ManyFace

reverse-skill. Reverse Engineering / Authorized Penetration Testing / Security Research Skill Router Pack AI-powered routing + On-demand toolchain bootstrapping + Self-evolving knowledge base Supports Claude Code, Kiro, Cursor, Cline, and other AI coding clients 逆向/渗透/安全技能路由包 - AI 自动路由 + 按需自举工具链 + 自动进化经验库 | 支持 Claude Code / Kiro / Cursor / Cline 等代码 AI 客户端

wbaes. Whitebox AES

hermes-agent. The agent that grows with you

wechatbot. 微信 iLink Bot SDK for OpenClaw/AI Agent

claude-code-system-prompts. All parts of Claude Code's system prompt, 27 builtin tool descriptions, sub agent prompts (Plan/Explore/Task), utility prompts (CLAUDE.md, compact, statusline, magic docs, WebFetch, Bash cmd, security review, agent creation). Updated for each Claude Code version.

awesome-openclaw-skills. The awesome collection of OpenClaw skills. 5,400+ skills filtered and categorized from the official OpenClaw Skills Registry.🦞

Android-Native-Root-Detector. A tool to detect root on android

nanobot. Ultra-lightweight, open-source, self-hosted personal AI agent framework in Python with WebUI, tools, memory, MCP, multi-agent workflows, automation, and chat apps

Pyarmor-Static-Unpack-1shot. ✅ No execution ✅ Pyarmor 8.0 - 9.2.x (latest) ✅ Universal ✅ Statically convert obfuscated Python scripts to disassembly and (experimentally) source code.

openclaw. Your own personal AI assistant. Any OS. Any Platform. The lobster way. 🦞

deepagents-quickstarts. REPO MOVED

hello-agents. 📚 《从零开始构建智能体》——从零开始的智能体原理与实践教程

setup-ipsec-vpn. Set up your own IPsec VPN server in just a few minutes, with IPsec/L2TP, Cisco IPsec and IKEv2. Supports Ubuntu, Debian, CentOS/RHEL, Alpine Linux and Raspberry Pi OS. Includes client config and management scripts.

detection. Collection of Various Root Detection Apps for Android

Dopamine. Dopamine is a semi-untethered jailbreak for iOS 15 and 16

cryptopp. free C++ class library of cryptographic schemes

sablejs. 🏖️ The safer and faster ECMA5.1 interpreter written by JavaScript

abc-decompiler. Java

faceswap. Deepfakes Software For All

LSPlant. A hook framework for Android Runtime (ART)

APatch. The patching of Android kernel and Android system

crypto-algorithms. Basic implementations of standard cryptography algorithms, like AES and SHA-1.

ZygiskNext. Standalone implementation of Zygisk

fastllm. fastllm是后端无依赖的高性能大模型推理库。同时支持张量并行推理稠密模型和混合模式推理MOE模型，任意10G以上显卡即可推理满血DeepSeek。双路9004/9005服务器+单显卡部署DeepSeek满血满精度原版模型，单并发20tps；INT4量化模型单并发30tps，多并发可达60+。

ChatGLM-6B. ChatGLM-6B: An Open Bilingual Dialogue Language Model | 开源双语对话语言模型

o-mvll. :electron: O-MVLL is a code obfuscation tool based on LLVM for native code (Android and iOS).

Pluto. Obfuscator based on LLVM 14.0.6

SKRoot-linuxKernelRoot. 新一代 SKRoot，完美隐藏Root功能，无视全网检测手段，实现SELinux零触碰、无挂载！ 通杀所有内核，免源码直接 Patch 原厂内核，完美保留官方内核所有特性。

bpf-developer-tutorial. eBPF Developer Tutorial: Learning eBPF Step by Step with Examples

ebpf-plugin. Python

pinduoduo_backdoor. 拼多多apk内嵌提权代码，及动态下发dex分析

pinduoduo_backdoor_unpacker. Samples and Unpacker of malicious backdoors and exploits developed and used by Pinduoduo

openwechat. golang微信SDK

Tank. C

babel-handbook. :blue_book: A guided handbook on how to use Babel and how to create plugins for Babel.

estrace. 基于eBPF的syscall追踪工具，适用于安卓平台

ply_android. Dynamic Tracing in Android (fork from iovisor/ply)

LLVMMyPass. My toy llvm pass

LSPatch. LSPatch: A non-root Xposed framework extending from LSPosed

obfuscator. ollvm，base on llvm-clang 5.0.2, 6.0.1 , 7.0.1,8.0,9.0,9.0.1,10.x,11.x,12.x,13.x,14.x,swift-llvm-clang 5.0,swift-llvm-clang 5.5

Core. Shared Obfuscation Core

obfuscator.

llvm-tutor. A collection of out-of-tree LLVM passes for teaching and learning

luaj-android. luaj procject for android.

