03 Aug 2026
Rust
★ 28
NeoHook is a Rust-based toolkit designed for precise and safe runtime function hooking within Win32 applications, allowing users to hook APIs, game engine functions, and third-party DLL exports with ease. Its notable features include atomic transactions for batch-hooking, full thread safety during hook application, and advanced techniques such as instruction pointer redirection and stack scanning to maintain stability. The tool provides a high level of memory safety combined with the efficiency of low-level binary patching, making it suitable for debugging, profiling, and security research while ensuring compliance with licensing and legal constraints.
03 Aug 2026
C#
★ 559
MHServerEmu is a server emulator specifically designed for the Marvel Heroes game, providing support for multiple client versions, primarily 1.52.0.1700. It facilitates the restoration of the game’s original content and systems post-shutdown in 2017, with options for stable and nightly builds tailored to different user preferences. Notable features include a focus on high stability for stable releases, daily updates for nightly builds, and community engagement through a dedicated Discord server for development discussions.
03 Aug 2026
Go
★ 10780
IPATool is a command line utility designed for interacting with the iOS App Store, enabling users to search for applications, authenticate with their Apple ID, and download app packages (ipa files). Key features include app search by term, list available versions for download, and facilitate license purchases, all while supporting output formatting options and various command flags for enhanced usage. This tool is particularly useful for developers and researchers who need to access and manage iOS app data programmatically.
03 Aug 2026
JavaScript
★ 12
Ghostify is a privacy-focused browser extension designed for Meta web applications like Instagram, Facebook, and Messenger. It empowers users by blocking read receipts, typing indicators, and story-view signals locally, enhancing privacy without the need for an account or sharing social media credentials. The tool is built on Manifest V3 and is available across multiple browsers, with an established user base exceeding 4,000 on the Chrome Web Store.
03 Aug 2026
Java
★ 95
Ghidra FindCrypt is an auto-analysis module designed for Ghidra to identify and label cryptographic constants within binary files. Its primary use case is to enhance code analysis by automatically recognizing cryptographic algorithms and assigning appropriate labels to found constants, which are prefixed with `CRYPT_` for easy identification. Notable features include integration with the Ghidra API for improved functionality, automatic datatype assignment for recognized constants, and the ability to rerun analyses safely.
03 Aug 2026
Java
★ 3669
Ghidra MCP Server is a robust Model Context Protocol (MCP) server designed to enhance Ghidra's reverse engineering capabilities by integrating with AI tools and automation frameworks. It features a comprehensive suite of 251 tools, offering extensive write access for various operations such as renaming, typing, and live debugging, along with battle-tested AI workflows for optimized documentation and code handling. Key highlights include production-grade reliability with atomic transactions and reduced API calls for enhanced efficiency.
03 Aug 2026
C
★ 777
Garlic is a high-performance open-source decompiler for Android and Java files, designed to convert APK, DEX, JAR, and CLASS files into readable Java source code. Notable features include multi-threading capabilities for faster decoding, integration for cross-platform builds using Zig, and functionality for string searching within decompiled outputs. This tool caters primarily to security researchers and developers needing to analyze or reverse-engineer Android applications efficiently.
03 Aug 2026
C
★ 11
Freelancer.Reverse.Runtime is a project focused on building a custom managed runtime layer for the 2003 space trading and combat simulation game, Freelancer. Its primary use case is to reconstruct, document, and extend the game's engine behavior through compatible proxy DLLs while avoiding chaotic memory manipulation. Notable features include the implementation of a structured C++ layer that replaces original DLLs, monitors engine behavior, and seamlessly injects new functionality, facilitating a reliable engineering approach that respects the original game architecture.
03 Aug 2026
C++
★ 74
OpenShock Firmware is designed for controlling shockers using reverse-engineered proprietary Sub-1 GHz protocols, specifically targeting the ESP-32 microcontroller equipped with a 433 MHz antenna. The firmware supports various compatible hardware platforms and facilitates easy flashing through PlatformIO in Visual Studio Code. Notable features include a comprehensive guide for setup and assembly, alongside thorough documentation and support through an active community.
03 Aug 2026
Kotlin
★ 44
Discover Ads Filter is an Xposed module designed to remove sponsored cards and advertisements from the Google Discover feed on the Pixel Launcher and within the Google app for devices running Android 11 and above. It uses DexKit to scan the Google app and identify ad items by resolving hook targets, enabling efficient filtering and caching of ad content. Notably, it requires a compatible LSPosed manager with libxposed API support to function effectively.
03 Aug 2026
C#
★ 134
ClrDebug is a comprehensive cross-platform managed wrapper for the .NET Unmanaged API, simplifying the process of developing diagnostic applications. It provides automatic wrappers for essential APIs such as CorDebug, Metadata, and Profiling, eliminating the need for manual handling of complex COM interfaces. Notable features include seamless creation of debugging processes, easy conversion of HRESULT values into exceptions, and customizable event handling through derived callback classes.
03 Aug 2026
C
★ 77
CANopenTerm is an open-source tool designed for developing, testing, and analyzing CANopen CC networks and devices, with added support for SAE J1939 and OBD-II protocols. Notable features include advanced network monitoring, configuration and simulation capabilities, raw CAN CC interface, and automation support via Lua and Python scripts, making it a versatile solution for professionals in automotive and industrial applications. Additionally, it provides functionalities like SDO management, conformance testing, and test report generation, enhancing the overall workflow for engineers working with CAN protocols.
