com/mytechnotalent/hacking-rust [Free step-by-step Rust reverse-engineering course (x64/ARM64/ARM32) with PDF book and per-chapter labs]
- https://github.com/mytechnotalent/go-hacking [Free step-by-step Golang reverse-engineering course (x64/ARM64/ARM32) with PDF book and per-chapter labs]
- https://github.com/mytechnotalent/embedded-hacking [Free embedded reverse-engineering course (RP2350/Pico 2) with GDB, Ghidra, OpenOCD, and hands-on firmware hacking labs]
- https://github.com/kotae4/intro-to-gamehacking
- https://github.com/ridpath/gamehacking-cheatsheet [Game-hacking cheatsheet covering memory RE, injection, and anti-cheat topics]
- https://github.com/mrphrazer/binary-cartography [Binary Cartography webinar series with slides, samples, and Docker RE labs on agentic reverse engineering, malware analysis, code identification, and deobfuscation workflows]
- https://github.com/LordeTyrael/PokeAllianceAntiCheatAnalysis [Static audit of PokeAlliance client telemetry: server-triggered process/DLL/window enumeration, login hardware fingerprinting, and supporting Frida/tracer scripts]
- https://blog.can.ac/author/can1357
- https://github.com/SinaKarvandi/Hypervisor-From-Scratch [Hypervisor]
- https://secret.club
- https://back.engineering
- https://github.com/batteryshark/batteryshark.github.io [BatteryShark reverse-engineering and game-hacking writeups archive (compatibility patching, classic PC game RE, low-level Windows)]
- https://vollragm.github.io
- https://www.triplefault.io
- https://advancedvectorextensions.github.io
- https://bright.engineer
- https://reversing.info
- https://www.unknowncheats.me
- https://forum.ragezone.com
- https://guidedhacking.com
- https://github.com/guided-hacking
- https://gamehacking.academy
- https://github.com/GameHackingAcademy
- https://github.com/GameHackingBook/GameHackingCode [Example code for the No Starch Press Game Hacking book]
- https://areweanticheatyet.com [A list of games using anti-cheats]
- https://github.com/aclist/aclist.github.io [Anti-cheat compatibility list]
- https://github.com/N0tJ03/Investigacion-Kerne [Spanish notes on kernel-mode anti-cheat architecture (BattlEye, EAC, Vanguard) and related Windows driver security context]
- https://github.com/imadr/Unity-game-hacking [Unity]
- https://vollragm.github.io/posts/unity-reversing [Unity]
- https://wiki.cheatengine.org/index.php?title=Mono [CE Mono]
- https://github.com/krampus-nuggets/ce-tutorial [CE]
- https://il2cppdumper.com [IL2CPP]
- https://www.unknowncheats.me/forum/unity/465283-il2cppruntimedumper.html [IL2CPP]
- https://github.com/shalzuth/NativeNetSharp [Injecting C# code]
- https://github.com/januwA/game-reversed-study [CE Guide zh]
- https://github.com/csgohacks/master-guide [CSGO Guide]
- different-ways-hooking [Hook Guide]
- http://pwnadventure.com [Hackable Game]
- https://github.com/GameCrashProject/UE4-Hacking-Guideline [Unreal]
- https://github.com/TimMisiak/WinDbgCookbook [WinDbg]
- https://github.com/anhkgg/awesome-windbg-extensions [WinDbg]
- Undetected Cheat Engine
- Guide about remote Windows kernel debugging
- https://github.com/rmusser01/Infosec_Reference/blob/master/Draft/Games.md [Game Hacking]
- https://github.com/cragson/osmium [C++ Framework for external cheats]
- https://github.com/april-ivy/Apwil [Rust Windows gamehacking library, internal & external; process/memory/module/scan/hook/render/syscall/input/window]
- https://github.com/Omega172/OmegaWare-Framework [Multi-engine internal cheat framework (Unity/Unreal/generic) with D3D11/D3D12 hooking, ImGui UI, feature plugins, and config system]
- https://github.com/rdbo/libmem [Cross-platform game hacking library (memory, hooking, injection) for C/C++/Rust/Python]
- https://github.com/WangXuan95/Xilinx-FPGA-PCIe-XDMA-Tutorial [DMA Tutorial]
- https://github.com/NetKingJ/awesome-android-security [Android (Samsung) Security Research References]
- https://github.com/savagedamage/android-security-wizard [Integrated Android security research corpus (SKILL.md + 20 companions) covering native RE, Frida/Shizuku instrumentation, commercial protector bypass, kernel exploit methodology, and malware triage]
- https://github.com/shakevsky/keybuster [Samsung TrustZone Keymaster TA research client — send unfiltered requests via libkeymaster_helper; USENIX Security’22 supplemental; CVE-2021-25444/25490 PoC]
- https://github.com/gregkh/kernel-development [Linux kernel development]
- https://github.com/MatheuZSecurity/Rootkit [Collection of codes focused on Linux rootkits]
- https://github.com/ARandomPerson7/Appsealing-Reversal [A Reversal and bypass for Appsealing]
- https://klecko.github.io/posts/selinux-bypasses [Bypass selinux]
- https://github.com/Solaree/pairipcore [Public researchings of the Google’s Android apps protection]
- https://github.com/enjoy-digital/litepcie [Small footprint and configurable PCIe core]
- https://lolc2.github.io [collection of C2 frameworks that leverage legitimate services to evade detection]
Debugging
- https://github.com/stars/gmh5225/lists/debugger [List]
- https://github.com/cheat-engine/cheat-engine
- https://github.com/L-Spiro/MhsX [64-bit from-scratch MHS successor: memory searcher/debugger with expression scans, regex/string search, floating-point studio, hex editor, and scripting]
- https://github.com/NulledNah/cheat-engine-undetectable [Modified Cheat Engine with user-mode evasion, direct syscalls, and BYOVD kernel bridge for AC research]
- https://github.com/VollRagm/ghostdebug [Windows x64 VEH-based stealth debugger (native DLL + .NET CLI) for targets with anti-debug checks]
- https://github.com/Squalr/Squalr-Sharp [C# game memory editor with scanning, pointers, and assembly injection]
- https://github.com/daveymcq/SimpleMemoryEditor [Portable Windows game memory scanner/editor in C with process attach, value scan, and freeze UI]
- https://github.com/HeathHowren/Pointer-Lab [Windows x64 user-mode memory scanner and debugger with pointer chains, disassembly, patching, and ImGui UI]
- https://github.com/digital-dev/Apprentice [Open-source Windows game trainer and memory editor (Electron + C++ N-API) with value freezes, code patches, Mono/IL2CPP support, and .CT import/export]
- https://github.com/JeanExtreme002/PyMemoryEditor [Pure-Python (ctypes) memory scanner/editor for Windows, Linux and macOS with value scans, pointer chains, a Qt UI and an MCP server]
- https://github.com/WoahToasty/ToastyLink [From-scratch C++17 XBDM trainer/debug toolkit for Xbox 360 (RGH/JTAG): pointer chains, value scanning, freeze engine, PPC patches, and shareable JSON cheat tables]
- https://github.com/TASEmulators/BizHawk [Multi-system C# emulator with memory inspection, rerecording, and per-core debugging tools for retro game analysis]
- https://github.com/SinaKarvandi/Hypervisor-From-Scratch [Hypervisor]
- https://github.com/JasonGoemaat/CheatEngineMonoHelper [CE Mono Helper]
- https://github.com/gmh5225/frida-ceserver [CE Server For IOS]
- https://github.com/gmh5225/ceserver-ios [Porting ceserver to iOS.Dynamic analysis]
- https://github.com/0xiuks/ceserver-ios [An iOS port of Cheat Engine’s ceserver]
- https://github.com/gmh5225/cheat-engine-ceserver-pcileech [CE Server For Pcileech]
- https://github.com/user23333/veh [CE Plugin For Manualmap VEH Dll]
- https://github.com/x64dbg/x64dbg [A debugger for Windows x86/64]
- https://github.com/marakew/syser [A debugger for Windows x86/64]
- https://github.com/keowu/koidbg [A debugger for Windows ARM64]
- https://github.com/kernullist/KnWin32ApiMonitor [Modern Win32 API monitor with Tauri UI, IAT hooks, durable replay sessions, and generated metadata for security, RE, and anti-cheat research]
- https://github.com/DoranekoSystems/DynaDbg [A debugger for Android/IOS]
- https://github.com/Yayoi-cs/fastDbg [x86_64 native/qemu kernel debugger]
- https://github.com/noword/GDB-Windows-Binaries [GDB]
- https://github.com/robert-yates/gdbserver9x [Primitive GDB RSP server for debugging 32-bit exes on retro Windows (Win98SE/XP); builds with VC6; pairs with Binary Ninja GDB adapter]
- https://github.com/ajkhoury/ReClassEx
- https://github.com/ReClassNET/ReClass.NET
- https://github.com/niemand-sec/ReClass.NET-DriverReader [ReClass DriverReader]
- https://github.com/BeneficialCode/KReClassEx [Kernel ReClassEx]
- https://github.com/gmh5225/ReClass-DMA [ReClass DMA]
- https://github.com/IChooseYou/Reclass [Reclass MCP refactored]
- https://github.com/Metick/CheatEngine-DMA [CheatEngine DMA]
- https://github.com/kaijia2022/Cheat-Engine-DMA-Plugin [CheatEngine DMA]
- https://github.com/x64dbg/DotX64Dbg
- https://github.com/imugee/xdv
- https://github.com/eteran/edb-debugger [For Linux]
- https://github.com/korcankaraokcu/PINCE [For Linux]
- https://github.com/djolertrk/kLLDB [LLDB based debugger for Linux Kernel]
- https://github.com/mrexodia/TitanHide
- https://github.com/Air14/HyperHide [VT debuger]
- https://github.com/HyperDbg/HyperDbg [VT debuger]
- https://github.com/gmh5225/vt-debuger [VT debuger]
- https://github.com/kkpwn/ErisDbg [VT debuger]
- https://github.com/xhscfq/UnrealVTDbg [VT-x/EPT-assisted Windows kernel debugging framework with Delphi UI and C++ core for authorized anti-cheat and reverse-engineering research]
- https://github.com/not1cyyy/powervm [Stealth AMD-SVM Type-1 hypervisor with NPT hooks and a customized Cheat Engine debug engine for inspecting VMProtect- and ACE-protected processes]
- https://github.com/teemu-l/execution-trace-viewer
- https://github.com/brendan-duncan/gpu_inspector [Native GPU frame capture and graphics debugger for Vulkan, Direct3D 12, and Metal with shader editing, pixel history, and validation]
- https://github.com/changeofpace/Force-Page-Protection [Bypass Remap Memory]
- https://github.com/icsharpcode/ILSpy [For Unity]
- https://github.com/dnSpy/dnSpy [For Unity]
- https://github.com/HoLLy-HaCKeR/dnSpy.Extension.HoLLy [For Unity]
- https://github.com/mandiant/dncil [For Unity]
- https://github.com/hugsy/CFB [Monitor IRP]
- https://github.com/Kharos102/IOCTLDump [Monitor IRP]
- https://ioninja.com/downloads.html [Protocol Analyzer]
- https://github.com/wilszdev/SteamAntiAntiDebug [Steam]
- https://github.com/H5GG/H5GG [IOS cheat engine]
- https://github.com/hasaneyldrm/webcheat [Chrome extension Cheat Engine for browser/WebAssembly games — scan, edit, freeze memory and control game speed]
- https://github.com/levifrsn63/krunker-loader [Keyless Tampermonkey userscript stack for Krunker.io with aimbot, ESP, and Quirify license-emulation loader]
- https://github.com/murka007/glotus-client [Tampermonkey userscript cheat client for Moomoo.io with combat automation, bots, and in-browser hooking]
- https://github.com/ri-char/pwatch [HWBP on linux/android]
- https://github.com/enenH/pwatch-c [HWBP on linux/android]
- https://github.com/Ylarod/hardware-breakpoint [HWBP on linux/android]
- https://github.com/roger1337/JDBG [Java Runtime Reverse Engineering and Debugging Tool]
- https://github.com/Sh11no/eDBG [eBPF-based lightweight debugger for Android]
- https://github.com/ShinoLeah/eHook [eBPF hook]
- https://github.com/SeeFlowerX/stackplz [eBPF-based debugger for Android]
- https://github.com/Satar07/edbgserver [eBPF-powered debugger server for Linux and Android]
- https://github.com/cocomelonc/pawtrace [Linux x86-64 ptrace syscall tracer; decodes args, socket addresses, W^X memory, /proc/maps snapshots, JSONL output; C + assembly]
- https://github.com/g2wfw/qbdi-tracer-android [Android assembly instruction tracing tool]
- https://github.com/un4ckn0wl3z/MemMCP [Cheat Engine-like but MCP]
- https://github.com/WRXinYue/STS2-KitLib [Slay the Spire 2 in-game mod dev toolkit with dev rail, cheat presets, Harmony analysis, hooks, and MCP bridge]
- https://github.com/PlinKuuu/DanisNightmare [BepInEx Harmony mod for Muck with in-game debug/cheat command suite for player, enemy, item, and powerup manipulation]
- https://github.com/LLeavesG/eBPFDexDumper [DexDumper based eBPF on Android Platform]
- https://github.com/un4ckn0wl3z/dioprocess-private [Advanced Windows Internals, Evasion, Rootkit, Hypervisor, SMM & Bootkit Research Framework]
Packet Sniffer&Filter
- https://github.com/WPO-Foundation/win-shaper
- https://github.com/wiresock/ndisapi
- https://github.com/gmh5225/Akebi-PacketSniffer
- https://github.com/basil00/Divert [Packet Divert]
- https://github.com/fksvs/inject
- https://github.com/hercul3s/Packet-Sniffer [Packet Logger/Decryptor]
- https://github.com/airvzxf/sniparinject [Python Scapy game packet sniffer/parser with YAML action maps]
- https://github.com/is-fo/drelay [Darza’s Dominion Java TCP relay and in-process hook for intercepting, decoding, logging, and modifying client-server packets from reverse-engineered structures]
Packet Capture&Parse
SpeedHack
- https://github.com/absoIute/Speedhack
- https://github.com/Letomaniy/Speed-Hack
- https://github.com/IamSanjid/ce_speed_hack
RE Tools
- https://dogbolt.org
- https://github.com/msd0pe-1/cve-maker [Tool to find CVEs and Exploits]
- https://github.com/0liverFlow/CVE2PoC [Aggregate public PoCs/exploits for a CVE ID — GitHub, ExploitDB, Nuclei, Metasploit; CVSS/EPSS/CISA KEV; Docker labs, bug bounty write-ups, CVE↔CPE mapping; JSON/HTML reports]
- https://github.com/Zierax/Grafana-Final-Scanner [Grafana scanner with public CVE checks, version fingerprinting, and config analysis for easier Grafana security testing]
- https://github.com/mentebinaria/retoolkit [Reverse Engineer’s Toolkit]
- https://github.com/lilyco-42/rev-tools-setup [One-click Windows RE toolchain installer (Scoop) with Cheat Engine MCP setup and AI agent pitfalls guide]
- https://github.com/rollingrock/bethesda-modding-starter [Bootstrap for Bethesda script-extender plugin dev plus Ghidra/x64dbg MCP reverse-engineering toolchain]
- https://github.com/jlagedo/dreams-to-reality-re [Reverse-engineering research toolkit for Dreams to Reality (1997): Python asset decoders, Ghidra scripts, format documentation, and a Babylon.js viewer—tools only, no copyrighted game data]
- https://github.com/reikop/axis-web [Reverse-engineered AXIS (2005) client rebuilt as WebAssembly/WebGL with byte-exact asset decoders and multiplayer protocol research]
- https://github.com/iniGlowee/headless-asset-re [Documented methodology for headless game-asset reverse engineering without the original SDK—reference-first decode, render validation, and IP-safe workflows (no bundled game data).]