FreeReflection. A library that lets you use reflection without any restriction above Android P

AndroidHiddenApiBypass. LSPass: Bypass restrictions on non-SDK interfaces

pine. Dynamic java method hook framework on ART. Allowing you to change almost all java methods' behavior dynamically.

proot. chroot, mount --bind, and binfmt_misc without privilege/setup for Linux

getMacForNetlink. C++

HexRaysDeob. Hex-Rays OLLVM Deobfuscator and MicroCode Explorer

anti_Android. Is a protect Android App anti any attacks and environments.

android-inline-hook. 通用的Android inline hook库，支持thumb，arm32，arm64

FakeXposed. Hide xposed, root, file redirection, etc.

findhash. 一个IDA脚本，可以检测出哈希算法（无论是否魔改常数）并生成frida hook 代码。

bhook. 通用的Android PLT hook库，支持armeabi-v7a，arm64-v8a，x86，x86_64

Unicorn-Engine-Documentation. Official Unicorn CPU emulator framework API documentation

ExAndroidNativeEmu. An improved version of AndroidNativeEmu,Allow running android elf on PC

android-event-recorder. android input event record/replay tool

xgboost. Scalable, Portable and Distributed Gradient Boosting (GBDT, GBRT or GBM) Library, for Python, R, Java, Scala, C++ and more. Runs on single machine, Hadoop, Spark, Dask, Flink and DataFlow

dnSpy. .NET debugger and assembly editor

spark. Apache Spark - A unified analytics engine for large-scale data processing

frida-syscall-interceptor. TypeScript

qiling. A True Instrumentable Binary Emulation Framework

AndroidNativeEmu. Allows you to partly emulate an Android native library.

unpackandroidrom. 爬虫解包 Android ROM

r0capture. 安卓应用层抓包通杀脚本

flare-emu. Python

AntiFrida. 通过内存特征检测frida

NoVmp. A static devirtualizer for VMProtect x64 3.x. powered by VTIL.

vmpdump. A dynamic VMP dumper and import fixer, powered by VTIL.

QBDI. A Dynamic Binary Instrumentation framework based on LLVM.

IDA_ARM_Unwind. IDA plugin, unwind stack trace when debugging arm.

mit-15-003-data-science-tools. Study guides for MIT's 15.003 Data Science Tools

awesome-cpp-cn. C++ 资源大全中文版，标准库、Web应用框架、人工智能、数据库、图片处理、机器学习、日志、代码分析等。由「开源前哨」和「CPP开发者」微信公号团队维护更新。

Karta. Karta - source code assisted fast binary matching plugin for IDA

findcrypt-yara. IDA pro plugin to find crypto constants (and more)

blade-build. Blade is a powerful build system from Tencent, supports many mainstream programming languages, such as C/C++, java, scala, python, protobuf...

fridaRegstNtv. 利用 frida 获取 Jni RegisterNatives 动态注册的函数

DexEncryptionDecryption. APK 加固 dex 加密，解密 学习项目

MagiskDetector. C

frida-all-in-one. 《FRIDA操作手册》by @hluwa @r0ysue

protobuf_decoder. Python

idapython. Automatically exported from code.google.com/p/idapython

CPlusPlusThings. C++那些事

YANSOllvm. Yet Another Not So Obfuscated LLVM

system.new.dat-extractor. Auto System Image Extractor

droidimg. Android/Linux vmlinux loader

frida-dexdump. A frida tool to dump dex in memory to support security engineers analyzing malware.

Frida-Apk-Unpack. JavaScript

FridaLib. iOS/android frida library for reversing

SandHook. Android ART Hook/Native Inline Hook/Single Instruction Hook - support 4.4 - 11.0 32/64 bit - Xposed API Compat

Hikari. LLVM Obfuscator

ASyScallHookFrame. Syscall table hook frame in Android kernel for arm and arm64

FridaAndroidTracer. Android application tracer powered by Frida

frida-fuzzer. This experimetal fuzzer is meant to be used for API in-memory fuzzing.

fuzzing. Tutorials, examples, discussions, research proposals, and other resources related to fuzzing

jnitrace. A Frida based tool that traces usage of the JNI API in Android apps.

awesome-reverse-engineering. Reverse Engineering Resources About All Platforms(Windows/Linux/macOS/Android/iOS/IoT) And Every Aspect! (More than 3500 open source tools and 2300 posts&videos)

BurpExtension-WhatsApp-Decryption-CheckPoint. This tool was created during our research at Checkpoint Software Technologies on Whatsapp Protocol (This repository will be updated after BlackHat 2019)

EdXposed. Elder driver Xposed Framework.