03 Aug 2026
C
★ 350
Butterscotch is an open-source re-implementation of the GameMaker: Studio runner, enabling the execution of GameMaker games compiled to bytecode on various platforms. It primarily aims to support a wide range of GameMaker: Studio games, especially targeting titles like Undertale, by allowing compatibility with multiple WAD versions. Notable features include a focus on community collaboration, ongoing development for increased game support, and the ability to generate PlayStation 2 ISO files.
03 Aug 2026
Rust
★ 17
Binsafe is an obfuscator designed for 64-bit portable executables that employs a multi-step process to transform the structure and execution of compiled binaries. Its notable features include disassembly, instruction virtualization, operational scrambling, and runtime protections against debugging and tampering. This tool primarily serves to enhance binary security by making reverse engineering significantly more challenging.
03 Aug 2026
Python
★ 16
BinNexus is a binary analysis tool designed for Windows binaries (DLL/EXE) that generates an interactive web portal, providing a comprehensive dependency graph and export exploration capabilities. Its primary use case is to facilitate the understanding of binary structures through visualizations of relationships between components, supported by features like global search and noise filtering to enhance analysis precision. The tool is modular, allowing for easy expansion and integration of new analysis engines while offering both static and experimental runtime analysis of dependencies.
03 Aug 2026
F#
★ 465
B2R2 is a fully managed binary analysis framework designed for reverse engineering and program analysis, implemented in F#. It features efficient binary disassembly, instruction parsing, control-flow recovery, and interoperability across platforms, supporting multiple binary file formats like ELF, PE, Mach-O, and WebAssembly. With a focus on ease of use and native IntelliSense support in .NET, B2R2 empowers developers with a robust set of tools for binary-level inspection and analysis.
03 Aug 2026
Java
★ 25450
Apktool is a reverse engineering tool for Android applications that allows users to decode and rebuild APK files, facilitating modification and debugging of smali code. Its primary use case includes enabling localization and feature enhancements of existing applications while maintaining a project-like file structure for ease of use and automation of common tasks. Notable features include support for debugging, a structured file layout, and the ability to modify app resources while respecting copyright laws.
03 Aug 2026
C
★ 23
AirStrike 3D Tools is a specialized reverse engineering toolkit aimed at deconstructing the AirStrike 3D game series. It enables users to perform tasks such as APK archive extraction, model conversion (MDL to OBJ), save file previewing, and audio conversion, while also supporting graphics viewing and Linux compatibility. The toolkit is built using C++ and Python, emphasizing extensibility and ease of use for reverse engineering game assets.
03 Aug 2026
Kotlin
★ 26
Zemer-Cipher is an Android library designed for YouTube cipher deobfuscation and PoToken generation, facilitating the extraction of streaming URLs from obfuscated JavaScript. Key features include signature cipher deobfuscation, n-parameter transformations to mitigate throttling, and remote-updateable player configurations that allow real-time updates without requiring app releases. This library is crucial for applications leveraging the YouTube API to maintain functionality amid frequent player script rotations.
03 Aug 2026
C++
★ 693
XAPKDetector is a cross-platform tool designed for detecting and analyzing Android APK and DEX files, providing information on build tools, libraries, and security protections. Its primary use case lies in aiding developers and security analysts in assessing the integrity and characteristics of APK files. Notable features include comprehensive reporting on the application's components and support for multiple operating systems including Windows, Linux, and MacOS.
03 Aug 2026
C
★ 31
The Win11Src repository contains a partially leaked version of the Windows 11 source code, primarily derived from extracted resources, modified legacy files, and officially released components from Microsoft. Its primary use case is for educational and research purposes, allowing users to explore the inner workings of Windows 11 and its architecture. Notable features include a collection of fragments from DLLs obtained via ResHacker and contributions from other non-Microsoft open-source projects.
03 Aug 2026
HTML
★ 73
Project Chisel is a comprehensive modding toolkit for Geometry Dash, enabling developers and reverse engineers to deeply analyze and modify the game through a robust framework built on full decompilation analysis. It features a precision modification engine that allows granular control over game systems, seamless integration with the Geode mod loader, and a responsive UI framework for custom in-game menus. Notable capabilities include non-destructive overrides, automated patching for version-specific binaries, and multilingual support for localized modding experiences.
03 Aug 2026
TypeScript
★ 740
Unbrowse is a tool designed for AI agents to efficiently learn and interact with a website's first-party API routes. It allows for fast replay of known routes to perform tasks without the overhead of rendering a browser, while still providing the option to use browser automation for cases like authentication and CAPTCHA. Notable features include a shared learning mechanism for route metadata, a versatile command line interface, and an SDK for TypeScript developers.
03 Aug 2026
Python
★ 17
TryHackMeWriteups is a comprehensive repository that curates free TryHackMe rooms, providing organized resources for cybersecurity enthusiasts to learn and practice various skills. Notable features include categorized rooms across diverse topics, detailed notes and summaries, step-by-step writeups for Capture The Flag challenges, and continuous updates, making it an ideal starting point for beginners in cybersecurity and ethical hacking.
03 Aug 2026
C++
★ 144
The Super Mario 64 DS Decompilation (sm64ds-decomp) project offers a comprehensive decompilation of the Super Mario 64 DS game into matching C source code, aiming to produce a binary identical to the original retail ROM. Notable features include a systematic verification process for function matching using automated templates and manual coding, a progress tracking treemap, and an emphasis on maintaining legal compliance by avoiding the inclusion of ROM data or assets. The repository serves as a collaborative platform for contributors to enhance and refine the decompilation effort.