my

opencyvis-phone. Kotlin

OpenJarvis. Personal AI, On Personal Devices

ida-structor. Structor is a Hex-Rays plugin that synthesizes C structures from raw pointer arithmetic.

jadx-ai-mcp. Plugin for JADX to integrate MCP server

happy-llm. 📚 从零开始构建大模型

Android-Native-Root-Detector. A tool to detect root on android

lzfse. LZFSE compression library and command line tool

mcp-for-beginners. This open-source curriculum introduces the fundamentals of Model Context Protocol (MCP) through real-world, cross-language examples in .NET, Java, TypeScript, JavaScript, Rust and Python. Designed for developers, it focuses on practical techniques for building modular, scalable, and secure AI workflows from session setup to service orchestration.

anbox. Anbox is a container-based approach to boot a full Android system on a regular GNU/Linux system

fancyss. fancyss is a project providing tools to across the GFW on asuswrt/merlin based router.

one-small-step. 这是一个简单的技术科普教程项目，主要聚焦于解释一些有趣的，前沿的技术概念和原理。每篇文章都力求在 5 分钟内阅读完成。

ja4. JA4+ is a suite of network fingerprinting standards

ja4tscan. JA4TScan is an active TCP server fingerprinting tool.

ShadowsocksX-NG. Next Generation of ShadowsocksX

islet. An on-device confidential computing platform

shadowsocks-android. A shadowsocks client for Android

susfs4ksu. From: https://gitlab.com/simonpunk/susfs4ksu/

rootAVD. Script to root AVDs running with QEMU Emulator from Android Studio

Firmware_extractor. Extract given archive to images

APatch. The patching of Android kernel and Android system

ValgrindHelperForAndroid. A easy way to use valgrind on Android device.

Simplifier. Efficient general mixed boolean-arithmetic (MBA) simplifier

OLLVM-9.0.1. OLLVM-9.0.1-NDK-21.3.6528147(ndk-r21d)

MobileAgent. Mobile-Agent: The Powerful GUI Agent Family

OpenCoreAnalysisKit. android open core analysis kit

jynew. JinYongLegend-like RPG Game Framework with full Modding support and 10+ hours playable samples of game.

nmips. nanoMIPS IDA plugin

PicImpact. 自部署的摄影作品网站，支持多种功能特性。PicImpact，分享你和世界！

onyx. Open Source AI Platform - AI Chat with advanced features that works with every LLM

d810. Python

lucid. An Interactive Hex-Rays Microcode Explorer

my-tv. 我的电视 电视直播软件，安装即可使用

SsagePass. LLVM PASS by SsageParuders.Port to llvm_14.06 with New PM.Support for Android-ndk-r25(LTS).

avbroot. Tool for manipulating and re-signing Android A/B OTAs

ip-neigh-sdk30. Ip neigh for android using android NDK. Avoiding restriction of bind socket on Android apps targeting sdk 30

ZygiskNext. Standalone implementation of Zygisk

GAMBA. Simplification of General Mixed Boolean-Arithmetic Expressions: GAMBA

FunctionInliner. An IDA plugin that eases reversing of binaries that have been code-size-optimized with function outlining

bindiff. Quickly find differences and similarities in disassembled code

diaphora. Diaphora, the most advanced Free and Open Source program diffing tool.

fuse-overlayfs. FUSE implementation for overlayfs

magiskboot_build. unofficial magiskboot build system (and port) targeting multi-platform (does not require NDK)

PlayCover. Community fork of PlayCover

KeyAttestation. Java

goomba. gooMBA is a Hex-Rays Decompiler plugin to simplify Mixed Boolean-Arithmetic (MBA) expressions

dumper. Dump L3 CDM from any Android device

android-key-attestation. Android Key Attestation validation library

jsmn. Jsmn is a world fastest JSON parser/tokenizer. This is the official repo replacing the old one at Bitbucket

