InfluxDB 3 OSS is now GA. Transform, enrich, and act on time series data directly in the database. Automate critical tasks and eliminate the need to move data externally. Download now. Learn more →
Top 23 Reverse Engineering Open-Source Projects
-
Awesome-Hacking
A collection of various awesome lists for hackers, pentesters and security researchers
-
InfluxDB
InfluxDB – Built for High-Performance Time Series Workloads. InfluxDB 3 OSS is now GA. Transform, enrich, and act on time series data directly in the database. Automate critical tasks and eliminate the need to move data externally. Download now.
-
gpt4free
The official gpt4free repository | various collection of powerful language models | o4, o3 and deepseek r1, gpt-4.1, gemini 2.5
-
Ghidra also has a debugger, see https://github.com/NationalSecurityAgency/ghidra/blob/master...
-
ImHex
🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.
Project mention: Ask HN: What are good high information density UIs (screenshots, apps, sites) | news.ycombinator.com | 2025-05-08I find Geizhals' filtering options reasonably compact and information dense. https://geizhals.de/?cat=gra16_512&xf=132_16384&pg=1&view=li...
I like the simple table view of RPiLocator. Only a few columns, but lots of rows, no unneeded clutter. https://rpilocator.com/
Not as compact as possible, but at least shows quite some information: GSMArena. It could fit more phones into the comparison table with less whitespace/greyspace though. https://www.gsmarena.com/compare.php3?idPhone1=10386&idPhone...
All sites as viewed on desktop, on mobile this would likely not work out.
I also want to echo the command line tools mention in another comment. GDB's TUI is reasonable for my use, but after some experience this recently posted terminal debugger might be better: https://github.com/al13n321/nnd via https://news.ycombinator.com/item?id=43905185
Also the hex editor I am currently using, despite some problems: https://github.com/WerWolv/ImHex
An example of an information dense GUI that might be a bit overwhelming is Ghidra: https://en.wikipedia.org/wiki/Ghidra (page includes a basic screenshot, you can fill your screen(s) with as many sub windows and information panes as you want)
As a side note, while trying to find examples I realized just how few websites there are (any more?) that show a lot of information at the same time. Worst recent offender is YouTube's redesign with only 3 video tiles in a row on a 1440p screen, luckily easily fixed via a ublock rule.
-
x64dbg
An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.
Several months have passed since the last part was posted. Maintainers of x64dbg have continued to improve its functionality. They also opened a task to update the development tools. So in this post, we will continue the analysis based on commit f518e50 code and, where possible, we'll compare it with the commit 9785d1a, which is accurate at the time of writing.
-
Project mention: Conducting forensics of mobile devices to find signs of a potential compromise | news.ycombinator.com | 2025-03-16
I'd be curious if anyone has tried this for Android and what kind of stuff it's checking for. Sideloaded APKs can often contain malicious stuff, but it's nearly impossible to know if it's doing anything suspicious unless you open it up with a tool like Apktool [1] or run it on Triage [2] as it supports Android and watch what it's doing. Most antivirus for Android is pretty much a joke, as far as I'm concerned.
[1] https://github.com/iBotPeaches/Apktool?tab=readme-ov-file
[2] https://tria.ge/
-
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
-
Project mention: NSA Ghidra open-source reverse engineering framework | news.ycombinator.com | 2024-05-28
Rizin[1]/Cutter[2] projects are stored like text files that work well with git, you could try those tools.
[1] https://rizin.re
[2] https://cutter.re
-
Awesome-Hacking-Resources
A collection of hacking / penetration testing resources to make you better!
-
owasp-mastg
The Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes the technical processes for verifying the controls listed in the OWASP Mobile Application Security Verification Standard (MASVS).
The OWASP Mobile Application Security (MAS) flagship project provides a robust security standard for mobile apps, known as the OWASP MASVS, along with a comprehensive testing guide (OWASP MASTG). These resources cover the processes, techniques, and tools used during a mobile app security test, ensuring consistent and complete results.
-
Reverse-Engineering-Tutorial
A FREE comprehensive reverse engineering tutorial covering x86, x64, 32-bit/64-bit ARM, 8-bit AVR and 32-bit RISC-V architectures.