- https://github.com/xshxdex98/OpenMCM2 [Native Motocross Madness 2 rebuild: Ghidra export/relink harness, retail section verification, and integrated OpenGL renderer]
- https://github.com/pablocpas/OpenCMR2 [Native SDL3/Vulkan/Metal port of Colin McRae Rally 2.0 from the CMR2Decomp decompilation; cross-platform replacement of legacy DirectX APIs]
- https://github.com/ling71671/open-reverselab [Agent-native RE lab with knowledge base, 100+ MCP tools, and APK/PE/game-cheating analysis workflows]
- https://github.com/ReSo7200/molt-dex [Claude skill pipeline for Android APK reverse engineering and modding: apktool/smali workflow, DexKit and Xposed hooks, Frida, and obfuscation-aware analysis]
- https://github.com/zhuyansen/awesome-ai-reverse-engineering [Curated AI-agent RE stack: Ghidra/IDA MCP servers, mobile tooling (jadx, Frida), agent skills, and security-graded open-source RE projects]
- https://github.com/2akouwu/reverify [AI-assisted reverse engineering with deterministic byte-level verification via MCP server and CLI]
- https://github.com/mytechnotalent/rea [Offline-first RE assistant with one-shot binary scan, native PE/ELF/Mach-O and JavaScript/Electron static inventory, local RAG, multi-agent harness, and MCP server]
- https://github.com/zheedevVn/Rea-Unlock [MCP server unifying static and dynamic reverse engineering (Frida, Ghidra, decompilers) for binary and application analysis]
- https://github.com/LargoScript/n0xis [Cross-platform Rust RE pipeline with static PE/ELF analysis, SSA decompilation, live memory scanning, hardware watchpoints, and MCP/JSON automation for game reversing]
- https://github.com/heaven-hm/cheat-agent [Cross-platform C++/Rust autonomous RE agent with native memory scanning, closed-loop trainer verification, and optional MCP hosting for Codex/Claude Code]
- https://github.com/wrong-commit/skid_factory [Node.js orchestrator that automates game reverse engineering and cheat development via MCP bridges to Cheat Engine, x64dbg, and Ghidra, with pointer-trace and memory-patch workflows]
- https://github.com/mrexodia/ida-nexus-docker [Disposable Docker harness for IDA Pro 9.4+ with Pi and IDA Nexus — runs ordered analysis prompts in isolation and exports audit trails]
- https://github.com/ioncodes/ida-teams-docker [Docker Compose setup to self-host IDA Hexvault and Lumina team servers with TLS volumes and MySQL backend for collaborative reverse-engineering workflows]
- https://github.com/mrexodia/ida-nexus-events [Live Textual viewer for IDA Nexus /idb_events streams with database discovery, execution provenance, and colored event families for functions, types, patches, and comments]
- https://github.com/mrexodia/retoolsync [WebSocket server and plugins (IDA, x64dbg, WinDbg, Binary Ninja, VS Code) to sync cursor navigation and goto requests across reverse-engineering sessions]
- https://github.com/stevemk14ebr/RETools
- https://github.com/smallworld-re/smallworld [Environment for streamlined binary harnessing for dynamic analysis]
- https://github.com/BataBo/ACEPatcher [.NET Patcher]
- https://github.com/waryas/KACE [Emulate Drivers in RING3 with self context mapping or unicorn]
- https://github.com/Qfrost911/KACE [Emulate Drivers in RING3 with self context mapping or unicorn]
- https://github.com/VollRagm/PTView [Browse Page Tables on Windows]
- https://github.com/iBotPeaches/Apktool [Apk]
- https://github.com/user1342/Obfu-DE-Scate [Apk]
- https://github.com/AndnixSH/APKToolGUI [GUI for apktool, signapk, zipalign and baksmali utilities]
- https://github.com/Genymobile/scrcpy [Display and control your Android device]
- https://github.com/barry-ran/QtScrcpy [Display and control your Android device]
- https://github.com/guided-hacking/GH-Offset-Dumper [Scans for signatures and netvars and dumps their relative offsets]
- https://github.com/Elinam03/Signature-Forge [Web-based x86 wildcard byte signature generator for x64dbg, Cheat Engine, and raw hex formats]
- https://github.com/guided-hacking/GH-Entity-List-Finder [Scans game processes for most likely entity list addresses]
- https://github.com/rednaga/APKiD [PEiD for Android]
- https://github.com/Col-E/Recaf [Java]
- https://github.com/tomvita/SE-tools [Nintendo Switch]
- https://github.com/StudentBlake/XCI-Explorer [XCI Explorer]
- https://github.com/rom-weaver/rom-weaver [Local-first browser PWA and Rust CLI to inspect ROMs/disc images, apply and create patches, bake cheat codes, and edit saves offline]
- https://github.com/stephane-perez/ik-plus-reforged [Assembly patches and Python tooling for International Karate+ on Atari ST: platform compatibility fixes, 3-player mode, STE blitter/DMA enhancements, and JOYTEST joystick diagnostics]
- https://github.com/mattgodbolt/pipeline-disasm [Annotated 6502 disassembly and byte-identical rebuild of BBC Micro PIPELINE with hidden-sector and deleted-mark copy protection, flux verification, and jsbeeb tooling]
- https://github.com/mattgodbolt/frogman [Annotated BeebASM disassembly of unreleased BBC Micro platformer with jsbeeb runtime-dump RE, multi-stage VIA-timer XOR loader analysis, and byte-exact rebuild tooling]
- https://github.com/0x5abe/vifterpreter [Rust library for parsing PlayStation 2 VIF1 DMA packets and VIF commands]
- https://github.com/danielgomesvieira2000/ps2-port-engine [Verified PS2 decompilation toolchain and native PC port runtime (EE/IOP/GS/VU, Vulkan host) with no bundled game assets]
- https://github.com/byroweb/AC1_RE [RE reference and tooling for Armored Core (PS1, SLUS-01323): docs, Ghidra pipeline, disc/PA/mission parsers, and behavioral C models (BYO disc)]
- https://github.com/piffd0s/defcon-dreamcast-planetweb-research [DEF CON Dreamcast PlanetWeb exploit chain — Eden loading, memory-write flaw, and MIME stack overflow to run native SH-4 DOOM without a debugger]
- https://github.com/Anonym0ose/JitDumper [A CIL method body dumper]
- https://github.com/cfig/Android_boot_image_editor [A tool for reverse engineering Android ROM images]
- https://github.com/hasherezade/pe-bear [PE Viewer]
- https://github.com/zodiacon/TotalPE2 [PE Viewer]
- https://github.com/APKLab/APKLab [Android Reverse-Engineering Workbench for VS Code]
- https://github.com/zboralski/unflutter [Static analyzer for Flutter/Dart AOT snapshots]
- https://github.com/ejfkdev/dae [Rust CLI that extracts Dart AOT snapshot debug symbols and structs from Mach-O, ELF, and PE binaries for IDA, radare2, and Frida workflows without a Dart SDK]
- https://github.com/Guardsquare/flutter-re-demo [Flutter app RE experiments — IDA scripts for Dart function renaming from reFlutter/DWARF, VM memory mapping, object/xref recovery, and decompilation aids]
- https://github.com/evild3ad/MemProcFS-Analyzer [Windows Forensic Analysis]
- https://github.com/eybisi/kavanoz [Statically unpacking common android banker malware]
- https://github.com/cyberark/PipeViewer [Shows detailed information about named pipes in Windows]
- https://github.com/synacktiv/thats_no_pipe [Frida-based Windows named pipe interceptor: hooks ReadFile/WriteFile, relays IPC to an HTTP proxy over WebSocket]
- https://github.com/cursey/regenny [Reconstruct structures and generate header files]
- https://github.com/zodiacon/EtwExplorer [View ETW Provider manifest]
- https://github.com/jonny-jhnson/EtwWatcher [Browse and diff ETW provider snapshots across Windows builds; backed by ETWInspector]
- https://github.com/kernelstub/Cognitor [Defensive Patch Tuesday semantic diff for Windows snapshots: PE/driver IOCTL diff, rule engine, lab dossiers, SARIF/MD/JSON; sibling-bug triage]
- https://github.com/gmh5225/ceserver-ios [Porting ceserver to iOS.Dynamic analysis]
- https://github.com/VoidSec/ioctlpus [Be used to make DeviceIoControl requests with arbitrary inputs]
- https://github.com/horsicq/Nauz-File-Detector [Linker/Compiler/Tool detector]
- https://github.com/t0asts/DIE-engine-web [Detect It Easy in the browser — WASM-based file format, packer, and compiler detection]
- https://github.com/gcarmix/HexWalk [Hex Viewer/Editor/Analyzer]
- https://github.com/RomanRybachek/ioctl_helper [GUI tool for sending IOCTL to windows drivers]
- https://github.com/0xDbgMan/DrvEye [Static analysis and exploitation triage for Windows kernel drivers: discover IOCTLs, symbolic links, and certificate checks]
- https://github.com/416rehman/DeepZero [Automated vulnerability research framework for Windows kernel drivers: parses/decompiles at scale and analyzes exploitable IOCTLs with AI agents]
- https://github.com/Static-Analyzer-Factory/static-analyzer-factory [Rust-powered static analysis framework for C/C++ via LLVM IR graphs (pointer/value-flow/taint/IFDS) with Python SDK, CLI, and SARIF export]
- https://github.com/sevaa/dwex [DWARF Explorer]
- https://github.com/katahiromz/RisohEditor [Win32 resource editor]
- https://github.com/Fadi002/de4py [Toolkit for python reverse engineering]
- https://github.com/skelsec/minidump [Python library to parse and read Microsoft minidump file format]
- https://github.com/zodiacon/QuickAsm [x86/x86 assembler and emulator]
- https://github.com/aqilc/chasm [Chasm Runtime Assembler]
- https://github.com/skylot/jadx [Dex to Java decompiler]
- https://github.com/fatalSec/DaliVM [Dalvik bytecode emulator for Android static analysis; string decryption; Multi-DEX; no Android runtime required]
- https://github.com/narumii/Deobfuscator [A deobfuscator for java]
- https://github.com/google/android-classyshark [Android and Java bytecode viewer]
- https://github.com/marin-m/vmlinux-to-elf [vmlinux to elf]
- https://github.com/emlinhax/DbgViewEx [A tool to log ETW Events and system debug logs]
- https://github.com/amosshi/binaryinternals [View Internals of Binary File]
- https://github.com/WerWolv/ImHex [A Hex Editor for Reverse Engineers]
- https://github.com/microsoft/pdblister [Faster version of
symchk /omfor generating PDB manifests] - https://github.com/yaxinsn/vermagic [Change vermagic and CRCs of a Linux Kernel Module]
- https://github.com/rhboot/pesign [Linux tools for signed PE-COFF binaries]
- https://github.com/SV-Foster/UnSign [Remove all digital signatures from PE/COFF executable]
- https://github.com/colinsenner/PECleaner [Strips all RICH header information from x86/x64 binaries]
- https://github.com/kouzhudong/AntiHook [Enum and Remove Hook in Windows]
- https://github.com/jixiaoyong/ApkSigner [Android Apk Sign Tool]
- https://github.com/4d61726b/VirtualKD-Redux [A revival and modernization of VirtualKD]
- https://github.com/ax/apk.sh [A Bash script that makes reverse engineering Android apps easier]
- https://github.com/vm03/payload_dumper [Android OTA payload dumper]
- https://github.com/ssut/payload-dumper-go [Android OTA payload dumper]
- https://github.com/MlgmXyysd/Xiaomi-HyperOS-BootLoader-Bypass [Xiaomi HyperOS BootLoader Bypass]
- https://github.com/null-luo/btrace [Android App Dynamic Behavior Tracking Tool using eBPF]
- https://github.com/michaelmsonne/SignToolGUI [signtool GUI]
- https://disasm.pro/ [A realtime assembler/disassembler]
- https://github.com/binsnake/fARM64 [Pure-Rust no_std AArch64 disassembler and encoder — iced-x86-shaped API, zero-heap decode path, SVE/SME/SIMD/FP coverage, semantic round-trip encode; wasm and bare-metal friendly]
- https://github.com/iofomo/abyss [Android system call hook]
- https://github.com/uuksu/RPGMakerDecrypter [Tool for extracting RPG Maker XP, VX and VX Ace encrypted archives]
- https://github.com/VelocityRa/awesome-game-file-format-reversing [Curated docs/tools for reverse engineering video game file formats and assets]
- https://github.com/vs-sr-dev/pc-wackywheels-doc [RE documentation for Wacky Wheels (1994): WACKY.DAT archive, track/sprite formats, and fixed-point LUTs behind its pseudo-3D renderer]
- https://github.com/vs-sr-dev/saturnkit [Game-agnostic Sega Saturn RE toolkit: disc/IP.BIN parsing, SH-2 decode, static recompilation to C++, and a hardware runtime (VDP1/2, SCU, SMPC, CD block, SCSP) for native PC ports]
- https://github.com/robbe1912/motorstorm-mv-recomp [Source-only PS3 MotorStorm Monument Valley static recompilation and translation tooling (ps3recomp-based) for authorized local RE and native Windows experiments]
- https://github.com/TalhaMudo/NFSU2Recomp [Static recompilation pipeline and runtime lifting Need for Speed: Underground 2 (Win32/x86, D3D9) to native ARM64 macOS with documented RE tooling]
- https://github.com/elkir0/sc2-android-recomp [StarCraft II static recompilation toolkit (x86-32 to ARM64): per-function difftest oracle, D3D9 shader translation, MPQ tools, pcrecomp closure extensions, and Android porting helpers—method and tooling only, no game assets]
- https://github.com/gamboozino/ngbrecomp [Static recompilation of Ninja Gaiden Black (Xbox OG) to native Linux/Windows with a custom Vulkan renderer; BYO game assets]
- https://github.com/Coz-0/smo-recomp [Static recompilation of Super Mario Odyssey (Switch 1.4.1) to native Windows x64 with custom runtime and Vulkan renderer; BYO dump, no assets in repo]
- https://github.com/sosso33/omikron-tns-omk-engine [From-scratch C++20 reimplementation of Omikron: The Nomad Soul (1999) with documented format reverse engineering and evidence-backed asset readers]
- https://github.com/sergen213/kabus22-linux [Reverse-engineered native Linux Kabus 22 engine with GTK installer/launcher, OpenGL/Vulkan rendering, and RE notes; requires user-supplied original game assets]
- https://github.com/LyeDevGit/WonTree-RBLX-Dumper [Universal Roblox game analysis dumper: Luau decompile stack, remote call graph, live remote logger, framework and anti-cheat pattern detection, markdown/CSV reports]
- https://github.com/jlucaso1/unturned-godot [Godot 4 port that reverse-engineers Unturned Unity serialized formats from a Steam install and renders maps with terrain, objects, lighting, and multiplayer]
- https://github.com/omochikaeri15/battle-cats-complete [Rust desktop toolkit for The Battle Cats: import .pack/.apk data, view cats/enemies/stages, render animations, and export assets]
- https://github.com/gmh5225/compiler-binary-richprint [Print compiler information stored in Rich Header of PE executable]
- https://github.com/mandiant/GoReSym [Go symbol recovery tool]
- https://github.com/PartialVolume/shredos.x86_64 [Disk Eraser]
- https://github.com/ssnob/hidden_syscall_monitoring [monitors hidden syscalls called from call of duty anticheat]
- https://github.com/xaitax/NTSleuth [Comprehensive Windows syscall extraction and analysis framework]
- https://github.com/hfiref0x/syscalltables [Combined Windows NT syscall tables (ntoskrnl, win32k, IUM) for x86-64 and ARM64 across NT5.2 through current Windows 11 builds, with online HTML views and composition tooling]
- https://github.com/cansarigol/pdbr [pdb + Rich library]
- https://github.com/microsoft/pdb-rs [Tools and documents for working with Microsoft PDB files, in Rust]
- https://github.com/roger1337/JDBG [Java Runtime Reverse Engineering and Debugging Tool]
- https://github.com/atrexus/vulkan [A PE dumper for processes protected by user mode anti-tamper solutions (hyperion, theia, etc.)]
- https://github.com/xxFURYWOLFxx/veh-dumper [Surgical x64 VEH/VCH dumper: walk vectored handler lists, extract each handler as a standalone PE64 for IDA with resolved imports]
- https://github.com/diabloidyobane/PEReconstruct [Recover and statically analyze manually-mapped DLLs with runtime-wiped PE headers; pure-stdlib Python, no driver/debugger; Claude Code skill]
- https://github.com/linuxboot/fiano [Go-based tools for modifying UEFI firmware]
- https://github.com/leeqwind/PESignAnalyzer [A Simple PE File Signature information Extracting Tool]
- https://github.com/microsoft/SDCM [Surface Dev Center Manager tool to automate WHQL/Attestation submissions]
- https://github.com/MxIris-Reverse-Engineering/RuntimeViewer [Objective-C Runtime Viewer for macOS and iOS]
- https://github.com/skylot/raung [Assembler/disassembler for java bytecode]
- https://github.com/hx1997/dayu [Open/HarmonyOS abc file parser and decompiler]
- https://github.com/jd-opensource/arkdecompiler [HarmonyOS NEXT decompilation tool]
- https://github.com/loerting/dalvikus [Android reverse-engineering tool / smali editor]
- https://github.com/poppopjmp/VMDragonSlayer [Advanced Virtual Machine Detection and Analysis Framework]
- https://github.com/Byrom90/XenonDumper [Dumps files & data required to use the Xenon Xbox 360 Low Level Emulator]
- https://github.com/WenzWenzWenz/DelphiReSym [A Delphi symbol name recovery tool for reverse engineers]
- https://github.com/Hexorg/Ouroboros [A Symbolic-Execution Decompiler written in Rust]
- https://github.com/JonathanSalwan/Triton [Dynamic binary analysis library: symbolic execution, taint analysis, and SMT-backed RE automation]
- https://github.com/pandaadir05/re-architect [RE-Architect is an advanced automated reverse engineering platform that utilizes binary analysis techniques and machine learning to understand binary files and extract meaningful information]
- https://github.com/gmh5225/js-debugger-bypass-script [JS Debugger Bypass UserScript]
- https://github.com/diversenok/DiaSymbolView [PDB file inspection tool]
- https://github.com/CheckPointSW/Nodejs-Tracer [Simple Node.jstracer that logs calls to analyze heavily obfuscated Node.js malware]
- https://github.com/black0ffr/omega-sast [Zero-dependency JavaScript SAST engine with obfuscator fingerprinting, string deobfuscation, and taint tracking for minified bundle analysis]
- https://github.com/jsacco/ntoskrnlwalker [Resolve offsets, gadgets and symbols from NTKernel]
- https://github.com/glmcdona/strings2 [strings2 - Extract strings from binary files and process memory]
- https://github.com/nico/demumble [Itanium + MSVC symbol demangler; D/Rust/Swift; cross-platform replacement for c++filt / undname.exe]
- https://github.com/amruth-sn/kong [Kong - agentic reverse engineer, LLM-orchestrated binary RE via in-process Ghidra, call-graph analysis, agentic deobfuscation]
- https://github.com/alexbevi/ghidra-manager [CLI to install Ghidra, manage plugins (incl. GhidraMCP), launch projects, and compare binaries]
- https://github.com/LaurieWired/Malimite [iOS and macOS Decompiler]
- https://github.com/azw413/Glass [Rust mobile-first disassembler for APK/DEX/smali and AArch64 .so/.dylib; CFG, xref, CLI/MCP automation]
- https://github.com/0xbigshaq/apatchy [Fuzzing Framework for Apache HTTPD Server]
- https://github.com/HullaBrian/ttd-capa-cpp [TTD capa]
- https://binarybacktrace.com/tools/rubber_room [Rubber Room, a browser tool for PE analysis, x86-64 disassembly, decompilation and Win32 emulation; alpha, nothing is uploaded]
Mixed boolean-arithmetic