Obfuscate. Guaranteed compile-time string literal obfuscation header-only library for C++14

gzstat. A tool for analyzing gzip/DEFLATE bitstreams

widevinel3_Android_PoC. Widevine L3 PoC for Android Keybox Recovery, Content Key dump and Netflix Media Download

awesome-english-ebooks. 经济学人(含音频)、纽约客、卫报、连线、大西洋月刊等英语杂志免费下载,支持epub、mobi、pdf格式, 每周更新

widevine-l3-decryptor. JavaScript

awsome-magisk. 关于Magisk生态的研究

chibicc. A small C compiler

bootimg-tools. Android boot.img creation and extraction tools [NOTE: This project is NO LONGER maintained]

website. AGE animation official website URL release page（AGE动漫官网网址发布页）

kernel-assisted-superuser. C

diffusionbee-stable-diffusion-ui. Diffusion Bee is the easiest way to run Stable Diffusion locally on your M1 Mac. Comes with a one-click installer. No dependencies or technical knowledge needed.

DragGAN. Official Code for DragGAN (SIGGRAPH 2023)

Chinese-LLaMA-Alpaca. 中文LLaMA&Alpaca大语言模型+本地CPU/GPU训练部署 (Chinese LLaMA & Alpaca LLMs)

xVMP. C++

xnuspy_syscall_logger. Log all syscalls executed by a process (iOS / checkra1n / xnuspy)

xnuspy. an iOS kernel function hooking framework for checkra1n'able devices

Trace. A Chrome extension for web analytics

ailearning. AiLearning：数据分析+机器学习实战+线性代数+PyTorch+NLTK+TF2

bundletool. Bundletool is a command-line tool to manipulate Android App Bundles

cursor.

pinduoduo_backdoor_detailed_report. Maybe the most detailed analysis of pdd backdoors

EdgeGPT. Reverse engineered API of Microsoft's Bing Chat AI

memory-leak-detector. C

ProcMon-for-Linux. A Linux version of the Procmon Sysinternals tool

AntiMSHookFunction. AntiMSHookFunction (make MSHookFunction doesn't work)

GradleWiki. 关于Gradle编译你需要知道的一切

plugins. Ghidra/IDA Pro plugins to load similarity result from binaryai.net

ExAndroidNativeEmu. An improved version of AndroidNativeEmu,Allow running android elf on PC

tanto. Tantō slices functions into more consumable chunks

yay. Yet another Yogurt - An AUR Helper written in Go

limbo. XNU in Linux userspace

SimpleProtos. Header-only Google Protocol Buffers parser and serializer.

iOSFuckDenyAttach. tool that manually disable ptrace deny attach under kernel model

protobuf-finder. IDA Pro plugin for reconstructing original .proto files from binary.

unpacker. 基于ART主动调用的脱壳机

crypto_project. AES, CMAC, SHA256, HMAC and RSA written in C.

libtomcrypt. LibTomCrypt is a fairly comprehensive, modular and portable cryptographic toolkit that provides developers with a vast array of well known published block ciphers, one-way hash functions, chaining modes, pseudo-random number generators, public key cryptography and a plethora of other routines.

frida-iOS-syscall-tracer. alternative strace for iOS device(64bit)

iostrace. alternative strace for iOS device(64bit) on frida

TIDAL. Reverse engineering the TIDAL API. OAuth2 (RFC 8628 & RFC 6749) and (nearly) all endpoints

Tidal-Media-Downloader. Download 'TIDAL' Music On Windows/Linux/MacOs (PYTHON/C#)

tiny-AES-c. Small portable AES128/192/256 in C

JeanGrey. Tools to perform differential fault analysis attacks (DFA).

Stark. Repository of small utilities related to key recovery

ttexplore. TTexplore is a library that performs path exploration on binary code using symbolic execution

bitwuzla. Bitwuzla is a Satisfiability Modulo Theories (SMT) solver for the theories of fixed-size bit-vectors, floating-point arithmetic, arrays and uninterpreted functions and their combinations. Its name is derived from an Austrian dialect expression that can be translated as “someone who tinkers with bits”.

VMProtect-devirtualization. Playing with the VMProtect software protection. Automatic deobfuscation of pure functions using symbolic execution and LLVM.

klee. KLEE Symbolic Execution Engine

seninja. symbolic execution plugin for binary ninja

msynth. Code deobfuscation framework to simplify Mixed Boolean-Arithmetic (MBA) expressions

angr. A powerful and user-friendly binary analysis platform!

binaryninja-msp430. msp430 Architecture plugin for Binary Ninja

o-mvll. :electron: O-MVLL is a code obfuscation tool based on LLVM for native code (Android and iOS).

