Android/Linux Kernel dirver read and write memory.

基础反检测 frida-server / Basic anti-detection frida-server

dex-vm used to protect the android classes.dex file

Yet another llvm based obfuscator based on goron.

Windows memory hacking library

Python decompiler for modern Python versions.

State-of-the-art native debugging tools

Hook Framework for Android/IOS/Linux/MacOS

Detects virtual machines and malware analysis environments

🔥 ShadowHook is an Android inline hook library which supports thumb, arm32 and arm64.

Manage your Java environment

✨✨✨这有一包小鱼干，确定不要吃嘛？( 逃

Driver Buddy Reloaded is an IDA Pro Python plugin that helps automate some tedious Windows Kernel Drivers reverse engineering tasks

🎇 AOT compiler to translate dalvikvm code into cpp code

腾讯游戏客户端公开课2023 腾讯菁英班

This project provides a collection of Microsoft Windows kernel structures, unions and enumerations. Most of them are not officially documented and cannot be found in Windows Driver Kit (WDK) header…

A True Instrumentable Binary Emulation Framework

Deobfuscation via optimization with usage of LLVM IR and parsing assembly.

A static devirtualizer for VMProtect x64 3.x. powered by VTIL.

Playing with the VMProtect software protection. Automatic deobfuscation of pure functions using symbolic execution and LLVM.

Reverse engineering framework in Python

PinVMP：虚拟化代码辅助分析工具

A Pin Tool for tracing API calls etc

安卓系统定制：从入门到实践 开源图书🔥

Macro-header for compile-time C obfuscation (tcc, win x86/x64)

linux内核学习资料：200+经典内核文章，100+内核论文，50+内核项目，500+内核面试题，80+内核视频

Programming productivity plugin for IDAPython and C++ development

Unicorn CPU emulator framework (ARM, AArch64, M68K, Mips, Sparc, PowerPC, RiscV, S390x, TriCore, X86)

IDA Pro plugin with a rich set of features: decryption, deobfuscation, patching, lib code recognition and various pseudocode transformations