Project mention: Reverse Engineering – Lesson 1: x86 Course (Part 1: Goals) | news.ycombinator.com | 2024-12-20 -
openhaystack
Build your own 'AirTags' 🏷 today! Framework for tracking personal Bluetooth devices via Apple's massive Find My network.
Project mention: Turning a Bluetooth Device into an Apple AirTag Without Root Privileges | news.ycombinator.com | 2025-02-27 -
-
Solutions to this problem generate API documentation automatically. Libraries such as drf-spectacular use code structure and semantics in back-end frameworks to infer API contracts. API frameworks such as FastAPI and Huma generate OpenAPI specifications as a built-in feature. Tools like mitmproxy2swagger generate documentation from HAR files. Finally, companies such as Akita Software/Postman use network traffic metadata.
-
-
It's written for exploit development, but even for debugging a C program. It makes things a lot nicer.
https://pwndbg.re/
-
Unicorn Engine
Unicorn CPU emulator framework (ARM, AArch64, M68K, Mips, Sparc, PowerPC, RiscV, S390x, TriCore, X86)
-
capstone
Capstone disassembly/disassembler framework for ARM, ARM64 (ARMv8), Alpha, BPF, Ethereum VM, HPPA, LoongArch, M68K, M680X, Mips, MOS65XX, PPC, RISC-V(rv32G/rv64G), SH, Sparc, SystemZ, TMS320C64X, TriCore, Webassembly, XCore and X86.
It just updated to the nearly latest LLVM, so that argument is void: https://github.com/capstone-engine/capstone/blob/next/docs/c...
-
Project mention: Il2CppDumper: Open-Source Tool for Unity Il2cpp Reverse Engineering | news.ycombinator.com | 2024-10-06
-
gef
GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux
-
flare-vm
A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.
-
ipatool
Command-line tool that allows searching and downloading app packages (known as ipa files) from the iOS App Store
-
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
NOTE:
The open source projects on this list are ordered by number of github stars.
The number of mentions indicates repo mentiontions in the last 12 Months or
since we started tracking (Dec 2020).
Reverse Engineering discussion
Reverse Engineering related posts
-
The Future of Crash Analysis: AI Meets WinDBG
-
Nnd – a TUI debugger alternative to GDB, LLDB
-
LIEF – Library to Instrument Executable Formats
-
SEninja: Symbolic execution plugin for Binary Ninja
-
Reverse engineering of Linear's sync engine endorsed by its CTO
-
Fujihack
-
Reverse Engineering Linear's Sync Engine
-
A note from our sponsor - InfluxDB
www.influxdata.com | 16 May 2025
Index
What are some of the best open-source Reverse Engineering projects? This list will help you:
| # | Project | Stars |
|---|---|---|
| 1 | Awesome-Hacking | 92,411 |
| 2 | gpt4free | 64,197 |
| 3 | ghidra | 56,959 |
| 4 | ImHex | 48,859 |
| 5 | x64dbg | 46,006 |
| 6 | Apktool | 22,011 |
| 7 | radare2 | 21,639 |
| 8 | cutter | 16,475 |
| 9 | Awesome-Hacking-Resources | 15,694 |
| 10 | owasp-mastg | 12,203 |
| 11 | Reverse-Engineering-Tutorial | 12,095 |
| 12 | openhaystack | 11,430 |
| 13 | YoutubeDownloader | 11,410 |
| 14 | mitmproxy2swagger | 8,866 |
| 15 | Detect-It-Easy | 8,653 |
| 16 | pwndbg | 8,595 |
| 17 | Unicorn Engine | 8,162 |
| 18 | capstone | 8,004 |
| 19 | Il2CppDumper | 7,684 |
| 20 | gef | 7,490 |
| 21 | flare-vm | 7,230 |
| 22 | ipatool | 6,860 |
| 23 | MonkeyDev | 6,640 |
Sponsored
InfluxDB – Built for High-Performance Time Series Workloads
InfluxDB 3 OSS is now GA. Transform, enrich, and act on time series data directly in the database. Automate critical tasks and eliminate the need to move data externally. Download now.
www.influxdata.com