Gepetto. IDA plugin which queries language models to speed up reverse-engineering

Kyty. PS4 & PS5 emulator

Z80. Z80 Architecture and BinaryViews for Z80 Files

FEX. A fast usermode x86 and x86-64 emulator for Arm64 Linux

infgen. Deflate disassember to convert a deflate, zlib, or gzip stream into a readable form.

arybo. Manipulation, canonicalization and identification of mixed boolean-arithmetic symbolic expressions

Tigress_protection. Playing with the Tigress software protection. Break some of its protections and solve their reverse engineering challenges. Automatic deobfuscation using symbolic execution, taint analysis and LLVM.

Triton. Triton is a dynamic binary analysis library. Build your own program analysis tools, automate your reverse engineering, perform software verification or just emulate code.

Machium. a debugger for Apple Silicon

xnu. C

darwin-xnu. Legacy mirror of Darwin Kernel. Replaced by https://github.com/apple-oss-distributions/xnu

vixl. C

bxxt. 📦 安卓 BOOT.IMG/RECOVERY.IMG/SELINUX/PROPERTY 解包打包实用工具，启动镜像编辑解包打包，selinux 修改，ro 属性修改。

binaryninja-api. Public API, examples, documentation and issues for Binary Ninja

jslinux-mobile. Linux for iOS - a mobile version of a PC emulator written in Javascript, with a running, fully functional Linux system.

unwinddaemon. C++

stackplz. 基于eBPF的堆栈追踪工具

unwindbcc. C

fadec. A fast and lightweight decoder for x86 and x86-64 and encoder for x86-64.

ebpf-beginners. The beginner's guide to eBPF

dProtect. :electron: dProtect is a Proguard-based obfuscator for Java and Kotlin

vltrace. Tool tracing syscalls in a fast way using eBPF linux kernel feature

traceleft. eBPF based syscalls, files and network events tracing framework

antispy. AntiSpy is a free but powerful anti virus and rootkits toolkit.It offers you the ability with the highest privileges that can detect,analyze and restore various kernel modifications and hooks.With its assistance,you can easily spot and neutralize malwares hidden from normal detectors.

android_device_xiaomi_dipper. Makefile

Xiaomi_Kernel_OpenSource. Xiaomi Mobile Phone Kernel OpenSource

bcc. BCC - Tools for BPF-based Linux IO analysis, networking, monitoring, and more

ebpf-apps. 极客时间专栏《eBPF 核心技术与实战》案例

ios-app-signer. This is an app for OS X that can (re)sign apps and bundle them into ipa files that are ready to be installed on an iOS device.

eBPF_processor. An IDA processor for eBPF bytecode

PS5-IPV6-Kernel-Exploit. An experimental webkit-based kernel exploit (Arb. R/W) for the PS5 on <= 4.51FW

ehids-agent. A Linux Host-based Intrusion Detection System based on eBPF.

FartExt. 在FART的基础上进行优化。实现更深的主动调用。适用AOSP10

maya. Highly advanced Linux anti-exploitation and anti-tamper binary protector for ELF.

ManifestEditor. This is a tool used to modify Android Manifest binary file.

jdwp-shellifier. Python

And64InlineHook. Lightweight ARMv8-A(ARM64, AArch64, Little-Endian) Inline Hook Library for Android C/C++

docker-android. Android in docker solution with noVNC supported and video recording

NeteaseCloudMusic-Audio-Recognize. JavaScript

redroid-doc. redroid (Remote-Android) is a multi-arch, GPU enabled, Android in Cloud solution. Track issues / docs here

AUPK. C++

becoming-a-compiler-engineer. 编译器入门课程的配套教学资料

Spider_reverse. 爬虫js逆向学习

obfuscator.

obfuscator. ollvm，base on llvm-clang 5.0.2, 6.0.1 , 7.0.1,8.0,9.0,9.0.1,10.x,11.x,12.x,13.x,14.x,swift-llvm-clang 5.0,swift-llvm-clang 5.5

lurk. A pretty (simple) alternative to strace.