- https://github.com/bliutech/mbased [Practical Simplifications of Mixed Boolean-Arithmetic Obfuscation]
- https://github.com/SynthesisLab/MBA [High-performance Mixed Boolean-Arithmetic (MBA) expression synthesis tool]
- https://github.com/astean1001/ProMBA [MBA deobfuscator via Program Synthesis and Term Rewriting]
- https://github.com/mrphrazer/msynth [MBA deobfuscation framework using pre-computed oracles, algebraic simplification, and stochastic program synthesis; integrates with Miasm symbolic execution]
- https://github.com/fvrmatteo/DrillAndJoin [C++17 Drill & Join exact Boolean synthesis; SMT-guided 64-bit opaque-predicate and MBA-style simplification via Bitwuzla]
- https://github.com/DenuvoSoftwareSolutions/GAMBA [Simplification of General Mixed Boolean-Arithmetic Expressions: GAMBA]
- https://github.com/mizt0/mixed-boolean-transform [Mixed boolean arithmetic x+y transform]
- https://github.com/nhpcc502/MBA-Obfuscator [Non-linear Mixed Boolean-Arithmetic Expressions]
- https://github.com/z1ko/mutaben [A simple mixed-boolean-arithmetic (MBA) generator witten in python]
- https://github.com/LostOxygen/gnn_deobfuscation [Mixed boolean arithmetic deobfuscation using graph neural networks]
- https://github.com/MBA-research/mba-wasm [Mixed Boolean-Arithmetic in Rust for WebAssembly]
- https://github.com/trailofbits/CoBRA [Coefficient-Based Reconstruction of Arithmetic — a Mixed Boolean-Arithmetic (MBA) expression simplifier for deobfuscation]
- https://github.com/thalium/rumba [Cracking MBAs - An MBA simplification library]
- https://github.com/LLVMParty/smt-server [A small SMT solving server and wire-format toolkit for bit-vector and Boolean formulas]
- https://github.com/stp/stp [Simple Theorem Prover, an efficient SMT solver for bitvectors]
- https://github.com/nbulsi/cirsat [A circuit-based Boolean satisfiability (SAT) solver based on DAG logic networks instead of CNF]
Fix VMP
- https://github.com/gmh5225/VMProtect
- https://github.com/wallds/NoVmpy
- https://github.com/can1357/NoVmp [Static VMProtect x64 3.x devirtualizer powered by VTIL]
- https://github.com/sexyiam/VMPLift [Emulation-first VMProtect 3.8–3.10+ x64 handler walker and lifter for VIP tracing, devirtualization, and closed-form recovery in IDA/Ghidra workflows]
- https://github.com/JonathanSalwan/VMProtect-devirtualization [Experimental VMProtect 3.x pure-function deobfuscation via symbolic execution and LLVM]
- https://github.com/fare9/dragons-vs-vms [VMProtect x64 devirtualization lab: dragon-tales symbolic handler analysis, all 256 handler slots classified, LLVM IR recovery, and protected sample binaries with Binary Ninja databases]
- https://github.com/gmh5225/VMP-Vmp3_64bit_disasm-prerelease-
- https://github.com/gmh5225/Vmp3_utils
- https://github.com/mike1k/VMPImportFixer [Resolves VMProtect 3.x import protection via emulation (x86/x64)]
- https://github.com/archercreat/titan
- https://github.com/NaC-L/Mergen
- https://github.com/fjqisba/VmpHelper
- https://github.com/xtremegamer1/vmdevirt-vtil
- https://github.com/oureveryday/VMPUnpacker/tree/master [Unpacker]
- https://github.com/void-stack/VMUnprotect.Dumper [Dynamically untamper/unpack VMProtect-protected .NET assemblies]
- https://github.com/void-stack/VMUnprotect [Dynamically log/manipulate VMProtect-virtualized .NET methods via Harmony]
- https://github.com/poppopjmp/VMDragonSlayer [Advanced Virtual Machine Detection and Analysis Framework]
- https://github.com/notsnakesilent/VMPStatic [A static VMProtect unpacker for PE files, supports VMProtect 1.x–3.x and rebuilding unpacked PE images]
- https://github.com/milk-analyzer/vmpunpack [Generic x64 VMProtect/packer unpacker that drives samples through patched sogen emulation to OEP, dumps memory, and rebuilds PEs for IDA/Ghidra]
- https://github.com/Lucyferek-nunu/vmp-unpacker [C++ dynamic VMProtect unpacker with anti-debug bypass, OEP discovery, and IAT repair]
- https://github.com/datcathuh/vmprotect-unpacker [WIP dynamic VMProtect 3.8.x unpacker with OEP discovery, memory dump, and IAT rebuild for protected PE binaries]
- https://github.com/whoamicrash/VMProtectDumper [Windows C tool to unpack VMProtect-protected PEs from memory with OEP/IAT recovery, dynamic exec-region harvesting, and pe-sieve orchestration]
- https://github.com/tomhamidi97-arch/vmp-devirtualization-lab [Educational guide and lab notes on Android native-library VMProtect internals, dispatcher/handler recovery, and devirtualization workflows]
- https://github.com/tomhamidi97-arch/frida-vmp-bypass [Frida boundary-hook writeup for reversing stacked VMProtect and OLLVM on Android via libc/JNI/Java exit monitoring]
Fix Themida
- https://github.com/sodareverse/TDE
- https://github.com/ergrelet/themida-unmutate
- https://github.com/ergrelet/unlicense [Dynamic unpacker and import fixer for Themida/WinLicense 2.x and 3.x]
- https://github.com/DimaReverse/nuitka-themida-unpacker [Two-stage unpacking pipeline that chains Themida/WinLicense dynamic unpacking (unlicense) with Nuitka onefile KAX/KAY static extraction]
- https://github.com/Hendi48/Magicmida [Themida auto-unpacker for 32/64-bit apps with dump and section restore helpers]
- https://github.com/guoxing2024/magicmida-rs [Rust reimplementation of Magicmida Themida unpacker with IAT rebuild and OEP discovery]
- https://github.com/bobalkkagi/bobalkkagi [Themida 3.x unpacking/unwrapping via API-hook emulation (Tiger red64)]
- https://github.com/stuxnet147/Themida-Research [Themida 3.x research]
- https://github.com/arcticbyp/seb-re-toolkit [Python RE toolkit for Themida-protected Safe Exam Browser seb_x64.dll: PE/static analysis, packer detection, BSTR export calls, Frida tracing, and GUI]
- https://github.com/Marisa-Chan/GhidrOrean [Ghidra Python reimplementation of Deathway’s Orean’s Unvirtualizer — Oreans VM (Themida/Code Virtualizer) CISC/TIGER/RISC/FISH]
Fix OLLVM
- https://github.com/w00tzenheimer/d810-ng [D-810ng (Next Generation) is an evolution of d810 to deobfuscate code at decompilation time]
- https://bbs.pediy.com/thread-272414.htm
- https://github.com/obpo-project/obpo-plugin
- https://github.com/IIIImmmyyy/AntiOllvm [AntiOllvm Fla with Fake Runtime]
- https://github.com/Mrack/DeObfBR [libtprt.so]
- https://github.com/zhuzhu-Top/deobf [libtprt.so]
- https://github.com/cdong1012/ollvm-unflattener [unflattener]
- https://github.com/JbvrgtonYT/ollvm-unflattener [unflattener]
- https://github.com/guheng-re/unflat [unflattener]
Dynamic Binary Instrumentation
- https://github.com/hzqst/unicorn_pe
- https://github.com/AdvDebug/Brovan [User-mode x86_64 binary emulator for PE, ELF, memory dumps, and unrecognized file formats; C#, Unicorn, interactive debugger shell]
- https://github.com/momo5502/sogen [Windows User Space Emulator]
- https://github.com/mojtabafalleh/emulator [Windows User Space Emulator]
- https://github.com/binsnake/KUBERA [A x86 environment emulator for Windows user and kernel binaries]
- https://github.com/HexRaysSA/rax [Self-checking CPU emulator: x86-64/AArch64/Hexagon/RISC-V; instruction-level diff vs KVM/QEMU oracles; boots Linux, SDE trace, GDB stub for IDA, SMIR JIT; Rust, MIT]
- https://github.com/ZehMatt/zyemu [x86-64 user mode emulation using Zydis]
- https://github.com/Nitr0-G/PeVisor [PE]
- https://github.com/googleprojectzero/TinyInst
- https://revers.engineering/applied-re-crude-te-for-control-flow-tracing/ [Applied RE: Crude Trap-and-Emulate for control-flow tracing on Windows x64 user mode]
- https://github.com/revsic/cpp-veh-dbi
- https://github.com/ZehMatt/CovCane
- https://github.com/bitdefender/river
- https://github.com/beehive-lab/mambo [ARM]
- https://github.com/GJDuck/e9patch [E9Patch is a powerful static binary rewriting tool for x86_64 Linux ELF binaries]
- https://github.com/DynamoRIO/drmemory
- https://github.com/aroxby/dynre-x86
- https://github.com/WaterlooBridge/adbi [For Android]
- https://github.com/crmulliner/adbi [For Android]
- https://github.com/ndrewh/pyda [Write dynamic binary analysis tools in Python]
- https://github.com/redthing1/w1tn3ss [dynamic binary instrumentation, analysis, and patching framework]
- https://github.com/g2wfw/qbdi-tracer-android [Android assembly instruction tracing tool]
- https://github.com/facebookresearch/CUTracer [A dynamic binary instrumentation tool for tracing and analyzing CUDA kernel instructions]
- https://github.com/momo5502/levo [AOT binary translation: control flow recovery with Ghidra, lifting with Remill, recompilation with LLVM]
Launcher Abuser
PatchGuard-related
- https://github.com/armasm/EasyAntiPatchGuard
- https://github.com/9176324/Shark
- https://github.com/gmh5225/Patchguard-2023 [Shark]
- https://github.com/hfiref0x/UPGDSED [File]
- https://github.com/Mattiwatti/EfiGuard [EFI]
- https://github.com/zzhouhe/PG1903 [Demo NX]
- https://gist.github.com/gmh5225/0a0c8e3a2d718e2d6f9b6a07d5e0f80a [PG CTX]
- https://github.com/gmh5225/QuickPGTrigger [Stress Testing]
- https://github.com/tandasat/Sushi [Monitoring PG]
- https://github.com/gmh5225/Disabling-Hyper-V [Disable Hyper-V]
- https://github.com/AdamOron/PatchGuardBypass
- https://github.com/zer0condition/Demystifying-PatchGuard
- https://github.com/4l3x777/dse_pg_bypass [DSE & PG bypass via BYOVD attack]
- https://github.com/gmh5225/VulnerablePatchGuardExploit [A Vulnerable PatchGuard Exploit that can be used to disable PatchGuard on Runtime]
- https://github.com/emlinhax/tableflipper [partially disable patchguard up to win11 21H2]
- https://github.com/AmitMoshel1/PatchGuardEncryptorDriver [Self-implemented PatchGuard]
- https://r0keb.github.io/posts/PatchGuard-Internals [PatchGuard Internals]
- https://github.com/NeoMaster831/kurasagi [Windows 11 24H2 Runtime PatchGuard Bypass]
Driver Signature enforcement
- https://github.com/gmh5225/dse_hook
- https://github.com/gmh5225/Dse-Patcher-2
- https://github.com/gmh5225/DisableDSE
- https://github.com/wesmar/KernelResearchKit [Windows 11 kernel research framework — boot-time DSE bypass on 25H2 by surgically patching SeCiCallbacks via native subsystem to load unsigned drivers; anti-loop protection and dual-path architecture]
- https://github.com/wesmar/BootBypass [Advanced native-mode utility for bypassing DSE and HVCI — smart SeCiCallbacks patching and independent Memory Integrity management via subsystem:native for early-phase security research and driver development]
- https://github.com/wesmar/kvc [Unsigned driver loading via DSE bypass (g_CiOptions patch, skci.dll hijack, SeCiCallbacks redirection) and PP/PPL manipulation for LSASS memory dumping on HVCI/VBS-enabled Windows]
Windows Kernel Explorer
- https://github.com/NullArray/WinKernel-Resources [Guide]
- https://github.com/supermanc88/Document/tree/master/Windows Driver Development [Guide]
- https://windiff.vercel.app [Diff]
- https://github.com/ergrelet/windiff [Web/CLI tool to browse and diff Windows PE symbols, types, and syscalls across OS versions]
- https://github.com/cristeigabriela/bb [Benowin Blanc — parse Windows SDK/PHNT via libclang; struct layouts, enums, constants like dt without WinDbg; CLI + TUI, JSON export]
- https://github.com/cristeigabriela/bb-viewer [Web explorer for bb output: browse Windows SDK/PHNT functions, types, typedefs, constants, and type graphs; user/kernel, amd64/x86/arm/arm64]
- https://github.com/gmh5225/ntoskrnl_file_collection [Various versions of ntoskrnl files]
- https://github.com/gmh5225/win32k_file_collection [Various versions of win32k files]
- https://github.com/gmh5225/win32k_file_collection2 [Various versions of win32k files]
- https://github.com/jiubanlo/WinNT5_src_20201004 [Leaked Windows XP Source]
- https://github.com/yyl-20020115/OpenArk [Tool]
- https://github.com/BeneficialCode/WinArk [Tool]
- https://github.com/KSwordDEV/KSword [ARK]
- https://github.com/zodiacon/ObjectExplorer [GUI explorer for Windows kernel objects, handles, object types, and Object Manager namespace]
- https://github.com/zodiacon/DbgPrint [GUI viewer for user-mode OutputDebugString and kernel DbgPrint/Ex output via ETW, without registry changes or a custom driver]
- https://github.com/kernullist/kn-diff-pool [Windows kernel Big Pool snapshot/diff tool with kernel driver and Go TUI]
- https://github.com/kernullist/kn-live-dbg [Windows kernel live debugging — driver exposes memory primitives, user-mode TUI handles symbols, types, and UX (LiveKD-style)]
- https://github.com/orinimron123/CVE-2026-40369-EXPLOIT [CVE-2026-40369 — arbitrary kernel increment via NtQuerySystemInformation class 253; browser sandbox escape PoC, Win11 24H2–25H2]
- https://github.com/hfiref0x/KDU [Kernel Driver Utility Tool]
- https://github.com/jthuraisamy/TelemetrySourcerer [Enumerate and disable callbacks/ETW]
- https://github.com/preludeorg/ThreatIntelligenceConsumer [Consuming from the Threat-Intelligence ETW provider without a driver or PPL privilege]
- https://github.com/progmboy/openprocmon [open source process monitor]
- https://github.com/winsiderss/systeminformer [The original name is “Process Hacker”]
- https://github.com/0xcpu/ExecutiveCallbackObjects [Callback]
- https://github.com/0xcpu/WinAltSyscallHandler [AltSystemCallHandlers]
- https://github.com/DownWithUp/CallMon [AltSystemCallHandlers]
- https://github.com/everdox/InfinityHook [ETW Hook]
- https://github.com/AyinSama/Anti-AntiDebuggerDriver [ETW Hook]
- https://github.com/gmh5225/AcDrv [ETW Hook]
- https://github.com/FiYHer/InfinityHookPro [ETW Hook Ex]
- https://github.com/gmh5225/ETWHOOK-InfinityHookClass [ETW Hook Ex]
- https://github.com/DearXiaoGui/InfinityHookPro-main [ETW Hook WIN11]
- https://github.com/ThomasonZhao/InfinityHookProMax [ETW Hook WIN11]
- https://github.com/Oxygen1a1/InfinityHook_latest [ETW Hook WIN11]
- https://github.com/gmh5225/PDF-PMC-X86 [A Study on PMI in x86-Architecture]
- https://github.com/KelvinMsft/ThreadSpy [PMI Callback]
- https://github.com/KelvinMsft/PerfMon [PMI Callback]
- https://github.com/gmh5225/PMI-hpc [PMI]
- https://github.com/marcusbotacin/BranchMonitoringProject [PMI]
- https://github.com/gmh5225/NMI-EnumNmiCallback [Enumerate NMI]
- https://github.com/gmh5225/Disable-nmi-callbacks [Disable NMI]
- https://github.com/gmh5225/NMICallbackBlocker2 [Disable NMI]
- https://github.com/gmh5225/NMI-nmi_callback [Triggering NMI]
- https://github.com/gmh5225/Kernel_Anti-Cheat [NMI]
- https://github.com/jlgreathouse/AMD_IBS_Toolkit [AMD Sampling]
- https://github.com/intelpt/WindowsIntelPT [Intel PT]
- https://github.com/CristiNacu/ingsoc [Intel PT]
- https://github.com/DProvinciani/pt-detector [Intel PT]
- https://github.com/googleprojectzero/winafl [Intel PT Fuzzer]
- https://github.com/intelpt/winipt [ipt.sys]
- https://github.com/australeo/libipt-rs [ipt.sys]
- https://github.com/intelpt/processor-trace [Intel PT Decoder]
- https://github.com/gmh5225/Driver-intel-PEBs-LoopHPCs [Intel PEBs]
- https://github.com/libiht/libiht [Intel Hardware Trace Library]
- https://github.com/jsacco/NTKernelWalkerLib [User-mode ntoskrnl symbol/struct offset resolver via dbghelp + executable section gadget scanning (e.g., short ROP primitives)]
- https://github.com/gmh5225/Ark [Tool]
- https://github.com/gmh5225/ntoskrnl_file_collection [Ntoskrnl Version]
- https://github.com/gmh5225/win32k_file_collection [Win32k Version]
- https://github.com/gmh5225/win32k_file_collection2 [Win32k Version]
- https://github.com/gmh5225/MSSymbolsCollection [Kernel Symbols]
- https://github.com/am0nsec/wkpe [Enumerate VAD]
- https://github.com/armvirus/DriverDllFInder [Find Driver Useless Memory]
- https://github.com/MahmoudZohdy/APICallProxy [Windows API Call Obfuscation]
- https://github.com/Spuckwaffel/Simple-MmcopyMemory-Hook [Hook MmcopyMemory]
- https://github.com/VollRagm/PTView [Browse Page Tables on Windows]
- https://github.com/misc0110/PTEditor [PT Editor]
- https://github.com/IcEy-999/Ntoskrnl_Viewer [Ntoskrnl Viewer]
- https://github.com/ekknod/Nmi [Blocking NMI interrupts]
- https://github.com/EquiFox/KsDumper [Dumping processes using the power of kernel space]
- https://github.com/mastercodeon314/KsDumper-11 [Classic and legendary KsDumper]
- https://github.com/not-matthias/Nemesis [Dumping processes using the power of kernel space]
- https://github.com/allogic/KDBG [Tool]
- https://github.com/backengineering/Voyager [A Hyper-V Hacking Framework For Windows 10 x64 (AMD & Intel)]
- https://github.com/gmh5225/Voyager [A Hyper-V Hacking Framework For Windows 10 x64 (AMD & Intel)]
- https://github.com/noahware/hyper-reV [memory introspection and reverse engineering hypervisor powered by leveraging Hyper-V]
- https://github.com/LabGuy94/Diskjacker [Runtime Hyper-V Hijacking with DDMA]
- https://github.com/ReverseWarrior/IUM-Debugger [Hyper-V host tool via LiveCloudKd hvmm.sys: patch guest securekernel debug check in live RAM so WinDbg in the guest can attach to VTL1 IUM trustlets]
- https://github.com/zer0condition/BusterCall [HVCI bypass via PFN swapping to call arbitrary kernel functions from user-mode]
- https://github.com/NurdAlert/modded-voyager
- https://github.com/gmh5225/Fortnite-VoyagerTF [Voyager for Fortnite]
- https://github.com/repnz/apc-research [APC Internals Research Code]
- https://github.com/intel/pcm [Processor Counter Monitor]
- https://github.com/ChengChengCC/Ark-tools [Some kernel research]
- https://github.com/alal4465/KernelMon [Monitoring Windows Kernel Drivers]
- https://github.com/gmh5225/Practical-Reverse-Engineering-Solutions [DPC+APC]
- https://github.com/br-sn/CheekyBlinder [Enumerating and removing kernel callbacks using signed vulnerable drivers]
- https://github.com/GetRektBoy724/DCMB [Removing kernel callbacks]
- https://github.com/V-i-x-x/kernel-callback-removal [Removing kernel callbacks]
- https://github.com/Air14/KDBGDecryptor [A simple example how to decrypt kernel debugger data block]
- https://github.com/FaEryICE/MemScanner [Memory scanner]
- https://github.com/Oliver-1-1/RwxScanner [RWX Memory scanner]
- https://github.com/S12cybersecurity/RWXFinder [Find Windows RWX memory regions in a target process by size via VirtualQueryEx]
- https://github.com/irql/nokd [Kernel debugger protocol]
- https://github.com/DejavuSecure/DetectNtoskrnlIntegrity [Windows Kernel Security: Memory Integrity Verification with Disk Verification of ntoskrnl.exe]
- https://github.com/brew02/BudgetEPT [Create stealthy, inline, EPT-like hooks using SMAP and SMEP]
- https://github.com/synacktiv/windows_kernel_shadow_stack [Shadow Stack]
- https://github.com/noahware/apic [C++ library for sending processor interrupts via x2apic & xapic]
- https://github.com/zer0condition/NTMemory [Usermode NT Explorer - Query kernel addresses, translate virtual to physical addresses, inspect the PFN database, and more.]