XboxDownload. Xbox Download Assistant (Xbox下载助手) — Supports download acceleration for Xbox, Microsoft Store, PlayStation, Nintendo Switch, EA App, Battle.net, Epic Games, Ubisoft Connect, Riot Games, and Rockstar Games, and fixes access issues for Steam Store & Community and GitHub.

XXTouchNG. Next generation XXTouch for iOS 13 and above. System-wide iOS Automation Toolkit.

llvm. An LLVM clone modified for use in RetDec and associated tools.

libsodium. A modern, portable, easy to use crypto library.

opengrok. OpenGrok is a fast and usable source code search and cross reference engine, written in Java

oaknut. Yet another AArch64 emitter

msvc-wine. Scripts for setting up and running MSVC in Wine on Linux

dx-signer. 顶象apk签名&多渠道工具

Riru-MomoHider. A Riru module trying to make Magisk more hidden.

mold. mold: A Modern Linker 🦠

vandalir. LLVM

adeb. A debian-based shell environment designed for Android and adb

ebpf-examples. Python

BlackDex. BlackDex is an Android unpack(dexdump) tool, it supports Android 5.0~12 and need not rely to any environment. BlackDex can run on any Android mobile phone or emulator, you can unpack APK File in several seconds.

eadb. eBPF Android Debug Bridge

dexmaker. A utility for doing compile or runtime code generation targeting Android's Dalvik VM

ebpf-slide. Collection of Linux eBPF slides/documents.

Dreamland. A third-party Xposed framework implementation which supports Android 5.0~14.

Learn-LLVM-12. 《Learn LLVM 12》的非专业个人翻译

LLVM-Techniques-Tips-and-Best-Practies. 《LLVM Techniques, Tips, and Best Practices》的非专业个人翻译

mir. A lightweight JIT compiler based on MIR (Medium Internal Representation) and C11 JIT compiler and interpreter based on MIR

dynamorio. Dynamic Instrumentation Tool Platform

z3. The Z3 Theorem Prover

udbserver. Unicorn Emulator Debug Server - Written in Rust, with bindings for C, Go, Java and Python

DetectMagiskHide. A way to detect magisk hide using an Android feature

Magisk. The Magic Mask for Android

MagiskDetector. C

HowToCook. Programmer's guide about how to cook at home.

AddSecurityExceptionAndroid. Shell

BinAbsInspector. BinAbsInspector: Vulnerability Scanner for Binaries

Frida-Seccomp. 一个Android通用svc跟踪以及hook方案——Frida-Seccomp

delta. A syntax-highlighting pager for git, diff, grep, rg --json, and blame output

xHook. 🔥 A PLT hook library for Android native ELF.

objection. 📱 objection - runtime mobile exploration

abi-aa. Application Binary Interface for the Arm® Architecture

ptrace-redirect. Example code for changing syscall arguments using ptrace

android-prepare-vendor. Set of scripts to automate AOSP compatible vendor blobs generation from factory images

obpo-plugin. An OLLVM-CFF Deobfuscation Plugin

simple-pointer-analysis. Pointer analysis prototype (currently including anderson, steensgard).

andersen. Andersen's inclusion-based pointer analysis re-implementation in LLVM

Pluto. Obfuscator based on LLVM 14.0.6

sleigh. Unofficial CMake build for Ghidra's C++ SLEIGH code

maat. Open-source symbolic execution framework: https://maat.re

CSCD70. CSCD70 Compiler Optimization

qemu. Customized version of QEMU 2.4.0 exposing the TCG frontend and the helpers

revng. revng: the core repository of the rev.ng project

FartExt. 在FART的基础上进行优化。实现更深的主动调用。适用AOSP10

symqemu. SymQEMU: Compilation-based symbolic execution for binaries

py2hs. A complementary resource that helps python programmers to learn Haskell

frida_hook_libart. Frida hook some jni functions

strongR-frida-android. An anti detection version frida-server for android.

android-inject-custom. Example showing how to use Frida for standalone injection of a custom payload

frida-detection. A couple of methods for detecting Frida on Android.