- https://github.com/zer0condition/gexec [Register-machine bytecode interpreter for Windows kernel drivers with gasm assembler, gvmlift PE lifter, and embeddable host API for kernel memory/MSR/physical access]
Linux Kernel Explorer
- https://github.com/MatheuZSecurity/Rootkit [Collection of codes focused on Linux rootkits]
- https://github.com/MatheuZSecurity/ksentinel [Kernel integrity monitor for detecting syscall hooking]
- https://github.com/djolertrk/kLLDB [LLDB based debugger for Linux Kernel]
- https://github.com/sad0p/venom [Linux Kernel Rookit Hooking Mechanism]
Magisk
- https://github.com/PShocker/Zygisk-MagiskHide
- https://github.com/longpoxin/hideroot
- https://github.com/canyie/Riru-MomoHider
- https://github.com/newbit1/rootAVD [root AVD]
- https://github.com/CHERWING/xiaomi_usb_security_bypass [Magisk module bypassing MIUI USB debugging (Security settings), USB install, and fastboot account/SIM gates for scrcpy input injection on rooted Xiaomi]
- https://github.com/Fox2Code/FoxMagiskModuleManager [A module manager for Magisk]
- https://github.com/MMRLApp/WebUI-X-Portable [Portable Android app providing the MMRL WebUI X interface for browsing, installing, and managing Magisk/APatch/KernelSU modules]
- https://github.com/zelect0r/zamr [Curated MMRL module repository for Magisk/KernelSU/APatch (Play Integrity Fix, Zygisk, root-hide, TEESimulator)]
- https://github.com/Yass5002/magisk-hub [Active-source directory and static site for Magisk/KernelSU/APatch modules with schema validation and automated release sync]
- https://github.com/Elcapitanoe/pif-config-generator [Automated pipeline to track upstream Android build.prop tags and publish validated Play Integrity Fix (PIF) JSON profiles]
- https://github.com/wajahatnaeem056/jerrymanager [KernelSU/APatch/Magisk module with Web UI for Play Integrity attestation, keybox injection, root hiding, and banking-app detection cleanup]
- https://github.com/bufanchen121101/AxManagerD [Root-free Magisk-style Android module framework with property injection, runtime modules, and built-in LSPatch Xposed hooking]
- https://github.com/Dr-TSNG/ZygiskOnKernelSU [Run Zygisk on KernelSU]
- https://github.com/svoboda18/magiskboot [Boot Image Modification Tool]
- https://github.com/xiaoxindada/magiskboot_ndk_on_linux [Boot Image Modification Tool]
- https://github.com/ookiineko/magiskboot_build [Boot Image Modification Tool]
- https://github.com/gmh5225/magiskboot-linux [Use GitHub Actions to build magiskboot]
- https://github.com/contactjayclatty/flashwright [Windows 11 wizard to flash factory images, patch boot with Magisk, and OTA-update while keeping root (dry-run checks, backups, recovery)]
- https://github.com/the-dise/EasyPixel [Magisk module that disguises a device under Google Pixel]
- https://github.com/mrx7014/SpoofingCollection [Magisk and LSPosed module collection for spoofing Android device fingerprints (manufacturer, model, build props)]
- https://github.com/AlirezaParsi/COPG [Zygisk module for rooted Android with per-app device, CPU, and GPU spoofing, build-property and Android ID spoofing, and an on-device WebUI; supports KernelSU, Magisk, and APatch]
- https://github.com/gmh5225/MagiskHide [Portable MagiskHide]
- https://github.com/lico-n/ZygiskFrida [Injects frida gadget using zygisk]
- https://github.com/xjoker/frida-magisk [Magisk/KernelSU module bundling official Frida server and Gadget plus a Zygisk injector, with scripted builds and on-device WebUI]
- https://github.com/Admirepowered/Zygisk_mod [Standalone implementation of Zygisk]
- https://github.com/anasfanani/Magisk-Tailscaled [Magisk module for running Tailscale]
- https://github.com/ayoubvvch/sshserver-magisk [Magisk/KernelSU/APatch module with statically linked Dropbear SSH and SFTP for headless root shell access from boot]
- https://github.com/j-hc/FlagSecurePatcher [Disable flag secure and screenshot listeners]
- https://github.com/ShivamXD6/Simple-Flag-Secure [Standalone Magisk/KernelSU/APatch module that patches services.jar to disable FLAG_SECURE and block screenshot detection on Android 14+]
- https://github.com/saadnahid7/smalipatcher_reborn [Magisk/KernelSU/APatch module that patches services.jar on-device for mock-location spoofing and secure-window screenshot bypass on Android 10–17]
- https://github.com/hackcatml/zygisk-memdump [A zygisk module that dumps so file from process memory]
- https://github.com/PerformanC/ReZygisk [Transparent implementation of Zygisk]
- https://github.com/VeryBaaad/ZygiskNextNext [Magisk/KernelSU/APatch module implementing the Zygisk Next API to load ZygiskNext-style modules (inline/PLT hooking, HyperOS Runtime injection)]
- https://github.com/jiqiu2022/Zygisk-MyInjector [Zygisk Injector]
- https://github.com/Exo1i/MagiskHluda [Run a more undetectable frida server on boot using magisk]
- https://github.com/thelok1s/florida-zygisk [Magisk/Zygisk module that auto-starts Florida anti-detection frida-server on boot]
- https://github.com/zensu357/ksurusda [Zygisk module injecting Rusda anti-detection Frida gadget on KernelSU, Magisk, or APatch with WebUI, listen/offline script modes, and library remapping]
- https://github.com/MhmRdd/NoHello [A Zygisk module to hide root]
- https://github.com/ys1231/MoveCertificate [A Magisk/KernelSU/APatch module for moving user certificates to system certificates. Supports Android 7-15]
- https://github.com/jiayuxuan123/RescueX [Magisk/KernelSU/APatch auto-rescue module with boot watchdog, module snapshots, and WebUI recovery]
- https://github.com/xgl34222220-ops/BaiZe [Magisk/KernelSU/APatch module for graded cache, log, APK residue, and deep junk cleanup on rooted Android]
- https://github.com/ri-char/zygisk-dump-dex [A zygisk module that hooks
libdexfile.soto dump dex] - https://github.com/smithluke874/Android-VirtualCam-Manager [Magisk/Zygisk virtual camera module with ArtHook-based Camera1 surface and NV21 frame injection (no LSPosed)]
Xposed
- https://github.com/NPC2000/AppPealing-new [An Xposed module that disables Inka AppSealing, a popular anti-cheat and anti-root solution]
- https://github.com/xposed-modules-repo/com.fuck.iab [LSPosed/Xposed module that hooks Google Play, Bazaar, and Myket in-app billing to bypass purchases, with per-package Frida script support]
- https://github.com/mabbcoll13/xposed-module-kit [Xposed/LSPosed module scaffold with hook templates and root-detection bypass example]
- https://github.com/Jordan231111/lsposed-universal-template [LSPosed/LSPatch module template with Unity/Unreal/Godot engine detection, native pattern scan and memory helpers, and runtime overlay toggles]
- https://github.com/wchunlin1006/LocusMimic [LSPosed/Xposed Android GPS spoof module with map picker, saved locations, and app/system/mock-provider modes]
- https://github.com/cxOrz/AnyWhere [Android mock-location app with map picker, joystick movement, and LSPosed module to hide mock-provider detection]
- https://github.com/xposed-modules-repo/com.wowsoftware.hidemyandroid [LSPosed/Xposed anti-detect module for profile-based device identifier and environment spoofing (Android ID, GAID, IMEI, SIM, root/LSPosed/VPN hiding)]
- https://github.com/GJR787878/DeviceResetSpoofer [LSPosed module that auto-generates a new Android device identity after clearing app data (Android ID, GAID, IMEI, MAC, GSF ID hooks)]
- https://github.com/RytterMohn/UsbDetectionBypass [LSPosed/Xposed module that hides in-app USB connection and USB debugging detection signals (Settings/SystemProperties, USB broadcasts, UsbManager, getprop/dumpsys, sysfs)]
- https://github.com/salvogiangri/KnoxPatch [LSPosed module to restore Samsung Knox-gated apps and features on rooted Galaxy devices]
Frida
- https://github.com/hackcatml/frida-watchpoint-tutorial [Frida’s setHardwareWatchpoint tutorial]
- https://github.com/ChiChou/grapefruit [Runtime mobile instrumentation toolkit for iOS/Android, web UI]
- https://github.com/firerpa/lamda [Android full-stack device control with built-in Frida, MITM, UI automation, and reverse-engineering APIs]
- https://github.com/Kakaxh1/RootRaven [Self-hosted Android/iOS pentest dashboard with Frida hooking, SSL pinning bypass, APK decompilation, and Burp proxy setup]
- https://github.com/oldboysonnt/mobile-harness [One-click Android pentest harness: rooted emulator setup, SSL/root/Play Integrity bypass helpers, Burp routing, jadx indexing, and Frida-ready MCP surfaces for agents]
- https://github.com/jafarm189/MOABile [Multi-device terminal UI for Android/iOS mobile app testing with Frida, Objection, adb, scrcpy, and iproxy orchestration]
- https://github.com/GliTcHZzZ67/mast-orchestrator [Flask web dashboard to deploy frida-server on rooted Android devices and run whitelisted injection scripts (SSL pinning bypass, root detection bypass, crypto monitoring)]
- https://github.com/index-login/MobileRE-Skill [AI-agent mobile reverse-engineering skill set with layered Frida hooks and a six-stage anti-detection pipeline]
- https://github.com/ChiChou/vscode-frida [Unofficial Frida extension for VSCode]
- https://github.com/MrOplus/frida-ide [Web-based Frida IDE with integrated JADX decompilation, device/process management, and Claude AI assistant for mobile reverse engineering]
- https://github.com/ChiChou/bagbak [iOS Frida app decrypt / dump to IPA; extensions; jailbreak; bagbak@5 needs frida@17; deprecated]
- https://github.com/ndhn27/il2cpp-re [Frida-based iOS tool to dump deobfuscated IL2CPP global-metadata headers from running Unity apps for Il2CppDumper analysis]
- https://github.com/CrackerCat/strongR-frida-android
- https://github.com/gmh5225/frida-ue4dump [UE4]
- https://github.com/jcalabres/hook-updater [Update Frida hooks automatically]
- https://github.com/gmh5225/frida-boot [A binary instrumentation workshop, with Frida, for beginners]
- https://github.com/oleavr/frida-module-example [TypeScript Frida library example using frida-compile — ImHex struct patterns, Memory.scanSync scanning, and ARM Thumb hook trampolines]
- https://github.com/smartdone/Frida-Scripts [Some scripts]
- https://github.com/0xdea/frida-scripts [Some scripts]
- https://github.com/SeeFlowerX/frida-smali-trace [Smali trace]
- https://github.com/Ylarod/Florida [anti-detection version of frida-server]
- https://github.com/noobpk/frida-android-hook [Trace classes/functions/and modify the return values]
- https://github.com/unrandoms/frida-mobile-kit [Organized Frida script toolkit for Android dynamic analysis: cert pinning bypass (OkHttp, Flutter, React Native), traffic/crypto logging, root-detection bypass, and runtime memory inspection with a small CLI]
- https://github.com/apkunpacker/AntiFrida_Bypass [Bypass Some AntiFrida Checks]
- https://github.com/Abbbbbi/Frida-Seccomp [Frida-Seccomp]
- https://github.com/rednaga/frida-stack [Getting better stacks and backtraces in Frida]
- https://github.com/piotrbania/frida_usb_dump [Frida script that allows to sniff & dump USB traffic on macOS]
- https://github.com/hackcatml/frida-findJNINativeMethods [Find JNI native methods while the app is running]
- https://github.com/miticollo/xpc-tracer [A tracer based on frida for XPC messages in iOS and macOS]
- https://github.com/0xCD4/SSL-bypass [Root Detection & SSL Bypass Script]
- https://github.com/Ishanoshada/Ultimate-Frida-Bypass [Frida script bypassing Talsec/freeRASP, SSL pinning, root/emulator/Frida detection on Android]
- https://github.com/infosecrajesh/Auto-generate-Frida-bypass-scripts-for-SSL-pinning-root-detection-on-Android-iOS [Static-analysis Frida script generator for Android/iOS SSL pinning and root/jailbreak bypass]
- https://github.com/3v1lC0d3/Root_Detection_Low_level [Frida script that hooks java.io.File and Runtime.exec to log suspicious paths/commands and Java stack traces for Android root-detection behavior analysis]
- https://github.com/moaaz01/nightowl [Unified Android APK analysis CLI with framework detection (Unity/Flutter/RN), RASP defense profiling, and auto-generated Frida bypass scripts]
- https://github.com/VarshaWanjari0/Auto-Android-App-Modding-Tool [Termux-based Android APK modding toolkit for Frida Gadget and native .so injection, patching, rebuild, align, and sign workflows]
- https://github.com/aimardcr/FridaDetectionBypass [Debugger Detection Bypass]
- https://github.com/gmh5225/FridaScript [Low level scripting app for iOS]
- https://github.com/AsenOsen/frida-stealth [Stealth patch for Frida, stealth knowledge collection]
- https://github.com/Exo1i/MagiskHluda [Run a more undetectable frida server on boot using magisk]
- https://github.com/MiChongs/Frida-RS [KernelSU module wrapping official frida-server with a Rust supervisor and Material 3 WebUI]
- https://github.com/suifei/fridare [Powerful Frida repackaging tool for iOS and Android. Easily modify Frida servers to enhance stealth and bypass detection]
- https://github.com/kkkbbb/rustFrida [Frida-like Android ARM64 hook — QuickJS, Java/native/stealth hook, QBDI; pairs with wxshadow (mkpms)]
- https://github.com/dreamland-blog/KSU-Rust-Frida [Android ARM64 dynamic instrumentation module workflow for KernelSU/Magisk: single-binary engine, attach/spawn/watch-so, HTTP RPC control plane, and multi-mode stealth (normal/wxshadow/recomp)]
- https://github.com/wzxwhxcz/LSPFRIDA [LSPosed module embedding Frida GumJS/QuickJS and LSPlant hooks to write, inject, and debug frida-java-bridge scripts entirely on-device without frida-server or a PC]
- https://github.com/TheQmaks/phantom-frida [Build anti-detection Frida server from source]
- https://github.com/Veridiff/Veridiff [Frida Stalker dual-trace engine that pinpoints the branch where two native runs diverge, for anti-cheat checks and OLLVM analysis]
- https://github.com/1013503897/Morphida [Polymorphic anti-detection Android arm64 frida-server builds that morph static fingerprints per release]
- https://github.com/astra1dev/MalumMenu-Android [Among Us Android cheat menu using Frida and frida-il2cpp-bridge]
- https://github.com/abcd123rft/terraria-android-modding [Documented Android Terraria IL2CPP modding skill plus Frida/JsHook injectable mod menu: il2cpp-by-name hooks, system-UI overlay menus, and offline icon extraction tooling]
- https://github.com/AshrafMorningstar/hayday-bot [Frida-based Hay Day automation with guest ARM64 libg.so hooking on LDPlayer/Houdini and Promon SHIELD/Quago anti-cheat bypass]
- https://github.com/quarkslab/android-hardware-attestation-demo [End-to-end PoC bypassing backend hardware Key Attestation by Frida-hooking KeystoreAttestation.generateAttestedKey and relaying the backend nonce to a clean, bootloader-locked device that returns a genuine TEE/StrongBox chain — no TEE tampering or forged certs]
Hook ART(android)
Hook syscall(android)
- https://github.com/iofomo/abyss [Android system call hook]
Android Terminal Emulator
- https://github.com/termux/termux-app
- https://github.com/DP-Hridayan/aShellYou [Material You Android ADB/root/shell utility (Shizuku, OTG, wireless debugging)]
- https://github.com/iflyabd/nowifi-adb [LSPosed module enabling Android wireless debugging over mobile data or Tailscale without WiFi or hotspot]
- https://github.com/gmh5225/neotty
- https://github.com/jackpal/Android-Terminal-Emulator
- https://github.com/NeoTerrm/NeoTerm
Android File Explorer
- https://github.com/nzcv/note [Guide-zh]
- https://github.com/iBotPeaches/Apktool [A tool for reverse engineering Android apk files]
- https://github.com/AndnixSH/APKToolGUI [GUI for apktool, signapk, zipalign and baksmali utilities]
- https://github.com/pxb1988/dex2jar
- https://github.com/skylot/jadx [Dex to Java decompiler]
- https://github.com/neocanable/garlic [Fast APK/DEX/JAR Java decompiler ©]
- https://github.com/LuckyPray/DexKit-Android [dex deobfuscator]
- https://github.com/LSPosed/DexBuilder [Generate dex file by c++]
- https://github.com/rednaga/APKiD [PEiD for Android]
- https://github.com/APKLab/APKLab [Android Reverse-Engineering Workbench for VS Code]
- https://github.com/pgp/XFiles [File explorer for (rooted) Android]
- https://github.com/gmh5225/AdbFileManager [File manager using ADB protocol]
- https://github.com/MuntashirAkon/AppManager [A full-featured package manager and viewer]
- https://github.com/pgp/XFiles [A general-purpose file explorer for (rooted) Android]
- https://github.com/Raival-e/File-Explorer [An Android file explorer]
- https://github.com/SysAdminDoc/FileExplorer [Full-featured rooted Android file manager (Kotlin/Compose) with dual-pane tabs, SAF, USB OTG, APK analyzer, and root module browser]
- https://github.com/d4rken-org/butler [Open-source Android file explorer with root and Shizuku support, app manager, APK export, and regex search]
- https://github.com/obfusk/apksigcopier [apksigcopier - copy/extract/patch android apk signatures & compare apks]
- https://github.com/loerting/dalvikus [Android reverse-engineering tool / smali editor]
- https://github.com/azw413/Glass [APK/AAB: DEX class tree, smali viewer, arm64 .so disassembly, manifest, CFG, xref, bundle search; GPU-accelerated Rust disassembler]
Android Memory Explorer
- https://github.com/misc0110/PTEditor [PT Editor]
- https://github.com/joaomlneto/procmap
- https://github.com/kp7742/MemDumper [Dump]
- https://github.com/LLeavesG/eBPFDexDumper [DexDumper based eBPF on Android Platform]
- https://github.com/mrcang09/Android-Mem-Edit
- https://github.com/ExploitTheLoop/writemem
- https://github.com/abcz316/rwProcMem33 [Linux read & write process memory module]
- https://github.com/ri-char/rwMem [The fork version of rwProcMem33]
- https://github.com/IAIK/armageddon [Cache attacks on ARM]
- https://github.com/tamirzb/CVE-2021-1961 [CVE RW]
- https://github.com/MJx0/KittyMemory [Runtime code patching]
- https://github.com/gmh5225/KittyMemory-IOS [Runtime code patching for IOS]
- https://github.com/vrolife/mypower [Memory scanner]
- https://github.com/gmh5225/memory_server [Memory scanner & analyzer with REST API]
- https://github.com/KuhakuPixel/AceTheGame [Game Hacking Tools]
- https://github.com/thatskymod/Sky-CotL-Scripts [Sky: Children of the Light mod/script hub — Canvas Android modloader, GameGuardian, Lua scripts, PC/Steam assets, and virtual-space setups]
- https://github.com/dbcyyds/MemDbg [Android CE-style memory debugger with Vulkan+ImGui overlay, root engine, pointer scan, and Lua 5.4]
- https://github.com/andoridcharlyroot-debug/charlyengine [Open-source Android Cheat Engine clone (Kotlin + NDK) with root memory scan, value inject/freeze, and saved sessions]
- https://github.com/vastobb/sephile [Rooted Android memory scanner and editor (Compose UI, ptrace NDK) with search, freeze, live hex inspector, and CI-built APKs]
- https://github.com/gmh5225/Android-MemoryTool [RPM]
- https://github.com/Anonym0usWork1221/C-Android-Memory-Tool [RPM]
- https://github.com/Poko-Apps/MemKernel [RPM]
- https://github.com/DeNA/mempatch [Memory tampering tool]
- https://github.com/hackcatml/zygisk-memdump [A zygisk module that dumps so file from process memory]
- https://github.com/mrexodia/lldbext-dump [Extension to create a full memory dump using LLDB on Android]
- https://github.com/block/stoic [Run code within any debuggable Android process, without modifying its APK]
- https://github.com/g2wfw/qbdi-tracer-android [Android assembly instruction tracing tool]
Android Application CVE
- https://github.com/shakevsky/keybuster [Samsung Keymaster TA — AES-GCM IV reuse (CVE-2021-25444) and downgrade (CVE-2021-25490) PoC; hardware key extraction on Galaxy S8–S21; TrustZone research client]
- https://github.com/nahid0x1/CVE-2024-0044 [a vulnerability affecting Android version 12 & 13]
Android Kernel CVE
- https://github.com/ScottyBauer/Android_Kernel_CVE_POCs [List]
- https://github.com/tangsilian/android-vuln [List]
- https://github.com/jiayy/android_vuln_poc-exp [List]
- https://github.com/jsirichai/CVE-2019-2215 [Root for Pixel 2/XL]
- https://github.com/bluefrostsecurity/CVE-2020-0041 [Root for Pixel 3]
- https://github.com/j4nn/CVE-2020-0041 [Root for Pixel 3]
- https://github.com/polygraphene/DirtyPipe-Android [Root for Pixel 6]
- https://github.com/tiann/DirtyPipeRoot [Root for Pixel 6]
- https://github.com/Markakd/bad_io_uring [Root for Pixel 6]
- https://github.com/0x36/Pixel_GPU_Exploit [Root for Pixel7/8 Pro with Android 14]
- https://soez.github.io/posts/CVE-2022-22265-Samsung-npu-driver [Root for Samsung]
- https://github.com/0xbinder/android-kernel-exploitation-lab [CVE-2019-2215]
- https://github.com/zhuowei/cheese [CVE-2025-21479]
- https://github.com/farazsth98/poc-CVE-2025-38352 [CVE-2025-38352]
- https://github.com/villager1314/CVE-2026-64560-Analysis [CVE-2026-64560 — posix-cpu-timers non-leader exec() race UAF; Linux/Android trigger PoC + patch analysis]
- https://github.com/x-spy/CVE-2026-43499-popsicle [CVE-2026-43499]
- https://github.com/Colorful-glassblock/duchamp-root [CVE-2026-43499]
- https://github.com/BuSung-dev/Root-My-Galaxy [Samsung Galaxy KernelSU installer — CVE-2026-43499]
- https://github.com/alex193a/Root-My-Pixel [Jailbreak supported Google Pixel phones with CVE-2026-43499]
- https://github.com/JoinChang/ghostlock-oneplus [GhostLock (CVE-2026-43499) futex PI UAF exploit with multi-device offset tables for locked-bootloader OnePlus/OPPO/realme/Xiaomi root + KernelSU]
- https://github.com/YuKongA/ghostlock-app [GhostLock One-Tap Execution App - CVE-2026-43499]
Android Bootloader Bypass
- https://github.com/MlgmXyysd/Xiaomi-HyperOS-BootLoader-Bypass [Xiaomi HyperOS BootLoader Bypass]
- https://github.com/atlas4381/qualcomm_avb_exploit_poc [Unlocking qualcomm bootloader]
Android Key Attestation
- https://github.com/quarkslab/android-hardware-attestation-demo [End-to-end PoC bypassing backend hardware Key Attestation by Frida-hooking KeystoreAttestation.generateAttestedKey and relaying the backend nonce to a clean, bootloader-locked device that returns a genuine TEE/StrongBox chain — no TEE tampering or forged certs]
IoT / Smart devices
- https://github.com/TaszkSecLabs/xiaomi-c400-pwn [Xiaomi Smart Camera exploits and jailbreak]
- https://github.com/keowu/sjcam [SJCAM SJ4000 Air (Allwinner V3) firmware reverse engineering, parsers, custom CFW (Lelouch), and CVE-2026-52656 PoC]
- https://github.com/bboe/firebreak [Python CLI to USB-unlock, root, and reflash Amazon Echo Dot (2nd gen) via amonet targets or restore stock Fire OS]
Android ROM
- https://xdaforums.com [Guide]
- https://github.com/Akipe/awesome-android-aosp [Guide]
- https://github.com/musabcel/android_rom_list [List]
- https://github.com/vm03/payload_dumper [Android OTA payload dumper]
- https://developer.android.com/studio/run/win-usb [Google USB Driver]
- http://www.miui.com/unlock/download.html [Unlocker for xiaomi]
- https://miuiver.com/miflash [MiFlash]
- https://xiaomifirmwareupdater.com [Xiaomi Firmware Updater]
- https://sourceforge.net/projects/recovery-for-xiaomi-devices/files [TWRP for xiaomi]
- https://github.com/cfig/Android_boot_image_editor [Android ROM tool]
- https://github.com/badabing2005/PixelFlasher [Android ROM tool for Pixel]
- https://github.com/ShivamXD6/ROM-Shifter [Android app for fast ROM backup, restore, migration, and post-flash tooling with Magisk, KernelSU, and APatch support]
- https://github.com/Zenlua/Tool-Tree [Android ROM/APK unpack-repack toolkit for root and non-root ARM64 devices]
- https://github.com/Ctapchuk/android_bootable_recovery-OFRP [OrangeFox Recovery]
Android Device Trees
- https://github.com/MiCode/kernel_devicetree [xiaomi device trees]
- https://github.com/cupid-development/ [xiaomi device trees]
- https://github.com/PixelOS-AOSP/official_devices [PixelOS device trees]
- https://github.com/ymdzq/OFRP-device_xiaomi_mondrian [OFRP for Redmi K60 (mondrian)]
- https://github.com/flakeforever/device_xiaomi_mondrian [Pixel Experience Plus for for Redmi K6/POCO F5 Pro]
Android Kernel Source
- https://source.android.com/docs/setup/build/building-kernels [Docs]
- https://android.googlesource.com/kernel/manifest/+refs [manifest]
- https://android.googlesource.com/kernel/manifest [manifest]
- https://android.googlesource.com/kernel/common [GKI]
- https://github.com/aosp-mirror/kernel_common [GKI]
- https://github.com/PixelOS-AOSP/manifest [An AOSP based ROM aiming to provide the best of Pixel]
- https://www.android-x86.org [X86]
- https://blissos.org [X86]
- https://github.com/MiCode/Xiaomi_Kernel_OpenSource [xiaomi kernel]
- https://github.com/xiaomi-sm8450-kernel [xiaomi kernel]
- https://github.com/Danda420/kernel_xiaomi_sm8250 [xiaomi kernel for POCO F3/F4]
- https://github.com/LowTension/android_kernel_xiaomi_sm8475 [Pixel Experience Plus for for Redmi K6/POCO F5 Pro]
- https://github.com/RooTurkk/ROOTURK-Kernel [Android 15 GKI 6.6 kernel source for POCO X7 Pro with built-in KernelSU Next, SuSFS root hiding, and game-oriented idle tuning]
- https://github.com/GrapheneOS-Archive/kernel_msm-coral [Pixel 4/4XL/4a]
- https://github.com/msnx/KernelSU-Pixel4XL [KernelSU for Google Pixel4XL]
- https://github.com/universal5433/android_kernel_samsung_universal5433 [samsung 15433]
- https://github.com/SM7325-AE/android_kernel_motorola_dubai [Moto Edge 30]
- https://github.com/mylove90/pc_ginkgo [Redmi Note 8/8T with KernelSU]
- https://github.com/fiqri19102002/android_kernel_xiaomi_sweet [Redmi Note 10 Pro]
- https://github.com/ExWhyZed9/android_kernel_gki_common_5.10 [Redmi Note 11T Pro(+) / POCO X4 GT]
- https://github.com/psavarmattas/android_kernel_oneplus_sm7250-WKSU [KernelSU for Oneplus]
- https://github.com/huawei-mediatek-devs/android_kernel_huawei_mt6761 [huawei mt6761]
- https://github.com/pascua28/android_kernel_samsung_sm7150 [samsung sm7150]
- https://github.com/gmh5225/A146B-KSU [KernelSU for SAMSUNG A14 5G (a14x)]
- https://github.com/utziacre/android_kernel_xiaomi_pipa [Xiaomi Pad 6 kernel]
- https://github.com/utziacre/android_kernel_oneplus_sm8250 [OnePlus 8/8T/8Pro/(9R?) kernel]
- https://github.com/Andrea-lyz/oppo_oplus_realme_sm8750 [Automatic kernel builder for Oppo/OnePlus/Realme Snapdragon SM8750 / MediaTek MT6991 devices]
Android Root
- https://github.com/fynks/awesome-android-root [Awesome Android Root]
- https://github.com/topjohnwu/Magisk
- https://github.com/tiann/KernelSU
- https://github.com/rathorekrishna401-NeuroVoid/ApexSU [Hardened KernelSU fork with Rust userspace, stealth hardening, and reduced attack surface for Android 12+]
- https://github.com/gmh5225/KernelSU-4.4 [Adapted for Linux Kernel 4.4 + Google GCC 4.9]
- https://github.com/BuSung-dev/Root-My-Galaxy [One-click KernelSU installer for supported Samsung Galaxy firmware via CVE-2026-43499]
- https://github.com/tbc0309/KPA-Root [Bootloader unlock, Magisk root, and restore toolkit for the KONKR Pocket Advance gaming handheld with integrity-module support]
- https://github.com/bmax121/APatch
- https://github.com/lzghzr/APatch_kpm [APatch modules]
- https://github.com/abcz316/SKRoot-linuxKernelRoot
- https://github.com/0x36/Pixel_GPU_Exploit
- https://github.com/0xCD4/SSL-bypass [Root Detection & SSL Bypass Script]
- https://github.com/Nai64/Nai64Patches [Curated Morphe patch source for Android games — root/integrity bypass, license checks, Play Integrity spoof, and SSL pinning]
- https://github.com/quarkslab/android-hardware-attestation-demo [Bypass backend hardware Key Attestation on rooted/unlocked-bootloader devices by Frida-relaying the backend challenge to a clean attestation oracle — genuine TEE/StrongBox chain, no forgery]
- https://github.com/eltavine/Duck-Detector-Refactoring [DuckDetector refactor: Android local device-integrity inspector for root tampering, runtime hooking, mount anomalies, attestation trust, and virtualization evidence]
- https://github.com/systemnb/RootSocketKit [Root privilege IPC via Unix Socket — Magisk/KernelSU/APatch compatible JNI client, reinforcement-proof, low-latency root ops (OpenProcess, ReadMemory)]
- https://github.com/AtawurRahmanTanvir/NEXUS [Root-required Kotlin/Compose Android utility for device identity spoofing, environment sanitization, kernel memory purge, and telemetry/log cleanup]
Android Kernel driver development
- https://github.com/gmh5225/AndroidDriveSignity [Bypass driver signature verification in Android kernel(ARMv8.3)]
- https://github.com/gmh5225/android-kernel-driver-template [A GKI Android kernel driver(AArch64) template]
- https://github.com/dabao1955/kernel_build_action [a action to build kernel automatically]
- https://github.com/systemnb/compile_android_driver [kade — lyenv-based Android kernel driver automation for GKI/non-GKI builds via kadeflow.yaml, ABI patching, and GitHub Actions]
- https://github.com/TheWildJames/kernel_build_scripts [kernel build scripts]
- https://github.com/orhpel/android-kernel-kit [Bash toolkit (AKK) for Android kernel build, boot.img repack, flash, and post-boot log/debug workflows]
- https://github.com/fuqiuluo/android-wuwa [Android aarch64 rootkit]
- https://github.com/fuqiuluo/ovo [Android aarch64 kernel driver module providing efficient memory operations, touch simulation and IPC. Features include fast memory remapping]
- https://github.com/qq703048949/event_replay [Android touch-event replay toolkit: Magisk module + command socket + gesture trace analyze/generate; supports left/right/up/down/click]
Android Kernel Explorer
- https://docs.kernel.org [Linux Kernel documentation]
- https://armv8-ref.codingbelief.com/en [ARM Architecture Reference Manual for ARMv8-A]
- https://github.com/yhnu/op7t [DIY Kernel]
- https://github.com/yabinc/simpleperf_demo [Perf]
- https://github.com/gmh5225/android_ebpf [EBPF]
- https://github.com/PShocker/Android_bpf_sys [EBPF]
- https://github.com/SeeFlowerX/stackplz [EBPF]
- https://github.com/Sh11no/eDBG [eBPF-based lightweight debugger for Android]
- https://github.com/cloudfuzz/android-kernel-exploitation [Android Kernel Exploitation]
- https://github.com/Snoopy-Sec/Localroot-ALL-CVE [Root CVE]
- https://github.com/xmmword/dpatch [Syscall Dispatcher Patching PoC]
- https://github.com/aquasecurity/tracee [Linux Runtime Security and Forensics using eBPF]
- https://github.com/quarkslab/peetch [eBPF toolkit: dump (sniff traffic with PID/process), tls (OpenSSL key/master-secret extraction), proxy (intercept and decrypt TLS); PCAPng + Scapy; OpenSSL, IPv4, TLS 1.2]
- https://github.com/AndroidReverser-Test/Kernel-Trace [A kpm kernel module based on uprobe, capable of simultaneously hooking a large number of user address space functions]
- https://github.com/kkkbbb/mkpms [wxshadow — KPM stealth breakpoint/hook via R^X page split, bypass self-read integrity check]
- https://github.com/fuqiuluo/android-wuwa [Android aarch64 rootkit]
- https://github.com/fuqiuluo/rnidbg [An Android-ARM64 kernel emulator written in Rust. (Rewrite from unidbg)]
Android Kernel Driver
- https://github.com/rogxo/kernel_hack
- https://github.com/Jiang-Night/Kernel_driver_hack
- https://github.com/systemnb/android-kernel-hacking-toolkit [Android aarch64 LKM toolkit — filecopy, hideproc, propedit, syscall_hijack; CFI bypass, kprobes, mmuhack for sys_call_table]
- https://github.com/WeiJiLab/kernel-hook-framework [Kernel inline hook framework]
- https://github.com/Poko-Apps/MemKernel [RPM]
- https://github.com/libtersafe/KPM-MemReader [KPM kernel module, cross-process memory read via ioctl hook; KernelPatch/APatch]
- https://github.com/kkkbbb/mkpms [wxshadow — KPM stealth probe/hook, R^X page split so read sees original code while exec uses shadow; KernelPatch/APatch]
- https://github.com/Dispa1r/Integrated_kernel_module [Android ARM64 kernel module (lsdriver + wxshadow) + Zygisk injector for game RE — PTE-remap/AT S1E0R memory R/W, W^X shadow-page stealth breakpoints, HW/PTE/single-step breakpoints, do_el0_svc syscall monitor, virtual touch/gyro/GNSS; ptrace-less ELF-linker injection]
- https://github.com/bmjubairdadu/kernel-loader [Rooted Android app to match the running kernel, fetch/load .ko modules via Magisk/KernelSU/APatch with vermagic patch, insmod -f, and SELinux handling]
Android Network Explorer
- https://github.com/emanuele-f/PCAPdroid
- https://github.com/damanoreshkan-beep/rtl8852au-userspace [No-root userspace RTL8852AU Wi-Fi driver for Android with libusb monitor mode, channel hopping, and 802.11 frame injection]
- https://github.com/zhizhuodemao/android_proxy_mcp [Android Proxy MCP — MCP-based HTTP/HTTPS capture & analysis for AI]
Cellular / SIM
- https://github.com/tomasz-lisowski/swsim [Pure-software USIM/UICC SIM card simulator — full APDU/SIM logic without physical hardware; PC/SC via swICC reader; pairs with SIMtrace2/cardem for phone testing; GSM/LTE auth, MILENAGE, private LTE/IoT and cellular security research]
Android memory loading
IOS jailbreak
- https://github.com/KpwnZ/Def1nit3lyN0tAJa1lbr3akTool [iOS 15.7 and iOS 16.5]
- https://github.com/opa334/Dopamine [iOS 15 and 16]
- https://github.com/roothide/Dopamine2-roothide [iOS 15 and 16]
- https://github.com/felix-pb/kfd [iOS 15 and 16]
- https://github.com/0x36/weightBufs [ANE kernel r/w exploit for iOS 15 and macOS 12]
- https://github.com/jjolano/shadow
- https://github.com/gmh5225/IOS-jailbreak--Fugu15
- https://github.com/Kc57/iHide
- https://github.com/regulad/aaoracled [Jailbroken iOS App Attest oracle daemon: headless DCAppAttestService attestation/assertion API for mobile integrity-bypass research]
- https://github.com/palera1n/palera1n
- https://github.com/checkra1n
- https://github.com/opa334/TrollStore [jailed app]
- https://github.com/paradiseduo/IPAPatch [Patch iOS Apps without Jailbreak]
- https://github.com/Nirad-Maharaj/Disable-Call-Recording-BookRestore- [iOS file-exploit based tool to disable call-recording notifications without jailbreak]
- https://github.com/34306/mdc0 [CVE-2025-24203]
- https://github.com/jailbreakdotparty/dirtyZero [CVE-2025-24203]
- https://github.com/wh1te4ever/darksword-kexploit-fun [DarkSword kernel r/w exploit playground; iOS/iPadOS 17.0-26.0.1 except A19/M5; sandbox escape, process control/crash, SSV root FS overwrite, UID/GID/sticky bits, disable ASLR via launchd P_DISABLE_ASLR]
- https://github.com/wh1te4ever/xnu_1day_practice [XNU 1-day exploit practice collection — PoCs for CVE-2019 through CVE-2025 (e.g. 30883, 24153, 24257, 43510, 43520) plus Coruna/PEGruber research]
- https://github.com/wh1te4ever/humptylock [iOS 14.0–14.4.2 kernel r/w exploit app from Coruna Pendulum PE; pipe/lockf/OOL-port primitives; tested iPhone 6s–11 Pro]
- https://github.com/rooootdev/lara [WIP darksword kexploit implementation; iOS 17.1.1-26.0.1 tested; includes font overwrite, app bypass, file manager, and DirtyZero2 experiments]
- https://github.com/zeroxjf/lightsaber [iOS 18.4-18.6.2 userland exploit chain with JS injection into SpringBoard and other processes. Derived from DarkSword]
- https://github.com/staturnzz/oob_entry [iOS 3.0-10.3.4 tfp0 kernel exploit]
- https://github.com/staturnzz/momentarius [A12/A13 Apple Page Protection Layer (PPL) bypass; C; by staturnzz and Clarity]
- https://github.com/khanhduytran0/coruna [Leaked iOS exploit toolkit — WebKit chains for multiple iOS versions, partially deobfuscated]
- https://github.com/crazymind90/CVE-2026-XNU-AIO-KEVENT-UAF [XNU kern_aio.c AIO+kevent UAF; sandbox app, no entitlements; panic/double-free; iOS 26.2, patched 26.3]
- https://github.com/forcequitOS/bad_query [Experimental iOS 26.0–26.6.1 / 27.0 beta 4 sandbox-escape PoC demonstrating access to selected app, daemon, plug-in, App Group, and system-container paths]
- https://github.com/34306/usbliter8-fun [iOS 27.0 beta CFW jailbreak via usbliter8 SecureROM exploit; iPhone 11 Pro only; RP2350 PWN DFU; destructive (breaks SEP/WiFi/baseband/Apple services)]
IOS Network / Location
- https://github.com/Yu9191/wloc [Spoof Apple WiFi/cell network location (gs-loc WLOC) — MITM protobuf patch via Surge/Quantumult X/Loon/Stash/Shadowrocket; online picker + Shortcuts; GCJ-02→WGS84; no jailbreak; indoor/WiFi positioning only]
- https://github.com/mekos2772/ios-location-spoofer [iOS network location spoofer without jailbreak — MITM Apple map lookup responses; patch WiFi BSSID + CellTower coords; Surge/Shadowrocket/Loon/Stash/QX modules; motion state spoof; location-picker web UI]
IOS Memory Explorer
- https://github.com/hackcatml/kfd-explorer [iOS kernel memory explorer]
- https://github.com/DerekSelander/dynadump [A runtime ObjC class-dump]
- https://github.com/jsherman212/xnuspy [an iOS kernel function hooking framework for checkra1n’able devices]
- https://gist.github.com/gmh5225/95151b245267a27b3cdbea949632c680 [DirtyZero Exp]
- https://github.com/MxIris-Reverse-Engineering/RuntimeViewer [Objective-C Runtime Viewer for macOS and iOS]
- https://github.com/vaenshine/VansonMod [TrollStore iOS memory editor with value scanning, hex editing, pointer analysis, RVA patching, signatures, scripts, and app archive management]
IOS File Explorer
- https://github.com/DerekSelander/dynadump [A runtime ObjC class-dump]
- https://github.com/LaurieWired/Malimite [Malimite is an iOS and macOS decompiler designed to help researchers analyze and decode IPA files and Application Bundles]
- https://github.com/azw413/Glass [IPA/Mach-O: fat slice selection, Info.plist, Frameworks disassembly, CFG, xref; AArch64 native RE in the same bundle workflow as Android]
IOS App Packaging
- https://github.com/AloneMonkey/frida-ios-dump [Frida-based tool to pull decrypted IPAs from jailbroken iOS devices over USB SSH, with parallel module downloads and Frida 17 bridge support]
- https://github.com/addrianyy/ios_packager [Package and sign iOS applications]
- https://github.com/xscope0/xkvm-ios-injector [Go CLI toolbox to inject, extract, and convert iOS tweak packages for sideloaded IPAs]
Virtual Environments
- https://github.com/FBlackBox/BlackBox [Android]
- https://github.com/ServenScorpion/VirtualApp [Android]
- https://github.com/chinaapps/zn-toolbox [Host-no-root Android container VM (Twoyi fork) with built-in root and LSPosed for isolated mobile modding]
- https://github.com/wumingzhinu/VirtualMachine [Android VM app (VM Studio) with Vulkan rendering, Magisk root toggle, Xposed module support, and Google Play services for isolated mobile environments]
- https://github.com/Iviesever/rooted-android-game-vm [Windows desktop rooted Android game VM workbench with GUI/CLI management, APK install/update, root diagnostics, and private app-data export for isolated mobile testing]
- https://github.com/mandiant/flare-vm
- https://github.com/hzqst/VmwareHardenedLoader
- https://github.com/d4rksystem/VMwareCloak
- https://github.com/utmapp/UTM [Virtual machines for iOS and macOS]
Decompiler
- IDA Pro
- Binary Ninja
- https://github.com/radareorg
- https://github.com/radareorg/iaito [Official radare2 GUI (Qt5/6), focused on reverse engineering workflow]
- https://github.com/gmh5225/ghidra
- https://github.com/adam-040/Enigma [C++ reimplementation of Ghidra analytical core (SoftwareModeling + Utility): no JVM, SLEIGH + native Capstone pipelines, embeddable for AI/agents]
- https://github.com/gmh5225/retdec
- https://github.com/1-3-7/disrobe [Rust CLI suite for static recovery: decompile, deobfuscate, and unpack native code, bytecode, scripts, firmware, and nested application packages through an automatic pipeline]
- https://github.com/Sidenai/hyperion-disassembler [Native multi-arch disassembler & decompiler — PE/ELF/Mach-O/.NET, x86/x64/ARM64/MIPS/PPC, RTTI recovery, SSA decompiler, Lua scripting, packer detection]
- https://github.com/kernelstub/Retract [Static binary analysis workbench: PE/ELF/Mach-O, x86/x64 disasm, CFG, pseudocode, browser UI via --serve; malware triage and RE]
- https://github.com/ngwg/ceasta [Integrated disassembler, decompiler, and x64dbg-style debugger for Windows and Linux with Lua plugins and a built-in MCP server for AI-assisted binary analysis]
- https://github.com/AkashaCorporation/HikariSystem-HexCore [VS Code-based native RE IDE: Capstone/Unicorn/Remill/Helix decompilation pipeline, PE/ELF emulation, YARA/IOC/entropy, headless
.hexcore_job.jsonautomation, and agent integration] - https://github.com/kernelstub/Cognitor [Patch Tuesday semantic diff CLI for Windows build snapshots; driver IOCTL lab, defensive patch review, disclosure workflows]
- https://github.com/azw413/Glass [Rust, GPL-3.0] Mobile-first GPU disassembler (gpui) for APK/DEX/smali and AArch64 ELF/Mach-O (Android/iOS); CFG, xref, bin/insn search, annotations, in-place patch export; CLI + MCP; free IDA alternative]
- https://github.com/Maxamedxasa/SakoREStudio [Mobile-first Android disassembler and decompiler for APK, ELF, PE, and DEX with ptrace debugger, call graph, and SakoScript plugins]
- https://github.com/Col-E/Recaf [Java]
- https://github.com/gmh5225/bytecode-viewer [Java]
- https://github.com/gmh5225/deobfuscator [Java]
- https://github.com/Coldzer0/LuaDecompiler [Lua bytecode disassembler and decompiler for Lua 5.1, 5.2, 5.3, 5.4, and 5.5 binary chunks]
- https://github.com/xV4L3x/hermit [Hermes bytecode (HBC) toolkit: parse, disassemble, decompile to JavaScript, and structurally patch React Native Hermes bundles with round-trip fidelity]
- https://github.com/gmh5225/binsync [Sync]
- https://github.com/gmh5225/ethersplay [EVM dissassembler]
- https://github.com/Hexorg/Ouroboros [A Symbolic-Execution Decompiler written in Rust]
- https://github.com/sefcom/oxidizer [Rust decompiler on angr — high-fidelity pseudocode from stripped binaries, enum/match/? recovery, Rust 1.39–1.93]
- https://github.com/Noelo-Lab/kuna [Agent-first decompiler in Rust, originally ported from Ghidra; CLI, WASM, and Ghidra integration; tunable for LLM-driven autonomous refinement]
- https://github.com/Noelo-Lab/decbench [DecBench — benchmark for exact decompilation: structural CFG (GED), type recovery, recompilation bytematch; angr/Ghidra/IDA/Binja + LLMs; https://decbench.com]
- https://github.com/QuesmaOrg/BinaryAudit [BinaryAudit — open-source Harbor benchmark for AI agents finding injected backdoors in stripped binaries (Ghidra/Radare2); lighttpd/dnsmasq/Dropbear/Sozu/Caddy]
- https://github.com/NeverSight/NeverD [The AI-friendly binary analysis & decompilation engine — 1:1 lift, built on LLVM]
IDA themes
- https://github.com/gmh5225/dp701 [Dark theme for IDA Pro]
- https://github.com/gmh5225/ida-dark-plus [Dark+ Theme]
- https://github.com/gmh5225/long_night
- https://github.com/gmh5225/IdaThemer
- https://github.com/PoP-Lin/IDAPro-MuiLs [Modern Windows UI theme plugin for IDA Pro 9.3 with scoped Qt styling, live preview, and persistent appearance settings]
IDA Plugins
- https://github.com/gmh5225/ida-plugins [List of IDA Plugins]
- https://github.com/gmh5225/idaplugins-list [List of IDA Plugins]
- https://github.com/HexRaysSA/plugin-repository [Official Hex-Rays JSON manifest and sync pipeline for plugins.hex-rays.com and the IDA Plugin Manager]
- https://github.com/fr0gger/awesome-ida-x64-olly-plugin [Curated list of IDA, x64dbg, Ghidra, GDB, and OllyDbg plugins]
- https://github.com/gmh5225/idawilli [IDA Pro resources, scripts, and configurations]
- https://github.com/gmh5225/idasdk-collection/tree/master [IDA SDK]
- https://github.com/gmh5225/ida-sdk [IDA SDK]
- https://github.com/gmh5225/IDASkins [Skins]
- https://github.com/gmh5225/ida-nord-theme [Skins]
- https://github.com/giladreich/ida_migrator [Migrate Database]
- https://github.com/gmh5225/NtRays [Windows Kernel Enhance]
- https://github.com/gmh5225/ida_bitfields [Windows Kernel Enhance]
- https://github.com/gmh5225/DriverBuddyReloaded [Windows Kernel Analysis]
- https://github.com/gmh5225/IDA2Obj [COFF Relink]
- https://github.com/synacktiv/dotNIET [Import .NET Symbol]
- https://github.com/aliyunav/Finger [Recognizing Function By Cloud]
- https://github.com/gmh5225/FindFunc [Recognizing Function By Pattern]
- https://github.com/kirovgrad/Renamaida [IDA Pro plugin to build JSON instruction signatures from debug libraries and rename unknown library functions via Jaro-Winkler matching]
- https://github.com/FPSZ/ida-better-information [Single-file IDA Pro plugin and CLI to detect C runtime on stripped binaries, apply FLIRT, rename libc calls, and annotate MMX/SSE math in Hex-Rays (undoable, offline).]
- https://github.com/FPSZ/ida-better-reverse [IDA Pro plugin and CLI for stripped static ELF: glibc/musl build detection, link-aware FLIRT naming, Hex-Rays libc/syscall notes, variable data-flow views, and zoomable call flowcharts]
- https://github.com/gmh5225/sigmakerex [Signature Maker]
- https://github.com/gmh5225/IDA-Pro-SigMaker [Signature Maker]
- https://github.com/mahmoudimus/ida-sigmaker [Zero-dependency IDA Pro 9+ cross-platform signature maker with optional SIMD speedups]
- https://github.com/gmh5225/ida-sigmaker [Signature Maker]
- https://github.com/gmh5225/FakePDB [PDB Generation From IDA]
- https://github.com/gmh5225/Ponce [Symbolic Execution]
- https://github.com/gmh5225/ttddbg [Time Travel Debugging]
- https://github.com/gmh5225/LazyIDA [LazyIDA]
- https://github.com/gmh5225/HappyIDA [Hex-Rays decompiler utilities: parameter labeling, SEH, Rust strings]
- https://github.com/nologic/idaref [IDA Pro plugin showing full x86-64/ARM/MIPS instruction reference at the cursor]
- https://github.com/danigargu/deREferencing [IDA Pro plugin adding dereferenced register and stack views with colors for x86, ARM, and MIPS debugging]
- https://github.com/gmh5225/ida-function-string-associate [IDA 9.X: auto-generate function comments from string literals]
- https://github.com/gmh5225/qsynthesis [Greybox Synthesizer geared for deobfuscation of assembly instructions]
- https://github.com/gmh5225/ida_medigate [RTTI]
- https://github.com/gmh5225/findyara-ida [Yara]
- https://github.com/gmh5225/ida_vmware_windows_gdb [IDA+VMWARE+GDB]
- https://github.com/gmh5225/ida_bochs_windows [IDA+BOCHS]
- An integration for IDA and VS Code which connects both to easily execute and debug IDAPython scripts
- https://github.com/gmh5225/efiXplorer [UEFI firmware]
- https://github.com/Accenture/protobuf-finder [Protobuf]
- https://github.com/gmh5225/golang_loader_assist [GO Reversed]
- https://github.com/gmh5225/GhidraDec [Ghidra Decompiler]
- https://github.com/siesta/mcore-decompiler [IDA Pro 9.4 plugin decompiling Motorola M·CORE firmware into structured C pseudocode with stack-frame and control-flow recovery]
- https://github.com/gmh5225/EasyRe [Trace Execution]
- https://github.com/gmh5225/ida_ps5_elf_plugin [PS5 elf loader]
- https://github.com/gmh5225/tenet [Execution Traces]
- https://github.com/gmh5225/Tenet-IDA9.0 [Execution Traces]
- https://github.com/gmh5225/frinet [Frida-based tracer]
- https://github.com/gmh5225/findcrypt-yara [Find crypto constants]
- https://github.com/gmh5225/VMAttack [VMAttack PlugIn for IDA Pro]
- https://github.com/gmh5225/sk3wldbg [Unicorn]
- https://github.com/gmh5225/Classy [Manage classes]
- https://github.com/gmh5225/ida_names [Renames pseudocode windows with the current function name]
- https://github.com/helpsystems/turbodiff [diff]
- https://github.com/joxeankoret/diaphora [diff]
- An IDAPython module for way more convienent way to Reverse Engineering iOS kernelcaches
- https://gitlab.com/eshard/d810 [Deobfuscate code at decompilation time by modifying IDA Pro microcode]
- https://github.com/CKCat/d810 [Deobfuscate code at decompilation time by modifying IDA Pro microcode]
- https://github.com/w00tzenheimer/d810-ng [D-810ng (Next Generation) is an evolution of d810 to deobfuscate code at decompilation time]
- https://github.com/airbus-seclab/AutoResolv [Resolves functions imported from external libraries]
- https://github.com/snare/ida-efiutils [EFI binaries]
- https://github.com/JusticeRage/Gepetto [ChatGPT]
- https://github.com/MayerDaniel/ida_gpt [ChatGPT]
- https://github.com/mahaloz/DAILA [ChatGPT]
- https://github.com/ke0z/VulChatGPT [ChatGPT]
- https://github.com/WPeace-HcH/WPeChatGPT [ChatGPT]
- https://github.com/lzyddf/IDA_Plugin_PCodeGPT [ChatGPT]
- https://github.com/deadeert/EWS [Emulation]
- https://github.com/patois/genmc [Display Hex-Rays Microcode]
- https://github.com/RolfRolles/HexRaysDeob [Hex-Rays Microcode]
- https://github.com/KasperskyLab/hrtng [IDA Pro plugin for decryption, deobfuscation, patching, and Hex-Rays transforms]
- https://github.com/HexRaysSA/goomba [Simplify MBA]
- https://github.com/es3n1n/ida-wakatime-py [WakaTime integration for IDA Pro]
- https://github.com/senator715/IDA-Fusion [Fast Signature scanner & creator]
- https://github.com/cellebrite-labs/PPLorer [Resolves PPL calls to the actual underlying PPL function]
- https://github.com/kweatherman/ida_missinglink [Fills in missing indirect CALL & JMP target information]
- https://github.com/yubie-re/ida-jm-xorstr-decrypt-plugin [Attempts to decrypt JM Xorstr in some x64 binaries]
- https://github.com/timetravelthree/IDARustDemangler [Rust Demangler & Normalizer]
- https://github.com/gmh5225/ida-find-.data-ptr [.data ptr lookup script]
- https://github.com/repnz/ida-plugins [Register Cross References]
- https://github.com/lstaroth/AntiXorstr [Anti Xorstr]
- https://github.com/SentineLabs/AlphaGolang [Analyzing Golang Binaries]
- https://github.com/tmr232/Sark [IDAPython Made Easy]
- https://github.com/govcert-ch/ConfuserEx_IDAPython [Deobfuscation script for ConfuserEx]
- https://github.com/sonyps5201314/pdb [PDB plugin with enhance and bugfix]
- https://github.com/Coldzer0/IDA-For-Delphi [IDA-For-Delphi]
- https://github.com/AntonKukoba1/BetterCallStack [Improve call stack]
- https://github.com/za233/IDADeflat [deflat]
- https://github.com/RomanRybachek/Copy_RVA [Copy RVA]
- https://github.com/RevEngAI/reai-ida [RevEng.AI]
- https://github.com/gaasedelen/microavx [AVX Lifter]
- https://github.com/thalium/ida_kmdf [IDA kmdf]
- https://github.com/zengfr/XrefsExt [XrefsExt plugin]
- https://github.com/TheCruZ/FindXrefs [IDA Pro plugin that scans large binaries for missing string/data xrefs and materializes undefined bytes so cross-references appear]
- https://github.com/seifreed/xrefgen [IDA Pro cross-reference generator for indirect refs and complex control-flow, with XRefer-compatible output]
- https://github.com/sterrasec/genpatch [Python script for patching binary]
- https://github.com/frasten/ida-genpatch [IDA Pro plugin that exports grouped patched-byte sequences and disassembly context for building external patchers]
- https://github.com/AzzOnFire/yarka [YARA signature creation]
- https://github.com/VirusTotal/vt-ida-plugin [VirusTotal plugin]
- https://github.com/crifan/AutoRename [Auto rename symbol]
- https://github.com/LAC-Japan/IDA_Plugin_AntiDebugSeeker [Extract anti-debugging]
- https://github.com/cseagle/blc [Integrate Ghidra’s decompiler]
- https://github.com/Goatman13/ps2_ida_vu_micro [Find and disassembly vu microcode in ps2 executables]
- https://github.com/Goatman13/spu2c [IDA plugin that annotates PlayStation 3 Cell SPU opcodes as readable C-style comments]
- https://github.com/arizvisa/ida-minsc [Functional DWIM interface]
- https://github.com/wINfOG/IDA_Easy_Life [Deobfuscation]
- https://github.com/senko37/yarascan-ida [Scan file with Yara rules]
- https://github.com/SamuelTulach/ida-unity-pdb-downloader [Unity PDB Downloader]
- https://github.com/TrungNguyen1909/aarch64-sysreg-ida [A IDA plugin to show ARM MSRs nicely]
- https://github.com/danielplohmann/gui-plugin-template [A template for cross-compatible GUI plugins]
- https://github.com/williballenthin/ida-settings [Python library and GUI plugin for fetching and editing IDA Pro plugin configuration via Hex-Rays HCLI/ida-config.json]
- https://github.com/AlonSoko/ida-plugin-lens [IDA Pro plugin for Edit > Plugins: icons, grouping, version labels, and hcli-driven update status]
- https://github.com/3641397194-wq/ida-zh-cn [Runtime Simplified-Chinese UI plugin for IDA Pro 9.x that localizes menus and dialogs without patching IDA binaries]
- https://github.com/gmh5225/IDA-MapSymbolParser [IDA Map File Symbol Renamer]
- https://github.com/gmh5225/IDA-KallsymsSymbolRenamer [IDA kallsyms Renamer]
- https://github.com/XMCVE/import-kallsyms [IDA Pro Plugin to import /proc/kallsyms for Linux Kernel]
- https://github.com/tomrus88/OpenLumina [Allows connecting to third party Lumina servers]
- https://github.com/stuxnet147/IDA-Assistant [Claude-3 models assistant]
- https://github.com/goseungduk/CE_Tracer-IDA [CheatEngine Value Tracer of IDA]
- https://github.com/binarly-io/idapcode [Displaying the P-Code for the current function]
- https://github.com/ElvisBlue/emotet-deobfuscator [IDA plugin to deobfuscate emotet CFF]
- https://github.com/threatlabz/pikabot-deobfuscator [Deobfuscating Pikabot’s strings using RC4 and AES]
- https://github.com/Pycatchown/ClassMaker [IDA plugin to make classes automatically]
- https://github.com/airbus-cert/comida [An IDA Plugin that help analyzing module that use COM]
- https://github.com/Sandspeare/ida2llvm [Lifting IDA Microcode into LLVM IR]
- https://github.com/crtdll/ida-gameguard-str-dec [GameGuard String Decryption]
- https://github.com/kkent030315/IDARustCargo [Displaying potentially installed Cargo dependencies]
- https://github.com/dNop90/dOffset [IDA Pro and Cheat Engine to get the offset of the current module]
- https://github.com/sneakyevil/ida_functioncolor [IDA Plugin to colorize function definition in pseudocode]
- https://github.com/apkunpacker/IDA-Gepetto [IDA plugin which queries Local language models]
- https://github.com/Jackiemin233/Gemini-Genius [IDA python 3 plugin and binary file similarity comparison]
- https://github.com/lj94093/IDAAndroidBreakpoint [IDA plugin aid to set android so breakpoint]
- https://github.com/jonpalmisc/ida_screenshot [High-resolution screenshot capture plugin for IDA Pro]
- https://github.com/JANlittle/IDARustHelper [Small rust binary analysis helper for IDA]
- https://github.com/mefistotelis/ida-pro-loadmap [Plugin for IDA Pro disassembler which allows loading .map files]
- https://github.com/OALabs/hashdb-ida [HashDB API hash lookup plugin for IDA Pro]
- https://github.com/Vu1nT0tal/firmeye [IoT]
- https://github.com/sean2077/big5-decode-ida [IDA Plugin for decoding bytes as big5]
- https://github.com/Vis-Wing/Binoculars [Binoculars is an IDA PRO plugin with an integrated AI interface]
- https://github.com/Reodus/CBS [IDA Plugin to set custom breakpoints on mnemonics]
- https://github.com/matteyeux/IDArling [IDArling is a collaborative reverse engineering plugin for IDA Pro and Hex-Rays]
- https://github.com/xsslize/idarem [IDA Pro plugin that serves disassembly, Hex-Rays pseudocode, graphs, and live sync over HTTP to a React browser client]
- https://github.com/richor1042/IDAFuncOutline [optimize the readability of decompiled code for iOS ARM64 binaries]
- https://github.com/Dump-GUY/IDA_PHNT_TYPES [Converted phnt to IDA TIL, IDC (Hex-Rays)]
- https://github.com/Mrack/DeObfBR [libtprt.so]
- https://github.com/janisslsm/ida-ps4-helper [A helper plugin for PS4 module loader]
- https://github.com/Antelcat/ida_copilot [ChatGPT Agent analyses your IDA pseudocode]
- https://github.com/crytic/ida-evm [IDA Processor Module for the Ethereum Virtual Machine (EVM)]
- https://github.com/Duntss/IDA-ZVM-Disassembler [Zeus VM bytecode processor + loader for IDA Pro, from OALabs ZVM]
- https://github.com/NoneShell/IDAComments [a IDA plugin helps you to manage your IDA Comments]
- https://github.com/emoose/idaxex [Xbox360/Xenon loader plugin for IDA 9]
- https://github.com/Goatman13/ida_vmx128_helper [IDA plugin that corrects misinterpreted VMX128 A-register operands in Xbox 360 (PowerPC Xenon) binaries during disassembly]
- https://github.com/junron/auto-enum [automatically identify and set enums for standard functions]
- https://github.com/ViRb3/swift-ida [IDA plugin to aid with Swift reverse engineering]
- https://github.com/Krietz7/IDA-DataExportPlus [a IDA Pro plugin to export data better]
- https://github.com/harlamism/IdaClu [For grouping similar functions]
- https://github.com/eset/DelphiHelper [help the analysis of x86/x86_64 binaries written in Delphi]
- https://github.com/milankovo/YaraVM [IDA processor for loading and disassembling compiled yara rules]
- https://github.com/cellebrite-labs/LabSync [An IDA plugin that can be used to partially synchronize IDBs between different users reversing the same binaries]
- https://github.com/xp987/symbridge [Live IDA ↔ x64dbg annotation and type synchronization bridge]
- https://github.com/cellebrite-labs/FunctionInliner [An IDA plugin that eases reversing of binaries that have been code-size-optimized with function outlining]
- https://github.com/herosi/PyClassInformer [RTTI Parsing IDA plugin]
- https://github.com/0xGotcha/XrefXpert [An advanced cross-reference navigation tool for IDA Pro]
- https://github.com/TKazer/ScyllaHide-For-IDA9.0RC [ScyllaHide-For-IDA9]
- https://github.com/mrexodia/ida-pro-mcp [MCP for IDA pro]
- https://github.com/TechMecca/kiln-ida [IDA Pro 9.1 Streamable HTTP MCP plugin exposing functions, xrefs, debugger control, and optional IDB edits to AI clients]
- https://github.com/bkerler/ida_rpc [JSON-RPC daemon for agent-assisted RE: decompile, disassemble, xrefs, rename, types, patches; headless & GUI]
- https://github.com/saileaxh/iida-mcp [Faster IDA Pro MCP plugin — 77 tools, multi-instance routing, optional Windows kernel memory/module access via iida-mcp-ioctl driver]
- https://github.com/MeroZemory/ida-multi-mcp [Multi-instance IDA Pro MCP: one endpoint for many GUI/idalib sessions; parallel routing; BCSD function similarity; Python]
- https://github.com/MxIris-Reverse-Engineering/ida-mcp-server [MCP for IDA pro]
- https://github.com/taida957789/ida-mcp-server-plugin [MCP for IDA pro]
- https://github.com/fdrechsler/mcp-server-idapro [MCP for IDA pro]
- https://github.com/rand-tech/pcm [MCP for IDA pro]
- https://github.com/gmh5225/ida_export_functions [Export IDA Pro Function List to a Specified Path (Markdown Format)]
- https://github.com/L4ys/IDA-WPP-Remover [Remove WPP calls from hexrays decompiled code]
- https://github.com/0xdea/augur [Augur is a blazing fast IDA Pro headless plugin that extracts strings and related pseudo-code from a binary file]
- https://github.com/0xdea/rhabdomancer [IDA Pro headless plugin: locate calls to potentially insecure API functions; tiered badness, bookmarks, backtrace audit paths; idalib/Rust]
- https://github.com/DennyDai/headless-ida [Run IDA scripts headlessly]
- https://github.com/cpkt9762/ida-cli [Headless IDA Pro MCP server for AI-assisted binary analysis, powered by idalib]
- https://github.com/trailofbits/idac [IDA Pro CLI for agents and humans: Unix socket to live GUI or headless idalib, structured JSON, batch/preview/dry-run, bundled agent skill; not MCP — early alpha]
- https://github.com/cellebrite-labs/ida-bridge [Agent bridge for IDA Pro 9+ — CLI runs IDAPython/SQL on live UI or headless idalib; supervisor lifecycle; bundled agent skill; macOS]
- https://github.com/P4nda0s/IDA-NO-MCP [IDA plugin + Rust/idalib CLI: export Hex-Rays decompilation, disasm fallback, strings/imports/exports/memory as files for AI IDEs without MCP]
- https://github.com/JustasMasiulis/ida_buddy [Windbg-style idalib CLI (
idb) for agents: persistent headless worker per database, compact stdout, disasm/decompile/xrefs/types and DB mutations with undo] - https://github.com/gilboz/ida_kernelcache_ng [An IDA Plugin for analyzing iOS kernelcaches]
- https://github.com/mahmoudimus/ida-taskr [IDA Taskr is a pure Python library for IDA Pro related parallel computing]
- https://github.com/sigwl/AiDA [An AI-powered assistant for IDA 9.0+ to accelerate reverse engineering of C++ games]
- https://github.com/alexhude/FRIEND [FRIEND is an IDA plugin created to improve disassembly and bring register/instruction documentation right into IDA View]
- https://github.com/cycraft-corp/BinaryAnalysisMCPs [Binary analysis MCPs collections]
- https://github.com/SamuelTulach/unxorer [Yet another IDA Pro/Home plugin for deobfuscating stack strings]
- https://github.com/loyaltypollution/ida2llvm [IDA2LLVM - Dynamic Binary Lifting IDA code to LLVM IR]
- https://github.com/GAMMACASE/PltPatcher [Patches PLT sections when IDA fails to do so]
- https://github.com/yoavst/ida-ios-helper [Plugin to ease reversing iOS projects]
- https://github.com/poppopjmp/VMDragonSlayer [Advanced Virtual Machine Detection and Analysis Framework]
- https://github.com/milankovo/ida_enums_helper [IDA Enums Helper Plugin]
- https://github.com/axelmierczuk/tenrec [A headless, extendable, multi-session, IDA Pro MCP framework]
- https://github.com/blacktop/ida-mcp-rs [Headless IDA Pro MCP server]
- https://github.com/kweatherman/yara4ida [Unofficial YARA IDA Pro plugin]
- https://github.com/Berk000x/BinaryLens [An IDA plugin that uses LLM to speed up binary analysis]
- https://github.com/jtang613/IDAssist [AI-powered RE plugin for IDA Pro: LLM function explanation, semantic knowledge graph, RAG, MCP integration]
- https://github.com/ackwrap/ida-pro-agent [IDA Pro 9.4 Windows plugin with built-in AI console and MCP gateway for pseudocode analysis, bounded caller tracing, guard-evidence extraction, and preview/apply/rollback IDB ChangeSets]
- https://github.com/pgarba/ida-llm-explainer [Local llama.cpp IDA plugin for function explain/rename/struct inference with human-in-the-loop accept]
- https://github.com/CyberSecurityUP/DriverVuln-Analyzer-IDA-Plugin [Driver Vuln Analyzer]
- https://github.com/ssmugabi/IDAPlugins [Integrate essential IDA Pro plugins for enhanced functionality, including deobfuscation, binary diffing, and custom cryptography support]
- https://github.com/momo5502/patch-finder [IDA plugin to find patched memory]
- https://github.com/HexRaysSA/ida-cyberchef [A Qt-based CyberChef interface designed for malware analysis workflows, particularly in IDA Pro]
- https://github.com/idkhidden/DrawIDA [Lightweight whiteboard plugin for IDA that allows reverse engineers to sketch and brainstorm directly inside IDA]
- https://github.com/hyuunnn/ida-slides [Present live RE with Marp/Slidev decks docked in IDA; @name/@addr tokens jump disasm/pseudocode, embed decompiled lines, unresolved-ref lint]
- https://github.com/rem0obb/rtti-parser [IDA script to parse RTTI information in executable support for IDA 9.2]
- https://github.com/19h/ida-semray [High-performance, AI-driven semantic analysis for the IDA Pro decompiler]
- https://github.com/K4ryuu/IDA-VTableExplorer [C++ virtual table detection and annotation tool for IDA Pro 9.x]
- https://github.com/oxiKKK/ida-vtable-tools [IDA 9.X plugin for vtable ops: dump C++ interface skeleton (.hpp), rename with class prefix, set this pointer type, show slot index/offset]
- https://github.com/19h/chernobog [A Hex-Rays IDA Pro plugin for deobfuscating binaries protected with the Hikari LLVM obfuscator]
- https://github.com/danielplohmann/mcrit-plugin [A plugin to use MCRIT from IDA Pro]
- https://github.com/dyussekeyev/ida-spotlight [Workflow-centric function triage and prioritization plugin for IDA Pro]
- https://github.com/s3rg0x/AIMachDec [AIMachDec is an IDA plugin for Apple AARCH64/ARM64 binaries that utilizes LLMs to translate assembly functions into readable pseudo-code in C, Objective-C, or Swift]
- https://github.com/not1cyyy/Kiroshi [An IDA Pro Plugin to detect common Anti-Cheat Artifacts]
- https://github.com/HexRaysSA/ida-claude-code-plugins [IDA Claude Code Plugins]
- https://github.com/stolevchristian/LUDA [Lua scripting plugin for IDA Pro]
- https://github.com/allthingsida/idasql [Interface with IDA in SQL via live virtual tables]
- https://github.com/a1ext/auto_re [IDA PRO auto-renaming plugin with tagging support]
- https://github.com/SymbioticSec/ida-security-scanner [A security-focused code scanner for IDA Pro]
- https://github.com/cristeigabriela/IDAFind [Ctrl+F search support for Pseudocode windows]
- https://github.com/thalium/symless [IDA Pro plugin that helps reconstruct structures]
- https://github.com/buzzer-re/Rikugan [A reverse-engineering agent for IDA Pro and Binary Ninja that integrates a multi-provider LLM directly into your analysis UI]
- https://github.com/buzzer-re/ToCode [Transform binaries into source-code-like projects that coding agents can traverse, analyze, and use as an oracle for large binaries; supports IDA Pro and radare2]
- https://github.com/guheng-re/unflat [unflattener]
- https://github.com/Dump-GUY/ApplyCalleeTypeEx [ApplyCalleeType reborn for IDA Pro 9.3 — apply function prototype to indirect CALL for correct decompiler/disasm; IDA 8.x–9.3+]
- https://github.com/allthingsida/idacpp [A C++ REPL for IDA Pro / IDA C++ SDK]
- https://github.com/milankovo/ida-search [An IDA Pro 9.x plugin that brings 010 Editor-style type-aware binary search to IDA]
- https://github.com/CSIT-SG/AETHER [An AI-powered reverse-engineering copilot for assisting tedious malware analysis in IDA Pro]
- https://github.com/thatskriptkid/re-harness [OpenCode agent harness for Qwen 27B/35B with read-only IDA 9.3/IDASQL PE static-analysis tools; NeverD/LLVM lift→O3→redecompile fallback for oversized functions; malware analysis; macOS/Linux]
IDA Signature Database
- https://github.com/push0ebp/sig-database
- https://github.com/AlonSoko/karta-x-configs [Release-packaged Karta-x library identification configs (GCC/clang/MSVC) for matching and naming embedded open-source functions in game and native binaries]
- https://github.com/cpkt9762/solana-sbpf-rlib [Solana sBPF rlib files for IDA Pro / Ghidra / Binary Ninja signature generation]
Binary Ninja Plugins
- https://github.com/Vector35/official-plugins
- https://github.com/Vector35/community-plugins
- https://github.com/FuzzySecurity/BinaryNinja-Themes [Theme]
- https://github.com/EliseZeroTwo/SEH-Helper [SEH Helper]
- https://github.com/Vector35/tanto [Slices Functions]
- https://github.com/ergrelet/triton-bn [Triton]
- https://github.com/google/binexport [BinDiff]
- https://github.com/Pusty/BinaryNinjaPlugins
- https://github.com/borzacchiello/seninja [Symbolic Execution]
- https://github.com/yellowbyte/opaque-predicates-detective
- https://github.com/ex0dus-0x/fuzzable [Fuzzer]
- https://github.com/jmprdi/binja-division-deoptimization [Division and Modulo Deoptimizer]
- https://github.com/Vector35/OpaquePredicatePatcher [Opaque Predicate Patcher]
- https://github.com/jmprdi/binja-division-deoptimization [Division and Modulo Deoptimizer]
- https://github.com/mrphrazer/obfuscation_detection [Collection of scripts to pinpoint obfuscated code]
- Package Binary Code as a Python class using Binary Ninja and Unicorn Engine
- https://github.com/seeinglogic/ariadne [Graph Analysis]
- https://github.com/skr0x1c0/binja_kc [Plugin for loading MachO kernelcache and dSYM files]
- https://github.com/Vector35/workflow_objc [Objective-C]
- https://github.com/apekros/binja_sigmaker [Create and find signatures]
- https://github.com/joren485/bndb2pat [Binary Ninja plugin to generate IDA Pro FLIRT .pat pattern files for signature libraries]
- https://github.com/dayzerosec/AMD-SP-Loader [AMD-SP or PSP firmware]
- https://github.com/WhatTheFuzz/binaryninja-openai [Integrates OpenAI]
- https://github.com/dzervas/frinja [Frida plugin for Binary Ninja]
- https://github.com/danielplohmann/gui-plugin-template [A template for cross-compatible GUI plugins]
- https://github.com/ergrelet/themida-spotter-bn [Detect Themida/WinLicense and Code Virtualizer’s obfuscated code locations]
- https://github.com/ahaggard2013/binaryninja-ollama [Binary Ninja Ollama]
- https://github.com/0xricksanchez/Shellcoder [BinaryNinja Shellcoder Plugin]
- https://github.com/pd0wm/binaryninja-pcode [This plugin serves as a bridge between Binary Ninja and Ghidra’s disassembler]
- https://github.com/mutinylaboratories/ghidra_svr_bridge [Binary Ninja plugin that bidirectionally syncs symbols, comments, types, and analysis with a Ghidra Server repository via a Java bridge]
- https://github.com/zhuzhu-Top/deobf [libtprt.so]
- https://github.com/junron/auto-enum [automatically identify and set enums for standard functions]
- https://github.com/otter-sec/bn-ebpf-solana [Binary Ninja plugin for Solana eBPF]
- https://github.com/fosdickio/binary_ninja_mcp [MCP for Binary_Ninja]
- https://github.com/Invoke-RE/binja-lattice-mcp [MCP for Binary_Ninja]
- https://github.com/mrphrazer/obfuscation_analysis [Binary Ninja plugin to analyze and simplify obfuscated code]
- https://github.com/ScriptWare-Software/native-predicate-solver [Binary Ninja plugin for removing opaque predicates]
- https://github.com/buzzer-re/Rikugan [A reverse-engineering agent for IDA Pro and Binary Ninja that integrates a multi-provider LLM directly into your analysis UI]
- https://github.com/banteg/bn [binary ninja cli for agents]
- https://github.com/seekbytes/ptxNinja [Binary Ninja plugin for reverse engineering PTX — CUDA GPU virtual ISA]
Ghidra Plugins
- https://github.com/AllsafeCyberSecurity/awesome-ghidra [List]
- https://github.com/CENSUS/ghidra-frida-hook-gen
- https://github.com/mitros123/DragonHook [Ghidra plugin exposing GhidraDB queries to Frida at runtime for dynamic call-target resolution, backtraces, and live xref/comment updates]
- https://github.com/Gekkio/GhidraBoy [Sharp SM83 / Game Boy extension for Ghidra]
- https://github.com/PSI-Rockin/ghidra-teak-dsp [Ghidra SLEIGH extension and CDC/DSP1 loader for Nintendo 3DS/DSi XpertTeak DSP firmware (Home Menu, Sound App disassembly)]
- https://github.com/CUB3D/ghidra-hexagon-sleigh [Ghidra SLEIGH extension for Qualcomm Hexagon QDSP6 decompilation and analysis]
- https://github.com/thixotropist/ghidra_decompiler_plugins [Loadable Ghidra decompiler plugins and rules that simplify RISC-V vector-instruction analysis in the decompiler window]
- https://github.com/sengi12/ghidra-hexEditor [Dockable hex editor Ghidra plugin for byte-level memory editing during RE]
- https://github.com/ntdlll/Scalpel [Ghidra extension for dockable dark-mode hex/ASCII viewing, wildcard hex search, and inline byte patching during RE]
- https://github.com/fmagin/ghidra-openai [ChatGPT]
- https://github.com/securityjoes/ThreatResearch [ChatGPT]
- https://github.com/evyatar9/GptHidra [ChatGPT]
- https://github.com/moyix/gpt-wpre [ChatGPT]
- https://github.com/pudii/gba-ghidra-loader [GameBoy]
- https://github.com/MEhrn00/Ghidra_COFFParser [COFF]
- https://github.com/ghidragolf/ghidra_scripts [Scripts]
- https://github.com/PAGalaxyLab/ghidra_scripts [Scripts]
- https://github.com/TrackAndTruckDevs/SPF_GhidraPatternHelper [Ghidra script to generate and search byte signatures with SPF-style templates for ATS/ETS2 plugin RE]
- https://github.com/danbrodsky/GFred [Command Palette]
- https://github.com/Nalen98/AngryGhidra [Use angr in Ghidra]
- https://github.com/overkazaf/Ponce4Ghidra [Interactive symbolic execution Ghidra plugin with angr and Z3 — symbolize inputs, set find/avoid targets, and solve constraints from the decompiler UI]
- https://github.com/overkazaf/D810G [Ghidra deobfuscation framework for OLLVM/Tigress CFF, MBA (Z3), opaque predicates, BCF, strings, and VM devirtualization; CLI and analyzer plugin]
- https://github.com/justfoxing/ghidra_bridge [Python 3 bridge to Ghidra’s Python scripting]
- https://github.com/GalaxyBatMan111/dsh-plugins [DSH plugin bundle with PyGhidra Ghidra bridge for binary import, decompilation, strings, and xrefs]
- https://github.com/Cristallin2006/ghidra-skill-for-dsh [dsh agent skill family: Ghidra headless RPC daemon plus seven RE scenarios (triage, unpack, static, vuln audit, dynamic, traffic, Android APK)]
- https://github.com/spix18/dsh-ghidra [DSH Ghidra bridge plugin with 219 agent tools for import, decompile, xrefs, call graphs, memory edits, and malware triage via PyGhidra and MCP]
- https://github.com/atlas0fd00m/viv-ghidra-decompiler [Vivisect extension bridging symbolik analysis to a headless Ghidra backend for decompiled C pseudocode]
- https://github.com/0xeb/libghidra [Typed API for Ghidra program databases from C++/Python/Rust; functions, types, memory, decompiler; LibGhidraHost HTTP extension or offline Sleigh backend]
- https://github.com/astrelsky/GhidraOrbis [Orbis OS specific software and file formats]
- https://github.com/astrelsky/Ghidra-Cpp-Class-Analyzer [C++ Class and Run Time Type Information Analyzer]
- https://github.com/Washi1337/ghidra-nativeaot [Ghidra analyzer/UI plugin for reversing .NET Native AOT binaries (type hierarchy, frozen objects)]
- https://github.com/DMaroo/GhidRust [Rust decompiler]
- https://github.com/Comsecuris/gdbghidra [GDB session]
- https://github.com/radareorg/r4ghidra [Ghidra extension with radare2-style REPL and r2pipe/r2web integration for cross-tool binary analysis]
- https://github.com/mfthomps/RESimGhidraPlugins [Ghidra Debugger plugins for the RESim reverse-engineering simulator (Simics/gdb integration)]
- https://github.com/hyuunnn/Hyara [Yara]
- https://github.com/TorgoTorgo/ghidra-findcrypt [Ghidra analyzer that locates and labels cryptographic constants]
- https://github.com/Deatty/Ghidra-Obfuscation-Detection [Detect obfuscated/complex code]
- https://github.com/Marisa-Chan/GhidrOrean [Ghidra Python scripts: Oreans VM (Themida/Code Virtualizer) DeVirt — Deathway Unvirtualizer reimplementation; CISC/TIGER]
- https://github.com/advanced-threat-research/GhidraScripts [Some scripts]
- https://github.com/fuzzypickles14/BetterStringAnalyzer [A better string analyzer for Ghidra]
- https://github.com/partoftheworld/ghidrapy_functionstringassociate [Ghidra script that associates string literals with functions as comments, mirroring IDA FunctionStringAssociate]
- https://github.com/clearbluejar/ghidriff [Python Command-Line Ghidra Binary Diffing Engine]
- https://github.com/MISP/bsimvis [Ghidra BSim-based binary similarity, function diffing, and family clustering with API and web UI]
- https://github.com/Katharsas/ghidra-struct-importer [Struct Importer]
- https://github.com/danielplohmann/gui-plugin-template [A template for cross-compatible GUI plugins]
- https://github.com/astrelsky/GhidraGradlePlugin [Gradle]
- https://github.com/jtang613/GhidrAssist [An LLM extension for Ghidra to enable AI assistance in RE]
- https://github.com/RevEngAI/plugin-ghidra [RevEng.AI Ghidra plugin for binary similarity, function renaming, and AI-assisted reverse engineering]
- https://github.com/DSecurity/efiSeek [Ghidra analyzer for UEFI firmware]
- https://github.com/LaurieWired/GhidraMCP [MCP for Ghidra]
- https://github.com/Rantanen/ghidra-minidump-loader [Windows Minidump loader for Ghidra]
- https://github.com/andrew-hoffman/ghidra-vxd-tools [Ghidra Jython scripts to annotate Windows 9x VxD INT 20h calls in legacy device drivers]
- https://github.com/jtang613/GhidrAssistMCP [An MCP extension for Ghidra]
- https://github.com/bethington/ghidra-mcp [Ghidra MCP server/plugin with 200+ tools for AI-assisted reverse engineering]
- https://github.com/ant4g0nist/pyre [Ghidra decompiler in your browser]
- https://github.com/poppopjmp/VMDragonSlayer [Advanced Virtual Machine Detection and Analysis Framework]
- https://github.com/westfox-5/GhidraMetrics [A Ghidra plugin for native code metrics]
Radare Plugins
- https://github.com/radareorg/r2ai [LLM-based reversing for radare2]
- https://github.com/radareorg/radius2 [Fast binary emulation and symbolic execution framework using radare2]
- https://github.com/seifreed/r2SMT [Rust SMT-assisted opaque-predicate deobfuscator and symbolic-analysis toolkit for radare2]
- https://github.com/radareorg/r2garlic [Garlic DEX/Dalvik decompiler plugin for radare2]
- https://github.com/seifreed/r2morph [A metamorphic binary transformation engine based on r2pipe and radare2]
- https://github.com/buzzer-re/ToCode [Transform binaries into source-code-like projects that coding agents can traverse, analyze, and use as an oracle for large binaries; supports IDA Pro and radare2]
Windbg Plugins
- https://github.com/comaeio/SwishDbgExt
- https://github.com/lowleveldesign/comon [Trace COM]
- https://github.com/bruce30262/TWindbg [PEDA-like debugger UI for WinDbg]
- https://github.com/JKornev/cfgdump [Analyze Control Flow Guard map]
- https://github.com/yardenshafir/WinDbg_Scripts [WinDbg scripts]
- https://github.com/long123king/dk [Refactored version of tokenext]
- https://github.com/ch3rn0byl/WinDbg-Extensions [Callback Extension]
- https://github.com/KasperskyLab/WinDbg-JS-Scripts [JS Scripts]
- https://github.com/DumpAnalysis/WinDbg_Copilot [WinDbg Copilot]
- https://github.com/eversinc33/drvtrace [Trace driver module transitions]
- https://github.com/kernullist/windbg-decompile-ext [WinDbg x64 extension that disassembles live functions and uses an LLM to produce verified pseudocode]
X64DBG Plugins
- https://github.com/x64dbg/x64dbg/wiki/Plugins
- https://github.com/horsicq/x64dbg-Plugin-Manager
- https://github.com/horsicq/nfdx64dbg [x64dbg plugin for Nauz File Detector (linker/compiler/tool detection)]
- https://github.com/horsicq/stringsx64dbg [Strings plugin for x64dbg]
- https://github.com/m417z/Multiline-Ultimate-Assembler
- https://github.com/x64dbg/Classroom
- https://github.com/VenTaz/Themidie
- https://github.com/Ahmadmansoor/x64dbgScript
- https://github.com/push0ebp/xMalHunter [Detect malicious materials]
- https://github.com/morsisko/xFindOut
- https://github.com/jdavidberger/chaiScriptPlugin
- https://github.com/gmh5225/X64DBG-ViewDllNotification
- https://github.com/legendabrn/AutoAttach
- https://github.com/secrary/idenLib [Generate signatures]
- https://github.com/gmh5225/GhidraDec [Ghidra Decompiler]
- https://github.com/x64dbg/x64dbgbinja [Binary Ninja]
- https://github.com/DNLINYJ/Anti_miHoYo_Jcc_Obfuscate
- https://github.com/mrexodia/DisableParallelLoader [Disable parallel loading of dependencies]
- https://github.com/ElvisBlue/x64dbgpython [Running python3 script]
- https://github.com/secrary/idenLibX [Library Function Identification]
- https://github.com/x64dbg/SlothBP [Collaborative Breakpoint Manager]
- https://github.com/Kwansy98/ApiBreakpoint [Api Breakpoint]
- https://github.com/0ffffffffh/yummyPaste [paste string formatted byte data block into x64dbg easy]
- https://github.com/horsicq/x64dbg-Plugin-Manager [Plugin manager for x64dbg]
- https://github.com/ZehMatt/x64dbgPlaytime [Lua script]
- https://github.com/milcert/ExpoMon [Exports monitoring]
- https://github.com/m417z/x64dbg-xfg-marker [Marks XFG call signatures as data]
- https://github.com/Kwansy98/x64dbgCallFinder [Call Finder]
- https://github.com/gmh5225/X64DBG-MapLdr [Loads the map file generated by IDA Pro]
- https://github.com/xp987/symbridge [Live IDA ↔ x64dbg annotation and type synchronization bridge]
- https://github.com/CynicRus/DWARFHelper [Load DWARF debug symbols from PE (.exe/.dll) as labels, functions, and file:line comments; libdwarf; x86/x64]
- https://github.com/mibho/x64dbgTraceReader [Trace Reader]
- https://github.com/Steesha/CodeCleaner [Cleaning Themida Mutation Assembly codes]
- https://github.com/notpidgey/ManyTypes [x64dbg typeparsing plugin with Windows types]
- https://github.com/cycraft-corp/BinaryAnalysisMCPs [Binary analysis MCPs collections]
- https://github.com/dariushoule/x64dbg-rippy [AI reverse engineering assistant for x64dbg]
- https://github.com/dariushoule/x64dbg-automate-pyclient [Python client for scriptable and repeatable debug sessions; full RPC protocol + MCP server]
- https://github.com/codecat/ClawSearch [x64dbg memory scanner plugin inspired by Cheat Engine]
Cheat Engine Plugins
- https://github.com/FreeER/CE-Extensions [Lua Extensions]
- https://github.com/Skyrimfus/CE-lua-extensions [Lua Extensions]
- https://github.com/cheat-engine/UnrealEngineTools [Official CE Lua tools to scan Unreal Engine games (UObject/UClass/FProperty)]
- https://github.com/cheat-engine/ControllerMode [Official CE Lua extension to navigate and operate Cheat Engine with a game controller while attached to a process]
- https://github.com/cheat-engine/aitools [Official CE extension integrating LLM agents via registerAITool callbacks, bundled RE skills (memory/pointer scan, Unreal, auto-assembler), and Google AI or local model backends]
- https://github.com/palepine/GDDumper [Cheat Engine script to dump/inspect Godot 3.x/4.x runtime SceneTree and GDScript]
- https://github.com/bbfox0703/Mydev-Cheat-Engine-Tables [CT]
- https://github.com/Hexorg/CheatEngineTables [Collection of Cheat Engine tables curated from CE forums (offline-focused)]
- https://github.com/antaresjay/freeplay [Rust Windows trainer that converts Cheat Engine .CT tables to TOML and runs Auto Assembler scripts]
- https://github.com/abhijeetadarsh/CTTrainer [Standalone Windows ImGui/DX11 trainer that parses Cheat Engine .CT tables and reads, writes, and freezes values in attached 32/64-bit game processes]
- https://github.com/heaven-hm/gtlibcpp [C++17 memory/trainer library with Cheat Engine .CT parsing, freeze management, and a local JSON-RPC agent for authorized offline trainer workflows on Windows]
- https://github.com/inuNorii/Elden-Ring-CT-TGA [Elden Ring]
- https://github.com/gmh5225/CE-remap-plugin [Remap]
- https://github.com/gmh5225/overwatch-iat-fixer [Overwatch IAT Fixer]
- https://github.com/FreeER/CE-Examples [Some Examples]
- Porting ce’s monodatacollector to android/ios
- https://github.com/gmh5225/wasm-ceserver [Analyzing WebAssembly]
- https://github.com/Eruditi/CE-MCP-Plugin [MCP for Cheat Engine]
- https://github.com/TindalosKorone/dsh-cheatengine [DSH agent plugin bridging DeepSeek Harness to Cheat Engine via ce_* tools for memory scan, breakpoints, pointer analysis, and Lua/AA scripting]
Injection:Windows
- https://github.com/itaymigdal/awesome-injection [awesome injection]
- https://github.com/btbd/smap [Scatter Manual Map]
- https://github.com/btbd/modmap [Extend Manual Map]
- https://github.com/KGB-1337/memmap [Extend Manual Map]
- https://github.com/weak1337/ModExMap [Extend Manual Map]
- https://github.com/mactec0/Kernelmode-manual-mapping-through-IAT [IAT Manual Map]
- https://github.com/charliewolfe/Stealthy-Kernelmode-Injector [PTE/VAD Manipulation Manual Map]
- https://github.com/wbenny/injdrv [APC]
- https://github.com/alexkrnl/Kernel-dll-injector [APC]
- https://github.com/w1u0u1/kinject [Map + APC]
- https://github.com/1401199262/RemoteCall [APC Remote Call]
- https://github.com/TheCruZ/Simple-Manual-Map-Injector [Manual Map]
- https://github.com/andrew9382/manual_mapping_dll_injector [Manual Map]
- https://github.com/danielkrupinski/MemJect [Manual Map]
- https://github.com/can1357/ThePerfectInjector [PTE.User]
- https://github.com/dumbasPL/fumo_loader [PTE.User]
- https://github.com/gmh5225/executor [PTE.User]
- https://github.com/Nou4r/PresentInjector [PTE.User]
- https://github.com/JGonz1337/kernel-eac-be-injector [PTE.User]
- https://github.com/Cr4sh/KernelForge [Hijack ROP]
- https://github.com/Compiled-Code/be-injector [Attack COW]
- https://github.com/ergrelet/dll-hot-reload [Hot Reload]
- https://github.com/ExpLife0011/KeUserModeCallBack [KeUserModeCallBack]
- KeUserModeCallBack Win10
- https://github.com/YouNeverKnow00/Kernelmode-DLL-Injector [Manual Map]
- windows kernelmode driver to inject dll into each and every process and perform systemwide function hooking
- https://github.com/Broihon/GH-Injector-Library [inject library and tool]
- https://github.com/5paceman/nightshade [inject tool]
- https://github.com/deepinstinct/Dirty-Vanity [RtlCreateProcessReflection]
- https://github.com/LloydLabs/ntqueueapcthreadex-ntdll-gadget-injection [NtQueueApcThreadEx + gadget]
- https://github.com/S12cybersecurity/FrankensteinAPCInjection [NtQueueApcThreadEx2 + existing handles & natural RWX]
- https://github.com/3xpl01tc0d3r/ProcessInjection [Various process injection techniques]
- https://github.com/dis0rder0x00/DbgNexum [Shellcode via Windows Debug API + HWBP; file mapping transfer; no WPM/RPM/VirtualAllocEx]
- https://github.com/TwoSevenOneT/InjectSetConsole [Console child process injection via named-pipe IPC; no VirtualAllocEx/WriteProcessMemory]
- https://github.com/TwoSevenOneT/PhantomBuffer [Stealth shellcode delivery via SendMessage WM_SETTEXT and cdb RIP redirect; avoids VirtualAllocEx/WriteProcessMemory]
- https://github.com/zorftw/lsass-extend-mapper [Manual mapper from LSASS]
- https://github.com/zorftw/revert-mapper [Map x64 DLLs in WoW64]
- https://github.com/SDXT/MMInject [Using NX Bit Swapping and VAD hide]
- https://github.com/Fahersto/code_injection [Several code injection techniques]
- https://github.com/gmh5225/Kernel-VAD-Injector [Hide VAD]
- https://github.com/nettitude/Tartarus-TpAllocInject [TpAllocInject]
- https://github.com/SafeBreach-Labs/PoolParty [ThreadPool]
- https://github.com/hasherezade/thread_namecalling [SetThreadDescription]
- https://github.com/Cracked5pider/earlycascade-injection [Early Cascade Injection]
- https://github.com/0xPrimo/KMDllInjector [kernel-mode DLL Injector]
- https://github.com/gmh5225/StealthAPCDispatcher [Thread scheduling stealth method using APC with encrypted shellcode]
- https://github.com/isiddique2024/Page-Table-Injector [Page Table Injector (PT-Injector)]
- https://github.com/xan105/Mini-Launcher [Application launcher with DLL Injection and Lua Scripting]
- https://github.com/a0yark/DXInject-UC [D3D11 GPU payload transport + compute shader decode, GPU-assisted process hollowing (research)]
- https://github.com/M3351AN/ZhangBing-Injector [DLL injector using WHQL-signed driver; credits kdmapper]
- https://github.com/qiufuyu123/Positron [Runtime JS injection toolkit for Electron (V8/Node.js) apps via manual-map DLL injection; self-unmapping payload, REPL/SDK]
Injection:Linux
- https://github.com/itaymigdal/awesome-injection [awesome injection]
- https://github.com/ixty/mandibule
Injection:Android
- https://github.com/gmh5225/Android-ModGamesByInjectZygote
- https://github.com/erensariisik03-sudo/Farming-Simulator-12-Mp-Build [Native Android mod injecting libmultiplayermod.so into FS12 via runtime hooking for multiplayer]
- https://github.com/gmh5225/Android-DLL-Injector
- https://github.com/reveny/Android-Ptrace-Injector
- https://github.com/reveny/Android-LD-Preload-Injector
- https://github.com/ohchase/yaui
- https://github.com/cs1ime/AndroidSuperInject [Injecting into SELinux-protected system service processes]
- https://github.com/erfur/linjector-rs [Code injection on Android without ptrace]
- https://github.com/NepMods/InjectARM64 [Non-root injection]
- https://github.com/reveny/Android-Virtual-Inject [Inject through Virtual Space without root permissions]
Injection:IOS
- https://github.com/opa334/opainject [iOS runtime dylib injection tool]
- https://github.com/notahacker8/RobloxCheats [macOS Roblox dylib injector with internal/external ESP and offset finder]
Injection:PlayStation
- https://github.com/buzzer-re/NineS [A PlayStation 5 ELF injector]
DLL Hijack
- https://github.com/Sh0ckFR/DLLirant [Hijacking researches]
- https://github.com/redteamsocietegenerale/DLLirant [Hijacking researches Tool]
- https://github.com/knight0x07/ImpulsiveDLLHijack [Hijacking researches]
- https://github.com/wietze/HijackLibs [Project for tracking publicly disclosed DLL Hijacking opportunities]
- https://github.com/gmh5225/DLL-Hijack-ExportDumper [Dump the export table of PE files]
- https://github.com/cyberark/DLLSpy [DLL Hijacking Detection Tool]
- Project for identifying executables and DLLs vulnerable to relative path DLL hijacking
- https://github.com/anhkgg/SuperDllHijack [A general DLL hijack technology]
- https://github.com/ctxis/DLLHSC [DLL Hijack SCanner]
Hook
- https://github.com/stars/gmh5225/lists/hook [Lists]
- https://github.com/microsoft/Detours
- https://github.com/wbenny/DetoursNT
- https://github.com/wesjian/GenericGameDetourAPIHook [Modular Microsoft Detours anti-cheat bypass framework with ~130 API hooks across 16 modules, deployed via dinput8.dll proxy]
- https://github.com/gmh5225/ntminhook [A modified version of MinHook that only uses the Windows Native API]
- https://github.com/mrexodia/AppInitHook [Global user-mode hooking framework via AppInit_DLLs (MinHook-based)]
- https://github.com/stevemk14ebr/PolyHook
- https://github.com/stevemk14ebr/PolyHook_2_0
- https://github.com/WopsS/RenHook
- https://github.com/bmax121/KernelPatch [Hooking the Linux kernel]
- https://github.com/gmh5225/subhook
- https://github.com/axhlzy/PyAsmPatch
- https://github.com/gmh5225/Driver-KDtour [Easy Kernel Detour]
- https://github.com/nelfo/PGHooker [Page Guard]
- https://github.com/weak1337/SkipHook [Skip Hook]
- https://github.com/0mdi/edgegdi_hook [gdi32 .data swap]
- https://github.com/noobpk/frida-android-hook [frida hook for android]
- https://github.com/SamuelTulach/LightHook [cross-platform hook library]
- https://github.com/3intermute/arm64_silent_syscall_hook [ARM64 Patching exception handler]
- https://github.com/kubo/plthook [PLT(Procedure Linkage Table) hook]
- https://github.com/LeoChen-CoreMind/elf-got-patcher [ARM64 ELF static GOT hook patcher: code-cave shellcode injection, .init_array RELA hijack, config-driven ASLR-safe patching]
- https://github.com/WeiJiLab/kernel-hook-framework [linux kernel inline hook framework]
- https://github.com/Rprop/And64InlineHook [Android ARMv8 inline hook framework]
- https://github.com/GToad/Android_Inline_Hook_ARM64 [Android ARMv8 inline hook framework]
- https://github.com/ChwnWang0/Android-kernel-inline-hook-framework [ARM64 Android kernel inline hook framework with instruction relocation]
- https://github.com/BossKoopa/BWSR [Arm64 inline hooking for iOS, Android, OSX, and Linux]
- https://github.com/regomne/ilhook-rs [Rust x86]
- https://github.com/iofomo/abyss [Android system call hook]
- https://github.com/jsherman212/xnuspy [an iOS kernel function hooking framework for checkra1n’able devices]
- https://github.com/Firejumper93/Ghost-Recon-Wildlands-First-Person-No-EAC [First-person camera mod for Ghost Recon Wildlands via dxgi proxy DLL, ThunkHook, and in-process memory writes on current EAC builds]
- https://github.com/winstxnhdw/lc-hax [Harmony-based internal cheat for Lethal Company (Unity mono) with CI, docs, and portable CLI workflow]
ROP Finder
- https://github.com/0vercl0k/rp [rp++ is a fast C++ ROP gadget finder for PE/ELF/Mach-O x86/x64/ARM/ARM64 binaries]
- https://github.com/JonathanSalwan/ROPgadget [This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation]
- https://github.com/helpsystems/Agafi [A gadget finder and a ROP-Chainer tool for x86 platforms]
- https://github.com/hugsy/ropgadget-rs [Another (bad) ROP gadget finder, but this time in Rust]
- https://github.com/Boyan-MILANOV/ropium [ROPium is a tool that helps you building ROP exploits by finding and chaining gadgets together]
- https://github.com/angr/angrop [angrop is a rop gadget finder and chain builder]
ROP Generation
Recommended Tools
Try a different keyword or remove a filter.
Install
npx skillfish add gmh5225/awesome-game-security